Trojaner-Board - Infostealer

Additional

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-12-2013 03

Ran by Denis at 2013-12-09 07:44:24

Running from C:\Users\Denis\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)

Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)

AMD Accelerated Video Transcoding (Version: 12.5.100.30429)

AMD APP SDK Runtime (Version: 10.0.937.2)

AMD Catalyst Install Manager (Version: 8.0.877.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Fuel (Version: 2013.0429.2313.39747)

AMD Media Foundation Decoders (Version: 1.0.80430.0002)

AMD VISION Engine Control Center (x32 Version: 2013.0429.2313.39747)

Apple Application Support (x32 Version: 2.3.6)

Apple Mobile Device Support (Version: 7.0.0.117)

Apple Software Update (x32 Version: 2.1.3.127)

Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.10.0.0)

Bonjour (Version: 3.0.0.10)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0429.2313.39747)

Catalyst Control Center InstallProxy (x32 Version: 2013.0429.2313.39747)

Catalyst Control Center Localization All (x32 Version: 2013.0429.2313.39747)

CCC Help Chinese Standard (x32 Version: 2013.0429.2312.39747)

CCC Help Chinese Traditional (x32 Version: 2013.0429.2312.39747)

CCC Help Czech (x32 Version: 2013.0429.2312.39747)

CCC Help Danish (x32 Version: 2013.0429.2312.39747)

CCC Help Dutch (x32 Version: 2013.0429.2312.39747)

CCC Help English (x32 Version: 2013.0429.2312.39747)

CCC Help Finnish (x32 Version: 2013.0429.2312.39747)

CCC Help French (x32 Version: 2013.0429.2312.39747)

CCC Help German (x32 Version: 2013.0429.2312.39747)

CCC Help Greek (x32 Version: 2013.0429.2312.39747)

CCC Help Hungarian (x32 Version: 2013.0429.2312.39747)

CCC Help Italian (x32 Version: 2013.0429.2312.39747)

CCC Help Japanese (x32 Version: 2013.0429.2312.39747)

CCC Help Korean (x32 Version: 2013.0429.2312.39747)

CCC Help Norwegian (x32 Version: 2013.0429.2312.39747)

CCC Help Polish (x32 Version: 2013.0429.2312.39747)

CCC Help Portuguese (x32 Version: 2013.0429.2312.39747)

CCC Help Russian (x32 Version: 2013.0429.2312.39747)

CCC Help Spanish (x32 Version: 2013.0429.2312.39747)

CCC Help Swedish (x32 Version: 2013.0429.2312.39747)

CCC Help Thai (x32 Version: 2013.0429.2312.39747)

CCC Help Turkish (x32 Version: 2013.0429.2312.39747)

ccc-utility64 (Version: 2013.0429.2313.39747)

CCleaner (Version: 4.08)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

Free YouTube to MP3 Converter version 3.12.17.1125 (x32 Version: 3.12.17.1125)

Google Drive (x32 Version: 1.12.5329.1887)

Hama Wireless LAN Adapter (x32 Version: 10.6.0)

HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (Version: 28.0.1315.0)

HP Photo Creations (x32 Version: 1.0.0.9572)

HP Update (x32 Version: 5.003.003.001)

I.R.I.S. OCR (x32 Version: 12.3.4.0)

iTunes (Version: 11.1.3.8)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)

Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0)

Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)

Mozilla Maintenance Service (x32 Version: 25.0.1)

Norton Internet Security (x32 Version: 21.1.0.18)

Realtek Ethernet Controller Driver (x32 Version: 7.41.216.2011)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6251)

Revo Uninstaller 1.95 (x32 Version: 1.95)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)

Secunia PSI (3.0.0.9015) (x32 Version: 3.0.0.9015)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)

Studie zur Verbesserung von HP Officejet 6500 E710a-f Produkten (Version: 28.0.1315.0)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)

Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)

WinRAR 5.01 (64-Bit) (Version: 5.01.0)
 

==================== Restore Points  =========================
 

08-12-2013 17:08:47 Gerätetreiber-Paketinstallation: Google, Inc.

08-12-2013 17:16:36 Installed CM Installer

08-12-2013 17:20:12 Gerätetreiber-Paketinstallation: ClockworkMod Android Device

08-12-2013 17:32:58 Installed iTunes

08-12-2013 18:20:18 Windows Update

08-12-2013 18:31:15 Windows Update

08-12-2013 18:59:23 Windows Update

08-12-2013 20:05:28 Windows Update

08-12-2013 22:33:56 Removed CM Installer
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {30B530C9-95B2-461B-A1E0-F64BAA283B5B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {3B468EA9-F67B-4836-A6B9-C84440205605} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)

Task: {46A348E1-FD44-4DF0-9114-EEFB88E5848C} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)

Task: {49A9953D-5D4F-4A2D-9A1C-AD0BC3B0F054} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)

Task: {4E2925A9-AE49-4FA1-935B-40B9952610FD} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)

Task: {64FC1868-E3F0-4365-8D35-D0F0CDCE3519} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)

Task: {7043B8DE-8CB5-4FEB-86AB-54A7820FA566} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-05-13] (Microsoft)

Task: {A3BE946D-727D-474B-AD72-C373A954544F} - System32\Tasks\HPCustParticipation HP Officejet 6500 E710a-f => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {ABE8EBF8-5417-44C9-B6DA-D5364F8453EB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-08] (Adobe Systems Incorporated)

Task: {B35B3757-6C3C-41F0-8EBC-36103C06821F} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)

Task: {B7497EE1-B44B-4E13-8046-D240B110608A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)

Task: {C281F8CF-628A-41D2-99C9-0054BB9467E1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-04-29 23:25 - 2013-04-29 23:25 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-12-08 23:59 - 2013-12-08 23:59 - 00098816 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32api.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00110080 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\pywintypes27.dll

2013-12-08 23:59 - 2013-12-08 23:59 - 00364544 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\pythoncom27.dll

2013-12-08 23:59 - 2013-12-08 23:59 - 00044032 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\_socket.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 01153024 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\_ssl.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00320512 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32com.shell.shell.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00711680 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\_hashlib.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 01175040 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\wx._core_.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00805888 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\wx._gdi_.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00811008 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\wx._windows_.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 01062400 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\wx._controls_.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00735232 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\wx._misc_.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00128512 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\_elementtree.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00127488 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\pyexpat.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00557056 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\pysqlite2._sqlite.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00087040 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\_ctypes.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00119808 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32file.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00108544 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32security.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00018432 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32event.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00038912 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32inet.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00122368 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\wx._wizard.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00686080 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\unicodedata.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00026624 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\_multiprocessing.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00070656 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\wx._html2.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00010240 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\select.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00025600 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32pdh.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00504832 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\windows._cacheinvalidation.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00011264 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32crypt.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00035840 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32process.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00017408 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32profile.pyd

2013-12-08 23:59 - 2013-12-08 23:59 - 00022528 _____ () C:\Users\Denis\AppData\Local\Temp\_MEI19162\win32ts.pyd

2013-12-08 00:55 - 2013-11-13 04:39 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/09/2013 00:01:04 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/08/2013 11:57:47 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x517f39a1

Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000000033c1

ID des fehlerhaften Prozesses: 0x808

Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0

Pfad der fehlerhaften Anwendung: Fuel.Service.exe1

Pfad des fehlerhaften Moduls: Fuel.Service.exe2

Berichtskennung: Fuel.Service.exe3
 

Error: (12/08/2013 09:27:26 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/08/2013 09:24:41 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x517f39a1

Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000000033c1

ID des fehlerhaften Prozesses: 0x630

Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0

Pfad der fehlerhaften Anwendung: Fuel.Service.exe1

Pfad des fehlerhaften Moduls: Fuel.Service.exe2

Berichtskennung: Fuel.Service.exe3
 

Error: (12/08/2013 08:10:05 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/08/2013 08:07:13 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0, Zeitstempel: 0x517f39a1

Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0, Zeitstempel: 0x4f55e10b

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000000033c1

ID des fehlerhaften Prozesses: 0x71c

Startzeit der fehlerhaften Anwendung: 0xFuel.Service.exe0

Pfad der fehlerhaften Anwendung: Fuel.Service.exe1

Pfad des fehlerhaften Moduls: Fuel.Service.exe2

Berichtskennung: Fuel.Service.exe3
 

Error: (12/08/2013 07:08:01 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: EFS Professional.exe, Version: 2.0.70.0, Zeitstempel: 0x52266d58

