Trojaner-Board - Win8.1: Firefox: ständige neue Werbefenster und Werbelinks im Text

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Win8.1: Firefox: ständige neue Werbefenster und Werbelinks im Text (https://www.trojaner-board.de/152008-win8-1-firefox-staendige-neue-werbefenster-werbelinks-text.html)

Atinuvian

04.04.2014 17:19

Win8.1: Firefox: ständige neue Werbefenster und Werbelinks im Text

Guten Abend liebes Trojaner-Board!

Ich habe seit ein paar Tagen das Problem, dass mein Browser (Firefox) ständig neue Fenster mit Werbeinhalten öffnet (diverse Browserspiele, RegCleanPro, FlashPlayer-Updates usw.). Außerdem werden auf vielen Seiten Wörter unterstrichen als Links dargestellt, die ebenfalls zu Werbeseiten führen.
Ich benutze das AddOn AdBlock Plus.

Ich hoffe, ihr könnt mir helfen und bedanke mich schonmal im Voraus für eure Mühen!

Ich habe die in der Checkliste angeführten Logs beschafft und die geforderten Scans gemacht.
Leider sind die Dateien so umfangreich, dass ich die FRST, die Addition und die mbam-Logs als zip-Archiv anhängen muss.

defogger

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 16:56 on 04/04/2014 (Vincent)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.
 

Checking for services/drivers...
 
 

-=E.O.F=-

GMER

Code:

GMER 2.1.19357 - hxxp://www.gmer.net

Rootkit scan 2014-04-04 17:17:19

Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000033 Crucial_CT120M500SSD1 rev.MU03 111,79GB

Running: Gmer-19357.exe; Driver: C:\Users\Vincent\AppData\Local\Temp\uxryqkog.sys
 
 

---- Kernel code sections - GMER 2.1 ----
 

.text    C:\Windows\System32\win32k.sys!W32pServiceTable                                                                                                                                fffff9600011ce00 15 bytes [00, FA, 0E, 02, C0, 9C, 70, ...]

.text    C:\Windows\System32\win32k.sys!W32pServiceTable + 16                                                                                                                           fffff9600011ce10 11 bytes [00, 00, FC, FF, 80, FA, C0, ...]
 

---- User code sections - GMER 2.1 ----
 

.text    C:\Windows\system32\nvvsvc.exe[416] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                                                     00007ffb49c3169a 4 bytes [C3, 49, FB, 7F]

.text    C:\Windows\system32\nvvsvc.exe[416] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                                                     00007ffb49c316a2 4 bytes [C3, 49, FB, 7F]

.text    C:\Windows\system32\nvvsvc.exe[416] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 118                                                                                        00007ffb49c3181a 4 bytes [C3, 49, FB, 7F]

.text    C:\Windows\system32\nvvsvc.exe[416] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 142                                                                                        00007ffb49c31832 4 bytes [C3, 49, FB, 7F]

.text    C:\Windows\Explorer.EXE[2616] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                                                                           00007ffb49c3169a 4 bytes [C3, 49, FB, 7F]

.text    C:\Windows\Explorer.EXE[2616] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                                                                           00007ffb49c316a2 4 bytes [C3, 49, FB, 7F]

.text    C:\Windows\Explorer.EXE[2616] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 118                                                                                              00007ffb49c3181a 4 bytes [C3, 49, FB, 7F]

.text    C:\Windows\Explorer.EXE[2616] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 142                                                                                              00007ffb49c31832 4 bytes [C3, 49, FB, 7F]
 

---- Threads - GMER 2.1 ----
 

Thread   C:\Windows\system32\csrss.exe [672:696]                                                                                                                                        fffff960008f94d0

---- Processes - GMER 2.1 ----
 

Process  C:\Users\Vincent\AppData\Local\Genesis\Genesis.exe (*** suspicious ***) @ C:\Users\Vincent\AppData\Local\Genesis\Genesis.exe [3260] (vendaval/petimetre)(2014-04-03 14:25:41)  0000000000400000
 

---- Registry - GMER 2.1 ----
 

Reg      HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData@SystemStartTime                                                                                                              0xE0 0x1C 0xF4 0xE3 ...

Reg      HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData@SystemLastStartTime                                                                                                          0xEB 0x86 0x92 0xC7 ...

Reg      HKLM\SYSTEM\CurrentControlSet\Control\CMF\SqmData\BootLanguages@de-DE                                                                                                          12

Reg      HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\Configuration\HWP265ECND7260D2C_1A_07D7_B9^2C0D74F956A240D5E5F9D5D0B785761B@Timestamp                                    0x86 0xA8 0x5F 0x3D ...

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Lsa@LsaPid                                                                                                                               796

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{5D959964-A195-477C-A200-E6515E892911}\Connection@Name                                    isatap.Speedport_W_724V_Typ_A_05011601_00_065

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager@PendingFileRenameOperations                                                                                              \??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\cleanup.old??\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware??\??\C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.old??

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Executive@UuidSequenceNumber                                                                                             3899991

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                                                                              -1895813957

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters@BootId                                                                              14

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters@BaseTime                                                                            408499664

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power@POSTTime                                                                                                           25452

Reg      HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server@InstanceID                                                                                                               27637958-60c8-4482-bf10-cd21962

Reg      HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\AITEventLog@FileCounter                                                                                                   2

Reg      HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\SQMLogger@FileCounter                                                                                                     4

Reg      HKLM\SYSTEM\CurrentControlSet\Control\WMI\Autologger\WdiContextLog@FileCounter                                                                                                 2

Reg      HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters\Probe\{8fb628af-7e40-48ff-aebd-e9d08d313722}@LastProbeTime                                                          1396618067

Reg      HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{5D959964-A195-477C-A200-E6515E892911}@ReusableType                                                          0

Reg      HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{5D959964-A195-477C-A200-E6515E892911}@DefunctTimestamp                                                      0x2F 0x97 0x3E 0x53 ...

Reg      HKLM\SYSTEM\CurrentControlSet\Services\rdyboost\Parameters@LastBootPlanUserTime                                                                                                ?Fr?, ?Apr ?04 ?14, 01:28:34???????????????????????????????????

Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch                                                                                                                946

Reg      HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch                                                                                                               73

Reg      HKLM\SYSTEM\CurrentControlSet\Services\srvnet\Parameters@MajorSequence                                                                                                         12

Reg      HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C9BB1CDF-E6E2-4E38-9AEC-F1D7C165C1F1}@LeaseObtainedTime                                                    1396610867

Reg      HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C9BB1CDF-E6E2-4E38-9AEC-F1D7C165C1F1}@T1                                                                   1397518067

Reg      HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C9BB1CDF-E6E2-4E38-9AEC-F1D7C165C1F1}@T2                                                                   1398198467

Reg      HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C9BB1CDF-E6E2-4E38-9AEC-F1D7C165C1F1}@LeaseTerminatesTime                                                  1398425267

Reg      HKLM\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters\Interfaces\{C9BB1CDF-E6E2-4E38-9AEC-F1D7C165C1F1}@Dhcpv6InformationObtainedTime                                       1396610867

Reg      HKLM\SYSTEM\CurrentControlSet\Services\Winmgmt\Parameters@ServiceDllUnloadOnStop                                                                                               0

Reg      HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shutdown@CleanShutdown                                                                                                 1

Reg      HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce@Report                                                                                                                  C:\AdwCleaner\AdwCleaner[S0].txt

Reg      HKCU\Software\Microsoft\Windows\Windows Error Reporting@LastQueueNoPesterTime                                                                                                  0x37 0x95 0xC9 0x63 ...
 

---- EOF - GMER 2.1 ----

cosinus

04.04.2014 17:41

Hi,

Logs bitte nicht in den Anhang packen. Notfalls verteilt über mehrere Beiträge posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Atinuvian

04.04.2014 17:51

Alles klar, entschuldige bitte. Ich poste sie dann nochmal in Code-Form.

Die FRST-Datei ist leider alleine schon über 150.000 Zeichen, soll ich die dann auf 2 Beiträge aufteilen?

FRST-Addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014

Ran by Vincent at 2014-04-04 16:58:51

Running from C:\Users\Vincent\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
 

==================== Installed Programs ======================
 

Additional Offer (HKLM-x32\...\{4FFDD113-2C3C-453E-845C-D5DD6DB90CEF}_is1) (Version:  - )

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Browser Guard (HKLM-x32\...\Browser Guard) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)

Dawn of War - Soulstorm (HKLM-x32\...\{20533183-D42D-4261-A125-956736FBEA8C}) (Version: 1.00.0000 - THQ)

Dawn of War - Soulstorm (x32 Version: 1.00.0000 - THQ) Hidden

Die Schlacht um Mittelerde(tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version:  - )

Foxtab (HKLM-x32\...\foxtab) (Version:  - FoxTab) <==== ATTENTION

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Genesis (HKCU\...\genesis) (Version:  - )

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden

Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden

Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)

Microsoft Games for Windows - LIVE (HKLM-x32\...\{F112F66E-25CA-42DD-983C-6118EB38F606}) (Version: 3.0.89.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}) (Version: 3.0.19.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

NFS Underground (HKLM-x32\...\{A99968BE-C155-474C-0089-33239DEE1CE2}) (Version:  - )

Norton Internet Security (HKLM-x32\...\NIS) (Version: 20.4.0.40 - Symantec Corporation)

NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden

NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)

ON_OFF Charge 2 B13.1028.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)

ON_OFF Charge 2 B13.1028.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.21.909.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7076 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Warhammer 40,000: Dawn of War – Dark Crusade (HKLM-x32\...\Steam App 4580) (Version:  - Relic Entertainment)

Warhammer 40,000: Dawn of War - Game of the Year Edition (HKLM-x32\...\Steam App 4570) (Version:  - Relic Entertainment)

Warhammer 40,000: Dawn of War – Winter Assault (HKLM-x32\...\Steam App 9310) (Version:  - Relic Entertainment)
 

==================== Restore Points  =========================
 

28-03-2014 11:48:26 Windows Modules Installer

03-04-2014 14:25:49 Uniblue SpeedUpMyPC installation
 

==================== Hosts content: ==========================
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {5087AC0D-9866-41DD-8064-81ACA4C2DCEE} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {530BD7EF-1B9E-49D4-852B-74886DC818F5} - \FoxTab No Task File

Task: {54367674-17FE-4260-B888-3282A9CF82B2} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9E03B1D9-AE33-4231-BDE8-0E8CBFD949E4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-03] (Adobe Systems Incorporated)

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {A38CB3FB-8A53-4E6C-BEF5-ECE82C0DF922} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-02-04] (Microsoft Corporation)

Task: {A7CAADFF-D711-48B8-AF2F-F9A63933652A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D2DA2CCE-DAFC-4048-866D-71538F02111D} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-03-27 17:46 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-31 19:11 - 2014-03-31 19:11 - 01459712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.UI\3363e49b745a5ddf1aaf80b18c175191\Windows.UI.ni.dll

2014-04-03 16:29 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll

2014-04-03 16:23 - 2014-03-15 10:40 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2014-04-03 16:29 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\wincfi39.dll

2014-03-27 17:11 - 2013-09-16 13:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/04/2014 04:41:22 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 03:44:48 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 03:30:11 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 03:13:15 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 02:54:28 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 02:40:57 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 02:36:50 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 01:28:06 PM) (Source: Steam Client Service) (User: )

Description: Error: Failed to poke open firewall
 

Error: (04/04/2014 01:26:48 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 00:40:03 PM) (Source: Steam Client Service) (User: )

Description: Error: Failed to poke open firewall
 
 

System errors:

=============

Error: (04/04/2014 04:41:59 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Service Component of VO" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (04/03/2014 10:53:58 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (04/03/2014 10:53:58 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
 

Error: (04/03/2014 10:47:01 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (04/03/2014 10:47:01 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
 

Error: (04/03/2014 06:04:56 PM) (Source: DCOM) (User: Vincents-PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (04/03/2014 06:04:26 PM) (Source: DCOM) (User: Vincents-PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (04/03/2014 05:22:45 PM) (Source: Service Control Manager) (User: )

Description: Dienst "Computer Backup (MyPC Backup)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/03/2014 04:42:19 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "MgAssist Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
 

Error: (04/03/2014 04:18:44 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 40. Der Windows-SChannel-Fehlerstatus lautet: 252.
 
 

Microsoft Office Sessions:

=========================

Error: (04/04/2014 04:41:22 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 03:44:48 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 03:30:11 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 03:13:15 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 02:54:28 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 02:40:57 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 02:36:50 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 01:28:06 PM) (Source: Steam Client Service)(User: )

Description: Failed to poke open firewall
 

Error: (04/04/2014 01:26:48 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 00:40:03 PM) (Source: Steam Client Service)(User: )

Description: Failed to poke open firewall

Mbam-Log 3.4.2014

Code:

<?xml version="1.0" encoding="UTF-16"?>
 

-<mbam-log>
 
 

-<header>
 

<date>2014/04/03 17:34:30 +0200</date>
 

<log>mbam-log-2014-04-03 (17-31-50).xml</log>
 

<isadmin>yes</isadmin>
 

</header>
 
 

-<engine>
 

<version>2.00.0.1000</version>
 

<rules-database>v2014.04.03.04</rules-database>
 

<swissarmy-database>v2014.03.27.01</swissarmy-database>
 

<license>free</license>
 

<file-protection>disabled</file-protection>
 

<web-protection>disabled</web-protection>
 

<self-protection>disabled</self-protection>
 

</engine>
 
 

-<system>
 

<osversion>Windows 8.1</osversion>
 

<arch>x64</arch>
 

<username>Vincent</username>
 

<filesys>NTFS</filesys>
 

</system>
 
 

-<summary>
 

<type>threat</type>
 

<result>completed</result>
 

<objects>233657</objects>
 

<time>159</time>
 

<processes>0</processes>
 

<modules>0</modules>
 

<keys>0</keys>
 

<values>0</values>
 

<datas>0</datas>
 

<folders>10</folders>
 

<files>10</files>
 

<sectors>0</sectors>
 

</summary>
 
 

-<options>
 

<memory>enabled</memory>
 

<startup>enabled</startup>
 

<filesystem>enabled</filesystem>
 

<archives>enabled</archives>
 

<rootkits>disabled</rootkits>
 

<deeprootkit>disabled</deeprootkit>
 

<shuriken>enabled</shuriken>
 

<pup>enabled</pup>
 

<pum>enabled</pum>
 

</options>
 
 

-<items>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\systweak\RegClean Pro</path>
 

<vendor>PUP.Optional.RegCleanerPro.A</vendor>
 

<action>success</action>
 

<hash>be3293928ceffb3b6d70ed6627db8b75</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\systweak\RegClean Pro\Version 6.1</path>
 

<vendor>PUP.Optional.RegCleanerPro.A</vendor>
 

<action>success</action>
 

<hash>be3293928ceffb3b6d70ed6627db8b75</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin</path>
 

<vendor>PUP.Optional.SearchProtect.A</vendor>
 

<action>success</action>
 

<hash>fef202237dfe8da9d632371ebf43f709</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\PricePeep</path>
 

<vendor>PUP.Optional.PricePeep.A</vendor>
 

<action>success</action>
 

<hash>7d739c89512ad5614311163ffa08817f</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\ProgramData\IePluginService</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>success</action>
 

<hash>f5fb978ec4b74fe7be7369ed857dd927</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\ProgramData\IePluginService\update</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>success</action>
 

<hash>f5fb978ec4b74fe7be7369ed857dd927</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\View-Password Corp</path>
 

<vendor>PUP.Optional.ViewPassword.A</vendor>
 

<action>success</action>
 

<hash>a74974b13c3f96a086ac3723ab57e020</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\webssearches</path>
 

<vendor>PUP.Optional.WebsSearches.A</vendor>
 

<action>success</action>
 

<hash>30c071b4d8a357dfafbdbc9edb27f40c</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\webssearches\images</path>
 

<vendor>PUP.Optional.WebsSearches.A</vendor>
 

<action>success</action>
 

<hash>30c071b4d8a357dfafbdbc9edb27f40c</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\Freeven Pro 1.3</path>
 

<vendor>PUP.Optional.Feven.A</vendor>
 

<action>success</action>
 

<hash>6789998c4833aa8c7f7397c3ee147e82</hash>
 

</folder>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\ICReinstall_nsl391.tmp</path>
 

<vendor>PUP.Optional.InstallCore</vendor>
 

<action>success</action>
 

<hash>15dbec3998e357dfcdf312f61de723dd</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\nsl391.tmp</path>
 

<vendor>PUP.Optional.InstallCore</vendor>
 

<action>success</action>
 

<hash>5e92c362b7c461d51fa1b2565fa522de</hash>
 

</file>
 
 

-<file>
 

<path>C:\ProgramData\WPM\wprotectmanager.exe</path>
 

<vendor>PUP.Optional.WpManager.A</vendor>
 

<action>success</action>
 

<hash>cf2126ff87f4f93da2e04251669d4bb5</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\systweak\RegClean Pro\Version 6.1\log_04-03-2014.log</path>
 

<vendor>PUP.Optional.RegCleanerPro.A</vendor>
 

<action>success</action>
 

<hash>be3293928ceffb3b6d70ed6627db8b75</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll</path>
 

<vendor>PUP.Optional.SearchProtect.A</vendor>
 

<action>success</action>
 

<hash>fef202237dfe8da9d632371ebf43f709</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\PricePeep\PricePeepUpdater.exe</path>
 

<vendor>PUP.Optional.PricePeep.A</vendor>
 

<action>success</action>
 

<hash>7d739c89512ad5614311163ffa08817f</hash>
 

</file>
 
 

-<file>
 

<path>C:\ProgramData\IePluginService\PluginService.exe</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>success</action>
 

<hash>f5fb978ec4b74fe7be7369ed857dd927</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\View-Password Corp\ViewPassword158.dll</path>
 

<vendor>PUP.Optional.ViewPassword.A</vendor>
 

<action>success</action>
 

<hash>a74974b13c3f96a086ac3723ab57e020</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\View-Password Corp\ViewPassword158.exe</path>
 

<vendor>PUP.Optional.ViewPassword.A</vendor>
 

<action>success</action>
 

<hash>a74974b13c3f96a086ac3723ab57e020</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\View-Password Corp\ViewPassword_wd.exe</path>
 

<vendor>PUP.Optional.ViewPassword.A</vendor>
 

<action>success</action>
 

<hash>a74974b13c3f96a086ac3723ab57e020</hash>
 

</file>
 

</items>
 

</mbam-log>

Mbam-Log 4.4.2014

Code:

<?xml version="1.0" encoding="UTF-16"?>
 

-<mbam-log>
 
 

-<header>
 

<date>2014/04/04 13:26:26 +0200</date>
 

<log>mbam-log-2014-04-04 (13-23-41).xml</log>
 

<isadmin>yes</isadmin>
 

</header>
 
 

-<engine>
 

<version>2.00.0.1000</version>
 

<rules-database>v2014.04.04.02</rules-database>
 

<swissarmy-database>v2014.03.27.01</swissarmy-database>
 

<license>free</license>
 

<file-protection>disabled</file-protection>
 

<web-protection>disabled</web-protection>
 

<self-protection>disabled</self-protection>
 

</engine>
 
 

-<system>
 

<osversion>Windows 8.1</osversion>
 

<arch>x64</arch>
 

<username>Vincent</username>
 

<filesys>NTFS</filesys>
 

</system>
 
 

-<summary>
 

<type>threat</type>
 

<result>completed</result>
 

<objects>234952</objects>
 

<time>155</time>
 

<processes>1</processes>
 

<modules>0</modules>
 

<keys>11</keys>
 

<values>1</values>
 

<datas>8</datas>
 

<folders>57</folders>
 

<files>174</files>
 

<sectors>0</sectors>
 

</summary>
 
 

-<options>
 

<memory>enabled</memory>
 

<startup>enabled</startup>
 

<filesystem>enabled</filesystem>
 

<archives>enabled</archives>
 

<rootkits>disabled</rootkits>
 

<deeprootkit>disabled</deeprootkit>
 

<shuriken>enabled</shuriken>
 

<pup>enabled</pup>
 

<pum>enabled</pum>
 

</options>
 
 

-<items>
 
 

-<process>
 

<path>C:\ProgramData\IePluginService\PluginService.exe</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>delete-on-reboot</action>
 

<pid>5400</pid>
 

<hash>81d11f072d4ec373cf059db118e923dd</hash>
 

</process>
 
 

-<key>
 

<path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IePluginService</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>success</action>
 

<hash>81d11f072d4ec373cf059db118e923dd</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>ee646fb7017a35017da1ab61e02224dc</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>ee646fb7017a35017da1ab61e02224dc</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>ee646fb7017a35017da1ab61e02224dc</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>ee646fb7017a35017da1ab61e02224dc</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>ee646fb7017a35017da1ab61e02224dc</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>ee646fb7017a35017da1ab61e02224dc</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path>
 

<vendor>PUP.Optional.Qone8</vendor>
 

<action>success</action>
 

<hash>c88a6db97407d561c568226dce35936d</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\WOW6432NODE\qone8Software</path>
 

<vendor>PUP.Optional.Qone8.A</vendor>
 

<action>success</action>
 

<hash>b999e2447a01f64029aff59859aacf31</hash>
 

</key>
 
 

-<key>
 

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path>
 

<vendor>PUP.Optional.Qone8</vendor>
 

<action>success</action>
 

<hash>025078ae611a81b550dd0d82b94a7b85</hash>
 

</key>
 
 

-<key>
 

<path>HKU\S-1-5-21-3470804408-3089260794-795954559-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}</path>
 

<vendor>PUP.Optional.Qone8</vendor>
 

<action>success</action>
 

<hash>ec6670b6671463d3f339d5ba857edf21</hash>
 

</key>
 
 

-<value>
 

<path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path>
 

<valuename>quick_start@gmail.com</valuename>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<valuedata>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com</valuedata>
 

<hash>81d14bdb85f65bdb339572ee56ac6d93</hash>
 

</value>
 
 

-<data>
 

<path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path>
 

<valuename>Default_Page_URL</valuename>
 

<vendor>Hijack.StartPage</vendor>
 

<action>replaced</action>
 

<valuedata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</valuedata>
 

<baddata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</baddata>
 

<gooddata>hxxp://www.google.com</gooddata>
 

<hash>56fc7ea8e794e74fe024eb1f818324dc</hash>
 

</data>
 
 

-<data>
 

<path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path>
 

<valuename>Start Page</valuename>
 

<vendor>Hijack.StartPage</vendor>
 

<action>replaced</action>
 

<valuedata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</valuedata>
 

<baddata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</baddata>
 

<gooddata>hxxp://www.google.com</gooddata>
 

<hash>d2807ea82d4ec47262a0808a5ba941bf</hash>
 

</data>
 
 

-<data>
 

<path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path>
 

<valuename>DefaultScope</valuename>
 

<vendor>PUP.Optional.Qone8</vendor>
 

<action>replaced</action>
 

<valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata>
 

<baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata>
 

<gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata>
 

<hash>2230e3430e6d73c3dcc44ec5f01401ff</hash>
 

</data>
 
 

-<data>
 

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN</path>
 

<valuename>Default_Page_URL</valuename>
 

<vendor>Hijack.StartPage</vendor>
 

<action>replaced</action>
 

<valuedata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</valuedata>
 

<baddata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</baddata>
 

<gooddata>hxxp://www.google.com</gooddata>
 

<hash>2032d74fafcc171fd72db15905ff4db3</hash>
 

</data>
 
 

-<data>
 

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN</path>
 

<valuename>Start Page</valuename>
 

<vendor>Hijack.StartPage</vendor>
 

<action>replaced</action>
 

<valuedata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</valuedata>
 

<baddata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</baddata>
 

<gooddata>hxxp://www.google.com</gooddata>
 

<hash>064cca5c473487af2ad849c1c1438c74</hash>
 

</data>
 
 

-<data>
 

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES</path>
 

<valuename>DefaultScope</valuename>
 

<vendor>PUP.Optional.Qone8</vendor>
 

<action>replaced</action>
 

<valuedata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</valuedata>
 

<baddata>{33BB0A4E-99AF-4226-BDF6-49120163DE86}</baddata>
 

<gooddata>{0633EE93-D776-472f-A0FF-E1416B8B2E3A}</gooddata>
 

<hash>e96947df512ac274861a2ae9a460c13f</hash>
 

</data>
 
 