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x008110ea

ID des fehlerhaften Prozesses: 0x121c

Startzeit der fehlerhaften Anwendung: 0xEFS Professional.exe0

Pfad der fehlerhaften Anwendung: EFS Professional.exe1

Pfad des fehlerhaften Moduls: EFS Professional.exe2

Berichtskennung: EFS Professional.exe3
 

Error: (12/08/2013 07:08:01 PM) (Source: .NET Runtime) (User: )

Description: Anwendung: EFS Professional.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.NullReferenceException

Stapel:

   bei EFS_Professional.frmEFSProMain._Lambda$__3()

   bei EFS_Professional.frmEFSProMain._Lambda$__2(System.Object)

   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   bei System.Threading.ThreadPoolWorkQueue.Dispatch()

   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 

Error: (12/08/2013 07:07:10 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: EFS Professional.exe, Version: 2.0.70.0, Zeitstempel: 0x52266d58

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x008a10ea

ID des fehlerhaften Prozesses: 0x1268

Startzeit der fehlerhaften Anwendung: 0xEFS Professional.exe0

Pfad der fehlerhaften Anwendung: EFS Professional.exe1

Pfad des fehlerhaften Moduls: EFS Professional.exe2

Berichtskennung: EFS Professional.exe3
 

Error: (12/08/2013 07:07:08 PM) (Source: .NET Runtime) (User: )

Description: Anwendung: EFS Professional.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.NullReferenceException

Stapel:

   bei EFS_Professional.frmEFSProMain._Lambda$__3()

   bei EFS_Professional.frmEFSProMain._Lambda$__2(System.Object)

   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   bei System.Threading.ThreadPoolWorkQueue.Dispatch()

   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 
 

System errors:

=============

Error: (12/08/2013 11:57:49 PM) (Source: Service Control Manager) (User: )

Description: Dienst "AMD FUEL Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (12/08/2013 11:31:08 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (12/08/2013 10:36:30 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
 

Error: (12/08/2013 09:27:56 PM) (Source: WMPNetworkSvc) (User: )

Description: WMPNetworkSvc0x80004005
 

Error: (12/08/2013 09:24:41 PM) (Source: Service Control Manager) (User: )

Description: Dienst "AMD FUEL Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (12/08/2013 08:07:15 PM) (Source: Service Control Manager) (User: )

Description: Dienst "AMD FUEL Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (12/08/2013 07:29:08 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070652 fehlgeschlagen: Update für Microsoft Office 2010 (KB2597091) 32-Bit-Edition
 

Error: (12/08/2013 07:27:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070652 fehlgeschlagen: Service Pack 1 für Microsoft Office 2010 (KB2510690), 32-Bit-Edition
 

Error: (12/08/2013 05:42:34 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 43. Der interne Fehlerstatus lautet: 252.
 

Error: (12/08/2013 04:41:57 PM) (Source: Disk) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
 
 

Microsoft Office Sessions:

=========================

Error: (12/09/2013 00:01:04 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/08/2013 11:57:47 PM) (Source: Application Error)(User: )

Description: Fuel.Service.exe1.0.0.0517f39a1Device.dll4.1.0.04f55e10bc000000500000000000033c180801cef453b719939fC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll272a756d-605c-11e3-b3e8-14dae9b1f836
 

Error: (12/08/2013 09:27:26 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/08/2013 09:24:41 PM) (Source: Application Error)(User: )

Description: Fuel.Service.exe1.0.0.0517f39a1Device.dll4.1.0.04f55e10bc000000500000000000033c163001cef448e7749b9aC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dllc41da104-6046-11e3-9256-14dae9b1f836
 

Error: (12/08/2013 08:10:05 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/08/2013 08:07:13 PM) (Source: Application Error)(User: )

Description: Fuel.Service.exe1.0.0.0517f39a1Device.dll4.1.0.04f55e10bc000000500000000000033c171c01cef3fed30ba228C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exeC:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dllf1bd36bc-603b-11e3-9d43-14dae9b1f836
 

Error: (12/08/2013 07:08:01 PM) (Source: Application Error)(User: )

Description: EFS Professional.exe2.0.70.052266d58unknown0.0.0.000000000c0000005008110ea121c01cef4406b2f7628C:\Users\Denis\Documents\Flashutensilien\Samsung\EFS Professional\EFS Professional.exeunknownac716cd0-6033-11e3-9d43-14dae9b1f836
 

Error: (12/08/2013 07:08:01 PM) (Source: .NET Runtime)(User: )

Description: Anwendung: EFS Professional.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.NullReferenceException

Stapel:

   bei EFS_Professional.frmEFSProMain._Lambda$__3()

   bei EFS_Professional.frmEFSProMain._Lambda$__2(System.Object)

   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   bei System.Threading.ThreadPoolWorkQueue.Dispatch()

   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 

Error: (12/08/2013 07:07:10 PM) (Source: Application Error)(User: )

Description: EFS Professional.exe2.0.70.052266d58unknown0.0.0.000000000c0000005008a10ea126801cef44045e666a6C:\Users\Denis\Documents\Flashutensilien\Samsung\EFS Professional\EFS Professional.exeunknown8e26681b-6033-11e3-9d43-14dae9b1f836
 

Error: (12/08/2013 07:07:08 PM) (Source: .NET Runtime)(User: )

Description: Anwendung: EFS Professional.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund eines Ausnahmefehlers beendet.

Ausnahmeinformationen: System.NullReferenceException

Stapel:

   bei EFS_Professional.frmEFSProMain._Lambda$__3()

   bei EFS_Professional.frmEFSProMain._Lambda$__2(System.Object)

   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)

   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()

   bei System.Threading.ThreadPoolWorkQueue.Dispatch()

   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 27%

Total physical RAM: 8191.11 MB

Available physical RAM: 5957.59 MB

Total Pagefile: 16380.41 MB

Available Pagefile: 13388.84 MB

Total Virtual: 8192 MB

Available Virtual: 8191.79 MB
 

==================== Drives ================================
 

Drive c: (Windows 7 und Programme) (Fixed) (Total:596.07 GB) (Free:550.77 GB) NTFS

Drive f: (Externe Julia&Denis) (Fixed) (Total:931.51 GB) (Free:824.68 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: E4AD24DE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=596 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: E7725E5F)

Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

FRST1

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03

Ran by Denis (administrator) on DENIS-PC on 09-12-2013 07:43:54

Running from C:\Users\Denis\Desktop

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11613288 2010-11-19] (Realtek Semiconductor)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google)

HKCU\...\Policies\Explorer: [DisallowRun] 1

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [AMD AVT] - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)

Startup: C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6500 E710a-f.lnk

ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6500 E710a-f.lnk -> C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x2A2BC0DF8EF3CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.giga.de/androidnews/

BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\ipsbho.dll (Symantec Corporation)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\CoIEPlg.dll (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coieplg.dll (Symantec Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\jzxuk623.default

FF Homepage: about:home

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\jzxuk623.default\searchplugins\safesearch.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: DownloadHelper - C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\jzxuk623.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

FF Extension: Adblock Plus - C:\Users\Denis\AppData\Roaming\Mozilla\Firefox\Profiles\jzxuk623.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
 

==================== Services (Whitelisted) =================
 

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-29] (Advanced Micro Devices, Inc.)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)

R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-11-04] (Secunia)

S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-11-04] (Secunia)
 

==================== Drivers (Whitelisted) ====================
 

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx64.sys [1526488 2013-12-03] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-05] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-05] (Symantec Corporation)

R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20131206.001\IDSvia64.sys [521816 2013-12-06] (Symantec Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20131208.005\ENG64.SYS [126040 2013-12-05] (Symantec Corporation)

R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20131208.005\EX64.SYS [2099288 2013-12-05] (Symantec Corporation)

R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-11-04] (Secunia)

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

R3 SRTSP; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-08] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-09 07:43 - 2013-12-09 07:44 - 00011106 _____ C:\Users\Denis\Desktop\FRST.txt

2013-12-09 07:43 - 2013-12-09 07:43 - 00000000 ____D C:\FRST

2013-12-09 07:42 - 2013-12-09 07:42 - 01927998 _____ (Farbar) C:\Users\Denis\Desktop\FRST64.exe

2013-12-09 07:42 - 2013-12-09 07:42 - 00377856 _____ C:\Users\Denis\Desktop\gmer_2.1.19163.exe

2013-12-08 23:59 - 2013-12-09 07:36 - 00000168 _____ C:\Windows\setupact.log

2013-12-08 23:59 - 2013-12-08 23:59 - 00000000 _____ C:\Windows\setuperr.log

2013-12-08 23:34 - 2013-12-08 23:34 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-08 19:27 - 2013-12-08 19:29 - 00000000 ____D C:\ProgramData\Adobe

2013-12-08 19:27 - 2013-12-08 19:27 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Users\Denis\AppData\Local\Secunia PSI

2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Program Files (x86)\Secunia

2013-12-08 19:23 - 2013-12-08 19:23 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-12-08 19:23 - 2013-12-08 19:23 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-12-08 19:12 - 2013-12-08 19:12 - 00000000 ____D C:\Users\Denis\AppData\Roaming\DVDVideoSoft

2013-12-08 19:12 - 2013-12-08 19:12 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-08 19:07 - 2013-12-08 23:38 - 00000000 ____D C:\Users\Denis\AppData\Local\CrashDumps

2013-12-08 19:07 - 2013-12-08 19:07 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf

2013-12-08 18:37 - 2013-06-21 01:07 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll

2013-12-08 18:37 - 2013-06-21 01:07 - 00708168 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller.dll

2013-12-08 18:37 - 2013-06-21 01:07 - 00103448 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys

2013-12-08 18:36 - 2013-12-08 18:36 - 00000000 ____D C:\ProgramData\Samsung

2013-12-08 18:36 - 2013-12-08 18:36 - 00000000 ____D C:\Program Files\SAMSUNG

2013-12-08 18:35 - 2013-12-08 20:09 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Apple Computer

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Users\Denis\AppData\Local\Apple Computer

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\ProgramData\Apple Computer

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Program Files\iTunes

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Program Files\iPod

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-12-08 18:35 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Windows\System32\Tasks\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Users\Denis\AppData\Local\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\ProgramData\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files\Bonjour

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files (x86)\Bonjour

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

2013-12-08 18:21 - 2013-12-08 18:21 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Malwarebytes

2013-12-08 18:12 - 2013-12-08 18:12 - 00000000 ____D C:\Users\Denis\.android

2013-12-08 18:09 - 2013-12-08 18:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf

2013-12-08 18:07 - 2013-02-27 02:47 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll

2013-12-08 18:07 - 2013-02-27 02:47 - 01002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll

2013-12-08 17:54 - 2013-12-08 17:54 - 00000921 _____ C:\Users\Denis\Desktop\Galaxy S3.lnk

2013-12-08 17:53 - 2013-12-08 17:53 - 00000913 _____ C:\Users\Denis\Desktop\Nexus 4.lnk

2013-12-08 17:52 - 2013-12-08 17:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\ChromeExtensions

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\Tempd3a9a1b690bada46d60a2e116fe2a246

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\Temp9507d18eedb2ef0612c549b8806ec858

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\Temp1c2cb111b5429d609ad4969cffeeb7b4

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\BuildAGadget Content

2013-12-08 17:44 - 2013-12-08 17:44 - 00000000 ____D C:\ProgramData\Visan

2013-12-08 17:44 - 2013-12-08 17:44 - 00000000 ____D C:\ProgramData\HP Photo Creations

2013-12-08 17:44 - 2013-12-08 17:44 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations

2013-12-08 17:43 - 2013-12-08 17:43 - 00000000 ____D C:\Users\Denis\Desktop\Spiele

2013-12-08 17:42 - 2013-12-08 17:42 - 00001264 _____ C:\Users\Denis\Desktop\HP Scan.lnk

2013-12-08 17:41 - 2013-12-08 17:46 - 00000000 ____D C:\Users\Denis\AppData\Roaming\HpUpdate

2013-12-08 17:41 - 2013-12-08 17:41 - 00003618 _____ C:\Windows\System32\Tasks\HPCustParticipation HP Officejet 6500 E710a-f

2013-12-08 17:41 - 2013-12-08 17:41 - 00002271 _____ C:\Users\Public\Desktop\HP Officejet 6500 E710a-f.lnk

2013-12-08 17:41 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPM5512.dll

2013-12-08 17:40 - 2013-12-08 17:42 - 00000000 ____D C:\Users\Denis\AppData\Local\HP

2013-12-08 17:40 - 2013-12-08 17:41 - 00000000 ____D C:\Program Files (x86)\HP

2013-12-08 17:40 - 2013-12-08 17:40 - 00000057 _____ C:\ProgramData\Ament.ini

2013-12-08 17:40 - 2013-12-08 17:40 - 00000000 ____D C:\ProgramData\HP

2013-12-08 17:40 - 2013-12-08 17:40 - 00000000 ____D C:\Program Files\HP

2013-12-08 17:38 - 2013-12-08 17:38 - 00000000 ____D C:\Users\Denis\AppData\Roaming\WinRAR

2013-12-08 17:38 - 2013-12-08 17:38 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-08 17:38 - 2013-12-08 17:38 - 00000000 ____D C:\Program Files\WinRAR

2013-12-08 17:30 - 2013-12-08 17:30 - 00000000 ____D C:\Users\Denis\Documents\Flashutensilien

2013-12-08 17:29 - 2013-12-08 17:29 - 00001115 _____ C:\Users\Denis\Desktop\Dokumente.lnk

2013-12-08 17:28 - 2013-12-08 17:28 - 00000543 _____ C:\Users\Denis\Desktop\Windows 7 und Programme (C).lnk

2013-12-08 17:28 - 2013-12-08 17:28 - 00000513 _____ C:\Users\Denis\Desktop\Externe Julia&Denis (F).lnk

2013-12-08 17:02 - 2013-12-08 17:02 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Macromedia

2013-12-08 17:02 - 2013-12-08 17:02 - 00000000 ____D C:\Users\Denis\AppData\Local\Macromedia

2013-12-08 16:54 - 2013-12-09 07:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-08 16:54 - 2013-12-08 16:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-08 16:54 - 2013-12-08 16:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-08 16:54 - 2013-12-08 16:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-08 16:54 - 2013-12-08 16:54 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2013-12-08 16:54 - 2013-12-08 16:54 - 00000000 ____D C:\Windows\system32\Macromed

2013-12-08 15:41 - 2013-12-08 19:29 - 00000000 ____D C:\Users\Denis\AppData\Local\Adobe

2013-12-08 11:45 - 2013-12-08 11:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services

2013-12-08 11:44 - 2013-12-08 11:44 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2013-12-08 11:44 - 2013-12-08 11:44 - 00000000 ____D C:\Windows\PCHEALTH

2013-12-08 11:44 - 2013-12-08 11:44 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-12-08 11:43 - 2013-12-08 11:43 - 00000000 ____D C:\Program Files\Microsoft Office

2013-12-08 11:43 - 2013-12-08 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services

2013-12-08 11:42 - 2013-12-08 21:10 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-08 11:42 - 2013-12-08 11:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2013-12-08 11:42 - 2013-12-08 11:42 - 00000000 __RHD C:\MSOCache

2013-12-08 11:42 - 2013-12-08 11:42 - 00000000 ____D C:\Users\Denis\AppData\Local\Microsoft Help

2013-12-08 11:33 - 2013-12-08 11:33 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2013-12-08 11:33 - 2013-12-08 11:33 - 00001291 _____ C:\Users\Denis\Desktop\Revo Uninstaller.lnk

2013-12-08 11:33 - 2013-12-08 11:33 - 00001136 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-08 11:33 - 2013-12-08 11:33 - 00000845 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-12-08 11:33 - 2013-12-08 11:33 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-08 11:33 - 2013-12-08 11:33 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2013-12-08 11:33 - 2013-12-08 11:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-08 11:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-08 11:32 - 2013-12-08 11:33 - 00000000 ____D C:\Program Files\CCleaner

2013-12-08 01:35 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-12-08 01:35 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-12-08 01:35 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-12-08 01:35 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-12-08 01:35 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-12-08 01:35 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-12-08 01:35 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-12-08 01:32 - 2013-12-08 19:28 - 00000000 ____D C:\Users\Denis\Desktop\Programme