-<data>
 

<path>HKU\S-1-5-21-3470804408-3089260794-795954559-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path>
 

<valuename>Start Page</valuename>
 

<vendor>Hijack.StartPage</vendor>
 

<action>replaced</action>
 

<valuedata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</valuedata>
 

<baddata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</baddata>
 

<gooddata>hxxp://www.google.com</gooddata>
 

<hash>470b77afa5d661d57c877793ba4a30d0</hash>
 

</data>
 
 

-<data>
 

<path>HKU\S-1-5-21-3470804408-3089260794-795954559-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path>
 

<valuename>Default_Page_URL</valuename>
 

<vendor>Hijack.StartPage</vendor>
 

<action>replaced</action>
 

<valuedata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</valuedata>
 

<baddata>hxxp://start.qone8.com/?type=hp&ts=1396557813&from=sfpsnew2&uid=CrucialXCT120M500SSD1_14060967417D0967417D</baddata>
 

<gooddata>hxxp://www.google.com</gooddata>
 

<hash>9bb7ba6ce2993600ea1b7d8d3cc8ca36</hash>
 

</data>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\img</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\img\weather</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\en-US</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\es-419</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\es-ES</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-BE</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-CA</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-CH</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-FR</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-LU</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\it-CH</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\it-IT</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\pl</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\pt-BR</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\ru</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\ru-MO</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\tr-TR</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\vi-VI</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\zh-CN</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\zh-TW</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\ProgramData\IePluginService</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>delete-on-reboot</action>
 

<hash>d979939392e9a690b7d0a5b1e31fb050</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\ProgramData\IePluginService\update</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>success</action>
 

<hash>d979939392e9a690b7d0a5b1e31fb050</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\include</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\include\tools</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\en</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\en-US</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\es</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\es-419</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\it</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\it-CH</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\pl</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\ru</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\tr</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\vi</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\defaults</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\defaults\preferences</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<folder>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</folder>
 
 

-<file>
 

<path>C:\ProgramData\IePluginService\PluginService.exe</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>delete-on-reboot</action>
 

<hash>81d11f072d4ec373cf059db118e923dd</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\SupTab.dll</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>ee646fb7017a35017da1ab61e02224dc</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\SupTab\SupTab.dll</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>7ed4df47a6d55dd98bbf75c056aa5aa6</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\CSME5D5.tmp</path>
 

<vendor>PUP.Optional.RelevantKnowledge</vendor>
 

<action>success</action>
 

<hash>86cc2cfae49766d0bf4afd1ce51f20e0</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\fullpackage_temp1396557808\alilog.dll</path>
 

<vendor>PUP.Optional.SkyTech.A</vendor>
 

<action>success</action>
 

<hash>0f4336f0700bac8a050d042e7a8640c0</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\fullpackage_temp1396557808\package1.zip</path>
 

<vendor>PUP.Optional.SkyTech.A</vendor>
 

<action>success</action>
 

<hash>1c360e184e2d5dd9030faa8824dc0df3</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\fullpackage_temp1396557808\tmp\SupTab.exe</path>
 

<vendor>PUP.Optional.IePluginService.A</vendor>
 

<action>success</action>
 

<hash>351d78ae35460f278d47f75724dd41bf</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\fullpackage_temp1396557808\tmp\wpm.exe</path>
 

<vendor>PUP.Optional.WpManager</vendor>
 

<action>success</action>
 

<hash>78dad1559fdc3ff72bdfb3a6fd04ef11</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\is-S65R7.tmp\rkinstaller.exe</path>
 

<vendor>PUP.Optional.RelevantKnowledge</vendor>
 

<action>success</action>
 

<hash>7fd38a9c54279b9b8367c75dc73d0bf5</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\is-S65R7.tmp\rkverify.exe</path>
 

<vendor>PUP.Optional.RelevantKnowledge</vendor>
 

<action>success</action>
 

<hash>7cd644e27dfe24128a7d5dbcc341dc24</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\nsj91F6.tmp\226.exe</path>
 

<vendor>Trojan.Sctmp</vendor>
 

<action>success</action>
 

<hash>7fd3899d64177db957e69bca39c86e92</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\nsj91F6.tmp\Launcher.exe</path>
 

<vendor>PUP.Optional.Amonetize.A</vendor>
 

<action>success</action>
 

<hash>143eb47223589e980257300cf709d32d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\nsj91F6.tmp\sfpsnew2_qone8.exe</path>
 

<vendor>PUP.Optional.SkyTech.A</vendor>
 

<action>success</action>
 

<hash>88ca39ed710a0b2b645090be24dda25e</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Local\Temp\nsj91F6.tmp\SimpleInstaller.exe</path>
 

<vendor>PUP.Optional.Linkular</vendor>
 

<action>success</action>
 

<hash>73df949212692412b44de855768ac43c</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\Downloads\setup.exe</path>
 

<vendor>PUP.Optional.Linkular</vendor>
 

<action>success</action>
 

<hash>f35fe2442b50a88ed36100a9da291ae6</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\install.data</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\uninstall.exe</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\WebDataJs</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\data.html</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\indexIE.html</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\indexIE8.html</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\main.css</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\ver.txt</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\arrow.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\default_add_logo.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\default_add_logo_hover.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\default_logo.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\googlelogo.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\googlelogo2.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\google_trends.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\icon128.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\icon16.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\icon48.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\loading.gif</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\logo32.ico</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\search.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\sliders.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\img\weather\0.png</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\common.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\ga.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\ie8.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\jquery-1.11.0.min.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\js.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\library.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\js\xagainit.js</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json</path>
 

<vendor>PUP.Optional.SupTab.A</vendor>
 

<action>success</action>
 

<hash>4c06d84eee8d5adcd40011589d6551af</hash>
 

</file>
 
 

-<file>
 

<path>C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\qone8.xml</path>
 

<vendor>PUP.Optional.Qone8.A</vendor>
 

<action>success</action>
 

<hash>1e34b3733e3def47e3f44548db28a060</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome.manifest</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\install.rdf</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\index.html</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\quick_start.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\quick_start.xul</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\include\speed_dial.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\include\tools\about_blank_hook.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\include\tools\misc.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\include\tools\popup_image_helper.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\include\tools\urlrequestor.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\js\common.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\js\ga.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\js\jquery.autocomplete.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\js\js.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\js\library.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\content\js\xagainit.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\en\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\en-US\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\es\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\es-419\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-BE\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-CA\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-CH\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\fr-LU\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\it\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\it-CH\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\pl\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\pt-BR\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\ru\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\ru-MO\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\tr\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\vi\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\zh-CN\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\locale\zh-TW\locale.properties</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\default_add_logo_hover.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\default_logo.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\google_trends.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\icon.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\icon128.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\icon16.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\icon48.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\iconsmall.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\loading.gif</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\logo.ico</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\logo.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\logo32.ico</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\search.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\style.css</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\27.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\0.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\1.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\10.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\11.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\12.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\13.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\14.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\15.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\16.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\17.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\18.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\19.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\2.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\20.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\21.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\22.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\23.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\24.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\25.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\26.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\28.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\29.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\3.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\30.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\31.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\32.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\33.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\34.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\35.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\36.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\37.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\38.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\39.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\4.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\40.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\41.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\42.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\43.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\44.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\45.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\46.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\47.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\5.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\6.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\7.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\8.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\chrome\skin\weather\9.png</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\defaults\preferences\fvd.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\addonmanager.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\aes.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\config.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\dialogs.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\last_tab.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\misc.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\properties.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\remoterequest.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\restoreprefs.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 
 

-<file>
 

<path>C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\extensions\quick_start@gmail.com\modules\settings.js</path>
 

<vendor>PUP.Optional.QuickStart.A</vendor>
 

<action>success</action>
 

<hash>9ab865c1087305317de3015931d1e31d</hash>
 

</file>
 

</items>
 

</mbam-log>

Atinuvian

04.04.2014 17:55

Ich hab sie jetzt im Text aufgeteilt und werde sie in 2 Beiträgen posten.
Die Teilung ist mitten in einem Textabsatz, der zweite Teil beginnt in der Zeile nach dem Ende von TEil 1

FRST 1:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014

Ran by Vincent (administrator) on VINCENTS-PC on 04-04-2014 16:58:37

Running from C:\Users\Vincent\Downloads

Windows 8.1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(petimetre) C:\Users\Vincent\AppData\Local\Genesis\Genesis.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.)

HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\...\Run: [genesis] - c:\users\vincent\appdata\local\genesis\genesis.exe [2658304 2014-04-03] (petimetre)

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\...\MountPoints2: {722c6e8a-b5c0-11e3-824b-806e6f6e6963} - "E:\RunGame.exe" 
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1BBED7B8794ACF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default

FF NewTab: chrome://quick_start/content/index.html

FF Homepage: www.google.de

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-03]

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFF [2014-04-03]

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\ []

FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi

FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi [2014-02-24]

FF HKCU\...\Firefox\Extensions: [{f76c53ac-9074-4195-b0f1-e049c8e6f521}] - C:\Program Files (x86)\View-Password Corp\158.xpi

FF StartMenuInternet: FIREFOX.EXE - firefox.exe
 

==================== Services (Whitelisted) =================
 

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

S2 vosr; C:\Users\Vincent\AppData\Roaming\VOPackage\VOsrv.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20140319.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-04-03] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-04-03] (Symantec Corporation)

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20140403.001\IDSvia64.sys [525016 2014-04-02] (Symantec Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20140403.032\ENG64.SYS [126040 2014-04-03] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20140403.032\EX64.SYS [2099288 2014-04-03] (Symantec Corporation)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)

R3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2013-03-04] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2014-04-03] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-04-04 16:58 - 2014-04-04 16:58 - 00012944 _____ () C:\Users\Vincent\Downloads\FRST.txt

2014-04-04 16:57 - 2014-04-04 16:58 - 00000000 ____D () C:\FRST

2014-04-04 16:56 - 2014-04-04 16:56 - 02157056 _____ (Farbar) C:\Users\Vincent\Downloads\FRST64.exe

2014-04-04 16:55 - 2014-04-04 16:55 - 00000476 _____ () C:\Users\Vincent\Downloads\defogger_disable.log

2014-04-04 16:55 - 2014-04-04 16:55 - 00000000 _____ () C:\Users\Vincent\defogger_reenable

2014-04-04 16:37 - 2014-04-04 16:40 - 00000000 ____D () C:\AdwCleaner

2014-04-04 13:27 - 2014-04-04 16:41 - 00089178 _____ () C:\Windows\PFRO.log

2014-04-03 22:52 - 2014-04-03 22:52 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup(1).exe

2014-04-03 22:52 - 2014-04-03 22:52 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-04-03 22:40 - 2014-04-03 22:40 - 00000000 ____D () C:\Users\Vincent\Neuer Ordner

2014-04-03 22:39 - 2014-04-03 22:39 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup.exe

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2014-04-03 22:26 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2014-04-03 22:26 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2014-04-03 22:26 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2014-04-03 22:26 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2014-04-03 22:26 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2014-04-03 22:26 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2014-04-03 22:26 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2014-04-03 22:26 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2014-04-03 22:26 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2014-04-03 22:26 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2014-04-03 22:26 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2014-04-03 22:26 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2014-04-03 22:26 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2014-04-03 22:26 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2014-04-03 22:26 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2014-04-03 22:26 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2014-04-03 22:26 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2014-04-03 22:26 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2014-04-03 22:26 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2014-04-03 22:26 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2014-04-03 22:26 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2014-04-03 22:26 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2014-04-03 22:26 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2014-04-03 22:26 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2014-04-03 22:26 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2014-04-03 22:26 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2014-04-03 22:26 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2014-04-03 22:26 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2014-04-03 22:26 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2014-04-03 22:26 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2014-04-03 22:26 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2014-04-03 22:26 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2014-04-03 22:26 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2014-04-03 22:26 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2014-04-03 22:26 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2014-04-03 22:26 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2014-04-03 20:24 - 2014-04-04 13:23 - 00000000 ____D () C:\Users\Vincent\Desktop\Games

2014-04-03 20:24 - 2014-04-03 22:37 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-04-03 19:56 - 2014-04-03 19:56 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Macromedia

2014-04-03 19:55 - 2014-04-04 16:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-03 19:55 - 2014-04-03 19:55 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\ProgramData\McAfee

2014-04-03 19:54 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Adobe

2014-04-03 18:12 - 2014-04-04 16:56 - 00000000 ____D () C:\Users\Vincent\Desktop\Security

2014-04-03 18:09 - 2014-04-03 18:09 - 03710504 _____ (Piriform Ltd) C:\Users\Vincent\Downloads\ccsetup412_slim.exe

2014-04-03 18:09 - 2014-04-03 18:09 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-03 18:09 - 2014-04-03 18:09 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-03 17:56 - 2014-04-03 17:56 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-04-03 17:15 - 2014-04-04 13:25 - 00000000 ____D () C:\Users\Vincent\AppData\Local\CrashDumps

2014-04-03 17:11 - 2014-04-04 16:26 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-03 17:11 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-04-03 17:11 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-04-03 17:11 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-04-03 17:10 - 2014-04-03 17:11 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Vincent\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-03 16:59 - 2014-04-03 16:59 - 00000000 ____D () C:\Users\Vincent\Documents\Symantec

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\AppData\Local\cache

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\.android

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 _____ () C:\Users\Vincent\daemonprocess.txt

2014-04-03 16:41 - 2014-04-03 16:41 - 00000044 _____ () C:\Users\Vincent\AppData\Roaming\WB.CFG

2014-04-03 16:41 - 2014-04-03 16:41 - 00000000 ____D () C:\Program Files (x86)\Browser Guard

2014-04-03 16:41 - 2014-04-03 11:08 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\AnyProtectScannerSetup.exe

2014-04-03 16:29 - 2014-04-03 17:53 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-04-03 16:29 - 2014-04-03 16:29 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2014-04-03 16:29 - 2014-04-03 16:29 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\ProgramData\Norton

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security

2014-04-03 16:28 - 2014-04-03 16:28 - 01038704 _____ (Amazon Services LLC) C:\Users\Vincent\Downloads\Norton_Internet_Security_2014_1_PC_Downloader.exe

2014-04-03 16:25 - 2014-04-04 16:56 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Genesis

2014-04-03 16:25 - 2014-04-03 16:25 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\nsv514.tmp

2014-04-03 16:25 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-04-03 16:25 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-04-03 16:23 - 2014-04-04 00:59 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\ProgramData\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-04-03 14:23 - 2014-04-03 14:36 - 00000000 ____D () C:\ProgramData\NFS Underground

2014-04-02 11:57 - 2014-04-02 16:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien

2014-03-30 21:11 - 2014-03-30 21:11 - 00003560 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask

2014-03-30 21:09 - 2014-03-30 21:11 - 00000000 ___RD () C:\Windows\BrowserChoice

2014-03-29 19:15 - 2014-03-29 19:16 - 00000000 ____D () C:\Windows\system32\MRT

2014-03-29 19:15 - 2014-02-04 20:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-03-29 18:48 - 2014-01-08 03:46 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2014-03-29 18:48 - 2014-01-08 03:41 - 01530712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-03-29 18:48 - 2014-01-08 03:41 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2014-03-29 18:48 - 2014-01-04 17:54 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll

2014-03-29 18:48 - 2014-01-04 17:08 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll

2014-03-29 18:48 - 2014-01-04 16:08 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll

2014-03-29 18:48 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll

2014-03-29 18:48 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-03-29 18:48 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-03-29 18:48 - 2014-01-01 03:55 - 01720560 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-03-29 18:48 - 2014-01-01 03:52 - 00481944 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2014-03-29 18:48 - 2014-01-01 02:56 - 01472048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-03-29 18:48 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2014-03-29 18:48 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-03-29 18:48 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2014-03-29 18:48 - 2014-01-01 01:56 - 00960512 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-03-29 18:48 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll

2014-03-29 18:48 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll

2014-03-29 18:48 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll

2014-03-29 18:48 - 2013-12-31 01:31 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2014-03-29 18:48 - 2013-12-31 01:31 - 00914944 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll

2014-03-29 18:48 - 2013-12-27 17:09 - 00419160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-03-29 18:48 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll

2014-03-29 18:48 - 2013-12-27 10:57 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe

2014-03-29 18:48 - 2013-12-27 10:23 - 00749056 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll

2014-03-29 18:48 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll

2014-03-29 18:48 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe

2014-03-29 18:48 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll

2014-03-29 18:48 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll

2014-03-29 18:48 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys

2014-03-29 18:48 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-03-29 18:48 - 2013-12-14 08:19 - 18576384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-03-29 18:48 - 2013-12-13 12:54 - 00131160 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe

2014-03-29 18:48 - 2013-12-13 08:36 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll

2014-03-29 18:48 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll

2014-03-29 18:48 - 2013-12-09 10:05 - 21199256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-03-29 18:48 - 2013-12-09 06:51 - 18643560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-03-29 18:48 - 2013-09-26 08:34 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll

2014-03-29 18:48 - 2013-09-26 08:34 - 00515072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll

2014-03-29 18:47 - 2013-10-23 13:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll

2014-03-29 18:47 - 2013-10-23 13:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-03-29 18:47 - 2013-10-23 13:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll

2014-03-29 18:47 - 2013-10-22 09:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-03-29 18:47 - 2013-10-22 08:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-03-29 18:47 - 2013-10-22 07:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2014-03-29 18:47 - 2013-10-22 06:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll

2014-03-29 18:47 - 2013-10-22 05:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-03-29 18:47 - 2013-10-22 05:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-03-29 18:47 - 2013-10-22 04:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-03-29 18:47 - 2013-10-22 04:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-03-29 18:47 - 2013-10-22 04:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-03-29 18:47 - 2013-10-22 03:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-03-29 18:47 - 2013-10-19 06:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2014-03-29 18:47 - 2013-10-19 06:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2014-03-29 18:47 - 2013-10-19 05:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-03-29 18:47 - 2013-10-19 05:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-03-29 18:47 - 2013-10-16 11:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe

2014-03-29 18:47 - 2013-10-16 11:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe

2014-03-29 18:47 - 2013-10-13 05:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys

2014-03-29 18:47 - 2013-10-13 04:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll

2014-03-29 18:47 - 2013-10-10 18:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-03-29 18:47 - 2013-10-10 18:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-03-29 18:47 - 2013-10-10 16:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-03-29 18:47 - 2013-10-10 16:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-03-29 18:47 - 2013-10-10 13:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-03-29 18:47 - 2013-10-08 12:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys

2014-03-29 18:47 - 2013-10-08 08:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll

2014-03-29 18:47 - 2013-10-08 07:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll

2014-03-29 18:47 - 2013-10-08 07:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2014-03-29 18:47 - 2013-10-08 07:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2014-03-29 18:47 - 2013-10-08 07:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2014-03-29 18:47 - 2013-10-08 07:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll

2014-03-29 18:47 - 2013-10-08 06:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-03-29 18:47 - 2013-10-08 06:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll

2014-03-29 18:47 - 2013-10-07 09:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-03-29 18:47 - 2013-10-07 04:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-03-29 18:47 - 2013-10-05 17:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys

2014-03-29 18:47 - 2013-10-05 16:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2014-03-29 18:47 - 2013-10-05 14:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2014-03-29 18:47 - 2013-10-05 13:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-03-29 18:47 - 2013-10-05 11:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-03-29 18:47 - 2013-10-05 11:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-03-29 18:47 - 2013-10-05 11:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll

2014-03-29 18:47 - 2013-10-05 10:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2014-03-29 18:47 - 2013-10-05 10:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll

2014-03-29 18:47 - 2013-10-05 10:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-03-29 18:47 - 2013-10-05 10:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll

2014-03-29 18:47 - 2013-10-05 10:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2014-03-29 18:47 - 2013-10-05 10:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-03-29 18:47 - 2013-10-05 09:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll

2014-03-29 18:47 - 2013-10-05 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2014-03-29 18:47 - 2013-10-04 10:10 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll

2014-03-29 18:47 - 2013-09-19 09:19 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersRes.dll

2014-03-29 18:47 - 2013-09-19 08:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe

2014-03-29 18:47 - 2013-09-19 08:23 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WorkFoldersRes.dll

2014-03-29 18:47 - 2013-09-17 11:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll

2014-03-29 18:47 - 2013-09-17 11:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-03-29 18:47 - 2013-09-17 08:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll

2014-03-29 18:47 - 2013-09-17 08:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-03-29 18:47 - 2013-09-17 06:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll

2014-03-29 18:47 - 2013-09-14 16:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-03-29 18:47 - 2013-09-14 16:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll

2014-03-29 18:47 - 2013-09-14 14:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-03-29 18:47 - 2013-09-14 14:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll

2014-03-29 18:47 - 2013-09-14 12:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe

2014-03-29 18:47 - 2013-09-14 11:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll

2014-03-29 18:47 - 2013-09-13 10:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe

2014-03-29 18:47 - 2013-09-13 09:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe

2014-03-29 18:47 - 2013-09-12 10:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll

2014-03-29 18:47 - 2013-09-12 10:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll

2014-03-29 18:47 - 2013-09-12 10:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2014-03-29 18:47 - 2013-09-12 10:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll

2014-03-29 18:47 - 2013-09-12 09:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll

2014-03-29 18:47 - 2013-09-12 09:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll

2014-03-29 18:47 - 2013-09-12 09:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll

2014-03-29 18:47 - 2013-09-12 09:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll

2014-03-29 18:47 - 2013-09-12 09:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll

2014-03-29 18:47 - 2013-09-12 09:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll

2014-03-29 18:47 - 2013-09-10 06:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll

2014-03-29 18:45 - 2013-12-09 02:34 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-03-29 18:45 - 2013-12-09 02:04 - 00980480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-03-29 18:45 - 2013-11-27 17:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-03-29 18:45 - 2013-11-27 17:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-03-29 18:45 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-03-29 18:45 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-03-29 18:45 - 2013-11-27 14:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys

2014-03-29 18:45 - 2013-11-27 12:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2014-03-29 18:45 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2014-03-29 18:45 - 2013-11-27 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll

2014-03-29 18:45 - 2013-11-27 11:17 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-03-29 18:45 - 2013-11-27 11:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll

2014-03-29 18:45 - 2013-11-27 10:58 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-03-29 18:45 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll

2014-03-29 18:45 - 2013-11-26 15:20 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2014-03-29 18:45 - 2013-11-26 15:20 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2014-03-29 18:45 - 2013-11-26 13:44 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2014-03-29 18:45 - 2013-11-25 03:45 - 00142680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-03-29 18:45 - 2013-11-25 03:32 - 01119064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-03-29 18:45 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-03-29 18:45 - 2013-11-25 01:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-03-29 18:45 - 2013-11-23 14:47 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll

2014-03-29 18:45 - 2013-11-23 09:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll

2014-03-29 18:45 - 2013-11-23 09:13 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys

2014-03-29 18:45 - 2013-11-23 09:08 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-03-29 18:45 - 2013-11-23 06:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-03-29 18:45 - 2013-11-23 05:19 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-03-29 18:45 - 2013-11-23 05:15 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-03-29 18:45 - 2013-11-21 08:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll

2014-03-29 18:45 - 2013-11-21 08:26 - 01415680 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-03-29 18:45 - 2013-11-15 16:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll

2014-03-29 18:45 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll

2014-03-29 18:45 - 2013-11-15 16:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2014-03-29 18:45 - 2013-11-15 15:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-03-29 18:45 - 2013-10-31 02:29 - 00745336 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-03-29 18:45 - 2013-10-31 01:41 - 00552624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-03-29 18:45 - 2013-09-21 07:20 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-03-29 18:45 - 2013-09-21 07:09 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-03-29 18:43 - 2013-11-08 12:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll

2014-03-29 18:43 - 2013-11-08 05:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2014-03-29 18:43 - 2013-11-04 13:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-03-29 18:43 - 2013-11-04 12:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-03-29 18:43 - 2013-11-04 03:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2014-03-29 18:43 - 2013-10-31 02:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-03-29 18:43 - 2013-10-10 12:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-03-29 18:43 - 2013-10-10 12:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-03-29 18:43 - 2013-10-05 16:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2014-03-29 18:43 - 2013-10-05 16:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-03-29 18:43 - 2013-10-05 14:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2014-03-29 18:43 - 2013-10-05 14:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-03-29 18:42 - 2013-11-11 04:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2014-03-29 18:42 - 2013-11-09 08:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe

2014-03-29 18:42 - 2013-11-09 07:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe

2014-03-29 18:42 - 2013-11-08 06:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2014-03-29 18:42 - 2013-11-08 06:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll

2014-03-29 18:42 - 2013-11-08 06:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2014-03-29 18:42 - 2013-11-08 05:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll

2014-03-29 18:42 - 2013-11-05 16:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll

2014-03-29 18:42 - 2013-11-04 15:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll

2014-03-29 18:42 - 2013-11-04 04:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll

2014-03-29 18:42 - 2013-11-01 13:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2014-03-29 18:42 - 2013-11-01 08:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll

2014-03-29 18:42 - 2013-11-01 07:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll

2014-03-29 18:42 - 2013-10-31 02:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-03-29 18:42 - 2013-10-31 02:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-03-29 18:42 - 2013-10-31 02:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-03-29 18:42 - 2013-10-26 03:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys

2014-03-29 18:42 - 2013-10-24 11:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll

2014-03-29 18:42 - 2013-10-24 11:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll

2014-03-29 18:42 - 2013-10-17 13:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2014-03-29 18:42 - 2013-10-17 12:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2014-03-29 18:42 - 2013-10-10 13:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll

2014-03-29 18:42 - 2013-10-10 13:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll

2014-03-29 18:42 - 2013-09-21 09:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe

2014-03-29 18:41 - 2013-09-25 12:25 - 00783504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll

2014-03-29 18:41 - 2013-09-25 10:58 - 00648648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll

2014-03-29 18:41 - 2013-09-24 07:54 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2014-03-29 18:41 - 2013-09-24 07:10 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2014-03-29 18:41 - 2013-09-24 07:05 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2014-03-29 18:41 - 2013-09-24 05:56 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll

2014-03-29 18:41 - 2013-09-21 14:10 - 00579416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2014-03-29 18:41 - 2013-09-21 14:10 - 00236376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2014-03-29 18:41 - 2013-09-21 14:10 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2014-03-29 18:41 - 2013-09-21 13:50 - 00528048 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2014-03-29 18:41 - 2013-09-21 13:48 - 00534048 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2014-03-29 18:41 - 2013-09-21 13:48 - 00123480 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-03-29 18:41 - 2013-09-21 12:56 - 00101208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-03-29 18:41 - 2013-09-21 12:53 - 01534504 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2014-03-29 18:41 - 2013-09-21 12:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll

2014-03-29 18:41 - 2013-09-21 12:53 - 00366688 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll

2014-03-29 18:41 - 2013-09-21 12:45 - 00171968 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-03-29 18:41 - 2013-09-21 11:23 - 00427096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2014-03-29 18:41 - 2013-09-21 11:23 - 00098104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-03-29 18:41 - 2013-09-21 11:12 - 01092896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2014-03-29 18:41 - 2013-09-21 11:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll

2014-03-29 18:41 - 2013-09-21 11:09 - 00312936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll

2014-03-29 18:41 - 2013-09-21 09:58 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-03-29 18:41 - 2013-09-21 09:57 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-03-29 18:41 - 2013-09-21 09:55 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys

2014-03-29 18:41 - 2013-09-21 09:50 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll

2014-03-29 18:41 - 2013-09-21 08:55 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll

2014-03-29 18:41 - 2013-09-21 08:33 - 11366912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll

2014-03-29 18:41 - 2013-09-21 07:59 - 00940544 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-03-29 18:41 - 2013-09-21 07:57 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\livessp.dll

2014-03-29 18:41 - 2013-09-21 07:56 - 08712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll

2014-03-29 18:41 - 2013-09-21 07:43 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2014-03-29 18:41 - 2013-09-21 07:38 - 00365568 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2014-03-29 18:41 - 2013-09-21 07:34 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2014-03-29 18:41 - 2013-09-21 07:31 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-03-29 18:41 - 2013-09-21 07:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2014-03-29 18:41 - 2013-09-21 07:10 - 12028416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2014-03-29 18:41 - 2013-09-21 07:05 - 08875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2014-03-29 18:41 - 2013-09-21 06:44 - 01662464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2014-03-29 18:41 - 2013-09-21 06:39 - 01455616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2014-03-29 18:41 - 2013-09-21 06:36 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2014-03-29 18:41 - 2013-09-19 08:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx

2014-03-29 18:41 - 2013-09-19 07:08 - 01150976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll

2014-03-29 18:41 - 2013-09-19 07:01 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll

2014-03-29 18:41 - 2013-09-19 06:37 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll

2014-03-29 18:41 - 2013-09-19 06:32 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll

2014-03-29 18:41 - 2013-09-19 06:27 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll

2014-03-29 18:41 - 2013-09-19 06:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll

2014-03-29 18:41 - 2013-09-19 06:11 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll

2014-03-29 18:41 - 2013-09-19 06:10 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2014-03-29 18:41 - 2013-09-19 05:59 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll

2014-03-29 18:41 - 2013-09-19 05:55 - 00552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll

2014-03-29 18:41 - 2013-09-19 05:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2014-03-29 18:41 - 2013-09-19 05:32 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2014-03-29 18:41 - 2013-09-17 11:18 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-03-29 18:41 - 2013-09-17 07:00 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll

2014-03-29 18:41 - 2013-09-13 10:54 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll

2014-03-29 18:41 - 2013-09-13 09:55 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll

2014-03-29 18:41 - 2013-09-12 09:37 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll

2014-03-29 18:41 - 2013-09-07 14:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\fdprint.dll

2014-03-29 18:41 - 2013-09-07 13:07 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\TetheringMgr.dll

2014-03-29 18:41 - 2013-09-04 08:16 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll

2014-03-29 18:41 - 2013-09-04 07:47 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll

2014-03-29 18:41 - 2013-09-04 07:12 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\DscCoreConfProv.dll

2014-03-29 18:41 - 2013-09-04 06:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll

2014-03-29 18:41 - 2013-09-04 06:48 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll

2014-03-29 18:41 - 2013-08-31 16:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2014-03-29 18:41 - 2013-08-31 14:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2014-03-29 18:41 - 2013-08-31 14:04 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll

2014-03-29 18:41 - 2013-08-28 09:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe

2014-03-29 18:41 - 2013-08-27 08:09 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll

2014-03-29 18:40 - 2013-09-26 11:20 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe

2014-03-29 18:40 - 2013-09-26 09:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll

2014-03-29 18:40 - 2013-09-26 09:14 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll

2014-03-29 18:40 - 2013-09-25 09:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll

2014-03-29 18:40 - 2013-09-25 07:40 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll

2014-03-29 18:40 - 2013-09-24 08:55 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe

2014-03-29 18:40 - 2013-09-24 07:59 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe

2014-03-29 18:40 - 2013-09-21 08:01 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll

2014-03-29 18:40 - 2013-09-21 07:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-03-29 18:40 - 2013-09-21 07:02 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll

2014-03-29 18:40 - 2013-09-21 06:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll

2014-03-29 18:40 - 2013-09-21 06:38 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll

2014-03-29 18:40 - 2013-09-21 06:38 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll

2014-03-29 18:40 - 2013-09-21 06:37 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll

2014-03-29 18:40 - 2013-09-19 08:39 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll

2014-03-29 18:40 - 2013-09-19 07:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.dll

2014-03-29 18:40 - 2013-09-19 07:29 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx

2014-03-29 18:40 - 2013-09-19 06:25 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2014-03-29 18:40 - 2013-09-17 08:58 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2014-03-29 18:40 - 2013-09-17 07:26 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2014-03-29 18:40 - 2013-09-17 07:15 - 01225728 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll

2014-03-29 18:40 - 2013-09-17 06:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll

2014-03-29 18:40 - 2013-09-17 06:08 - 00738304 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll

2014-03-29 18:40 - 2013-09-17 05:28 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll

2014-03-29 18:40 - 2013-09-14 16:06 - 00175960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VerifierExt.sys

2014-03-29 18:40 - 2013-09-14 16:06 - 00066904 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL

2014-03-29 18:40 - 2013-09-14 13:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2014-03-29 18:40 - 2013-09-13 11:52 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\SensorsClassExtension.dll

2014-03-29 18:40 - 2013-09-13 10:10 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll

2014-03-29 18:40 - 2013-09-13 09:30 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll

2014-03-29 18:40 - 2013-09-11 11:31 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-03-29 18:40 - 2013-09-11 11:31 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-03-29 18:40 - 2013-09-11 09:41 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll

2014-03-29 18:40 - 2013-09-11 09:09 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll

2014-03-29 18:40 - 2013-09-07 14:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll

2014-03-29 18:40 - 2013-09-07 14:00 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdprint.dll

2014-03-29 18:40 - 2013-09-07 13:50 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll

2014-03-29 18:40 - 2013-09-07 13:45 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll

2014-03-29 18:40 - 2013-09-07 13:30 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll

2014-03-29 18:40 - 2013-09-07 13:22 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll

2014-03-29 18:40 - 2013-09-07 13:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll

2014-03-29 18:40 - 2013-09-05 09:39 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-03-29 18:40 - 2013-09-05 08:42 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe

2014-03-29 18:40 - 2013-09-05 07:40 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Utilman.exe

2014-03-29 18:40 - 2013-09-04 09:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll

2014-03-29 18:40 - 2013-09-04 06:35 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll

2014-03-29 18:40 - 2013-08-31 12:46 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll

2014-03-29 18:40 - 2013-08-31 12:00 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2014-03-29 18:40 - 2013-08-31 11:25 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2014-03-29 18:40 - 2013-08-30 09:31 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll

2014-03-29 18:40 - 2013-08-28 09:55 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe

2014-03-29 18:40 - 2013-08-28 09:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll

2014-03-29 18:40 - 2013-08-27 07:24 - 00813568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll

2014-03-29 18:35 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-03-29 18:35 - 2013-10-03 11:16 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll

2014-03-29 18:35 - 2013-10-03 11:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll

2014-03-29 18:35 - 2013-10-02 13:00 - 01286552 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2014-03-29 18:35 - 2013-10-02 11:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2014-03-29 18:35 - 2013-10-01 05:42 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll

2014-03-29 18:35 - 2013-10-01 05:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll

2014-03-29 18:34 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-03-29 18:34 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-03-29 18:34 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-03-29 18:34 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-03-29 18:34 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-03-29 18:34 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-03-29 18:34 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-03-29 18:34 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-03-29 18:34 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-03-29 18:34 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-03-29 18:34 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-03-29 18:34 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-03-29 18:34 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-03-29 18:34 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-03-29 18:34 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-03-29 18:34 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-03-29 18:34 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-03-29 18:34 - 2014-02-06 13:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-03-29 18:34 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-03-29 18:34 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-03-29 18:34 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-03-29 18:34 - 2014-02-06 12:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-03-29 18:34 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-03-29 18:34 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-03-29 18:34 - 2014-02-06 12:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-03-29 18:34 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-03-29 18:34 - 2014-02-06 12:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-03-29 18:34 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-03-29 18:34 - 2014-02-06 12:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-03-29 18:34 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-03-29 18:34 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-03-29 18:34 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-03-29 18:34 - 2014-02-06 11:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-03-29 18:34 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-03-29 18:34 - 2014-02-06 11:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-03-29 18:34 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-03-29 18:34 - 2014-02-06 11:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-03-29 18:34 - 2013-12-20 12:18 - 01643584 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-03-29 18:34 - 2013-12-20 12:18 - 01507704 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-03-29 18:34 - 2013-12-09 02:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-03-29 18:34 - 2013-12-09 02:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-03-29 18:34 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-03-29 18:34 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-03-29 18:34 - 2013-10-19 10:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2014-03-29 18:34 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

Atinuvian

04.04.2014 17:57

FRST 2:

Code:

2014-03-29 18:33 - 2014-02-11 05:04 - 04189184 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-03-29 18:33 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-03-29 18:33 - 2014-02-11 04:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-03-29 18:33 - 2014-01-31 18:15 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-03-29 18:33 - 2014-01-31 18:07 - 00233920 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-03-29 18:33 - 2014-01-31 18:06 - 02133208 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-03-29 18:33 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-03-29 18:33 - 2014-01-31 11:06 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2014-03-29 18:33 - 2014-01-29 11:55 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2014-03-29 18:33 - 2014-01-29 10:53 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2014-03-29 18:33 - 2014-01-29 10:53 - 00407024 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll

2014-03-29 18:33 - 2014-01-29 10:49 - 01928144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2014-03-29 18:33 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-03-29 18:33 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2014-03-29 18:33 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe

2014-03-29 18:33 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll

2014-03-29 18:33 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll

2014-03-29 18:33 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2014-03-29 18:33 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll

2014-03-29 18:33 - 2014-01-27 21:06 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-03-29 18:33 - 2014-01-27 21:04 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE

2014-03-29 18:33 - 2014-01-27 20:52 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2014-03-29 18:33 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll

2014-03-29 18:33 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-03-29 18:33 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE

2014-03-29 18:33 - 2014-01-27 20:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-03-29 18:33 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-03-29 18:33 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll

2014-03-29 18:33 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll

2014-03-29 18:33 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-03-29 18:33 - 2014-01-27 17:50 - 06640640 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-03-29 18:33 - 2014-01-27 13:45 - 00386722 _____ () C:\Windows\system32\ApnDatabase.xml

2014-03-29 18:33 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-03-29 18:33 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-03-29 18:33 - 2014-01-09 10:25 - 02804224 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-03-29 18:33 - 2014-01-09 09:59 - 01020928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-03-29 18:33 - 2014-01-09 09:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-03-29 18:33 - 2014-01-09 09:49 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-03-29 18:33 - 2014-01-09 09:44 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-03-29 18:33 - 2014-01-09 09:43 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-03-29 18:33 - 2014-01-09 09:29 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-03-29 18:33 - 2014-01-09 09:28 - 04217344 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-03-29 18:33 - 2014-01-09 09:28 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-03-29 18:33 - 2014-01-09 09:18 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-03-29 18:33 - 2014-01-07 09:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe

2014-03-29 18:33 - 2014-01-07 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe

2014-03-29 18:33 - 2014-01-07 07:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-03-29 18:33 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-03-29 18:33 - 2014-01-04 22:50 - 01462216 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-03-29 18:33 - 2014-01-04 21:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-03-29 18:33 - 2014-01-04 16:30 - 13209088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-03-29 18:33 - 2014-01-04 16:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-03-29 18:33 - 2014-01-04 15:42 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-03-29 18:33 - 2014-01-04 15:40 - 07416832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-03-29 18:33 - 2014-01-04 15:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-03-29 18:33 - 2014-01-04 15:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-03-29 18:33 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe

2014-03-29 18:33 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll

2014-03-29 18:33 - 2013-12-21 04:10 - 00009701 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms

2014-03-29 18:33 - 2013-12-21 04:10 - 00009701 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms

2014-03-29 18:33 - 2013-12-20 12:10 - 01113040 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-03-29 18:33 - 2013-12-20 08:13 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-03-29 18:33 - 2013-12-09 04:57 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-03-29 18:33 - 2013-12-09 03:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-03-29 18:33 - 2013-12-09 02:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2014-03-29 18:33 - 2013-11-27 17:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll

2014-03-29 18:33 - 2013-11-27 13:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe

2014-03-29 18:33 - 2013-11-27 10:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-03-29 18:33 - 2013-11-27 10:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-03-29 18:33 - 2013-11-27 10:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-03-29 18:33 - 2013-11-27 10:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-03-29 18:33 - 2013-11-23 06:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2014-03-29 18:33 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2014-03-29 18:33 - 2013-11-21 08:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-03-29 18:33 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-03-29 18:33 - 2013-11-09 08:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-03-29 18:33 - 2013-11-09 08:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll

2014-03-29 18:33 - 2013-11-09 07:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll

2014-03-29 18:33 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-03-29 18:33 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-03-29 18:33 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-03-29 18:33 - 2013-10-23 13:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-03-29 18:33 - 2013-10-23 10:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-03-29 18:33 - 2013-10-16 17:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-03-29 18:33 - 2013-10-16 15:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-03-29 18:33 - 2013-10-15 10:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2014-03-29 18:33 - 2013-10-15 10:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2014-03-29 18:33 - 2013-10-13 04:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys

2014-03-29 18:33 - 2013-10-12 23:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2014-03-29 18:33 - 2013-10-12 23:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2014-03-29 18:33 - 2013-10-05 16:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-03-29 18:33 - 2013-10-05 10:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-03-29 18:33 - 2013-09-21 12:53 - 00996320 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

2014-03-28 14:29 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2014-03-28 14:29 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2014-03-28 14:29 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2014-03-28 14:29 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2014-03-28 14:29 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2014-03-28 14:29 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2014-03-28 14:29 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2014-03-28 14:29 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2014-03-28 14:29 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2014-03-28 14:29 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2014-03-28 14:29 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2014-03-28 14:29 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2014-03-28 14:29 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2014-03-28 14:29 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2014-03-28 14:29 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2014-03-28 14:29 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2014-03-28 14:29 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2014-03-28 14:29 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2014-03-28 14:29 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2014-03-28 14:29 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2014-03-28 14:29 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2014-03-28 14:29 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2014-03-28 14:29 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2014-03-28 14:29 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2014-03-28 14:29 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2014-03-28 14:29 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2014-03-28 14:29 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\MSBuild

2014-03-28 13:49 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-03-28 13:49 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-03-28 13:48 - 2014-03-28 13:48 - 00000000 ____D () C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP

2014-03-28 13:45 - 2014-03-28 13:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-03-28 13:34 - 2014-03-28 13:34 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Macromedia

2014-03-28 13:31 - 2014-03-28 13:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-03-28 11:45 - 2014-04-04 16:47 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-1001

2014-03-28 11:42 - 2014-04-04 13:26 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7A8D7FB8-DDC3-4B91-A888-39F945AA60AF}

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Intel Corporation

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA Corporation

2014-03-28 11:40 - 2014-04-04 16:55 - 00000000 ____D () C:\Users\Vincent

2014-03-28 11:40 - 2014-04-04 13:27 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-03-28 11:40 - 2014-04-04 13:27 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-03-28 11:40 - 2014-04-04 00:59 - 00001450 _____ () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-03-28 11:40 - 2014-04-03 18:16 - 00000000 ____D () C:\Users\Vincent\AppData\Local\VirtualStore

2014-03-28 11:40 - 2014-03-30 21:11 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Packages

2014-03-28 11:40 - 2014-03-28 11:40 - 00000020 ___SH () C:\Users\Vincent\ntuser.ini

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Vorlagen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Startmenü

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Netzwerkumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Lokale Einstellungen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Eigene Dateien

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Druckumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Musik

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Bilder

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Verlauf

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Adobe

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-03-27 17:46 - 2014-04-04 16:41 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-03-27 17:46 - 2014-03-28 11:41 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00002149 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-03-27 17:46 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-03-27 17:46 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin

2014-03-27 17:46 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-03-27 17:46 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-03-27 17:46 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-03-27 17:46 - 2014-02-05 11:31 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-03-27 17:46 - 2014-02-05 11:30 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-03-27 17:45 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00484296 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00409544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00377688 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-03-27 17:45 - 2013-12-27 20:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-03-27 17:45 - 2013-12-27 20:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-03-27 17:45 - 2013-12-27 20:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-03-27 17:45 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2014-03-27 17:45 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2014-03-27 17:45 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2014-03-27 17:44 - 2014-04-04 16:15 - 01221205 _____ () C:\Windows\WindowsUpdate.log

2014-03-27 17:43 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-03-27 17:14 - 2014-03-27 17:14 - 01713704 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-03-27 17:14 - 2014-03-27 17:14 - 00000032 _____ () C:\csb.log

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE

2014-03-27 17:14 - 2013-10-28 11:02 - 00022240 _____ () C:\Windows\system32\Drivers\AppleCharger.sys

2014-03-27 17:14 - 2013-10-24 18:29 - 00022240 _____ () C:\Windows\system32\Drivers\UsbCharger.sys

2014-03-27 17:14 - 2010-04-06 17:30 - 00031272 _____ () C:\Windows\system32\AppleChargerSrv.exe

2014-03-27 17:13 - 2014-03-27 17:14 - 00000189 _____ () C:\Install.log

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____H () C:\ProgramData\DP45977C.lfl

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files\Realtek

2014-03-27 17:13 - 2013-10-29 14:19 - 00151256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll

2014-03-27 17:13 - 2013-10-29 12:25 - 03698904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys

2014-03-27 17:13 - 2013-10-29 09:03 - 00676825 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT

2014-03-27 17:13 - 2013-10-29 08:57 - 38251008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat

2014-03-27 17:13 - 2013-10-28 11:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll

2014-03-27 17:13 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll

2014-03-27 17:13 - 2013-10-18 10:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll

2014-03-27 17:13 - 2013-10-11 05:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll

2014-03-27 17:13 - 2013-10-07 05:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll

2014-03-27 17:13 - 2013-10-02 11:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll

2014-03-27 17:13 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll

2014-03-27 17:13 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll

2014-03-27 17:13 - 2013-09-09 09:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat

2014-03-27 17:13 - 2013-09-09 08:54 - 00833752 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys

2014-03-27 17:13 - 2013-09-09 08:54 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll

2014-03-27 17:13 - 2013-08-20 11:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll

2014-03-27 17:13 - 2013-08-14 10:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll

2014-03-27 17:13 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll

2014-03-27 17:13 - 2013-06-25 06:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll

2014-03-27 17:13 - 2013-06-25 06:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll

2014-03-27 17:13 - 2013-06-25 06:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll

2014-03-27 17:13 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl

2014-03-27 17:13 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll

2014-03-27 17:13 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll

2014-03-27 17:13 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll

2014-03-27 17:13 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll

2014-03-27 17:13 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll

2014-03-27 17:13 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll

2014-03-27 17:13 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll

2014-03-27 17:13 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll

2014-03-27 17:13 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2014-03-27 17:13 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll

2014-03-27 17:13 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll

2014-03-27 17:12 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-03-27 17:12 - 2014-03-27 17:12 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk

2014-03-27 17:12 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll

2014-03-27 17:12 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll

2014-03-27 17:12 - 2013-10-03 21:35 - 07587824 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 02474736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00844784 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00771056 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00769520 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00754672 _____ (Intel Corporation) C:\Windows\system32\GfxUIHotKeyMenu.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00530416 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00396272 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00393712 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00391152 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00153072 _____ (Intel Corporation) C:\Windows\system32\difx64.exe

2014-03-27 17:12 - 2013-09-17 02:21 - 00180224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3308.dll

2014-03-27 17:12 - 2013-09-17 02:19 - 00002944 _____ () C:\Windows\system32\iglhxs64.vp

2014-03-27 17:12 - 2013-09-17 02:17 - 13760512 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 12100096 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 11387392 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 09081856 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 07906304 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 06294528 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 04177920 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys

2014-03-27 17:12 - 2013-09-17 02:17 - 04067328 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 02384896 _____ () C:\Windows\system32\GfxRes.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00623104 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00548864 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00522240 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00521728 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00517120 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00516096 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00513536 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00513024 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00371200 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00365568 _____ () C:\Windows\system32\igdmd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00345600 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00303104 _____ () C:\Windows\SysWOW64\igdmd32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl

2014-03-27 17:12 - 2013-09-17 02:17 - 00265385 _____ () C:\Windows\system32\Gfxres.th-TH.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00251862 _____ () C:\Windows\system32\Gfxres.el-GR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00243712 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00233588 _____ () C:\Windows\system32\Gfxres.ru-RU.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00223744 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00220672 _____ () C:\Windows\system32\igdde64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00199481 _____ () C:\Windows\system32\Gfxres.ar-SA.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00197044 _____ () C:\Windows\system32\Gfxres.ja-JP.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00194048 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00191088 _____ () C:\Windows\system32\Gfxres.he-IL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00179353 _____ () C:\Windows\system32\Gfxres.ko-KR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00179230 _____ () C:\Windows\system32\Gfxres.it-IT.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176940 _____ () C:\Windows\system32\Gfxres.es-ES.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176666 _____ () C:\Windows\system32\Gfxres.fr-FR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176638 _____ () C:\Windows\system32\Gfxres.de-DE.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00175259 _____ () C:\Windows\system32\Gfxres.ro-RO.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00174244 _____ () C:\Windows\system32\Gfxres.hu-HU.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173953 _____ () C:\Windows\system32\Gfxres.tr-TR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173813 _____ () C:\Windows\system32\Gfxres.pl-PL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173495 _____ () C:\Windows\system32\Gfxres.nl-NL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00172750 _____ () C:\Windows\system32\Gfxres.pt-BR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00172041 _____ () C:\Windows\system32\Gfxres.fi-FI.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171709 _____ () C:\Windows\system32\Gfxres.sk-SK.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171547 _____ () C:\Windows\system32\Gfxres.sv-SE.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171310 _____ () C:\Windows\system32\Gfxres.pt-PT.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00170996 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00170175 _____ () C:\Windows\system32\Gfxres.hr-HR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00166672 _____ () C:\Windows\system32\Gfxres.sl-SI.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00165374 _____ () C:\Windows\system32\Gfxres.nb-NO.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00164698 _____ () C:\Windows\system32\Gfxres.da-DK.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00160256 _____ () C:\Windows\system32\igdail64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00159947 _____ () C:\Windows\system32\Gfxres.en-US.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00153249 _____ () C:\Windows\system32\Gfxres.zh-TW.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00151473 _____ () C:\Windows\system32\Gfxres.zh-CN.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00066560 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00029184 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00012288 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 13153792 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00492032 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00180736 _____ () C:\Windows\SysWOW64\igdde32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 20943360 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 02974208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 00290816 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 00253440 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 25982976 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 03292672 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 00329216 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 00304640 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll

2014-03-27 17:12 - 2013-09-17 02:01 - 04432896 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll

2014-03-27 17:12 - 2013-09-17 02:01 - 03523072 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll

2014-03-27 17:12 - 2013-09-16 13:17 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 02813952 _____ () C:\Windows\system32\iglhxa64.cpa

2014-03-27 17:12 - 2013-09-13 18:04 - 02064896 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01814016 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01423008 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01127424 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01123328 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00650400 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00598688 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00344224 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00214528 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00207008 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00179712 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00158720 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00148992 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00132608 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00127488 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00121504 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00093344 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL

2014-03-27 17:12 - 2013-09-13 18:04 - 00064000 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL

2014-03-27 17:12 - 2013-09-13 18:04 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00044025 _____ () C:\Windows\system32\iglhxo64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043816 _____ () C:\Windows\system32\iglhxc64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043494 _____ () C:\Windows\system32\iglhxc64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043298 _____ () C:\Windows\system32\iglhxg64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043256 _____ () C:\Windows\system32\iglhxg64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00042079 _____ () C:\Windows\system32\iglhxo64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00001125 _____ () C:\Windows\system32\iglhxa64.vp

2014-03-27 17:12 - 2013-09-13 18:03 - 04009632 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll

2014-03-27 17:12 - 2013-09-13 18:03 - 00631456 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:03 - 00176288 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll

2014-03-27 17:12 - 2013-09-13 12:44 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll

2014-03-27 17:12 - 2013-09-09 22:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll

2014-03-27 17:12 - 2013-09-09 22:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll

2014-03-27 17:12 - 2013-09-09 22:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll

2014-03-27 17:12 - 2013-09-09 22:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll

2014-03-27 17:12 - 2013-08-05 12:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll

2014-03-27 17:12 - 2013-06-21 05:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll

2014-03-27 17:12 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll

2014-03-27 17:12 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll

2014-03-27 17:11 - 2014-04-03 22:17 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-03-27 17:11 - 2014-03-27 17:47 - 00000000 ____D () C:\ProgramData\Intel

2014-03-27 17:11 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\Intel

2014-03-27 17:11 - 2014-03-27 17:12 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____D () C:\Intel

2014-03-27 17:11 - 2013-09-17 02:21 - 00449528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys

2014-03-27 17:11 - 2013-09-16 13:17 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll

2014-03-27 17:11 - 2013-09-16 13:17 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys

2014-03-27 17:11 - 2013-08-21 16:16 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2014-03-27 17:10 - 2014-03-27 17:10 - 00000010 _____ () C:\Windows\GSetup.ini

2014-03-27 17:10 - 2009-08-27 09:04 - 00207400 ____R () C:\Windows\GSetup.exe

2014-03-27 17:07 - 2014-03-27 17:16 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-500

2014-03-27 17:06 - 2014-04-04 16:46 - 01780340 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-03-27 17:04 - 2013-08-22 07:17 - 02407936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-03-27 16:59 - 2014-04-04 13:25 - 00000000 ____D () C:\Windows\Panther
 

==================== One Month Modified Files and Folders =======
 

2014-04-04 16:58 - 2014-04-04 16:58 - 00012944 _____ () C:\Users\Vincent\Downloads\FRST.txt

2014-04-04 16:58 - 2014-04-04 16:57 - 00000000 ____D () C:\FRST

2014-04-04 16:56 - 2014-04-04 16:56 - 02157056 _____ (Farbar) C:\Users\Vincent\Downloads\FRST64.exe

2014-04-04 16:56 - 2014-04-03 18:12 - 00000000 ____D () C:\Users\Vincent\Desktop\Security

2014-04-04 16:56 - 2014-04-03 16:25 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Genesis

2014-04-04 16:55 - 2014-04-04 16:55 - 00000476 _____ () C:\Users\Vincent\Downloads\defogger_disable.log

2014-04-04 16:55 - 2014-04-04 16:55 - 00000000 _____ () C:\Users\Vincent\defogger_reenable

2014-04-04 16:55 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent

2014-04-04 16:47 - 2014-03-28 11:45 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-1001

2014-04-04 16:46 - 2014-03-27 17:06 - 01780340 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-04-04 16:46 - 2013-08-23 01:24 - 00765378 _____ () C:\Windows\system32\perfh007.dat

2014-04-04 16:46 - 2013-08-23 01:24 - 00159696 _____ () C:\Windows\system32\perfc007.dat

2014-04-04 16:41 - 2014-04-04 13:27 - 00089178 _____ () C:\Windows\PFRO.log

2014-04-04 16:41 - 2014-03-27 17:46 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-04-04 16:41 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-04-04 16:41 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-04-04 16:40 - 2014-04-04 16:37 - 00000000 ____D () C:\AdwCleaner

2014-04-04 16:26 - 2014-04-03 17:11 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-04 16:15 - 2014-03-27 17:44 - 01221205 _____ () C:\Windows\WindowsUpdate.log

2014-04-04 16:00 - 2014-04-03 19:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-04 15:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-04-04 13:27 - 2014-03-28 11:40 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-04-04 13:27 - 2014-03-28 11:40 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PLA

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-04-04 13:26 - 2014-03-28 11:42 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7A8D7FB8-DDC3-4B91-A888-39F945AA60AF}

2014-04-04 13:25 - 2014-04-03 17:15 - 00000000 ____D () C:\Users\Vincent\AppData\Local\CrashDumps

2014-04-04 13:25 - 2014-03-27 16:59 - 00000000 ____D () C:\Windows\Panther

2014-04-04 13:23 - 2014-04-03 20:24 - 00000000 ____D () C:\Users\Vincent\Desktop\Games

2014-04-04 00:59 - 2014-04-03 16:23 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-04-04 00:59 - 2014-03-28 11:40 - 00001450 _____ () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-04-03 22:52 - 2014-04-03 22:52 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup(1).exe

2014-04-03 22:52 - 2014-04-03 22:52 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-04-03 22:40 - 2014-04-03 22:40 - 00000000 ____D () C:\Users\Vincent\Neuer Ordner

2014-04-03 22:39 - 2014-04-03 22:39 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup.exe

2014-04-03 22:37 - 2014-04-03 20:24 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2014-04-03 22:17 - 2014-03-27 17:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-04-03 19:56 - 2014-04-03 19:56 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Macromedia

2014-04-03 19:55 - 2014-04-03 19:55 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\ProgramData\McAfee

2014-04-03 19:55 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Adobe

2014-04-03 18:16 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\VirtualStore

2014-04-03 18:09 - 2014-04-03 18:09 - 03710504 _____ (Piriform Ltd) C:\Users\Vincent\Downloads\ccsetup412_slim.exe

2014-04-03 18:09 - 2014-04-03 18:09 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-03 18:09 - 2014-04-03 18:09 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-03 17:56 - 2014-04-03 17:56 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-04-03 17:53 - 2014-04-03 16:29 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-03 17:11 - 2014-04-03 17:10 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Vincent\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-03 16:59 - 2014-04-03 16:59 - 00000000 ____D () C:\Users\Vincent\Documents\Symantec

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\AppData\Local\cache

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\.android

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 _____ () C:\Users\Vincent\daemonprocess.txt

2014-04-03 16:41 - 2014-04-03 16:41 - 00000044 _____ () C:\Users\Vincent\AppData\Roaming\WB.CFG

2014-04-03 16:41 - 2014-04-03 16:41 - 00000000 ____D () C:\Program Files (x86)\Browser Guard

2014-04-03 16:29 - 2014-04-03 16:29 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2014-04-03 16:29 - 2014-04-03 16:29 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\ProgramData\Norton

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security

2014-04-03 16:29 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-04-03 16:28 - 2014-04-03 16:28 - 01038704 _____ (Amazon Services LLC) C:\Users\Vincent\Downloads\Norton_Internet_Security_2014_1_PC_Downloader.exe

2014-04-03 16:25 - 2014-04-03 16:25 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\nsv514.tmp

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\ProgramData\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-04-03 14:36 - 2014-04-03 14:23 - 00000000 ____D () C:\ProgramData\NFS Underground

2014-04-03 11:08 - 2014-04-03 16:41 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\AnyProtectScannerSetup.exe

2014-04-02 16:40 - 2014-04-02 11:57 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien

2014-04-01 13:04 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-03-30 21:11 - 2014-03-30 21:11 - 00003560 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask

2014-03-30 21:11 - 2014-03-30 21:09 - 00000000 ___RD () C:\Windows\BrowserChoice

2014-03-30 21:11 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Packages

2014-03-30 21:10 - 2013-08-22 16:44 - 00335992 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism

2014-03-29 19:16 - 2014-03-29 19:15 - 00000000 ____D () C:\Windows\system32\MRT

2014-03-29 19:16 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\MSBuild

2014-03-28 13:49 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI

2014-03-28 13:49 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI

2014-03-28 13:48 - 2014-03-28 13:48 - 00000000 ____D () C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP

2014-03-28 13:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore

2014-03-28 13:45 - 2014-03-28 13:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-03-28 13:34 - 2014-03-28 13:34 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Macromedia

2014-03-28 13:31 - 2014-03-28 13:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Intel Corporation

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA Corporation

2014-03-28 11:41 - 2014-03-27 17:46 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-03-28 11:40 - 2014-03-28 11:40 - 00000020 ___SH () C:\Users\Vincent\ntuser.ini

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Vorlagen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Startmenü

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Netzwerkumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Lokale Einstellungen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Eigene Dateien

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Druckumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Musik

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Bilder

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Verlauf

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Adobe

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA

2014-03-27 17:47 - 2014-03-27 17:11 - 00000000 ____D () C:\ProgramData\Intel

2014-03-27 17:46 - 2014-03-27 17:46 - 00002149 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-03-27 17:46 - 2014-03-27 17:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-03-27 17:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help

2014-03-27 17:16 - 2014-03-27 17:07 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-500

2014-03-27 17:14 - 2014-03-27 17:14 - 01713704 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-03-27 17:14 - 2014-03-27 17:14 - 00000032 _____ () C:\csb.log

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:13 - 00000189 _____ () C:\Install.log

2014-03-27 17:14 - 2014-03-27 17:11 - 00000000 ____D () C:\Program Files\Intel

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____H () C:\ProgramData\DP45977C.lfl

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files\Realtek

2014-03-27 17:13 - 2014-03-27 17:12 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-03-27 17:12 - 2014-03-27 17:12 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk

2014-03-27 17:12 - 2014-03-27 17:11 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____D () C:\Intel

2014-03-27 17:10 - 2014-03-27 17:10 - 00000010 _____ () C:\Windows\GSetup.ini

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-03-27 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery

2014-03-27 17:00 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default

2014-03-27 16:59 - 2013-08-22 17:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template

2014-03-05 09:26 - 2014-04-03 17:11 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-03-05 09:26 - 2014-04-03 17:11 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-03-05 09:26 - 2014-04-03 17:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-03-05 00:53 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-03-05 00:53 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 

Some content of TEMP:

====================

C:\Users\Vincent\AppData\Local\Temp\AutoRun.exe

C:\Users\Vincent\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Vincent\AppData\Local\Temp\eauninstall.exe

C:\Users\Vincent\AppData\Local\Temp\NFS UNDERGROUND_uninst.exe

C:\Users\Vincent\AppData\Local\Temp\speedupmypc.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys

[2014-03-29 18:33] - [2014-01-31 18:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02
 
 
 

LastRegBack: 2014-03-27 16:59
 

==================== End Of Log ============================

cosinus

04.04.2014 18:04

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Atinuvian

04.04.2014 18:55

AdwCleaner:

Code:

# AdwCleaner v3.023 - Bericht erstellt am 04/04/2014 um 19:15:19

# Aktualisiert 01/04/2014 von Xplode

# Betriebssystem : Windows 8.1  (64 bits)

# Benutzername : Vincent - VINCENTS-PC

# Gestartet von : C:\Users\Vincent\Desktop\Security\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16518
 
 

-\\ Mozilla Firefox v28.0 (de)
 

[ Datei : C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\prefs.js ]
 
 

*************************
 

AdwCleaner[R0].txt - [4113 octets] - [04/04/2014 16:37:16]

AdwCleaner[R1].txt - [916 octets] - [04/04/2014 19:15:04]

AdwCleaner[S0].txt - [3036 octets] - [04/04/2014 16:40:51]

AdwCleaner[S1].txt - [838 octets] - [04/04/2014 19:15:19]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [897 octets] ##########

JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.3 (03.23.2014:1)

OS: Windows 8.1 x64

Ran by Vincent on 04.04.2014 at 19:44:37,61

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 04.04.2014 at 19:46:16,46

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST (wieder in 2 Teilen)

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014

Ran by Vincent (administrator) on VINCENTS-PC on 04-04-2014 19:50:36

Running from C:\Users\Vincent\Downloads

Windows 8.1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(petimetre) C:\Users\Vincent\AppData\Local\Genesis\Genesis.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe

(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe

(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.)

HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\...\Run: [genesis] - c:\users\vincent\appdata\local\genesis\genesis.exe [2658304 2014-04-03] (petimetre)

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\...\MountPoints2: {722c6e8a-b5c0-11e3-824b-806e6f6e6963} - "E:\RunGame.exe" 
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1BBED7B8794ACF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default

FF NewTab: chrome://quick_start/content/index.html

FF Homepage: www.google.de

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-03]

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFF [2014-04-03]

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\ []

FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi

FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi [2014-02-24]

FF HKCU\...\Firefox\Extensions: [{f76c53ac-9074-4195-b0f1-e049c8e6f521}] - C:\Program Files (x86)\View-Password Corp\158.xpi

FF StartMenuInternet: FIREFOX.EXE - firefox.exe
 

==================== Services (Whitelisted) =================
 

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

S2 vosr; C:\Users\Vincent\AppData\Roaming\VOPackage\VOsrv.exe [X]
 

==================== Drivers (Whitelisted) ====================
 

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20140319.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-04-03] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-04-03] (Symantec Corporation)

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20140403.001\IDSvia64.sys [525016 2014-04-02] (Symantec Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20140403.032\ENG64.SYS [126040 2014-04-03] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20140403.032\EX64.SYS [2099288 2014-04-03] (Symantec Corporation)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)

R3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2013-03-04] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2014-04-03] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-04-04 19:46 - 2014-04-04 19:46 - 00000616 _____ () C:\Users\Vincent\Desktop\JRT.txt

2014-04-04 19:41 - 2014-04-04 19:41 - 00000000 ____D () C:\Windows\ERUNT

2014-04-04 19:36 - 2014-04-04 19:36 - 01038974 _____ (Thisisu) C:\Users\Vincent\Downloads\JRT.exe

2014-04-04 19:15 - 2014-04-04 19:15 - 00000976 _____ () C:\Users\Vincent\Desktop\AdwCleaner[S1].txt

2014-04-04 17:46 - 2014-04-04 17:46 - 01110476 _____ () C:\Users\Vincent\Downloads\7z920.exe

2014-04-04 17:46 - 2014-04-04 17:46 - 00000988 _____ () C:\Users\Vincent\Desktop\7-Zip File Manager.lnk

2014-04-04 17:46 - 2014-04-04 17:46 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-04-04 16:58 - 2014-04-04 19:50 - 00012827 _____ () C:\Users\Vincent\Downloads\FRST.txt

2014-04-04 16:58 - 2014-04-04 16:58 - 00018102 _____ () C:\Users\Vincent\Downloads\Addition.txt

2014-04-04 16:57 - 2014-04-04 19:50 - 00000000 ____D () C:\FRST

2014-04-04 16:56 - 2014-04-04 16:56 - 02157056 _____ (Farbar) C:\Users\Vincent\Downloads\FRST64.exe

2014-04-04 16:55 - 2014-04-04 16:55 - 00000476 _____ () C:\Users\Vincent\Downloads\defogger_disable.log

2014-04-04 16:55 - 2014-04-04 16:55 - 00000000 _____ () C:\Users\Vincent\defogger_reenable

2014-04-04 16:37 - 2014-04-04 19:16 - 00000000 ____D () C:\AdwCleaner

2014-04-04 13:27 - 2014-04-04 16:41 - 00089178 _____ () C:\Windows\PFRO.log

2014-04-03 22:52 - 2014-04-03 22:52 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup(1).exe

2014-04-03 22:52 - 2014-04-03 22:52 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-04-03 22:40 - 2014-04-03 22:40 - 00000000 ____D () C:\Users\Vincent\Neuer Ordner

2014-04-03 22:39 - 2014-04-03 22:39 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup.exe

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2014-04-03 22:26 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2014-04-03 22:26 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2014-04-03 22:26 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2014-04-03 22:26 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2014-04-03 22:26 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2014-04-03 22:26 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2014-04-03 22:26 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2014-04-03 22:26 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2014-04-03 22:26 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2014-04-03 22:26 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2014-04-03 22:26 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2014-04-03 22:26 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2014-04-03 22:26 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2014-04-03 22:26 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2014-04-03 22:26 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2014-04-03 22:26 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2014-04-03 22:26 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2014-04-03 22:26 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2014-04-03 22:26 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2014-04-03 22:26 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2014-04-03 22:26 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2014-04-03 22:26 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2014-04-03 22:26 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2014-04-03 22:26 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2014-04-03 22:26 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2014-04-03 22:26 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2014-04-03 22:26 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2014-04-03 22:26 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2014-04-03 22:26 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2014-04-03 22:26 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2014-04-03 22:26 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2014-04-03 22:26 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2014-04-03 22:26 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2014-04-03 22:26 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2014-04-03 22:26 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2014-04-03 22:26 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2014-04-03 20:24 - 2014-04-04 13:23 - 00000000 ____D () C:\Users\Vincent\Desktop\Games

2014-04-03 20:24 - 2014-04-03 22:37 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-04-03 19:56 - 2014-04-03 19:56 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Macromedia

2014-04-03 19:55 - 2014-04-04 19:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-03 19:55 - 2014-04-03 19:55 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\ProgramData\McAfee

2014-04-03 19:54 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Adobe

2014-04-03 18:12 - 2014-04-04 19:39 - 00000000 ____D () C:\Users\Vincent\Desktop\Security

2014-04-03 18:09 - 2014-04-03 18:09 - 03710504 _____ (Piriform Ltd) C:\Users\Vincent\Downloads\ccsetup412_slim.exe

2014-04-03 18:09 - 2014-04-03 18:09 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-03 18:09 - 2014-04-03 18:09 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-03 17:56 - 2014-04-03 17:56 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-04-03 17:15 - 2014-04-04 13:25 - 00000000 ____D () C:\Users\Vincent\AppData\Local\CrashDumps

2014-04-03 17:11 - 2014-04-04 17:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-03 17:11 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-04-03 17:11 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-04-03 17:11 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-04-03 17:10 - 2014-04-03 17:11 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Vincent\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-03 16:59 - 2014-04-03 16:59 - 00000000 ____D () C:\Users\Vincent\Documents\Symantec

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\AppData\Local\cache

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\.android

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 _____ () C:\Users\Vincent\daemonprocess.txt

2014-04-03 16:41 - 2014-04-03 16:41 - 00000044 _____ () C:\Users\Vincent\AppData\Roaming\WB.CFG

2014-04-03 16:41 - 2014-04-03 16:41 - 00000000 ____D () C:\Program Files (x86)\Browser Guard

2014-04-03 16:41 - 2014-04-03 11:08 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\AnyProtectScannerSetup.exe

2014-04-03 16:29 - 2014-04-03 17:53 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-04-03 16:29 - 2014-04-03 16:29 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2014-04-03 16:29 - 2014-04-03 16:29 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\ProgramData\Norton

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security

2014-04-03 16:28 - 2014-04-03 16:28 - 01038704 _____ (Amazon Services LLC) C:\Users\Vincent\Downloads\Norton_Internet_Security_2014_1_PC_Downloader.exe

2014-04-03 16:25 - 2014-04-04 19:50 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Genesis

2014-04-03 16:25 - 2014-04-03 16:25 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\nsv514.tmp

2014-04-03 16:25 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-04-03 16:25 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-04-03 16:23 - 2014-04-04 00:59 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\ProgramData\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-04-03 14:23 - 2014-04-03 14:36 - 00000000 ____D () C:\ProgramData\NFS Underground

2014-04-02 11:57 - 2014-04-02 16:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien

2014-03-30 21:11 - 2014-03-30 21:11 - 00003560 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask

2014-03-30 21:09 - 2014-03-30 21:11 - 00000000 ___RD () C:\Windows\BrowserChoice

2014-03-29 19:15 - 2014-03-29 19:16 - 00000000 ____D () C:\Windows\system32\MRT

2014-03-29 19:15 - 2014-02-04 20:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-03-29 18:48 - 2014-01-08 03:46 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2014-03-29 18:48 - 2014-01-08 03:41 - 01530712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-03-29 18:48 - 2014-01-08 03:41 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2014-03-29 18:48 - 2014-01-04 17:54 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll

2014-03-29 18:48 - 2014-01-04 17:08 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll

2014-03-29 18:48 - 2014-01-04 16:08 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll

2014-03-29 18:48 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll

2014-03-29 18:48 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-03-29 18:48 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-03-29 18:48 - 2014-01-01 03:55 - 01720560 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-03-29 18:48 - 2014-01-01 03:52 - 00481944 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2014-03-29 18:48 - 2014-01-01 02:56 - 01472048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-03-29 18:48 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2014-03-29 18:48 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-03-29 18:48 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2014-03-29 18:48 - 2014-01-01 01:56 - 00960512 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-03-29 18:48 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll

2014-03-29 18:48 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll

2014-03-29 18:48 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll

2014-03-29 18:48 - 2013-12-31 01:31 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2014-03-29 18:48 - 2013-12-31 01:31 - 00914944 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll

2014-03-29 18:48 - 2013-12-27 17:09 - 00419160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-03-29 18:48 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll

2014-03-29 18:48 - 2013-12-27 10:57 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe

2014-03-29 18:48 - 2013-12-27 10:23 - 00749056 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll

2014-03-29 18:48 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll

2014-03-29 18:48 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe

2014-03-29 18:48 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll

2014-03-29 18:48 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll

2014-03-29 18:48 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys

2014-03-29 18:48 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-03-29 18:48 - 2013-12-14 08:19 - 18576384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-03-29 18:48 - 2013-12-13 12:54 - 00131160 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe

2014-03-29 18:48 - 2013-12-13 08:36 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll

2014-03-29 18:48 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll

2014-03-29 18:48 - 2013-12-09 10:05 - 21199256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-03-29 18:48 - 2013-12-09 06:51 - 18643560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-03-29 18:48 - 2013-09-26 08:34 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll

2014-03-29 18:48 - 2013-09-26 08:34 - 00515072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll

2014-03-29 18:47 - 2013-10-23 13:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll

2014-03-29 18:47 - 2013-10-23 13:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-03-29 18:47 - 2013-10-23 13:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll

2014-03-29 18:47 - 2013-10-22 09:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-03-29 18:47 - 2013-10-22 08:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-03-29 18:47 - 2013-10-22 07:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2014-03-29 18:47 - 2013-10-22 06:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll

2014-03-29 18:47 - 2013-10-22 05:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-03-29 18:47 - 2013-10-22 05:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-03-29 18:47 - 2013-10-22 04:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-03-29 18:47 - 2013-10-22 04:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-03-29 18:47 - 2013-10-22 04:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-03-29 18:47 - 2013-10-22 03:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-03-29 18:47 - 2013-10-19 06:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2014-03-29 18:47 - 2013-10-19 06:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2014-03-29 18:47 - 2013-10-19 05:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-03-29 18:47 - 2013-10-19 05:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-03-29 18:47 - 2013-10-16 11:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe

2014-03-29 18:47 - 2013-10-16 11:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe

2014-03-29 18:47 - 2013-10-13 05:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys

2014-03-29 18:47 - 2013-10-13 04:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll

2014-03-29 18:47 - 2013-10-10 18:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-03-29 18:47 - 2013-10-10 18:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-03-29 18:47 - 2013-10-10 16:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-03-29 18:47 - 2013-10-10 16:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-03-29 18:47 - 2013-10-10 13:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-03-29 18:47 - 2013-10-08 12:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys

2014-03-29 18:47 - 2013-10-08 08:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll

2014-03-29 18:47 - 2013-10-08 07:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll

2014-03-29 18:47 - 2013-10-08 07:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2014-03-29 18:47 - 2013-10-08 07:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2014-03-29 18:47 - 2013-10-08 07:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2014-03-29 18:47 - 2013-10-08 07:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll

2014-03-29 18:47 - 2013-10-08 06:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-03-29 18:47 - 2013-10-08 06:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll

2014-03-29 18:47 - 2013-10-07 09:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-03-29 18:47 - 2013-10-07 04:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-03-29 18:47 - 2013-10-05 17:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys

2014-03-29 18:47 - 2013-10-05 16:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2014-03-29 18:47 - 2013-10-05 14:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2014-03-29 18:47 - 2013-10-05 13:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-03-29 18:47 - 2013-10-05 11:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-03-29 18:47 - 2013-10-05 11:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-03-29 18:47 - 2013-10-05 11:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll

2014-03-29 18:47 - 2013-10-05 10:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2014-03-29 18:47 - 2013-10-05 10:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll

2014-03-29 18:47 - 2013-10-05 10:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-03-29 18:47 - 2013-10-05 10:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll

2014-03-29 18:47 - 2013-10-05 10:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2014-03-29 18:47 - 2013-10-05 10:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-03-29 18:47 - 2013-10-05 09:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll

2014-03-29 18:47 - 2013-10-05 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2014-03-29 18:47 - 2013-10-04 10:10 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll

2014-03-29 18:47 - 2013-09-19 09:19 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersRes.dll

2014-03-29 18:47 - 2013-09-19 08:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe

2014-03-29 18:47 - 2013-09-19 08:23 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WorkFoldersRes.dll

2014-03-29 18:47 - 2013-09-17 11:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll

2014-03-29 18:47 - 2013-09-17 11:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-03-29 18:47 - 2013-09-17 08:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll

2014-03-29 18:47 - 2013-09-17 08:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-03-29 18:47 - 2013-09-17 06:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll

2014-03-29 18:47 - 2013-09-14 16:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-03-29 18:47 - 2013-09-14 16:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll

2014-03-29 18:47 - 2013-09-14 14:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-03-29 18:47 - 2013-09-14 14:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll

2014-03-29 18:47 - 2013-09-14 12:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe

2014-03-29 18:47 - 2013-09-14 11:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll

2014-03-29 18:47 - 2013-09-13 10:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe

2014-03-29 18:47 - 2013-09-13 09:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe

2014-03-29 18:47 - 2013-09-12 10:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll

2014-03-29 18:47 - 2013-09-12 10:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll

2014-03-29 18:47 - 2013-09-12 10:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2014-03-29 18:47 - 2013-09-12 10:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll

2014-03-29 18:47 - 2013-09-12 09:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll

2014-03-29 18:47 - 2013-09-12 09:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll

2014-03-29 18:47 - 2013-09-12 09:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll

2014-03-29 18:47 - 2013-09-12 09:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll

2014-03-29 18:47 - 2013-09-12 09:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll

2014-03-29 18:47 - 2013-09-12 09:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll

2014-03-29 18:47 - 2013-09-10 06:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll

2014-03-29 18:45 - 2013-12-09 02:34 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-03-29 18:45 - 2013-12-09 02:04 - 00980480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-03-29 18:45 - 2013-11-27 17:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-03-29 18:45 - 2013-11-27 17:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-03-29 18:45 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-03-29 18:45 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-03-29 18:45 - 2013-11-27 14:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys

2014-03-29 18:45 - 2013-11-27 12:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2014-03-29 18:45 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2014-03-29 18:45 - 2013-11-27 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll

2014-03-29 18:45 - 2013-11-27 11:17 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-03-29 18:45 - 2013-11-27 11:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll

2014-03-29 18:45 - 2013-11-27 10:58 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-03-29 18:45 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll

2014-03-29 18:45 - 2013-11-26 15:20 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2014-03-29 18:45 - 2013-11-26 15:20 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2014-03-29 18:45 - 2013-11-26 13:44 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2014-03-29 18:45 - 2013-11-25 03:45 - 00142680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-03-29 18:45 - 2013-11-25 03:32 - 01119064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-03-29 18:45 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-03-29 18:45 - 2013-11-25 01:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-03-29 18:45 - 2013-11-23 14:47 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll

2014-03-29 18:45 - 2013-11-23 09:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll

2014-03-29 18:45 - 2013-11-23 09:13 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys

2014-03-29 18:45 - 2013-11-23 09:08 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-03-29 18:45 - 2013-11-23 06:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-03-29 18:45 - 2013-11-23 05:19 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-03-29 18:45 - 2013-11-23 05:15 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-03-29 18:45 - 2013-11-21 08:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll

2014-03-29 18:45 - 2013-11-21 08:26 - 01415680 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-03-29 18:45 - 2013-11-15 16:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll

2014-03-29 18:45 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll

2014-03-29 18:45 - 2013-11-15 16:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2014-03-29 18:45 - 2013-11-15 15:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-03-29 18:45 - 2013-10-31 02:29 - 00745336 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-03-29 18:45 - 2013-10-31 01:41 - 00552624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-03-29 18:45 - 2013-09-21 07:20 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-03-29 18:45 - 2013-09-21 07:09 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-03-29 18:43 - 2013-11-08 12:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll

2014-03-29 18:43 - 2013-11-08 05:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2014-03-29 18:43 - 2013-11-04 13:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-03-29 18:43 - 2013-11-04 12:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-03-29 18:43 - 2013-11-04 03:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2014-03-29 18:43 - 2013-10-31 02:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-03-29 18:43 - 2013-10-10 12:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-03-29 18:43 - 2013-10-10 12:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-03-29 18:43 - 2013-10-05 16:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2014-03-29 18:43 - 2013-10-05 16:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-03-29 18:43 - 2013-10-05 14:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2014-03-29 18:43 - 2013-10-05 14:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-03-29 18:42 - 2013-11-11 04:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2014-03-29 18:42 - 2013-11-09 08:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe

2014-03-29 18:42 - 2013-11-09 07:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe

2014-03-29 18:42 - 2013-11-08 06:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2014-03-29 18:42 - 2013-11-08 06:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll

2014-03-29 18:42 - 2013-11-08 06:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2014-03-29 18:42 - 2013-11-08 05:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll

2014-03-29 18:42 - 2013-11-05 16:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll

2014-03-29 18:42 - 2013-11-04 15:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll

2014-03-29 18:42 - 2013-11-04 04:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll

2014-03-29 18:42 - 2013-11-01 13:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2014-03-29 18:42 - 2013-11-01 08:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll

2014-03-29 18:42 - 2013-11-01 07:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll

2014-03-29 18:42 - 2013-10-31 02:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-03-29 18:42 - 2013-10-31 02:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-03-29 18:42 - 2013-10-31 02:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-03-29 18:42 - 2013-10-26 03:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys

2014-03-29 18:42 - 2013-10-24 11:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll

2014-03-29 18:42 - 2013-10-24 11:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll

2014-03-29 18:42 - 2013-10-17 13:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2014-03-29 18:42 - 2013-10-17 12:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2014-03-29 18:42 - 2013-10-10 13:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll

2014-03-29 18:42 - 2013-10-10 13:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll

2014-03-29 18:42 - 2013-09-21 09:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe

2014-03-29 18:41 - 2013-09-25 12:25 - 00783504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll

2014-03-29 18:41 - 2013-09-25 10:58 - 00648648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll

2014-03-29 18:41 - 2013-09-24 07:54 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2014-03-29 18:41 - 2013-09-24 07:10 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2014-03-29 18:41 - 2013-09-24 07:05 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2014-03-29 18:41 - 2013-09-24 05:56 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll

2014-03-29 18:41 - 2013-09-21 14:10 - 00579416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2014-03-29 18:41 - 2013-09-21 14:10 - 00236376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2014-03-29 18:41 - 2013-09-21 14:10 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2014-03-29 18:41 - 2013-09-21 13:50 - 00528048 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2014-03-29 18:41 - 2013-09-21 13:48 - 00534048 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2014-03-29 18:41 - 2013-09-21 13:48 - 00123480 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-03-29 18:41 - 2013-09-21 12:56 - 00101208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-03-29 18:41 - 2013-09-21 12:53 - 01534504 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2014-03-29 18:41 - 2013-09-21 12:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll

2014-03-29 18:41 - 2013-09-21 12:53 - 00366688 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll

2014-03-29 18:41 - 2013-09-21 12:45 - 00171968 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-03-29 18:41 - 2013-09-21 11:23 - 00427096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2014-03-29 18:41 - 2013-09-21 11:23 - 00098104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-03-29 18:41 - 2013-09-21 11:12 - 01092896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2014-03-29 18:41 - 2013-09-21 11:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll

2014-03-29 18:41 - 2013-09-21 11:09 - 00312936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll

2014-03-29 18:41 - 2013-09-21 09:58 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-03-29 18:41 - 2013-09-21 09:57 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-03-29 18:41 - 2013-09-21 09:55 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys

2014-03-29 18:41 - 2013-09-21 09:50 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll

2014-03-29 18:41 - 2013-09-21 08:55 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll

2014-03-29 18:41 - 2013-09-21 08:33 - 11366912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll

2014-03-29 18:41 - 2013-09-21 07:59 - 00940544 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-03-29 18:41 - 2013-09-21 07:57 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\livessp.dll

2014-03-29 18:41 - 2013-09-21 07:56 - 08712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll

2014-03-29 18:41 - 2013-09-21 07:43 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2014-03-29 18:41 - 2013-09-21 07:38 - 00365568 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2014-03-29 18:41 - 2013-09-21 07:34 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2014-03-29 18:41 - 2013-09-21 07:31 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-03-29 18:41 - 2013-09-21 07:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2014-03-29 18:41 - 2013-09-21 07:10 - 12028416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2014-03-29 18:41 - 2013-09-21 07:05 - 08875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2014-03-29 18:41 - 2013-09-21 06:44 - 01662464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2014-03-29 18:41 - 2013-09-21 06:39 - 01455616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2014-03-29 18:41 - 2013-09-21 06:36 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2014-03-29 18:41 - 2013-09-19 08:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx

2014-03-29 18:41 - 2013-09-19 07:08 - 01150976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll

2014-03-29 18:41 - 2013-09-19 07:01 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll

2014-03-29 18:41 - 2013-09-19 06:37 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll

2014-03-29 18:41 - 2013-09-19 06:32 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll

2014-03-29 18:41 - 2013-09-19 06:27 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll

2014-03-29 18:41 - 2013-09-19 06:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll

2014-03-29 18:41 - 2013-09-19 06:11 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll

2014-03-29 18:41 - 2013-09-19 06:10 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2014-03-29 18:41 - 2013-09-19 05:59 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll

2014-03-29 18:41 - 2013-09-19 05:55 - 00552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll

2014-03-29 18:41 - 2013-09-19 05:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2014-03-29 18:41 - 2013-09-19 05:32 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2014-03-29 18:41 - 2013-09-17 11:18 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-03-29 18:41 - 2013-09-17 07:00 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll

2014-03-29 18:41 - 2013-09-13 10:54 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll

2014-03-29 18:41 - 2013-09-13 09:55 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll

2014-03-29 18:41 - 2013-09-12 09:37 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll

2014-03-29 18:41 - 2013-09-07 14:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\fdprint.dll

2014-03-29 18:41 - 2013-09-07 13:07 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\TetheringMgr.dll

2014-03-29 18:41 - 2013-09-04 08:16 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll

2014-03-29 18:41 - 2013-09-04 07:47 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll

2014-03-29 18:41 - 2013-09-04 07:12 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\DscCoreConfProv.dll

2014-03-29 18:41 - 2013-09-04 06:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll

2014-03-29 18:41 - 2013-09-04 06:48 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll

2014-03-29 18:41 - 2013-08-31 16:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2014-03-29 18:41 - 2013-08-31 14:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2014-03-29 18:41 - 2013-08-31 14:04 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll

2014-03-29 18:41 - 2013-08-28 09:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe

2014-03-29 18:41 - 2013-08-27 08:09 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll

2014-03-29 18:40 - 2013-09-26 11:20 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe

2014-03-29 18:40 - 2013-09-26 09:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll

2014-03-29 18:40 - 2013-09-26 09:14 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll

2014-03-29 18:40 - 2013-09-25 09:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll

2014-03-29 18:40 - 2013-09-25 07:40 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll

2014-03-29 18:40 - 2013-09-24 08:55 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe

2014-03-29 18:40 - 2013-09-24 07:59 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe

2014-03-29 18:40 - 2013-09-21 08:01 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll

2014-03-29 18:40 - 2013-09-21 07:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-03-29 18:40 - 2013-09-21 07:02 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll

2014-03-29 18:40 - 2013-09-21 06:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll

2014-03-29 18:40 - 2013-09-21 06:38 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll

2014-03-29 18:40 - 2013-09-21 06:38 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll

2014-03-29 18:40 - 2013-09-21 06:37 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll

2014-03-29 18:40 - 2013-09-19 08:39 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll

2014-03-29 18:40 - 2013-09-19 07:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.dll

2014-03-29 18:40 - 2013-09-19 07:29 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx

2014-03-29 18:40 - 2013-09-19 06:25 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2014-03-29 18:40 - 2013-09-17 08:58 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2014-03-29 18:40 - 2013-09-17 07:26 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2014-03-29 18:40 - 2013-09-17 07:15 - 01225728 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll

2014-03-29 18:40 - 2013-09-17 06:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll

2014-03-29 18:40 - 2013-09-17 06:08 - 00738304 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll

2014-03-29 18:40 - 2013-09-17 05:28 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll

2014-03-29 18:40 - 2013-09-14 16:06 - 00175960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VerifierExt.sys

2014-03-29 18:40 - 2013-09-14 16:06 - 00066904 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL

2014-03-29 18:40 - 2013-09-14 13:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2014-03-29 18:40 - 2013-09-13 11:52 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\SensorsClassExtension.dll

2014-03-29 18:40 - 2013-09-13 10:10 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll

2014-03-29 18:40 - 2013-09-13 09:30 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll

2014-03-29 18:40 - 2013-09-11 11:31 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-03-29 18:40 - 2013-09-11 11:31 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-03-29 18:40 - 2013-09-11 09:41 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll

2014-03-29 18:40 - 2013-09-11 09:09 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll

2014-03-29 18:40 - 2013-09-07 14:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll

2014-03-29 18:40 - 2013-09-07 14:00 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdprint.dll

2014-03-29 18:40 - 2013-09-07 13:50 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll

2014-03-29 18:40 - 2013-09-07 13:45 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll

2014-03-29 18:40 - 2013-09-07 13:30 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll

2014-03-29 18:40 - 2013-09-07 13:22 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll

2014-03-29 18:40 - 2013-09-07 13:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll

2014-03-29 18:40 - 2013-09-05 09:39 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-03-29 18:40 - 2013-09-05 08:42 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe

2014-03-29 18:40 - 2013-09-05 07:40 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Utilman.exe

2014-03-29 18:40 - 2013-09-04 09:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll

2014-03-29 18:40 - 2013-09-04 06:35 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll

2014-03-29 18:40 - 2013-08-31 12:46 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll

2014-03-29 18:40 - 2013-08-31 12:00 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2014-03-29 18:40 - 2013-08-31 11:25 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2014-03-29 18:40 - 2013-08-30 09:31 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll

2014-03-29 18:40 - 2013-08-28 09:55 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe

2014-03-29 18:40 - 2013-08-28 09:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll

2014-03-29 18:40 - 2013-08-27 07:24 - 00813568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll

2014-03-29 18:35 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-03-29 18:35 - 2013-10-03 11:16 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll

2014-03-29 18:35 - 2013-10-03 11:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll

2014-03-29 18:35 - 2013-10-02 13:00 - 01286552 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2014-03-29 18:35 - 2013-10-02 11:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2014-03-29 18:35 - 2013-10-01 05:42 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll

2014-03-29 18:35 - 2013-10-01 05:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll

2014-03-29 18:34 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-03-29 18:34 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-03-29 18:34 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-03-29 18:34 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-03-29 18:34 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-03-29 18:34 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-03-29 18:34 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-03-29 18:34 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-03-29 18:34 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-03-29 18:34 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-03-29 18:34 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-03-29 18:34 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-03-29 18:34 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-03-29 18:34 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-03-29 18:34 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-03-29 18:34 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-03-29 18:34 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-03-29 18:34 - 2014-02-06 13:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-03-29 18:34 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-03-29 18:34 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-03-29 18:34 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-03-29 18:34 - 2014-02-06 12:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-03-29 18:34 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-03-29 18:34 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-03-29 18:34 - 2014-02-06 12:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-03-29 18:34 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-03-29 18:34 - 2014-02-06 12:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-03-29 18:34 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-03-29 18:34 - 2014-02-06 12:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-03-29 18:34 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-03-29 18:34 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-03-29 18:34 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-03-29 18:34 - 2014-02-06 11:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-03-29 18:34 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-03-29 18:34 - 2014-02-06 11:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-03-29 18:34 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-03-29 18:34 - 2014-02-06 11:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-03-29 18:34 - 2013-12-20 12:18 - 01643584 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-03-29 18:34 - 2013-12-20 12:18 - 01507704 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-03-29 18:34 - 2013-12-09 02:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-03-29 18:34 - 2013-12-09 02:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-03-29 18:34 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-03-29 18:34 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-03-29 18:34 - 2013-10-19 10:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2014-03-29 18:34 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2014-03-29 18:33 - 2014-02-11 05:04 - 04189184 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-03-29 18:33 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-03-29 18:33 - 2014-02-11 04:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-03-29 18:33 - 2014-01-31 18:15 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2014-03-29 18:33 - 2014-01-31 18:07 - 00233920 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-03-29 18:33 - 2014-01-31 18:06 - 02133208 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-03-29 18:33 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-03-29 18:33 - 2014-01-31 11:06 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2014-03-29 18:33 - 2014-01-29 11:55 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2014-03-29 18:33 - 2014-01-29 10:53 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2014-03-29 18:33 - 2014-01-29 10:53 - 00407024 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll

2014-03-29 18:33 - 2014-01-29 10:49 - 01928144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2014-03-29 18:33 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-03-29 18:33 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2014-03-29 18:33 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe

2014-03-29 18:33 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll

2014-03-29 18:33 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll

2014-03-29 18:33 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2014-03-29 18:33 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll

2014-03-29 18:33 - 2014-01-27 21:06 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-03-29 18:33 - 2014-01-27 21:04 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE

2014-03-29 18:33 - 2014-01-27 20:52 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2014-03-29 18:33 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll

2014-03-29 18:33 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-03-29 18:33 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE

2014-03-29 18:33 - 2014-01-27 20:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-03-29 18:33 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-03-29 18:33 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll

2014-03-29 18:33 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll

2014-03-29 18:33 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-03-29 18:33 - 2014-01-27 17:50 - 06640640 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-03-29 18:33 - 2014-01-27 13:45 - 00386722 _____ () C:\Windows\system32\ApnDatabase.xml

2014-03-29 18:33 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-03-29 18:33 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-03-29 18:33 - 2014-01-09 10:25 - 02804224 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-03-29 18:33 - 2014-01-09 09:59 - 01020928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-03-29 18:33 - 2014-01-09 09:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-03-29 18:33 - 2014-01-09 09:49 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-03-29 18:33 - 2014-01-09 09:44 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-03-29 18:33 - 2014-01-09 09:43 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-03-29 18:33 - 2014-01-09 09:29 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-03-29 18:33 - 2014-01-09 09:28 - 04217344 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-03-29 18:33 - 2014-01-09 09:28 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-03-29 18:33 - 2014-01-09 09:18 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-03-29 18:33 - 2014-01-07 09:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe

2014-03-29 18:33 - 2014-01-07 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe

2014-03-29 18:33 - 2014-01-07 07:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-03-29 18:33 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-03-29 18:33 - 2014-01-04 22:50 - 01462216 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-03-29 18:33 - 2014-01-04 21:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-03-29 18:33 - 2014-01-04 16:30 - 13209088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-03-29 18:33 - 2014-01-04 16:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-03-29 18:33 - 2014-01-04 15:42 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-03-29 18:33 - 2014-01-04 15:40 - 07416832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-03-29 18:33 - 2014-01-04 15:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-03-29 18:33 - 2014-01-04 15:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-03-29 18:33 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe

2014-03-29 18:33 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll

2014-03-29 18:33 - 2013-12-21 04:10 - 00009701 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms

2014-03-29 18:33 - 2013-12-21 04:10 - 00009701 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms

2014-03-29 18:33 - 2013-12-20 12:10 - 01113040 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-03-29 18:33 - 2013-12-20 08:13 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-03-29 18:33 - 2013-12-09 04:57 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-03-29 18:33 - 2013-12-09 03:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-03-29 18:33 - 2013-12-09 02:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2014-03-29 18:33 - 2013-11-27 17:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll

2014-03-29 18:33 - 2013-11-27 13:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe

2014-03-29 18:33 - 2013-11-27 10:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-03-29 18:33 - 2013-11-27 10:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-03-29 18:33 - 2013-11-27 10:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-03-29 18:33 - 2013-11-27 10:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-03-29 18:33 - 2013-11-23 06:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2014-03-29 18:33 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2014-03-29 18:33 - 2013-11-21 08:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-03-29 18:33 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-03-29 18:33 - 2013-11-09 08:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-03-29 18:33 - 2013-11-09 08:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll

2014-03-29 18:33 - 2013-11-09 07:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll

2014-03-29 18:33 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-03-29 18:33 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-03-29 18:33 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-03-29 18:33 - 2013-10-23 13:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-03-29 18:33 - 2013-10-23 10:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-03-29 18:33 - 2013-10-16 17:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-03-29 18:33 - 2013-10-16 15:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-03-29 18:33 - 2013-10-15 10:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2014-03-29 18:33 - 2013-10-15 10:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2014-03-29 18:33 - 2013-10-13 04:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys

2014-03-29 18:33 - 2013-10-12 23:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2014-03-29 18:33 - 2013-10-12 23:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2014-03-29 18:33 - 2013-10-05 16:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-03-29 18:33 - 2013-10-05 10:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-03-29 18:33 - 2013-09-21 12:53 - 00996320 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

Atinuvian

04.04.2014 18:57

FRST

Code:

2014-03-28 14:29 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2014-03-28 14:29 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2014-03-28 14:29 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2014-03-28 14:29 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2014-03-28 14:29 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2014-03-28 14:29 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2014-03-28 14:29 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2014-03-28 14:29 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2014-03-28 14:29 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2014-03-28 14:29 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2014-03-28 14:29 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2014-03-28 14:29 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2014-03-28 14:29 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2014-03-28 14:29 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2014-03-28 14:29 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2014-03-28 14:29 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2014-03-28 14:29 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2014-03-28 14:29 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2014-03-28 14:29 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2014-03-28 14:29 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2014-03-28 14:29 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2014-03-28 14:29 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2014-03-28 14:29 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2014-03-28 14:29 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2014-03-28 14:29 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2014-03-28 14:29 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2014-03-28 14:29 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\MSBuild

2014-03-28 13:49 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-03-28 13:49 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-03-28 13:48 - 2014-03-28 13:48 - 00000000 ____D () C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP

2014-03-28 13:45 - 2014-03-28 13:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-03-28 13:34 - 2014-03-28 13:34 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Macromedia

2014-03-28 13:31 - 2014-03-28 13:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-03-28 11:45 - 2014-04-04 19:26 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-1001

2014-03-28 11:42 - 2014-04-04 19:27 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7A8D7FB8-DDC3-4B91-A888-39F945AA60AF}

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Intel Corporation

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA Corporation

2014-03-28 11:40 - 2014-04-04 16:55 - 00000000 ____D () C:\Users\Vincent

2014-03-28 11:40 - 2014-04-04 13:27 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-03-28 11:40 - 2014-04-04 13:27 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-03-28 11:40 - 2014-04-04 00:59 - 00001450 _____ () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-03-28 11:40 - 2014-04-03 18:16 - 00000000 ____D () C:\Users\Vincent\AppData\Local\VirtualStore

2014-03-28 11:40 - 2014-03-30 21:11 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Packages

2014-03-28 11:40 - 2014-03-28 11:40 - 00000020 ___SH () C:\Users\Vincent\ntuser.ini

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Vorlagen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Startmenü

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Netzwerkumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Lokale Einstellungen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Eigene Dateien

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Druckumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Musik

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Bilder

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Verlauf

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Adobe

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-03-27 17:46 - 2014-04-04 19:16 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-03-27 17:46 - 2014-03-28 11:41 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00002149 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-03-27 17:46 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-03-27 17:46 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin

2014-03-27 17:46 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-03-27 17:46 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-03-27 17:46 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-03-27 17:46 - 2014-02-05 11:31 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-03-27 17:46 - 2014-02-05 11:30 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-03-27 17:45 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00484296 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00409544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00377688 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-03-27 17:45 - 2013-12-27 20:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-03-27 17:45 - 2013-12-27 20:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-03-27 17:45 - 2013-12-27 20:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-03-27 17:45 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2014-03-27 17:45 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2014-03-27 17:45 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2014-03-27 17:44 - 2014-04-04 18:38 - 01261406 _____ () C:\Windows\WindowsUpdate.log

2014-03-27 17:43 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-03-27 17:14 - 2014-03-27 17:14 - 01713704 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-03-27 17:14 - 2014-03-27 17:14 - 00000032 _____ () C:\csb.log

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE

2014-03-27 17:14 - 2013-10-28 11:02 - 00022240 _____ () C:\Windows\system32\Drivers\AppleCharger.sys

2014-03-27 17:14 - 2013-10-24 18:29 - 00022240 _____ () C:\Windows\system32\Drivers\UsbCharger.sys

2014-03-27 17:14 - 2010-04-06 17:30 - 00031272 _____ () C:\Windows\system32\AppleChargerSrv.exe

2014-03-27 17:13 - 2014-03-27 17:14 - 00000189 _____ () C:\Install.log

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____H () C:\ProgramData\DP45977C.lfl

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files\Realtek

2014-03-27 17:13 - 2013-10-29 14:19 - 00151256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll

2014-03-27 17:13 - 2013-10-29 12:25 - 03698904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys

2014-03-27 17:13 - 2013-10-29 09:03 - 00676825 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT

2014-03-27 17:13 - 2013-10-29 08:57 - 38251008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat

2014-03-27 17:13 - 2013-10-28 11:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll

2014-03-27 17:13 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll

2014-03-27 17:13 - 2013-10-18 10:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll

2014-03-27 17:13 - 2013-10-11 05:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll

2014-03-27 17:13 - 2013-10-07 05:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll

2014-03-27 17:13 - 2013-10-02 11:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll

2014-03-27 17:13 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll

2014-03-27 17:13 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll

2014-03-27 17:13 - 2013-09-09 09:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat

2014-03-27 17:13 - 2013-09-09 08:54 - 00833752 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys

2014-03-27 17:13 - 2013-09-09 08:54 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll

2014-03-27 17:13 - 2013-08-20 11:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll

2014-03-27 17:13 - 2013-08-14 10:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll

2014-03-27 17:13 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll

2014-03-27 17:13 - 2013-06-25 06:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll

2014-03-27 17:13 - 2013-06-25 06:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll

2014-03-27 17:13 - 2013-06-25 06:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll

2014-03-27 17:13 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl

2014-03-27 17:13 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll

2014-03-27 17:13 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll

2014-03-27 17:13 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll

2014-03-27 17:13 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll

2014-03-27 17:13 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll

2014-03-27 17:13 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll

2014-03-27 17:13 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll

2014-03-27 17:13 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll

2014-03-27 17:13 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2014-03-27 17:13 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll

2014-03-27 17:13 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll

2014-03-27 17:12 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-03-27 17:12 - 2014-03-27 17:12 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk

2014-03-27 17:12 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll

2014-03-27 17:12 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll

2014-03-27 17:12 - 2013-10-03 21:35 - 07587824 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 02474736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00844784 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00771056 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00769520 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00754672 _____ (Intel Corporation) C:\Windows\system32\GfxUIHotKeyMenu.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00530416 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00396272 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00393712 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00391152 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00153072 _____ (Intel Corporation) C:\Windows\system32\difx64.exe

2014-03-27 17:12 - 2013-09-17 02:21 - 00180224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3308.dll

2014-03-27 17:12 - 2013-09-17 02:19 - 00002944 _____ () C:\Windows\system32\iglhxs64.vp

2014-03-27 17:12 - 2013-09-17 02:17 - 13760512 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 12100096 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 11387392 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 09081856 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 07906304 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 06294528 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 04177920 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys

2014-03-27 17:12 - 2013-09-17 02:17 - 04067328 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 02384896 _____ () C:\Windows\system32\GfxRes.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00623104 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00548864 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00522240 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00521728 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00517120 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00516096 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00513536 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00513024 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00371200 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00365568 _____ () C:\Windows\system32\igdmd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00345600 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00303104 _____ () C:\Windows\SysWOW64\igdmd32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl

2014-03-27 17:12 - 2013-09-17 02:17 - 00265385 _____ () C:\Windows\system32\Gfxres.th-TH.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00251862 _____ () C:\Windows\system32\Gfxres.el-GR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00243712 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00233588 _____ () C:\Windows\system32\Gfxres.ru-RU.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00223744 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00220672 _____ () C:\Windows\system32\igdde64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00199481 _____ () C:\Windows\system32\Gfxres.ar-SA.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00197044 _____ () C:\Windows\system32\Gfxres.ja-JP.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00194048 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00191088 _____ () C:\Windows\system32\Gfxres.he-IL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00179353 _____ () C:\Windows\system32\Gfxres.ko-KR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00179230 _____ () C:\Windows\system32\Gfxres.it-IT.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176940 _____ () C:\Windows\system32\Gfxres.es-ES.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176666 _____ () C:\Windows\system32\Gfxres.fr-FR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176638 _____ () C:\Windows\system32\Gfxres.de-DE.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00175259 _____ () C:\Windows\system32\Gfxres.ro-RO.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00174244 _____ () C:\Windows\system32\Gfxres.hu-HU.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173953 _____ () C:\Windows\system32\Gfxres.tr-TR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173813 _____ () C:\Windows\system32\Gfxres.pl-PL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173495 _____ () C:\Windows\system32\Gfxres.nl-NL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00172750 _____ () C:\Windows\system32\Gfxres.pt-BR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00172041 _____ () C:\Windows\system32\Gfxres.fi-FI.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171709 _____ () C:\Windows\system32\Gfxres.sk-SK.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171547 _____ () C:\Windows\system32\Gfxres.sv-SE.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171310 _____ () C:\Windows\system32\Gfxres.pt-PT.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00170996 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00170175 _____ () C:\Windows\system32\Gfxres.hr-HR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00166672 _____ () C:\Windows\system32\Gfxres.sl-SI.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00165374 _____ () C:\Windows\system32\Gfxres.nb-NO.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00164698 _____ () C:\Windows\system32\Gfxres.da-DK.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00160256 _____ () C:\Windows\system32\igdail64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00159947 _____ () C:\Windows\system32\Gfxres.en-US.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00153249 _____ () C:\Windows\system32\Gfxres.zh-TW.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00151473 _____ () C:\Windows\system32\Gfxres.zh-CN.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00066560 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00029184 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00012288 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 13153792 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00492032 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00180736 _____ () C:\Windows\SysWOW64\igdde32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 20943360 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 02974208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 00290816 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 00253440 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 25982976 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 03292672 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 00329216 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 00304640 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll

2014-03-27 17:12 - 2013-09-17 02:01 - 04432896 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll

2014-03-27 17:12 - 2013-09-17 02:01 - 03523072 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll

2014-03-27 17:12 - 2013-09-16 13:17 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 02813952 _____ () C:\Windows\system32\iglhxa64.cpa

2014-03-27 17:12 - 2013-09-13 18:04 - 02064896 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01814016 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01423008 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01127424 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01123328 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00650400 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00598688 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00344224 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00214528 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00207008 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00179712 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00158720 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00148992 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00132608 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00127488 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00121504 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00093344 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL

2014-03-27 17:12 - 2013-09-13 18:04 - 00064000 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL

2014-03-27 17:12 - 2013-09-13 18:04 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00044025 _____ () C:\Windows\system32\iglhxo64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043816 _____ () C:\Windows\system32\iglhxc64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043494 _____ () C:\Windows\system32\iglhxc64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043298 _____ () C:\Windows\system32\iglhxg64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043256 _____ () C:\Windows\system32\iglhxg64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00042079 _____ () C:\Windows\system32\iglhxo64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00001125 _____ () C:\Windows\system32\iglhxa64.vp

2014-03-27 17:12 - 2013-09-13 18:03 - 04009632 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll

2014-03-27 17:12 - 2013-09-13 18:03 - 00631456 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:03 - 00176288 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll

2014-03-27 17:12 - 2013-09-13 12:44 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll

2014-03-27 17:12 - 2013-09-09 22:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll

2014-03-27 17:12 - 2013-09-09 22:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll

2014-03-27 17:12 - 2013-09-09 22:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll

2014-03-27 17:12 - 2013-09-09 22:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll

2014-03-27 17:12 - 2013-08-05 12:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll

2014-03-27 17:12 - 2013-06-21 05:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll

2014-03-27 17:12 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll

2014-03-27 17:12 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll

2014-03-27 17:11 - 2014-04-03 22:17 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-03-27 17:11 - 2014-03-27 17:47 - 00000000 ____D () C:\ProgramData\Intel

2014-03-27 17:11 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\Intel

2014-03-27 17:11 - 2014-03-27 17:12 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____D () C:\Intel

2014-03-27 17:11 - 2013-09-17 02:21 - 00449528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys

2014-03-27 17:11 - 2013-09-16 13:17 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll

2014-03-27 17:11 - 2013-09-16 13:17 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys

2014-03-27 17:11 - 2013-08-21 16:16 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2014-03-27 17:10 - 2014-03-27 17:10 - 00000010 _____ () C:\Windows\GSetup.ini

2014-03-27 17:10 - 2009-08-27 09:04 - 00207400 ____R () C:\Windows\GSetup.exe

2014-03-27 17:07 - 2014-03-27 17:16 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-500

2014-03-27 17:06 - 2014-04-04 19:20 - 01780340 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-03-27 17:04 - 2013-08-22 07:17 - 02407936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-03-27 16:59 - 2014-04-04 13:25 - 00000000 ____D () C:\Windows\Panther
 

==================== One Month Modified Files and Folders =======
 

2014-04-04 19:50 - 2014-04-04 16:58 - 00012827 _____ () C:\Users\Vincent\Downloads\FRST.txt

2014-04-04 19:50 - 2014-04-04 16:57 - 00000000 ____D () C:\FRST

2014-04-04 19:50 - 2014-04-03 16:25 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Genesis

2014-04-04 19:46 - 2014-04-04 19:46 - 00000616 _____ () C:\Users\Vincent\Desktop\JRT.txt

2014-04-04 19:41 - 2014-04-04 19:41 - 00000000 ____D () C:\Windows\ERUNT

2014-04-04 19:39 - 2014-04-03 18:12 - 00000000 ____D () C:\Users\Vincent\Desktop\Security

2014-04-04 19:36 - 2014-04-04 19:36 - 01038974 _____ (Thisisu) C:\Users\Vincent\Downloads\JRT.exe

2014-04-04 19:27 - 2014-03-28 11:42 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7A8D7FB8-DDC3-4B91-A888-39F945AA60AF}

2014-04-04 19:26 - 2014-03-28 11:45 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-1001

2014-04-04 19:20 - 2014-03-27 17:06 - 01780340 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-04-04 19:20 - 2013-08-23 01:24 - 00765378 _____ () C:\Windows\system32\perfh007.dat

2014-04-04 19:20 - 2013-08-23 01:24 - 00159696 _____ () C:\Windows\system32\perfc007.dat

2014-04-04 19:16 - 2014-04-04 16:37 - 00000000 ____D () C:\AdwCleaner

2014-04-04 19:16 - 2014-03-27 17:46 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-04-04 19:16 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-04-04 19:15 - 2014-04-04 19:15 - 00000976 _____ () C:\Users\Vincent\Desktop\AdwCleaner[S1].txt

2014-04-04 19:15 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-04-04 19:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-04-04 19:00 - 2014-04-03 19:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-04 18:38 - 2014-03-27 17:44 - 01261406 _____ () C:\Windows\WindowsUpdate.log

2014-04-04 18:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-04-04 18:27 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-04-04 17:46 - 2014-04-04 17:46 - 01110476 _____ () C:\Users\Vincent\Downloads\7z920.exe

2014-04-04 17:46 - 2014-04-04 17:46 - 00000988 _____ () C:\Users\Vincent\Desktop\7-Zip File Manager.lnk

2014-04-04 17:46 - 2014-04-04 17:46 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-04-04 17:22 - 2014-04-03 17:11 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-04 16:58 - 2014-04-04 16:58 - 00018102 _____ () C:\Users\Vincent\Downloads\Addition.txt

2014-04-04 16:56 - 2014-04-04 16:56 - 02157056 _____ (Farbar) C:\Users\Vincent\Downloads\FRST64.exe

2014-04-04 16:55 - 2014-04-04 16:55 - 00000476 _____ () C:\Users\Vincent\Downloads\defogger_disable.log

2014-04-04 16:55 - 2014-04-04 16:55 - 00000000 _____ () C:\Users\Vincent\defogger_reenable

2014-04-04 16:55 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent

2014-04-04 16:41 - 2014-04-04 13:27 - 00089178 _____ () C:\Windows\PFRO.log

2014-04-04 13:27 - 2014-03-28 11:40 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-04-04 13:27 - 2014-03-28 11:40 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PLA

2014-04-04 13:25 - 2014-04-03 17:15 - 00000000 ____D () C:\Users\Vincent\AppData\Local\CrashDumps

2014-04-04 13:25 - 2014-03-27 16:59 - 00000000 ____D () C:\Windows\Panther

2014-04-04 13:23 - 2014-04-03 20:24 - 00000000 ____D () C:\Users\Vincent\Desktop\Games

2014-04-04 00:59 - 2014-04-03 16:23 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-04-04 00:59 - 2014-03-28 11:40 - 00001450 _____ () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-04-03 22:52 - 2014-04-03 22:52 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup(1).exe

2014-04-03 22:52 - 2014-04-03 22:52 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-04-03 22:40 - 2014-04-03 22:40 - 00000000 ____D () C:\Users\Vincent\Neuer Ordner

2014-04-03 22:39 - 2014-04-03 22:39 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup.exe

2014-04-03 22:37 - 2014-04-03 20:24 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2014-04-03 22:17 - 2014-03-27 17:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-04-03 19:56 - 2014-04-03 19:56 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Macromedia

2014-04-03 19:55 - 2014-04-03 19:55 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\ProgramData\McAfee

2014-04-03 19:55 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Adobe

2014-04-03 18:16 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\VirtualStore

2014-04-03 18:09 - 2014-04-03 18:09 - 03710504 _____ (Piriform Ltd) C:\Users\Vincent\Downloads\ccsetup412_slim.exe

2014-04-03 18:09 - 2014-04-03 18:09 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-03 18:09 - 2014-04-03 18:09 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-03 17:56 - 2014-04-03 17:56 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-04-03 17:53 - 2014-04-03 16:29 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-03 17:11 - 2014-04-03 17:10 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Vincent\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-03 16:59 - 2014-04-03 16:59 - 00000000 ____D () C:\Users\Vincent\Documents\Symantec

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\AppData\Local\cache

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\.android

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 _____ () C:\Users\Vincent\daemonprocess.txt

2014-04-03 16:41 - 2014-04-03 16:41 - 00000044 _____ () C:\Users\Vincent\AppData\Roaming\WB.CFG

2014-04-03 16:41 - 2014-04-03 16:41 - 00000000 ____D () C:\Program Files (x86)\Browser Guard

2014-04-03 16:29 - 2014-04-03 16:29 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2014-04-03 16:29 - 2014-04-03 16:29 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\ProgramData\Norton

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security

2014-04-03 16:28 - 2014-04-03 16:28 - 01038704 _____ (Amazon Services LLC) C:\Users\Vincent\Downloads\Norton_Internet_Security_2014_1_PC_Downloader.exe

2014-04-03 16:25 - 2014-04-03 16:25 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\nsv514.tmp

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\ProgramData\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-04-03 14:36 - 2014-04-03 14:23 - 00000000 ____D () C:\ProgramData\NFS Underground

2014-04-03 11:08 - 2014-04-03 16:41 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\AnyProtectScannerSetup.exe

2014-04-02 16:40 - 2014-04-02 11:57 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien

2014-04-01 13:04 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-03-30 21:11 - 2014-03-30 21:11 - 00003560 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask

2014-03-30 21:11 - 2014-03-30 21:09 - 00000000 ___RD () C:\Windows\BrowserChoice

2014-03-30 21:11 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Packages

2014-03-30 21:10 - 2013-08-22 16:44 - 00335992 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism

2014-03-29 19:16 - 2014-03-29 19:15 - 00000000 ____D () C:\Windows\system32\MRT

2014-03-29 19:16 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\MSBuild

2014-03-28 13:49 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI

2014-03-28 13:49 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI

2014-03-28 13:48 - 2014-03-28 13:48 - 00000000 ____D () C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP

2014-03-28 13:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore

2014-03-28 13:45 - 2014-03-28 13:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-03-28 13:34 - 2014-03-28 13:34 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Macromedia

2014-03-28 13:31 - 2014-03-28 13:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Intel Corporation

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA Corporation

2014-03-28 11:41 - 2014-03-27 17:46 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-03-28 11:40 - 2014-03-28 11:40 - 00000020 ___SH () C:\Users\Vincent\ntuser.ini

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Vorlagen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Startmenü

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Netzwerkumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Lokale Einstellungen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Eigene Dateien

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Druckumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Musik

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Bilder

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Verlauf

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Adobe

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA

2014-03-27 17:47 - 2014-03-27 17:11 - 00000000 ____D () C:\ProgramData\Intel

2014-03-27 17:46 - 2014-03-27 17:46 - 00002149 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-03-27 17:46 - 2014-03-27 17:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-03-27 17:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help

2014-03-27 17:16 - 2014-03-27 17:07 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-500

2014-03-27 17:14 - 2014-03-27 17:14 - 01713704 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-03-27 17:14 - 2014-03-27 17:14 - 00000032 _____ () C:\csb.log

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:13 - 00000189 _____ () C:\Install.log

2014-03-27 17:14 - 2014-03-27 17:11 - 00000000 ____D () C:\Program Files\Intel

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____H () C:\ProgramData\DP45977C.lfl

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files\Realtek

2014-03-27 17:13 - 2014-03-27 17:12 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-03-27 17:12 - 2014-03-27 17:12 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk

2014-03-27 17:12 - 2014-03-27 17:11 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____D () C:\Intel

2014-03-27 17:10 - 2014-03-27 17:10 - 00000010 _____ () C:\Windows\GSetup.ini

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-03-27 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery

2014-03-27 17:00 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default

2014-03-27 16:59 - 2013-08-22 17:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template

2014-03-05 09:26 - 2014-04-03 17:11 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-03-05 09:26 - 2014-04-03 17:11 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-03-05 09:26 - 2014-04-03 17:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-03-05 00:53 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-03-05 00:53 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 

Some content of TEMP:

====================

C:\Users\Vincent\AppData\Local\Temp\AutoRun.exe

C:\Users\Vincent\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Vincent\AppData\Local\Temp\eauninstall.exe

C:\Users\Vincent\AppData\Local\Temp\NFS UNDERGROUND_uninst.exe

C:\Users\Vincent\AppData\Local\Temp\Quarantine.exe

C:\Users\Vincent\AppData\Local\Temp\speedupmypc.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys

[2014-03-29 18:33] - [2014-01-31 18:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02
 
 
 

LastRegBack: 2014-03-27 16:59
 

==================== End Of Log ============================

FRST Addition

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014

Ran by Vincent at 2014-04-04 19:50:57

Running from C:\Users\Vincent\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
 

==================== Installed Programs ======================
 

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

Additional Offer (HKLM-x32\...\{4FFDD113-2C3C-453E-845C-D5DD6DB90CEF}_is1) (Version:  - )

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Browser Guard (HKLM-x32\...\Browser Guard) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)

Dawn of War - Soulstorm (HKLM-x32\...\{20533183-D42D-4261-A125-956736FBEA8C}) (Version: 1.00.0000 - THQ)

Dawn of War - Soulstorm (x32 Version: 1.00.0000 - THQ) Hidden

Die Schlacht um Mittelerde(tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version:  - )

Foxtab (HKLM-x32\...\foxtab) (Version:  - FoxTab) <==== ATTENTION

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Genesis (HKCU\...\genesis) (Version:  - )

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden

Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden

Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)

Microsoft Games for Windows - LIVE (HKLM-x32\...\{F112F66E-25CA-42DD-983C-6118EB38F606}) (Version: 3.0.89.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}) (Version: 3.0.19.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

NFS Underground (HKLM-x32\...\{A99968BE-C155-474C-0089-33239DEE1CE2}) (Version:  - )

Norton Internet Security (HKLM-x32\...\NIS) (Version: 20.4.0.40 - Symantec Corporation)

NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden

NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)

ON_OFF Charge 2 B13.1028.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)

ON_OFF Charge 2 B13.1028.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.21.909.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7076 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Warhammer 40,000: Dawn of War – Dark Crusade (HKLM-x32\...\Steam App 4580) (Version:  - Relic Entertainment)

Warhammer 40,000: Dawn of War - Game of the Year Edition (HKLM-x32\...\Steam App 4570) (Version:  - Relic Entertainment)

Warhammer 40,000: Dawn of War – Winter Assault (HKLM-x32\...\Steam App 9310) (Version:  - Relic Entertainment)
 

==================== Restore Points  =========================
 

28-03-2014 11:48:26 Windows Modules Installer

03-04-2014 14:25:49 Uniblue SpeedUpMyPC installation
 

==================== Hosts content: ==========================
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {5087AC0D-9866-41DD-8064-81ACA4C2DCEE} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {530BD7EF-1B9E-49D4-852B-74886DC818F5} - \FoxTab No Task File

Task: {54367674-17FE-4260-B888-3282A9CF82B2} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {7FB6BA43-B434-4F1C-8EFC-DDAB06E6BCA1} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-02-04] (Microsoft Corporation)