2013-12-08 01:27 - 2013-12-09 00:01 - 00000000 ___RD C:\Users\Denis\Google Drive

2013-12-08 01:27 - 2013-12-08 01:27 - 00001741 _____ C:\Users\Denis\Desktop\Google Drive.lnk

2013-12-08 01:20 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2013-12-08 01:20 - 2011-03-11 07:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2013-12-08 01:20 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2013-12-08 01:20 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2013-12-08 01:20 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2013-12-08 01:20 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2013-12-08 01:20 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2013-12-08 01:20 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2013-12-08 01:20 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-12-08 01:20 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe

2013-12-08 01:20 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-12-08 01:19 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-12-08 01:19 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2013-12-08 01:19 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2013-12-08 01:19 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2013-12-08 01:19 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2013-12-08 01:19 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2013-12-08 01:02 - 2013-12-08 01:02 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security

2013-12-08 01:01 - 2013-12-08 01:01 - 00000000 ____D C:\Users\Denis\Documents\Symantec

2013-12-08 01:00 - 2013-12-08 01:01 - 00000000 ____D C:\ProgramData\Norton

2013-12-08 01:00 - 2013-12-08 01:00 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2013-12-08 01:00 - 2013-12-08 01:00 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2013-12-08 01:00 - 2013-12-08 01:00 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration

2013-12-08 01:00 - 2013-12-08 01:00 - 00002600 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk

2013-12-08 01:00 - 2013-12-08 01:00 - 00000000 ____D C:\Windows\system32\Drivers\NISx64

2013-12-08 01:00 - 2013-12-08 01:00 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared

2013-12-08 01:00 - 2013-12-08 01:00 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Mozilla

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Users\Denis\AppData\Local\Mozilla

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\ProgramData\Mozilla

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-08 00:51 - 2013-12-08 01:24 - 00000000 ____D C:\Users\Denis\AppData\Local\Google

2013-12-08 00:51 - 2013-12-08 01:24 - 00000000 ____D C:\Program Files (x86)\Google

2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\Denis\AppData\Local\Deployment

2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\Denis\AppData\Local\Apps\2.0

2013-12-08 00:47 - 2013-12-08 00:47 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center

2013-12-08 00:39 - 2013-12-08 19:29 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Adobe

2013-12-08 00:39 - 2013-12-08 00:39 - 00003536 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask

2013-12-08 00:23 - 2013-12-08 01:22 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-12-08 00:16 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-12-08 00:07 - 2013-12-08 00:07 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-08 00:07 - 2013-12-08 00:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-08 00:07 - 2013-12-08 00:07 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-08 00:07 - 2013-12-08 00:07 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-08 00:07 - 2013-12-08 00:07 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-08 00:07 - 2013-12-08 00:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-08 00:07 - 2013-12-08 00:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-08 00:07 - 2013-12-08 00:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-08 00:07 - 2013-12-08 00:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-08 00:07 - 2013-12-08 00:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-08 00:07 - 2013-12-08 00:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-07 23:41 - 2013-12-08 01:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-12-07 23:41 - 2013-12-08 01:22 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-12-07 23:14 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll

2013-12-07 23:14 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys

2013-12-07 23:14 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys

2013-12-07 23:14 - 2012-08-23 15:07 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys

2013-12-07 23:14 - 2012-08-23 14:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll

2013-12-07 23:14 - 2012-08-23 14:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll

2013-12-07 23:14 - 2012-08-23 14:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2013-12-07 23:14 - 2012-08-23 14:40 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2013-12-07 23:14 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

2013-12-07 23:14 - 2012-08-23 14:20 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll

2013-12-07 23:14 - 2012-08-23 14:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2013-12-07 23:14 - 2012-08-23 14:17 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll

2013-12-07 23:14 - 2012-08-23 14:06 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll

2013-12-07 23:14 - 2012-08-23 13:52 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2013-12-07 23:14 - 2012-08-23 12:20 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2013-12-07 23:14 - 2012-08-23 12:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2013-12-07 23:14 - 2012-08-23 12:14 - 00384000 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe

2013-12-07 23:14 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll

2013-12-07 23:14 - 2012-08-23 11:54 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll

2013-12-07 23:14 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll

2013-12-07 23:14 - 2012-08-23 11:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe

2013-12-07 23:14 - 2012-08-23 11:22 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe

2013-12-07 23:14 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll

2013-12-07 23:14 - 2012-08-23 09:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2013-12-07 23:14 - 2012-08-23 09:13 - 05773824 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2013-12-07 23:08 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe

2013-12-07 22:56 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2013-12-07 22:56 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2013-12-07 22:56 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2013-12-07 22:56 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2013-12-07 22:56 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2013-12-07 22:56 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2013-12-07 22:56 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2013-12-07 22:56 - 2012-06-02 15:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2013-12-07 22:53 - 2013-12-07 22:54 - 00000000 ____D C:\Windows\system32\MRT

2013-12-07 22:53 - 2013-11-07 16:00 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-07 22:50 - 2013-01-13 22:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 22:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:31 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-12-07 22:50 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-12-07 22:50 - 2013-01-13 21:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

FRST2

Code:

2013-12-07 22:50 - 2013-01-13 21:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2013-12-07 22:50 - 2013-01-13 21:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2013-12-07 22:50 - 2013-01-13 21:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2013-12-07 22:50 - 2013-01-13 21:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2013-12-07 22:50 - 2013-01-13 20:59 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-12-07 22:50 - 2013-01-13 20:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-12-07 22:50 - 2013-01-13 20:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-12-07 22:50 - 2013-01-13 20:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2013-12-07 22:50 - 2013-01-13 20:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2013-12-07 22:50 - 2013-01-13 20:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-12-07 22:50 - 2013-01-13 20:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2013-12-07 22:50 - 2013-01-13 20:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2013-12-07 22:50 - 2013-01-13 20:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2013-12-07 22:50 - 2013-01-13 20:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-12-07 22:50 - 2013-01-13 20:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-12-07 22:50 - 2013-01-13 20:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2013-12-07 22:50 - 2013-01-13 20:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2013-12-07 22:50 - 2013-01-13 20:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-12-07 22:50 - 2013-01-13 20:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2013-12-07 22:50 - 2013-01-13 20:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-12-07 22:50 - 2013-01-13 20:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-12-07 22:50 - 2013-01-13 20:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-12-07 22:50 - 2013-01-13 20:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-07 22:50 - 2013-01-13 19:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-12-07 22:50 - 2013-01-13 19:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-07 22:50 - 2013-01-13 19:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2013-12-07 22:50 - 2013-01-13 18:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-12-07 22:50 - 2013-01-13 18:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2013-12-07 22:50 - 2013-01-04 07:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2013-12-07 22:50 - 2013-01-04 07:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2013-12-07 22:49 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2013-12-07 22:49 - 2012-03-01 07:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-07 22:49 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2013-12-07 22:49 - 2012-03-01 06:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-07 22:49 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll

2013-12-07 22:45 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-12-07 22:45 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-12-07 22:45 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-12-07 22:45 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-12-07 22:45 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-12-07 22:45 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-12-07 22:45 - 2011-02-05 18:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2013-12-07 22:45 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll

2013-12-07 22:45 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll

2013-12-07 22:45 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll

2013-12-07 22:45 - 2011-02-05 18:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2013-12-07 22:45 - 2011-02-05 18:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2013-12-07 22:45 - 2011-02-05 18:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2013-12-07 22:44 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-12-07 22:44 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-12-07 22:44 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-12-07 22:44 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-12-07 22:44 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-12-07 22:44 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-12-07 22:44 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-12-07 22:44 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-12-07 22:44 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-12-07 22:44 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-12-07 22:44 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-12-07 22:44 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-12-07 22:44 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-12-07 22:44 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-12-07 22:44 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-12-07 22:44 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-12-07 22:44 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-12-07 22:44 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-12-07 22:44 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-12-07 22:44 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-12-07 22:44 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-12-07 22:44 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-12-07 22:44 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-12-07 22:44 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-12-07 22:44 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-12-07 22:44 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-12-07 22:44 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-12-07 22:44 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-12-07 22:44 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-12-07 22:44 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-12-07 22:44 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-12-07 22:44 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-12-07 22:44 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-12-07 22:44 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-12-07 22:44 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-12-07 22:44 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-12-07 22:44 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2013-12-07 22:44 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2013-12-07 22:44 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2013-12-07 22:44 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2013-12-07 22:44 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2013-12-07 22:44 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2013-12-07 22:44 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-12-07 22:44 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2013-12-07 22:44 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2013-12-07 22:44 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2013-12-07 22:44 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2013-12-07 22:44 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2013-12-07 22:44 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2013-12-07 22:44 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2013-12-07 22:44 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2013-12-07 22:44 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2013-12-07 22:44 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2013-12-07 22:44 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2013-12-07 22:44 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2013-12-07 22:44 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2013-12-07 22:44 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2013-12-07 22:44 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2013-12-07 22:44 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2013-12-07 22:44 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2013-12-07 22:44 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-12-07 22:44 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-12-07 22:44 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-12-07 22:44 - 2012-11-30 00:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls

2013-12-07 22:44 - 2012-11-30 00:15 - 00420064 _____ C:\Windows\system32\locale.nls

2013-12-07 22:44 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-12-07 22:44 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-12-07 22:44 - 2012-11-28 23:56 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2013-12-07 22:44 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2013-12-07 22:44 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2013-12-07 22:44 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll

2013-12-07 22:44 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2013-12-07 22:44 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2013-12-07 22:44 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll

2013-12-07 22:44 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2013-12-07 22:44 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll

2013-12-07 22:44 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2013-12-07 22:44 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll

2013-12-07 22:44 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-12-07 22:44 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2013-12-07 22:44 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2013-12-07 22:44 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2013-12-07 22:44 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2013-12-07 22:44 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll

2013-12-07 22:44 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-12-07 22:44 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-12-07 22:44 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-12-07 22:44 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-12-07 22:44 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-12-07 22:44 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-12-07 22:44 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-12-07 22:44 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-12-07 22:44 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-12-07 22:44 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-12-07 22:44 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-12-07 22:44 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-12-07 22:44 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-12-07 22:44 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-12-07 22:44 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2013-12-07 22:44 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-12-07 22:44 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-12-07 22:44 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-12-07 22:44 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2013-12-07 22:44 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2013-12-07 22:44 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll

2013-12-07 22:44 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll

2013-12-07 22:44 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll

2013-12-07 22:44 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll

2013-12-07 22:44 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll

2013-12-07 22:44 - 2010-12-23 11:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll

2013-12-07 22:44 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax

2013-12-07 22:44 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll

2013-12-07 22:44 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll

2013-12-07 22:44 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax

2013-12-07 22:43 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2013-12-07 22:43 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-12-07 22:43 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-12-07 22:43 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2013-12-07 22:43 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-12-07 22:43 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll

2013-12-07 22:43 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-12-07 22:43 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-12-07 22:43 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-12-07 22:43 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-12-07 22:43 - 2013-07-19 02:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-07 22:43 - 2013-07-19 02:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-07 22:43 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys

2013-12-07 22:43 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-12-07 22:43 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll

2013-12-07 22:43 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-12-07 22:43 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2013-12-07 22:43 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-12-07 22:43 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-12-07 22:43 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-12-07 22:43 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-12-07 22:43 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2013-12-07 22:43 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll

2013-12-07 22:43 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2013-12-07 22:43 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2013-12-07 22:43 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2013-12-07 22:43 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2013-12-07 22:43 - 2012-11-01 06:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2013-12-07 22:43 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2013-12-07 22:43 - 2012-11-01 05:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2013-12-07 22:43 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2013-12-07 22:43 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2013-12-07 22:43 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2013-12-07 22:43 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2013-12-07 22:43 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2013-12-07 22:43 - 2012-08-22 19:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2013-12-07 22:43 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2013-12-07 22:43 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2013-12-07 22:43 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2013-12-07 22:43 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2013-12-07 22:43 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2013-12-07 22:43 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys

2013-12-07 22:43 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-12-07 22:43 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2013-12-07 22:43 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2013-12-07 22:43 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2013-12-07 22:43 - 2012-04-26 06:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2013-12-07 22:43 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2013-12-07 22:43 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2013-12-07 22:43 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-12-07 22:43 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2013-12-07 22:43 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll

2013-12-07 22:43 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2013-12-07 22:43 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll

2013-12-07 22:43 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

2013-12-07 22:43 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll

2013-12-07 22:43 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll

2013-12-07 22:43 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll

2013-12-07 22:43 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll

2013-12-07 22:43 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll

2013-12-07 22:43 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2013-12-07 22:43 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll

2013-12-07 22:43 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll

2013-12-07 22:43 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll

2013-12-07 22:43 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2013-12-07 22:43 - 2011-04-22 23:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-12-07 22:43 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2013-12-07 22:43 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2013-12-07 22:43 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe

2013-12-07 22:43 - 2010-06-26 04:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2013-12-07 22:43 - 2010-06-26 04:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2013-12-07 22:42 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-12-07 22:42 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2013-12-07 22:42 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll

2013-12-07 22:42 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-12-07 22:42 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-12-07 22:42 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll

2013-12-07 22:42 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-12-07 22:42 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2013-12-07 22:42 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-12-07 22:42 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-12-07 22:42 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-12-07 22:42 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll

2013-12-07 22:42 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-12-07 22:42 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2013-12-07 22:42 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-12-07 22:42 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-12-07 22:42 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-12-07 22:42 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-12-07 22:42 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-07 22:42 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-12-07 22:42 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-12-07 22:42 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll

2013-12-07 22:42 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll

2013-12-07 22:42 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2013-12-07 22:42 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-12-07 22:42 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2013-12-07 22:42 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-12-07 22:42 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2013-12-07 22:42 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-12-07 22:42 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2013-12-07 22:42 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-12-07 22:42 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2013-12-07 22:42 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-12-07 22:42 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-12-07 22:42 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-12-07 22:42 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-12-07 22:42 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2013-12-07 22:42 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2013-12-07 22:42 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2013-12-07 22:42 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll

2013-12-07 22:42 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2013-12-07 22:42 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe

2013-12-07 22:42 - 2012-08-11 01:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2013-12-07 22:42 - 2012-08-11 00:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2013-12-07 22:42 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-12-07 22:42 - 2012-04-28 04:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2013-12-07 22:42 - 2012-04-07 13:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-12-07 22:42 - 2012-04-07 12:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2013-12-07 22:42 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2013-12-07 22:42 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2013-12-07 22:42 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2013-12-07 22:42 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2013-12-07 22:42 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll

2013-12-07 22:42 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2013-12-07 22:42 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2013-12-07 22:42 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2013-12-07 22:42 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2013-12-07 22:42 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll

2013-12-07 22:42 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax

2013-12-07 22:42 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2013-12-07 22:42 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2013-12-07 22:42 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2013-12-07 22:42 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2013-12-07 22:42 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2013-12-07 22:42 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2013-12-07 22:42 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2013-12-07 22:42 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2013-12-07 22:42 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2013-12-07 22:42 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2013-12-07 22:42 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe

2013-12-07 22:42 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2013-12-07 22:42 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe

2013-12-07 22:41 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys

2013-12-07 22:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys

2013-12-07 22:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys

2013-12-07 22:41 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2013-12-07 22:41 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll

2013-12-07 22:41 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2013-12-07 22:41 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2013-12-07 22:41 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2013-12-07 22:37 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2013-12-07 22:37 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll

2013-12-07 22:37 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2013-12-07 22:37 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2013-12-07 22:37 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll

2013-12-07 22:37 - 2011-08-27 06:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-12-07 22:37 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2013-12-07 22:37 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-12-07 22:37 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll

2013-12-07 22:37 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2013-12-07 22:34 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-12-07 22:34 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2013-12-07 22:34 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2013-12-07 22:33 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-12-07 22:33 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-12-07 22:33 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-12-07 22:33 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-12-07 22:33 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-12-07 22:33 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll

2013-12-07 22:33 - 2011-11-19 15:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2013-12-07 22:33 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2013-12-07 22:25 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-12-07 22:25 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-12-07 22:25 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-12-07 22:25 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2013-12-07 22:25 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2013-12-07 22:25 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-12-07 22:25 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-12-07 22:25 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-12-07 22:25 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-12-07 22:24 - 2013-12-07 22:24 - 00000000 ____D C:\Users\Denis\AppData\Local\WindowsUpdate

2013-12-07 22:16 - 2013-12-08 17:40 - 00084984 _____ C:\Users\Denis\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Users\Denis\AppData\Roaming\ATI

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Users\Denis\AppData\Local\ATI

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Users\Denis\AppData\Local\AMD

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\ProgramData\ATI

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Program Files (x86)\AMD AVT

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Program Files (x86)\AMD APP

2013-12-07 22:15 - 2013-12-07 22:16 - 00000000 ____D C:\ProgramData\AMD

2013-12-07 22:15 - 2013-12-07 22:15 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2013-12-07 22:15 - 2013-12-07 22:15 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2013-12-07 22:15 - 2010-02-18 09:18 - 00046136 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox64.sys

2013-12-07 21:52 - 2013-12-07 22:15 - 00000000 ____D C:\Program Files\ATI Technologies

2013-12-07 21:49 - 2013-12-07 21:49 - 00002727 _____ C:\Windows\system32\RaCoInst.log

2013-12-07 21:49 - 2013-12-07 21:49 - 00000000 ____D C:\ProgramData\RalinkRT2870 Driver

2013-12-07 21:49 - 2010-05-26 20:30 - 01121632 _____ (Ralink Technology Corp.) C:\Windows\system32\Drivers\netr28ux.sys

2013-12-07 21:49 - 2010-05-26 18:09 - 00326496 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll

2013-12-07 21:49 - 2010-05-26 18:09 - 00014051 _____ C:\Windows\SysWOW64\RaCoInst.dat

2013-12-07 21:49 - 2010-05-26 18:09 - 00014051 _____ C:\Windows\system32\RaCoInst.dat

2013-12-07 21:42 - 2013-12-07 21:42 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3

2013-12-07 21:41 - 2013-12-07 21:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-12-07 21:41 - 2013-12-07 21:41 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-12-07 21:41 - 2013-12-07 21:41 - 00000000 ____D C:\Program Files\Realtek

2013-12-07 21:41 - 2013-12-07 21:41 - 00000000 ____D C:\Program Files (x86)\Realtek

2013-12-07 21:41 - 2011-06-10 06:34 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll

2013-12-07 21:41 - 2010-11-23 11:44 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll

2013-12-07 21:41 - 2010-11-23 11:16 - 02565736 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys

2013-12-07 21:41 - 2010-11-22 04:39 - 00626792 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll

2013-12-07 21:41 - 2010-11-18 08:01 - 02813544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll

2013-12-07 21:41 - 2010-11-18 08:01 - 02186344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll

2013-12-07 21:41 - 2010-11-18 04:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll

2013-12-07 21:41 - 2010-11-15 15:56 - 02580824 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll

2013-12-07 21:41 - 2010-11-15 15:56 - 01870680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll

2013-12-07 21:41 - 2010-11-11 06:27 - 00083048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll

2013-12-07 21:41 - 2010-11-08 11:36 - 00544768 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat

2013-12-07 21:41 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll

2013-12-07 21:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll

2013-12-07 21:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll

2013-12-07 21:41 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll

2013-12-07 21:41 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll

2013-12-07 21:41 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll

2013-12-07 21:41 - 2010-11-03 11:31 - 01146984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl

2013-12-07 21:41 - 2010-11-03 11:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll

2013-12-07 21:41 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 01327208 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 01179752 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 01111656 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00504936 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00491112 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00475752 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00317032 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00269928 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00266856 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00126056 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00125544 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll

2013-12-07 21:41 - 2010-11-03 11:29 - 00125032 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll

2013-12-07 21:41 - 2010-11-02 02:35 - 01718616 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll

2013-12-07 21:41 - 2010-11-02 02:35 - 00127832 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll

2013-12-07 21:41 - 2010-11-02 02:34 - 00421720 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll

2013-12-07 21:41 - 2010-11-02 02:34 - 00108888 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll

2013-12-07 21:41 - 2010-11-02 02:34 - 00074584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll

2013-12-07 21:41 - 2010-10-29 03:29 - 01937312 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll

2013-12-07 21:41 - 2010-10-28 03:46 - 01251944 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll

2013-12-07 21:41 - 2010-10-03 06:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll

2013-12-07 21:41 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll

2013-12-07 21:41 - 2010-07-22 09:48 - 00220496 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFNHK64.dll

2013-12-07 21:41 - 2010-07-22 09:48 - 00081232 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFCOM64.dll

2013-12-07 21:41 - 2010-07-22 09:48 - 00078160 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\system32\SFAPO64.dll

2013-12-07 21:41 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll

2013-12-07 21:41 - 2010-07-22 09:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll

2013-12-07 21:41 - 2010-05-06 10:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll

2013-12-07 21:41 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll

2013-12-07 21:41 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll

2013-12-07 21:41 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll

2013-12-07 21:41 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll

2013-12-07 21:41 - 2009-11-18 11:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll

2013-12-07 21:41 - 2009-11-17 11:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll

2013-12-07 21:41 - 2009-08-23 23:55 - 00016440 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\Drivers\AtiPcie.sys

2013-12-07 21:40 - 2013-12-07 21:47 - 00032066 _____ C:\Windows\Ascd_log.ini

2013-12-07 21:40 - 2013-12-07 21:40 - 00000000 ____D C:\Program Files\ATI

2013-12-07 21:39 - 2013-12-07 21:39 - 00024281 _____ C:\Windows\Ascd_tmp.ini

2013-12-07 21:39 - 2013-12-07 21:39 - 00001769 _____ C:\Windows\Language_trs.ini

2013-12-07 21:38 - 2013-12-09 00:03 - 01834344 _____ C:\Windows\WindowsUpdate.log

2013-12-07 21:36 - 2013-12-08 18:17 - 00000000 ____D C:\Users\Denis

2013-12-07 21:36 - 2013-12-08 17:42 - 00000000 ___RD C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-07 21:36 - 2013-12-08 00:40 - 00000000 ____D C:\Users\Denis\AppData\Local\VirtualStore

2013-12-07 21:36 - 2013-12-08 00:39 - 00001436 _____ C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-07 21:36 - 2013-12-08 00:39 - 00000000 ___RD C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-07 21:36 - 2013-12-07 21:36 - 00000020 ___SH C:\Users\Denis\ntuser.ini

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Vorlagen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Startmenü

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Netzwerkumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Lokale Einstellungen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Eigene Dateien

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Druckumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

FRST3

Code:

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\AppData\Local\Verlauf

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\AppData\Local\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Programme

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Dokumente und Einstellungen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 __SHD C:\Recovery

2013-12-07 21:36 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-12-07 21:36 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-12-07 21:33 - 2013-12-07 21:33 - 00000000 _____ C:\Windows\ativpsrm.bin

2013-12-07 21:32 - 2013-12-07 21:32 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

2013-12-07 21:29 - 2013-12-08 23:38 - 00000000 ____D C:\Windows\Panther
 

==================== One Month Modified Files and Folders =======
 

2013-12-09 07:44 - 2013-12-09 07:43 - 00011106 _____ C:\Users\Denis\Desktop\FRST.txt

2013-12-09 07:43 - 2013-12-09 07:43 - 00000000 ____D C:\FRST

2013-12-09 07:42 - 2013-12-09 07:42 - 01927998 _____ (Farbar) C:\Users\Denis\Desktop\FRST64.exe

2013-12-09 07:42 - 2013-12-09 07:42 - 00377856 _____ C:\Users\Denis\Desktop\gmer_2.1.19163.exe

2013-12-09 07:37 - 2013-12-08 16:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-09 07:36 - 2013-12-08 23:59 - 00000168 _____ C:\Windows\setupact.log

2013-12-09 00:08 - 2009-07-14 05:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-09 00:08 - 2009-07-14 05:45 - 00021088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-09 00:03 - 2013-12-07 21:38 - 01834344 _____ C:\Windows\WindowsUpdate.log

2013-12-09 00:01 - 2013-12-08 01:27 - 00000000 ___RD C:\Users\Denis\Google Drive

2013-12-08 23:59 - 2013-12-08 23:59 - 00000000 _____ C:\Windows\setuperr.log

2013-12-08 23:59 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-08 23:38 - 2013-12-08 19:07 - 00000000 ____D C:\Users\Denis\AppData\Local\CrashDumps

2013-12-08 23:38 - 2013-12-07 21:29 - 00000000 ____D C:\Windows\Panther

2013-12-08 23:34 - 2013-12-08 23:34 - 00000000 ____D C:\Windows\system32\appmgmt

2013-12-08 21:35 - 2010-11-21 07:50 - 00698688 _____ C:\Windows\system32\perfh007.dat

2013-12-08 21:35 - 2010-11-21 07:50 - 00148828 _____ C:\Windows\system32\perfc007.dat

2013-12-08 21:35 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-08 21:10 - 2013-12-08 11:42 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-08 20:09 - 2013-12-08 18:35 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Apple Computer

2013-12-08 20:09 - 2009-07-14 05:45 - 00340112 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-08 19:29 - 2013-12-08 19:27 - 00000000 ____D C:\ProgramData\Adobe

2013-12-08 19:29 - 2013-12-08 15:41 - 00000000 ____D C:\Users\Denis\AppData\Local\Adobe

2013-12-08 19:29 - 2013-12-08 00:39 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Adobe

2013-12-08 19:28 - 2013-12-08 01:32 - 00000000 ____D C:\Users\Denis\Desktop\Programme

2013-12-08 19:27 - 2013-12-08 19:27 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Users\Denis\AppData\Local\Secunia PSI

2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Program Files (x86)\Secunia

2013-12-08 19:23 - 2013-12-08 19:23 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-12-08 19:23 - 2013-12-08 19:23 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-12-08 19:12 - 2013-12-08 19:12 - 00000000 ____D C:\Users\Denis\AppData\Roaming\DVDVideoSoft

2013-12-08 19:12 - 2013-12-08 19:12 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft

2013-12-08 19:07 - 2013-12-08 19:07 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf

2013-12-08 18:36 - 2013-12-08 18:36 - 00000000 ____D C:\ProgramData\Samsung

2013-12-08 18:36 - 2013-12-08 18:36 - 00000000 ____D C:\Program Files\SAMSUNG

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Users\Denis\AppData\Local\Apple Computer

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\ProgramData\Apple Computer

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Program Files\iTunes

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Program Files\iPod

2013-12-08 18:35 - 2013-12-08 18:35 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Windows\System32\Tasks\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Users\Denis\AppData\Local\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\ProgramData\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files\Bonjour

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files (x86)\Bonjour

2013-12-08 18:32 - 2013-12-08 18:32 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

2013-12-08 18:21 - 2013-12-08 18:21 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Malwarebytes

2013-12-08 18:17 - 2013-12-07 21:36 - 00000000 ____D C:\Users\Denis

2013-12-08 18:12 - 2013-12-08 18:12 - 00000000 ____D C:\Users\Denis\.android

2013-12-08 18:09 - 2013-12-08 18:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf

2013-12-08 17:54 - 2013-12-08 17:54 - 00000921 _____ C:\Users\Denis\Desktop\Galaxy S3.lnk

2013-12-08 17:53 - 2013-12-08 17:53 - 00000913 _____ C:\Users\Denis\Desktop\Nexus 4.lnk

2013-12-08 17:52 - 2013-12-08 17:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\ChromeExtensions

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\Tempd3a9a1b690bada46d60a2e116fe2a246

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\Temp9507d18eedb2ef0612c549b8806ec858

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\Temp1c2cb111b5429d609ad4969cffeeb7b4

2013-12-08 17:48 - 2013-12-08 17:48 - 00000000 ____D C:\Users\Denis\AppData\Local\BuildAGadget Content

2013-12-08 17:46 - 2013-12-08 17:41 - 00000000 ____D C:\Users\Denis\AppData\Roaming\HpUpdate

2013-12-08 17:44 - 2013-12-08 17:44 - 00000000 ____D C:\ProgramData\Visan

2013-12-08 17:44 - 2013-12-08 17:44 - 00000000 ____D C:\ProgramData\HP Photo Creations

2013-12-08 17:44 - 2013-12-08 17:44 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations

2013-12-08 17:43 - 2013-12-08 17:43 - 00000000 ____D C:\Users\Denis\Desktop\Spiele

2013-12-08 17:42 - 2013-12-08 17:42 - 00001264 _____ C:\Users\Denis\Desktop\HP Scan.lnk

2013-12-08 17:42 - 2013-12-08 17:40 - 00000000 ____D C:\Users\Denis\AppData\Local\HP

2013-12-08 17:42 - 2013-12-07 21:36 - 00000000 ___RD C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-12-08 17:41 - 2013-12-08 17:41 - 00003618 _____ C:\Windows\System32\Tasks\HPCustParticipation HP Officejet 6500 E710a-f

2013-12-08 17:41 - 2013-12-08 17:41 - 00002271 _____ C:\Users\Public\Desktop\HP Officejet 6500 E710a-f.lnk

2013-12-08 17:41 - 2013-12-08 17:40 - 00000000 ____D C:\Program Files (x86)\HP

2013-12-08 17:40 - 2013-12-08 17:40 - 00000057 _____ C:\ProgramData\Ament.ini

2013-12-08 17:40 - 2013-12-08 17:40 - 00000000 ____D C:\ProgramData\HP

2013-12-08 17:40 - 2013-12-08 17:40 - 00000000 ____D C:\Program Files\HP

2013-12-08 17:40 - 2013-12-07 22:16 - 00084984 _____ C:\Users\Denis\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-08 17:38 - 2013-12-08 17:38 - 00000000 ____D C:\Users\Denis\AppData\Roaming\WinRAR

2013-12-08 17:38 - 2013-12-08 17:38 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-08 17:38 - 2013-12-08 17:38 - 00000000 ____D C:\Program Files\WinRAR

2013-12-08 17:30 - 2013-12-08 17:30 - 00000000 ____D C:\Users\Denis\Documents\Flashutensilien

2013-12-08 17:29 - 2013-12-08 17:29 - 00001115 _____ C:\Users\Denis\Desktop\Dokumente.lnk

2013-12-08 17:28 - 2013-12-08 17:28 - 00000543 _____ C:\Users\Denis\Desktop\Windows 7 und Programme (C).lnk

2013-12-08 17:28 - 2013-12-08 17:28 - 00000513 _____ C:\Users\Denis\Desktop\Externe Julia&Denis (F).lnk

2013-12-08 17:02 - 2013-12-08 17:02 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Macromedia

2013-12-08 17:02 - 2013-12-08 17:02 - 00000000 ____D C:\Users\Denis\AppData\Local\Macromedia

2013-12-08 16:54 - 2013-12-08 16:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-12-08 16:54 - 2013-12-08 16:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-12-08 16:54 - 2013-12-08 16:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-12-08 16:54 - 2013-12-08 16:54 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2013-12-08 16:54 - 2013-12-08 16:54 - 00000000 ____D C:\Windows\system32\Macromed

2013-12-08 15:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-08 11:45 - 2013-12-08 11:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services

2013-12-08 11:44 - 2013-12-08 11:44 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2013-12-08 11:44 - 2013-12-08 11:44 - 00000000 ____D C:\Windows\PCHEALTH

2013-12-08 11:44 - 2013-12-08 11:44 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-12-08 11:44 - 2013-12-08 11:42 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2013-12-08 11:44 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-12-08 11:43 - 2013-12-08 11:43 - 00000000 ____D C:\Program Files\Microsoft Office

2013-12-08 11:43 - 2013-12-08 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services

2013-12-08 11:43 - 2010-11-21 08:00 - 00000000 ____D C:\Windows\ShellNew

2013-12-08 11:42 - 2013-12-08 11:42 - 00000000 __RHD C:\MSOCache

2013-12-08 11:42 - 2013-12-08 11:42 - 00000000 ____D C:\Users\Denis\AppData\Local\Microsoft Help

2013-12-08 11:33 - 2013-12-08 11:33 - 00002772 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC

2013-12-08 11:33 - 2013-12-08 11:33 - 00001291 _____ C:\Users\Denis\Desktop\Revo Uninstaller.lnk

2013-12-08 11:33 - 2013-12-08 11:33 - 00001136 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-08 11:33 - 2013-12-08 11:33 - 00000845 _____ C:\Users\Public\Desktop\CCleaner.lnk

2013-12-08 11:33 - 2013-12-08 11:33 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-08 11:33 - 2013-12-08 11:33 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2013-12-08 11:33 - 2013-12-08 11:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-08 11:33 - 2013-12-08 11:32 - 00000000 ____D C:\Program Files\CCleaner

2013-12-08 01:28 - 2013-12-07 23:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-12-08 01:27 - 2013-12-08 01:27 - 00001741 _____ C:\Users\Denis\Desktop\Google Drive.lnk

2013-12-08 01:27 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-08 01:24 - 2013-12-08 00:51 - 00000000 ____D C:\Users\Denis\AppData\Local\Google

2013-12-08 01:24 - 2013-12-08 00:51 - 00000000 ____D C:\Program Files (x86)\Google

2013-12-08 01:22 - 2013-12-08 00:23 - 01591896 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-12-08 01:22 - 2013-12-07 23:41 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-12-08 01:02 - 2013-12-08 01:02 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security

2013-12-08 01:01 - 2013-12-08 01:01 - 00000000 ____D C:\Users\Denis\Documents\Symantec

2013-12-08 01:01 - 2013-12-08 01:00 - 00000000 ____D C:\ProgramData\Norton

2013-12-08 01:00 - 2013-12-08 01:00 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2013-12-08 01:00 - 2013-12-08 01:00 - 00008222 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2013-12-08 01:00 - 2013-12-08 01:00 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration

2013-12-08 01:00 - 2013-12-08 01:00 - 00002600 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk

2013-12-08 01:00 - 2013-12-08 01:00 - 00000000 ____D C:\Windows\system32\Drivers\NISx64

2013-12-08 01:00 - 2013-12-08 01:00 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared

2013-12-08 01:00 - 2013-12-08 01:00 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Users\Denis\AppData\Roaming\Mozilla

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Users\Denis\AppData\Local\Mozilla

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\ProgramData\Mozilla

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-12-08 00:55 - 2013-12-08 00:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\Denis\AppData\Local\Deployment

2013-12-08 00:51 - 2013-12-08 00:51 - 00000000 ____D C:\Users\Denis\AppData\Local\Apps\2.0

2013-12-08 00:47 - 2013-12-08 00:47 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003092 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe

2013-12-08 00:47 - 2013-12-08 00:47 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center

2013-12-08 00:40 - 2013-12-07 21:36 - 00000000 ____D C:\Users\Denis\AppData\Local\VirtualStore

2013-12-08 00:39 - 2013-12-08 00:39 - 00003536 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask

2013-12-08 00:39 - 2013-12-07 21:36 - 00001436 _____ C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-08 00:39 - 2013-12-07 21:36 - 00000000 ___RD C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-12-08 00:35 - 2010-11-21 08:01 - 00000000 ____D C:\Program Files\Windows Journal

2013-12-08 00:35 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender

2013-12-08 00:35 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2013-12-08 00:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK

2013-12-08 00:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR

2013-12-08 00:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\zh-HK

2013-12-08 00:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR

2013-12-08 00:35 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-12-08 00:35 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System

2013-12-08 00:07 - 2013-12-08 00:07 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-08 00:07 - 2013-12-08 00:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-08 00:07 - 2013-12-08 00:07 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-08 00:07 - 2013-12-08 00:07 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-08 00:07 - 2013-12-08 00:07 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-12-08 00:07 - 2013-12-08 00:07 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-08 00:07 - 2013-12-08 00:07 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-08 00:07 - 2013-12-08 00:07 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-12-08 00:07 - 2013-12-08 00:07 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-08 00:07 - 2013-12-08 00:07 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-12-08 00:07 - 2013-12-08 00:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-12-08 00:07 - 2013-12-08 00:07 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-12-08 00:07 - 2013-12-08 00:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-07 22:54 - 2013-12-07 22:53 - 00000000 ____D C:\Windows\system32\MRT

2013-12-07 22:24 - 2013-12-07 22:24 - 00000000 ____D C:\Users\Denis\AppData\Local\WindowsUpdate

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Users\Denis\AppData\Roaming\ATI

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Users\Denis\AppData\Local\ATI

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Users\Denis\AppData\Local\AMD

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\ProgramData\ATI

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Program Files (x86)\AMD AVT

2013-12-07 22:16 - 2013-12-07 22:16 - 00000000 ____D C:\Program Files (x86)\AMD APP

2013-12-07 22:16 - 2013-12-07 22:15 - 00000000 ____D C:\ProgramData\AMD

2013-12-07 22:15 - 2013-12-07 22:15 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies

2013-12-07 22:15 - 2013-12-07 22:15 - 00000000 ____D C:\Program Files (x86)\ATI Technologies

2013-12-07 22:15 - 2013-12-07 21:52 - 00000000 ____D C:\Program Files\ATI Technologies

2013-12-07 21:52 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries

2013-12-07 21:49 - 2013-12-07 21:49 - 00002727 _____ C:\Windows\system32\RaCoInst.log

2013-12-07 21:49 - 2013-12-07 21:49 - 00000000 ____D C:\ProgramData\RalinkRT2870 Driver

2013-12-07 21:49 - 2013-12-07 21:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-12-07 21:47 - 2013-12-07 21:40 - 00032066 _____ C:\Windows\Ascd_log.ini

2013-12-07 21:42 - 2013-12-07 21:42 - 00000000 ____D C:\Program Files (x86)\ASM104xUSB3

2013-12-07 21:41 - 2013-12-07 21:41 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-12-07 21:41 - 2013-12-07 21:41 - 00000000 ____D C:\Program Files\Realtek

2013-12-07 21:41 - 2013-12-07 21:41 - 00000000 ____D C:\Program Files (x86)\Realtek

2013-12-07 21:41 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore

2013-12-07 21:40 - 2013-12-07 21:40 - 00000000 ____D C:\Program Files\ATI

2013-12-07 21:39 - 2013-12-07 21:39 - 00024281 _____ C:\Windows\Ascd_tmp.ini

2013-12-07 21:39 - 2013-12-07 21:39 - 00001769 _____ C:\Windows\Language_trs.ini

2013-12-07 21:36 - 2013-12-07 21:36 - 00000020 ___SH C:\Users\Denis\ntuser.ini

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Vorlagen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Startmenü

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Netzwerkumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Lokale Einstellungen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Eigene Dateien

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Druckumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\AppData\Local\Verlauf

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\AppData\Local\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Denis\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Programme

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 _SHDL C:\Dokumente und Einstellungen

2013-12-07 21:36 - 2013-12-07 21:36 - 00000000 __SHD C:\Recovery

2013-12-07 21:36 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default

2013-12-07 21:36 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT

2013-12-07 21:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep

2013-12-07 21:33 - 2013-12-07 21:33 - 00000000 _____ C:\Windows\ativpsrm.bin

2013-12-07 21:32 - 2013-12-07 21:32 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

2013-12-07 21:31 - 2010-11-21 08:00 - 00000000 ____D C:\Windows\CSC

2013-12-07 21:29 - 2009-07-14 06:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG

2013-12-07 21:29 - 2009-07-14 06:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template

2013-11-19 03:33 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 

Some content of TEMP:

====================

C:\Users\Denis\AppData\Local\Temp\amazonicon_v3.exe

C:\Users\Denis\AppData\Local\Temp\amazoninstallernircmdc.exe

C:\Users\Denis\AppData\Local\Temp\fp_pl_pfs_installer.exe

C:\Users\Denis\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe

C:\Users\Denis\AppData\Local\Temp\sdanircmdc.exe

C:\Users\Denis\AppData\Local\Temp\sdapskill.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-08 15:13
 

==================== End Of Log ============================

MBAM

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.12.08.04
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16428

Denis :: DENIS-PC [Administrator]
 

09.12.2013 00:10:22

mbam-log-2013-12-09 (00-10-22).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|F:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 331828

Laufzeit: 24 Minute(n), 4 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

So das waren alle.

Danke schonmal ;)