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9E03B1D9-AE33-4231-BDE8-0E8CBFD949E4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-03] (Adobe Systems Incorporated)

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {A7CAADFF-D711-48B8-AF2F-F9A63933652A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D2DA2CCE-DAFC-4048-866D-71538F02111D} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-03-27 17:46 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-31 19:11 - 2014-03-31 19:11 - 01459712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.UI\3363e49b745a5ddf1aaf80b18c175191\Windows.UI.ni.dll

2013-08-22 09:19 - 2013-08-22 08:54 - 00050176 _____ () C:\Windows\system32\WinMetadata\Windows.Data.winmd

2014-03-31 19:11 - 2014-03-31 19:11 - 00363520 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.Foundation\8d0f16d53c303f545bdc3bdeeb2a7fb3\Windows.Foundation.ni.dll

2014-04-03 16:29 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll

2014-03-27 17:11 - 2013-09-16 13:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/04/2014 07:48:55 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16502, Zeitstempel: 0x52c35a76

Ausnahmecode: 0xc0000374

Fehleroffset: 0x000e2fd8

ID des fehlerhaften Prozesses: 0xb50

Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0

Pfad der fehlerhaften Anwendung: firefox.exe1

Pfad des fehlerhaften Moduls: firefox.exe2

Berichtskennung: firefox.exe3

Vollständiger Name des fehlerhaften Pakets: firefox.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5
 

Error: (04/04/2014 07:15:26 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 06:27:54 PM) (Source: Microsoft-Windows-Defrag) (User: )

Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
 

Error: (04/04/2014 06:08:10 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16502, Zeitstempel: 0x52c35a76

Ausnahmecode: 0xc0000374

Fehleroffset: 0x000e2fd8

ID des fehlerhaften Prozesses: 0x11b4

Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0

Pfad der fehlerhaften Anwendung: firefox.exe1

Pfad des fehlerhaften Moduls: firefox.exe2

Berichtskennung: firefox.exe3

Vollständiger Name des fehlerhaften Pakets: firefox.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5
 

Error: (04/04/2014 04:41:22 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 03:44:48 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 03:30:11 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 03:13:15 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 02:54:28 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 02:40:57 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 
 

System errors:

=============

Error: (04/04/2014 07:16:02 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Service Component of VO" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (04/04/2014 06:28:48 PM) (Source: DCOM) (User: Vincents-PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (04/04/2014 06:28:18 PM) (Source: DCOM) (User: Vincents-PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (04/04/2014 05:26:53 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:26:08 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:26:08 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:25:33 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:25:33 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:21:57 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:21:57 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 
 

Microsoft Office Sessions:

=========================

Error: (04/04/2014 07:48:55 PM) (Source: Application Error)(User: )

Description: firefox.exe28.0.0.518653240e37ntdll.dll6.3.9600.1650252c35a76c0000374000e2fd8b5001cf502e1c88e6efC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Windows\SYSTEM32\ntdll.dll63a899e1-bc21-11e3-8259-74d4351dd749
 

Error: (04/04/2014 07:15:26 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 06:27:54 PM) (Source: Microsoft-Windows-Defrag)(User: )

Description: System-reserviertFalscher Parameter. (0x80070057)
 

Error: (04/04/2014 06:08:10 PM) (Source: Application Error)(User: )

Description: firefox.exe28.0.0.518653240e37ntdll.dll6.3.9600.1650252c35a76c0000374000e2fd811b401cf501a9b982ed1C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Windows\SYSTEM32\ntdll.dll50866176-bc13-11e3-8258-74d4351dd749
 

Error: (04/04/2014 04:41:22 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 03:44:48 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 03:30:11 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 03:13:15 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 02:54:28 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 02:40:57 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d

cosinus

04.04.2014 19:06

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Users\Vincent\AppData\Local\Temp\AutoRun.exe

C:\Users\Vincent\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Vincent\AppData\Local\Temp\eauninstall.exe

C:\Users\Vincent\AppData\Local\Temp\NFS UNDERGROUND_uninst.exe

C:\Users\Vincent\AppData\Local\Temp\Quarantine.exe

C:\Users\Vincent\AppData\Local\Temp\speedupmypc.exe

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\...\Run: [genesis] - c:\users\vincent\appdata\local\genesis\genesis.exe [2658304 2014-04-03] (petimetre)

c:\users\vincent\appdata\local\genesis

S2 vosr; C:\Users\Vincent\AppData\Roaming\VOPackage\VOsrv.exe [X]

C:\Users\Vincent\AppData\Roaming\VOPackage

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Atinuvian

04.04.2014 19:16

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014

Ran by Vincent at 2014-04-04 20:14:20 Run:1

Running from C:\Users\Vincent\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

C:\Users\Vincent\AppData\Local\Temp\AutoRun.exe

C:\Users\Vincent\AppData\Local\Temp\AutoRunGUI.dll

C:\Users\Vincent\AppData\Local\Temp\eauninstall.exe

C:\Users\Vincent\AppData\Local\Temp\NFS UNDERGROUND_uninst.exe

C:\Users\Vincent\AppData\Local\Temp\Quarantine.exe

C:\Users\Vincent\AppData\Local\Temp\speedupmypc.exe

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\...\Run: [genesis] - c:\users\vincent\appdata\local\genesis\genesis.exe [2658304 2014-04-03] (petimetre)

c:\users\vincent\appdata\local\genesis

S2 vosr; C:\Users\Vincent\AppData\Roaming\VOPackage\VOsrv.exe [X]

C:\Users\Vincent\AppData\Roaming\VOPackage

*****************
 

C:\Users\Vincent\AppData\Local\Temp\AutoRun.exe => Moved successfully.

C:\Users\Vincent\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.

C:\Users\Vincent\AppData\Local\Temp\eauninstall.exe => Moved successfully.

C:\Users\Vincent\AppData\Local\Temp\NFS UNDERGROUND_uninst.exe => Moved successfully.

C:\Users\Vincent\AppData\Local\Temp\Quarantine.exe => Moved successfully.

C:\Users\Vincent\AppData\Local\Temp\speedupmypc.exe => Moved successfully.

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\Software\Microsoft\Windows\CurrentVersion\Run\\genesis => Value deleted successfully.
 

"C:\Users\Vincent\AppData\Local\Genesis" directory move:
 

C:\Users\Vincent\AppData\Local\Genesis\Genesis.exe => Moved successfully.

Could not move "C:\Users\Vincent\AppData\Local\Genesis\genesis.gdb" => Scheduled to move on reboot.

C:\Users\Vincent\AppData\Local\Genesis\genesis.gss => Moved successfully.

Could not move "C:\Users\Vincent\AppData\Local\Genesis" directory. => Scheduled to move on reboot.
 

vosr => Service deleted successfully.

"C:\Users\Vincent\AppData\Roaming\VOPackage" => File/Directory not found.
 

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-04-04 20:15:15)<=
 

C:\Users\Vincent\AppData\Local\Genesis\genesis.gdb => Is moved successfully.

C:\Users\Vincent\AppData\Local\Genesis => Moved successfully.
 

==== End of Fixlog ====

cosinus

04.04.2014 19:18

Gut, frische FRST Logs bitte, Haken setzen bei addtions, dann auf Scan klicken

Atinuvian

04.04.2014 19:24

FRST TEil 1

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014

Ran by Vincent (administrator) on VINCENTS-PC on 04-04-2014 20:21:44

Running from C:\Users\Vincent\Desktop\Security

Windows 8.1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)

HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation)

HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.)

HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-3470804408-3089260794-795954559-1001\...\MountPoints2: {722c6e8a-b5c0-11e3-824b-806e6f6e6963} - "E:\RunGame.exe" 
 

==================== Internet (Whitelisted) ====================
 

ProxyEnable: Internet Explorer proxy is enabled.

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1BBED7B8794ACF01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

StartMenuInternet: IEXPLORE.EXE - iexplore.exe

BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
 

FireFox:

========

FF ProfilePath: C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default

FF NewTab: chrome://quick_start/content/index.html

FF Homepage: www.google.de

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Adblock Plus - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\st2y1k7h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-03]

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFF

FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\IPSFF [2014-04-03]

FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\

FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\coFFPlgn\ []

FF HKLM-x32\...\Firefox\Extensions: [{20d1f7b3-7721-4da0-b6f3-78bb4d7248f4}] - C:\Program Files (x86)\Browser Guard\browserguard.xpi

FF Extension: Browser Guard - C:\Program Files (x86)\Browser Guard\browserguard.xpi [2014-02-24]

FF HKCU\...\Firefox\Extensions: [{f76c53ac-9074-4195-b0f1-e049c8e6f521}] - C:\Program Files (x86)\View-Password Corp\158.xpi

FF StartMenuInternet: FIREFOX.EXE - firefox.exe
 

==================== Services (Whitelisted) =================
 

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)

R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()

S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)

R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\BASHDefs\20140319.001\BHDrvx64.sys [1525976 2014-03-19] (Symantec Corporation)

R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-04-03] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-04-03] (Symantec Corporation)

S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)

S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)

S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)

R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\IPSDefs\20140403.001\IDSvia64.sys [525016 2014-04-02] (Symantec Corporation)

R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation)

S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)

R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20140403.032\ENG64.SYS [126040 2014-04-03] (Symantec Corporation)

R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.4.0.40\Definitions\VirusDefs\20140403.032\EX64.SYS [2099288 2014-04-03] (Symantec Corporation)

R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)

S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)

S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)

S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation)

R3 SRTSP; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)

S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)

R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)

R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2013-03-04] (Symantec Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2014-04-03] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-04] (Symantec Corporation)

R1 SymNetS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)

S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)

S1 UsbCharger; C:\Windows\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-04-04 20:13 - 2014-04-04 20:21 - 00000000 ____D () C:\FRST

2014-04-04 20:12 - 2014-04-04 20:14 - 00000000 ____D () C:\04.04.14

2014-04-04 19:41 - 2014-04-04 19:41 - 00000000 ____D () C:\Windows\ERUNT

2014-04-04 19:36 - 2014-04-04 19:36 - 01038974 _____ (Thisisu) C:\Users\Vincent\Downloads\JRT.exe

2014-04-04 17:46 - 2014-04-04 17:46 - 01110476 _____ () C:\Users\Vincent\Downloads\7z920.exe

2014-04-04 17:46 - 2014-04-04 17:46 - 00000988 _____ () C:\Users\Vincent\Desktop\7-Zip File Manager.lnk

2014-04-04 17:46 - 2014-04-04 17:46 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-04-04 16:58 - 2014-04-04 20:11 - 00152423 _____ () C:\Users\Vincent\Downloads\FRST.txt

2014-04-04 16:58 - 2014-04-04 20:11 - 00019515 _____ () C:\Users\Vincent\Downloads\Addition.txt

2014-04-04 16:55 - 2014-04-04 16:55 - 00000476 _____ () C:\Users\Vincent\Downloads\defogger_disable.log

2014-04-04 16:55 - 2014-04-04 16:55 - 00000000 _____ () C:\Users\Vincent\defogger_reenable

2014-04-04 16:37 - 2014-04-04 19:16 - 00000000 ____D () C:\AdwCleaner

2014-04-04 13:27 - 2014-04-04 20:15 - 00089504 _____ () C:\Windows\PFRO.log

2014-04-03 22:52 - 2014-04-03 22:52 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup(1).exe

2014-04-03 22:52 - 2014-04-03 22:52 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-04-03 22:40 - 2014-04-03 22:40 - 00000000 ____D () C:\Users\Vincent\Neuer Ordner

2014-04-03 22:39 - 2014-04-03 22:39 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup.exe

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2014-04-03 22:26 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll

2014-04-03 22:26 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll

2014-04-03 22:26 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll

2014-04-03 22:26 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll

2014-04-03 22:26 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll

2014-04-03 22:26 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll

2014-04-03 22:26 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll

2014-04-03 22:26 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll

2014-04-03 22:26 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll

2014-04-03 22:26 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll

2014-04-03 22:26 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll

2014-04-03 22:26 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll

2014-04-03 22:26 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll

2014-04-03 22:26 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll

2014-04-03 22:26 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll

2014-04-03 22:26 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll

2014-04-03 22:26 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll

2014-04-03 22:26 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll

2014-04-03 22:26 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll

2014-04-03 22:26 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll

2014-04-03 22:26 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll

2014-04-03 22:26 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll

2014-04-03 22:26 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll

2014-04-03 22:26 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll

2014-04-03 22:26 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll

2014-04-03 22:26 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll

2014-04-03 22:26 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll

2014-04-03 22:26 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll

2014-04-03 22:26 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll

2014-04-03 22:26 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll

2014-04-03 22:26 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll

2014-04-03 22:26 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll

2014-04-03 22:26 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll

2014-04-03 22:26 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll

2014-04-03 22:26 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll

2014-04-03 22:26 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll

2014-04-03 22:26 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll

2014-04-03 22:26 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll

2014-04-03 22:26 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll

2014-04-03 22:26 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll

2014-04-03 22:26 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll

2014-04-03 22:26 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll

2014-04-03 22:26 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll

2014-04-03 22:26 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll

2014-04-03 22:26 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll

2014-04-03 22:26 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll

2014-04-03 22:26 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll

2014-04-03 22:26 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll

2014-04-03 22:26 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll

2014-04-03 22:26 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll

2014-04-03 22:26 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll

2014-04-03 22:26 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll

2014-04-03 20:24 - 2014-04-04 13:23 - 00000000 ____D () C:\Users\Vincent\Desktop\Games

2014-04-03 20:24 - 2014-04-03 22:37 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-04-03 19:56 - 2014-04-03 19:56 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Macromedia

2014-04-03 19:55 - 2014-04-04 20:00 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-03 19:55 - 2014-04-03 19:55 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\ProgramData\McAfee

2014-04-03 19:54 - 2014-04-03 19:55 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Adobe

2014-04-03 18:12 - 2014-04-04 20:21 - 00000000 ____D () C:\Users\Vincent\Desktop\Security

2014-04-03 18:09 - 2014-04-03 18:09 - 03710504 _____ (Piriform Ltd) C:\Users\Vincent\Downloads\ccsetup412_slim.exe

2014-04-03 18:09 - 2014-04-03 18:09 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-03 18:09 - 2014-04-03 18:09 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-03 17:56 - 2014-04-03 17:56 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-04-03 17:15 - 2014-04-04 13:25 - 00000000 ____D () C:\Users\Vincent\AppData\Local\CrashDumps

2014-04-03 17:11 - 2014-04-04 17:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-03 17:11 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-04-03 17:11 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-04-03 17:11 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-04-03 17:10 - 2014-04-03 17:11 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Vincent\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-03 16:59 - 2014-04-03 16:59 - 00000000 ____D () C:\Users\Vincent\Documents\Symantec

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\AppData\Local\cache

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\.android

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 _____ () C:\Users\Vincent\daemonprocess.txt

2014-04-03 16:41 - 2014-04-03 16:41 - 00000044 _____ () C:\Users\Vincent\AppData\Roaming\WB.CFG

2014-04-03 16:41 - 2014-04-03 16:41 - 00000000 ____D () C:\Program Files (x86)\Browser Guard

2014-04-03 16:41 - 2014-04-03 11:08 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\AnyProtectScannerSetup.exe

2014-04-03 16:29 - 2014-04-03 17:53 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-04-03 16:29 - 2014-04-03 16:29 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2014-04-03 16:29 - 2014-04-03 16:29 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\ProgramData\Norton

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security

2014-04-03 16:28 - 2014-04-03 16:28 - 01038704 _____ (Amazon Services LLC) C:\Users\Vincent\Downloads\Norton_Internet_Security_2014_1_PC_Downloader.exe

2014-04-03 16:25 - 2014-04-03 16:25 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\nsv514.tmp

2014-04-03 16:25 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2014-04-03 16:25 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2014-04-03 16:23 - 2014-04-04 00:59 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\ProgramData\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-04-03 14:23 - 2014-04-03 14:36 - 00000000 ____D () C:\ProgramData\NFS Underground

2014-04-02 11:57 - 2014-04-02 16:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien

2014-03-30 21:11 - 2014-03-30 21:11 - 00003560 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask

2014-03-30 21:09 - 2014-03-30 21:11 - 00000000 ___RD () C:\Windows\BrowserChoice

2014-03-29 19:15 - 2014-03-29 19:16 - 00000000 ____D () C:\Windows\system32\MRT

2014-03-29 19:15 - 2014-02-04 20:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-03-29 18:48 - 2014-01-08 03:46 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS

2014-03-29 18:48 - 2014-01-08 03:41 - 01530712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2014-03-29 18:48 - 2014-01-08 03:41 - 00382808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2014-03-29 18:48 - 2014-01-04 17:54 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll

2014-03-29 18:48 - 2014-01-04 17:08 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll

2014-03-29 18:48 - 2014-01-04 16:08 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll

2014-03-29 18:48 - 2014-01-04 15:53 - 00174592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll

2014-03-29 18:48 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2014-03-29 18:48 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-03-29 18:48 - 2014-01-01 03:55 - 01720560 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2014-03-29 18:48 - 2014-01-01 03:52 - 00481944 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll

2014-03-29 18:48 - 2014-01-01 02:56 - 01472048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2014-03-29 18:48 - 2014-01-01 02:55 - 00381168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll

2014-03-29 18:48 - 2014-01-01 01:59 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2014-03-29 18:48 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2014-03-29 18:48 - 2014-01-01 01:56 - 00960512 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll

2014-03-29 18:48 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll

2014-03-29 18:48 - 2013-12-31 01:33 - 00770560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll

2014-03-29 18:48 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll

2014-03-29 18:48 - 2013-12-31 01:31 - 00947712 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll

2014-03-29 18:48 - 2013-12-31 01:31 - 00914944 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll

2014-03-29 18:48 - 2013-12-27 17:09 - 00419160 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll

2014-03-29 18:48 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll

2014-03-29 18:48 - 2013-12-27 10:57 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe

2014-03-29 18:48 - 2013-12-27 10:23 - 00749056 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll

2014-03-29 18:48 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll

2014-03-29 18:48 - 2013-12-27 09:03 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe

2014-03-29 18:48 - 2013-12-27 08:37 - 00588800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll

2014-03-29 18:48 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll

2014-03-29 18:48 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys

2014-03-29 18:48 - 2013-12-14 08:31 - 13949440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2014-03-29 18:48 - 2013-12-14 08:19 - 18576384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll

2014-03-29 18:48 - 2013-12-13 12:54 - 00131160 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe

2014-03-29 18:48 - 2013-12-13 08:36 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll

2014-03-29 18:48 - 2013-12-13 07:32 - 00140800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll

2014-03-29 18:48 - 2013-12-09 10:05 - 21199256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2014-03-29 18:48 - 2013-12-09 06:51 - 18643560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2014-03-29 18:48 - 2013-09-26 08:34 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll

2014-03-29 18:48 - 2013-09-26 08:34 - 00515072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll

2014-03-29 18:47 - 2013-10-23 13:29 - 00044936 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll

2014-03-29 18:47 - 2013-10-23 13:21 - 00155480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-03-29 18:47 - 2013-10-23 13:13 - 00171864 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_8086.dll

2014-03-29 18:47 - 2013-10-22 09:55 - 02328872 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2014-03-29 18:47 - 2013-10-22 08:03 - 02065448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2014-03-29 18:47 - 2013-10-22 07:15 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2014-03-29 18:47 - 2013-10-22 06:04 - 00618496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll

2014-03-29 18:47 - 2013-10-22 05:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll

2014-03-29 18:47 - 2013-10-22 05:44 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll

2014-03-29 18:47 - 2013-10-22 04:38 - 01362944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2014-03-29 18:47 - 2013-10-22 04:22 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll

2014-03-29 18:47 - 2013-10-22 04:13 - 01704448 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2014-03-29 18:47 - 2013-10-22 03:53 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll

2014-03-29 18:47 - 2013-10-19 06:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2014-03-29 18:47 - 2013-10-19 06:03 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll

2014-03-29 18:47 - 2013-10-19 05:26 - 01231360 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll

2014-03-29 18:47 - 2013-10-19 05:14 - 00888832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll

2014-03-29 18:47 - 2013-10-16 11:34 - 00518656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe

2014-03-29 18:47 - 2013-10-16 11:33 - 00631296 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe

2014-03-29 18:47 - 2013-10-13 05:06 - 00258904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys

2014-03-29 18:47 - 2013-10-13 04:43 - 00708616 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll

2014-03-29 18:47 - 2013-10-10 18:26 - 00317616 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2014-03-29 18:47 - 2013-10-10 18:26 - 00104320 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll

2014-03-29 18:47 - 2013-10-10 16:53 - 00235960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2014-03-29 18:47 - 2013-10-10 16:53 - 00088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll

2014-03-29 18:47 - 2013-10-10 13:38 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2014-03-29 18:47 - 2013-10-08 12:28 - 00523096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys

2014-03-29 18:47 - 2013-10-08 08:46 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll

2014-03-29 18:47 - 2013-10-08 07:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll

2014-03-29 18:47 - 2013-10-08 07:50 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2014-03-29 18:47 - 2013-10-08 07:48 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2014-03-29 18:47 - 2013-10-08 07:15 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2014-03-29 18:47 - 2013-10-08 07:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll

2014-03-29 18:47 - 2013-10-08 06:50 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2014-03-29 18:47 - 2013-10-08 06:50 - 00762368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll

2014-03-29 18:47 - 2013-10-07 09:21 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2014-03-29 18:47 - 2013-10-07 04:13 - 03532288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2014-03-29 18:47 - 2013-10-05 17:25 - 00057176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys

2014-03-29 18:47 - 2013-10-05 16:21 - 00699840 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2014-03-29 18:47 - 2013-10-05 14:05 - 00578952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2014-03-29 18:47 - 2013-10-05 13:01 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2014-03-29 18:47 - 2013-10-05 11:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe

2014-03-29 18:47 - 2013-10-05 11:18 - 01011712 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll

2014-03-29 18:47 - 2013-10-05 11:07 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll

2014-03-29 18:47 - 2013-10-05 10:56 - 01147904 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2014-03-29 18:47 - 2013-10-05 10:55 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\miutils.dll

2014-03-29 18:47 - 2013-10-05 10:40 - 00795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll

2014-03-29 18:47 - 2013-10-05 10:24 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\miutils.dll

2014-03-29 18:47 - 2013-10-05 10:21 - 00920064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll

2014-03-29 18:47 - 2013-10-05 10:15 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll

2014-03-29 18:47 - 2013-10-05 09:43 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll

2014-03-29 18:47 - 2013-10-05 09:35 - 00411648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2014-03-29 18:47 - 2013-10-04 10:10 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll

2014-03-29 18:47 - 2013-09-19 09:19 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersRes.dll

2014-03-29 18:47 - 2013-09-19 08:27 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\WorkFolders.exe

2014-03-29 18:47 - 2013-09-19 08:23 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WorkFoldersRes.dll

2014-03-29 18:47 - 2013-09-17 11:06 - 01067080 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll

2014-03-29 18:47 - 2013-09-17 11:06 - 00465960 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2014-03-29 18:47 - 2013-09-17 08:31 - 00883184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll

2014-03-29 18:47 - 2013-09-17 08:31 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2014-03-29 18:47 - 2013-09-17 06:37 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll

2014-03-29 18:47 - 2013-09-14 16:07 - 02134120 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2014-03-29 18:47 - 2013-09-14 16:00 - 00391512 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll

2014-03-29 18:47 - 2013-09-14 14:39 - 01799944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll

2014-03-29 18:47 - 2013-09-14 14:33 - 00345552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll

2014-03-29 18:47 - 2013-09-14 12:05 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe

2014-03-29 18:47 - 2013-09-14 11:11 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll

2014-03-29 18:47 - 2013-09-13 10:22 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe

2014-03-29 18:47 - 2013-09-13 09:47 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ftp.exe

2014-03-29 18:47 - 2013-09-12 10:45 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll

2014-03-29 18:47 - 2013-09-12 10:08 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll

2014-03-29 18:47 - 2013-09-12 10:08 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll

2014-03-29 18:47 - 2013-09-12 10:02 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll

2014-03-29 18:47 - 2013-09-12 09:44 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll

2014-03-29 18:47 - 2013-09-12 09:37 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll

2014-03-29 18:47 - 2013-09-12 09:37 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll

2014-03-29 18:47 - 2013-09-12 09:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll

2014-03-29 18:47 - 2013-09-12 09:16 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll

2014-03-29 18:47 - 2013-09-12 09:01 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll

2014-03-29 18:47 - 2013-09-10 06:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\msched.dll

2014-03-29 18:45 - 2013-12-09 02:34 - 01227264 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll

2014-03-29 18:45 - 2013-12-09 02:04 - 00980480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll

2014-03-29 18:45 - 2013-11-27 17:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2014-03-29 18:45 - 2013-11-27 17:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll

2014-03-29 18:45 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll

2014-03-29 18:45 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-03-29 18:45 - 2013-11-27 14:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys

2014-03-29 18:45 - 2013-11-27 12:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2014-03-29 18:45 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2014-03-29 18:45 - 2013-11-27 11:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll

2014-03-29 18:45 - 2013-11-27 11:17 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll

2014-03-29 18:45 - 2013-11-27 11:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll

2014-03-29 18:45 - 2013-11-27 10:58 - 01503232 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2014-03-29 18:45 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll

2014-03-29 18:45 - 2013-11-26 15:20 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll

2014-03-29 18:45 - 2013-11-26 15:20 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll

2014-03-29 18:45 - 2013-11-26 13:44 - 01204968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll

2014-03-29 18:45 - 2013-11-25 03:45 - 00142680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2014-03-29 18:45 - 2013-11-25 03:32 - 01119064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2014-03-29 18:45 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2014-03-29 18:45 - 2013-11-25 01:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2014-03-29 18:45 - 2013-11-23 14:47 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll

2014-03-29 18:45 - 2013-11-23 09:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll

2014-03-29 18:45 - 2013-11-23 09:13 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys

2014-03-29 18:45 - 2013-11-23 09:08 - 00403456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2014-03-29 18:45 - 2013-11-23 06:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll

2014-03-29 18:45 - 2013-11-23 05:19 - 02617344 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2014-03-29 18:45 - 2013-11-23 05:15 - 02295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2014-03-29 18:45 - 2013-11-21 08:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll

2014-03-29 18:45 - 2013-11-21 08:26 - 01415680 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2014-03-29 18:45 - 2013-11-15 16:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll

2014-03-29 18:45 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll

2014-03-29 18:45 - 2013-11-15 16:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll

2014-03-29 18:45 - 2013-11-15 15:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2014-03-29 18:45 - 2013-10-31 02:29 - 00745336 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2014-03-29 18:45 - 2013-10-31 01:41 - 00552624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2014-03-29 18:45 - 2013-09-21 07:20 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2014-03-29 18:45 - 2013-09-21 07:09 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2014-03-29 18:43 - 2013-11-08 12:26 - 00358896 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll

2014-03-29 18:43 - 2013-11-08 05:41 - 01302528 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll

2014-03-29 18:43 - 2013-11-04 13:50 - 02143744 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll

2014-03-29 18:43 - 2013-11-04 12:32 - 02570240 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll

2014-03-29 18:43 - 2013-11-04 03:30 - 01765376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll

2014-03-29 18:43 - 2013-10-31 02:42 - 07399256 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2014-03-29 18:43 - 2013-10-10 12:34 - 01085952 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll

2014-03-29 18:43 - 2013-10-10 12:27 - 00869888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll

2014-03-29 18:43 - 2013-10-05 16:21 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2014-03-29 18:43 - 2013-10-05 16:21 - 00516496 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2014-03-29 18:43 - 2013-10-05 14:05 - 01765384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2014-03-29 18:43 - 2013-10-05 14:05 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2014-03-29 18:42 - 2013-11-11 04:48 - 00039768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys

2014-03-29 18:42 - 2013-11-09 08:37 - 01756160 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe

2014-03-29 18:42 - 2013-11-09 07:56 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe

2014-03-29 18:42 - 2013-11-08 06:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll

2014-03-29 18:42 - 2013-11-08 06:16 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll

2014-03-29 18:42 - 2013-11-08 06:15 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll

2014-03-29 18:42 - 2013-11-08 05:14 - 00922624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll

2014-03-29 18:42 - 2013-11-05 16:19 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll

2014-03-29 18:42 - 2013-11-04 15:07 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll

2014-03-29 18:42 - 2013-11-04 04:28 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll

2014-03-29 18:42 - 2013-11-01 13:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2014-03-29 18:42 - 2013-11-01 08:08 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll

2014-03-29 18:42 - 2013-11-01 07:57 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll

2014-03-29 18:42 - 2013-10-31 02:58 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys

2014-03-29 18:42 - 2013-10-31 02:33 - 01476184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2014-03-29 18:42 - 2013-10-31 02:33 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2014-03-29 18:42 - 2013-10-26 03:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys

2014-03-29 18:42 - 2013-10-24 11:31 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll

2014-03-29 18:42 - 2013-10-24 11:12 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll

2014-03-29 18:42 - 2013-10-17 13:21 - 02896896 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2014-03-29 18:42 - 2013-10-17 12:36 - 02266624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll

2014-03-29 18:42 - 2013-10-10 13:53 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll

2014-03-29 18:42 - 2013-10-10 13:21 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll

2014-03-29 18:42 - 2013-09-21 09:17 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe

2014-03-29 18:41 - 2013-09-25 12:25 - 00783504 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll

2014-03-29 18:41 - 2013-09-25 10:58 - 00648648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll

2014-03-29 18:41 - 2013-09-24 07:54 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll

2014-03-29 18:41 - 2013-09-24 07:10 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll

2014-03-29 18:41 - 2013-09-24 07:05 - 01245696 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2014-03-29 18:41 - 2013-09-24 05:56 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.ContentPrefetchTask.dll

2014-03-29 18:41 - 2013-09-21 14:10 - 00579416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2014-03-29 18:41 - 2013-09-21 14:10 - 00236376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys

2014-03-29 18:41 - 2013-09-21 14:10 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys

2014-03-29 18:41 - 2013-09-21 13:50 - 00528048 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2014-03-29 18:41 - 2013-09-21 13:48 - 00534048 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2014-03-29 18:41 - 2013-09-21 13:48 - 00123480 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll

2014-03-29 18:41 - 2013-09-21 12:56 - 00101208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2014-03-29 18:41 - 2013-09-21 12:53 - 01534504 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2014-03-29 18:41 - 2013-09-21 12:53 - 00934856 _____ (Microsoft Corporation) C:\Windows\system32\mfsrcsnk.dll

2014-03-29 18:41 - 2013-09-21 12:53 - 00366688 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll

2014-03-29 18:41 - 2013-09-21 12:45 - 00171968 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2014-03-29 18:41 - 2013-09-21 11:23 - 00427096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2014-03-29 18:41 - 2013-09-21 11:23 - 00098104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll

2014-03-29 18:41 - 2013-09-21 11:12 - 01092896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2014-03-29 18:41 - 2013-09-21 11:09 - 00796928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll

2014-03-29 18:41 - 2013-09-21 11:09 - 00312936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll

2014-03-29 18:41 - 2013-09-21 09:58 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2014-03-29 18:41 - 2013-09-21 09:57 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2014-03-29 18:41 - 2013-09-21 09:55 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys

2014-03-29 18:41 - 2013-09-21 09:50 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll

2014-03-29 18:41 - 2013-09-21 08:55 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll

2014-03-29 18:41 - 2013-09-21 08:33 - 11366912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll

2014-03-29 18:41 - 2013-09-21 07:59 - 00940544 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2014-03-29 18:41 - 2013-09-21 07:57 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\livessp.dll

2014-03-29 18:41 - 2013-09-21 07:56 - 08712704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll

2014-03-29 18:41 - 2013-09-21 07:43 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll

2014-03-29 18:41 - 2013-09-21 07:38 - 00365568 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll

2014-03-29 18:41 - 2013-09-21 07:34 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll

2014-03-29 18:41 - 2013-09-21 07:31 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2014-03-29 18:41 - 2013-09-21 07:26 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll

2014-03-29 18:41 - 2013-09-21 07:10 - 12028416 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2014-03-29 18:41 - 2013-09-21 07:05 - 08875008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2014-03-29 18:41 - 2013-09-21 06:44 - 01662464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll

2014-03-29 18:41 - 2013-09-21 06:39 - 01455616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll

2014-03-29 18:41 - 2013-09-21 06:36 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2014-03-29 18:41 - 2013-09-19 08:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx

2014-03-29 18:41 - 2013-09-19 07:08 - 01150976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll

2014-03-29 18:41 - 2013-09-19 07:01 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll

2014-03-29 18:41 - 2013-09-19 06:37 - 00802816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll

2014-03-29 18:41 - 2013-09-19 06:32 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll

2014-03-29 18:41 - 2013-09-19 06:27 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll

2014-03-29 18:41 - 2013-09-19 06:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll

2014-03-29 18:41 - 2013-09-19 06:11 - 01344000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll

2014-03-29 18:41 - 2013-09-19 06:10 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2014-03-29 18:41 - 2013-09-19 05:59 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll

2014-03-29 18:41 - 2013-09-19 05:55 - 00552448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll

2014-03-29 18:41 - 2013-09-19 05:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll

2014-03-29 18:41 - 2013-09-19 05:32 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll

2014-03-29 18:41 - 2013-09-17 11:18 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS

2014-03-29 18:41 - 2013-09-17 07:00 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll

2014-03-29 18:41 - 2013-09-13 10:54 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Usb.dll

2014-03-29 18:41 - 2013-09-13 09:55 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll

2014-03-29 18:41 - 2013-09-12 09:37 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll

2014-03-29 18:41 - 2013-09-07 14:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\fdprint.dll

2014-03-29 18:41 - 2013-09-07 13:07 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\TetheringMgr.dll

2014-03-29 18:41 - 2013-09-04 08:16 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll

2014-03-29 18:41 - 2013-09-04 07:47 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\tpmvsc.dll

2014-03-29 18:41 - 2013-09-04 07:12 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\DscCoreConfProv.dll

2014-03-29 18:41 - 2013-09-04 06:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\DscCore.dll

2014-03-29 18:41 - 2013-09-04 06:48 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll

2014-03-29 18:41 - 2013-08-31 16:18 - 00205024 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll

2014-03-29 18:41 - 2013-08-31 14:15 - 00180232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll

2014-03-29 18:41 - 2013-08-31 14:04 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll

2014-03-29 18:41 - 2013-08-28 09:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe

2014-03-29 18:41 - 2013-08-27 08:09 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll

2014-03-29 18:40 - 2013-09-26 11:20 - 00556032 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe

2014-03-29 18:40 - 2013-09-26 09:32 - 00638464 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll

2014-03-29 18:40 - 2013-09-26 09:14 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll

2014-03-29 18:40 - 2013-09-25 09:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll

2014-03-29 18:40 - 2013-09-25 07:40 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll

2014-03-29 18:40 - 2013-09-24 08:55 - 00284160 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe

2014-03-29 18:40 - 2013-09-24 07:59 - 00253952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe

2014-03-29 18:40 - 2013-09-21 08:01 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll

2014-03-29 18:40 - 2013-09-21 07:37 - 00101376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2014-03-29 18:40 - 2013-09-21 07:02 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll

2014-03-29 18:40 - 2013-09-21 06:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll

2014-03-29 18:40 - 2013-09-21 06:38 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll

2014-03-29 18:40 - 2013-09-21 06:38 - 00102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll

2014-03-29 18:40 - 2013-09-21 06:37 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll

2014-03-29 18:40 - 2013-09-19 08:39 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll

2014-03-29 18:40 - 2013-09-19 07:47 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.dll

2014-03-29 18:40 - 2013-09-19 07:29 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx

2014-03-29 18:40 - 2013-09-19 06:25 - 00471552 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll

2014-03-29 18:40 - 2013-09-17 08:58 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2014-03-29 18:40 - 2013-09-17 07:26 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2014-03-29 18:40 - 2013-09-17 07:15 - 01225728 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll

2014-03-29 18:40 - 2013-09-17 06:09 - 01160704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll

2014-03-29 18:40 - 2013-09-17 06:08 - 00738304 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll

2014-03-29 18:40 - 2013-09-17 05:28 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll

2014-03-29 18:40 - 2013-09-14 16:06 - 00175960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VerifierExt.sys

2014-03-29 18:40 - 2013-09-14 16:06 - 00066904 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL

2014-03-29 18:40 - 2013-09-14 13:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2014-03-29 18:40 - 2013-09-13 11:52 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\SensorsClassExtension.dll

2014-03-29 18:40 - 2013-09-13 10:10 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Usb.dll

2014-03-29 18:40 - 2013-09-13 09:30 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll

2014-03-29 18:40 - 2013-09-11 11:31 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2014-03-29 18:40 - 2013-09-11 11:31 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2014-03-29 18:40 - 2013-09-11 09:41 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll

2014-03-29 18:40 - 2013-09-11 09:09 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll

2014-03-29 18:40 - 2013-09-07 14:29 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll

2014-03-29 18:40 - 2013-09-07 14:00 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdprint.dll

2014-03-29 18:40 - 2013-09-07 13:50 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceCenter.dll

2014-03-29 18:40 - 2013-09-07 13:45 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\CryptoWinRT.dll

2014-03-29 18:40 - 2013-09-07 13:30 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll

2014-03-29 18:40 - 2013-09-07 13:22 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CryptoWinRT.dll

2014-03-29 18:40 - 2013-09-07 13:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll

2014-03-29 18:40 - 2013-09-05 09:39 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2014-03-29 18:40 - 2013-09-05 08:42 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe

2014-03-29 18:40 - 2013-09-05 07:40 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Utilman.exe

2014-03-29 18:40 - 2013-09-04 09:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll

2014-03-29 18:40 - 2013-09-04 06:35 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll

2014-03-29 18:40 - 2013-08-31 12:46 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\riched20.dll

2014-03-29 18:40 - 2013-08-31 12:00 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll

2014-03-29 18:40 - 2013-08-31 11:25 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll

2014-03-29 18:40 - 2013-08-30 09:31 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll

2014-03-29 18:40 - 2013-08-28 09:55 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe

2014-03-29 18:40 - 2013-08-28 09:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll

2014-03-29 18:40 - 2013-08-27 07:24 - 00813568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll

2014-03-29 18:35 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2014-03-29 18:35 - 2013-10-03 11:16 - 00294400 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll

2014-03-29 18:35 - 2013-10-03 11:02 - 00225792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll

2014-03-29 18:35 - 2013-10-02 13:00 - 01286552 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2014-03-29 18:35 - 2013-10-02 11:47 - 01018960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2014-03-29 18:35 - 2013-10-01 05:42 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll

2014-03-29 18:35 - 2013-10-01 05:36 - 00977408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll

2014-03-29 18:34 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2014-03-29 18:34 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2014-03-29 18:34 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2014-03-29 18:34 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2014-03-29 18:34 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2014-03-29 18:34 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2014-03-29 18:34 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2014-03-29 18:34 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2014-03-29 18:34 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2014-03-29 18:34 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2014-03-29 18:34 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2014-03-29 18:34 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2014-03-29 18:34 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2014-03-29 18:34 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2014-03-29 18:34 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2014-03-29 18:34 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2014-03-29 18:34 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2014-03-29 18:34 - 2014-02-06 13:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2014-03-29 18:34 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2014-03-29 18:34 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2014-03-29 18:34 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2014-03-29 18:34 - 2014-02-06 12:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2014-03-29 18:34 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2014-03-29 18:34 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2014-03-29 18:34 - 2014-02-06 12:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2014-03-29 18:34 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2014-03-29 18:34 - 2014-02-06 12:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2014-03-29 18:34 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2014-03-29 18:34 - 2014-02-06 12:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2014-03-29 18:34 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2014-03-29 18:34 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2014-03-29 18:34 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2014-03-29 18:34 - 2014-02-06 11:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2014-03-29 18:34 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2014-03-29 18:34 - 2014-02-06 11:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2014-03-29 18:34 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2014-03-29 18:34 - 2014-02-06 11:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2014-03-29 18:34 - 2013-12-20 12:18 - 01643584 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2014-03-29 18:34 - 2013-12-20 12:18 - 01507704 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2014-03-29 18:34 - 2013-12-09 02:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2014-03-29 18:34 - 2013-12-09 02:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2014-03-29 18:34 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll

2014-03-29 18:34 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2014-03-29 18:34 - 2013-10-19 10:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2014-03-29 18:34 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2014-03-29 18:33 - 2014-02-11 05:04 - 04189184 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-03-29 18:33 - 2014-02-11 04:43 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2014-03-29 18:33 - 2014-02-11 04:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2014-03-29 18:33 - 2014-01-31 18:15 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

Atinuvian

04.04.2014 19:26

TEil 2

Code:

2014-03-29 18:33 - 2014-01-31 18:07 - 00233920 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll

2014-03-29 18:33 - 2014-01-31 18:06 - 02133208 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll

2014-03-29 18:33 - 2014-01-31 15:47 - 02143960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll

2014-03-29 18:33 - 2014-01-31 11:06 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2014-03-29 18:33 - 2014-01-29 11:55 - 01287064 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2014-03-29 18:33 - 2014-01-29 10:53 - 00458616 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2014-03-29 18:33 - 2014-01-29 10:53 - 00407024 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll

2014-03-29 18:33 - 2014-01-29 10:49 - 01928144 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll

2014-03-29 18:33 - 2014-01-29 10:47 - 02543960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2014-03-29 18:33 - 2014-01-29 09:44 - 01371824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll

2014-03-29 18:33 - 2014-01-29 09:44 - 00408480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe

2014-03-29 18:33 - 2014-01-29 09:44 - 00369280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll

2014-03-29 18:33 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll

2014-03-29 18:33 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2014-03-29 18:33 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll

2014-03-29 18:33 - 2014-01-27 21:06 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2014-03-29 18:33 - 2014-01-27 21:04 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE

2014-03-29 18:33 - 2014-01-27 20:52 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2014-03-29 18:33 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll

2014-03-29 18:33 - 2014-01-27 20:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2014-03-29 18:33 - 2014-01-27 20:20 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE

2014-03-29 18:33 - 2014-01-27 20:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll

2014-03-29 18:33 - 2014-01-27 19:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll

2014-03-29 18:33 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll

2014-03-29 18:33 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll

2014-03-29 18:33 - 2014-01-27 17:58 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2014-03-29 18:33 - 2014-01-27 17:50 - 06640640 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2014-03-29 18:33 - 2014-01-27 13:45 - 00386722 _____ () C:\Windows\system32\ApnDatabase.xml

2014-03-29 18:33 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll

2014-03-29 18:33 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll

2014-03-29 18:33 - 2014-01-09 10:25 - 02804224 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll

2014-03-29 18:33 - 2014-01-09 09:59 - 01020928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll

2014-03-29 18:33 - 2014-01-09 09:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll

2014-03-29 18:33 - 2014-01-09 09:49 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll

2014-03-29 18:33 - 2014-01-09 09:44 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll

2014-03-29 18:33 - 2014-01-09 09:43 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll

2014-03-29 18:33 - 2014-01-09 09:29 - 00105984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll

2014-03-29 18:33 - 2014-01-09 09:28 - 04217344 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll

2014-03-29 18:33 - 2014-01-09 09:28 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll

2014-03-29 18:33 - 2014-01-09 09:18 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe

2014-03-29 18:33 - 2014-01-07 09:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe

2014-03-29 18:33 - 2014-01-07 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe

2014-03-29 18:33 - 2014-01-07 07:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2014-03-29 18:33 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2014-03-29 18:33 - 2014-01-04 22:50 - 01462216 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2014-03-29 18:33 - 2014-01-04 21:22 - 01202888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll

2014-03-29 18:33 - 2014-01-04 16:30 - 13209088 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll

2014-03-29 18:33 - 2014-01-04 16:23 - 11702272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2014-03-29 18:33 - 2014-01-04 15:42 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll

2014-03-29 18:33 - 2014-01-04 15:40 - 07416832 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll

2014-03-29 18:33 - 2014-01-04 15:36 - 00830976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll

2014-03-29 18:33 - 2014-01-04 15:28 - 04961792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll

2014-03-29 18:33 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe

2014-03-29 18:33 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll

2014-03-29 18:33 - 2013-12-21 04:10 - 00009701 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms

2014-03-29 18:33 - 2013-12-21 04:10 - 00009701 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms

2014-03-29 18:33 - 2013-12-20 12:10 - 01113040 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2014-03-29 18:33 - 2013-12-20 08:13 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2014-03-29 18:33 - 2013-12-09 04:57 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2014-03-29 18:33 - 2013-12-09 03:51 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2014-03-29 18:33 - 2013-12-09 02:15 - 00787968 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2014-03-29 18:33 - 2013-11-27 17:36 - 03395920 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll

2014-03-29 18:33 - 2013-11-27 13:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe

2014-03-29 18:33 - 2013-11-27 10:48 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2014-03-29 18:33 - 2013-11-27 10:40 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2014-03-29 18:33 - 2013-11-27 10:17 - 00695808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll

2014-03-29 18:33 - 2013-11-27 10:12 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll

2014-03-29 18:33 - 2013-11-23 06:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2014-03-29 18:33 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2014-03-29 18:33 - 2013-11-21 08:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2014-03-29 18:33 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2014-03-29 18:33 - 2013-11-09 08:34 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe

2014-03-29 18:33 - 2013-11-09 08:34 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll

2014-03-29 18:33 - 2013-11-09 07:52 - 00240128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll

2014-03-29 18:33 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys

2014-03-29 18:33 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys

2014-03-29 18:33 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys

2014-03-29 18:33 - 2013-10-23 13:01 - 00872840 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2014-03-29 18:33 - 2013-10-23 10:59 - 00698232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll

2014-03-29 18:33 - 2013-10-16 17:58 - 01943536 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2014-03-29 18:33 - 2013-10-16 15:54 - 01581968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2014-03-29 18:33 - 2013-10-15 10:54 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2014-03-29 18:33 - 2013-10-15 10:03 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2014-03-29 18:33 - 2013-10-13 04:48 - 00136536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys

2014-03-29 18:33 - 2013-10-12 23:48 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2014-03-29 18:33 - 2013-10-12 23:34 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2014-03-29 18:33 - 2013-10-05 16:21 - 01341288 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2014-03-29 18:33 - 2013-10-05 10:39 - 01067008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2014-03-29 18:33 - 2013-09-21 12:53 - 00996320 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll

2014-03-28 14:29 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll

2014-03-28 14:29 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll

2014-03-28 14:29 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll

2014-03-28 14:29 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll

2014-03-28 14:29 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll

2014-03-28 14:29 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll

2014-03-28 14:29 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll

2014-03-28 14:29 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll

2014-03-28 14:29 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll

2014-03-28 14:29 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll

2014-03-28 14:29 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll

2014-03-28 14:29 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll

2014-03-28 14:29 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll

2014-03-28 14:29 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll

2014-03-28 14:29 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll

2014-03-28 14:29 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll

2014-03-28 14:29 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll

2014-03-28 14:29 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll

2014-03-28 14:29 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll

2014-03-28 14:29 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll

2014-03-28 14:29 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll

2014-03-28 14:29 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll

2014-03-28 14:29 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll

2014-03-28 14:29 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll

2014-03-28 14:29 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll

2014-03-28 14:29 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll

2014-03-28 14:29 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll

2014-03-28 14:29 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll

2014-03-28 14:29 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll

2014-03-28 14:29 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\MSBuild

2014-03-28 13:49 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2014-03-28 13:49 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2014-03-28 13:49 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2014-03-28 13:48 - 2014-03-28 13:48 - 00000000 ____D () C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP

2014-03-28 13:45 - 2014-03-28 13:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-03-28 13:34 - 2014-03-28 13:34 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Macromedia

2014-03-28 13:31 - 2014-03-28 13:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-03-28 11:45 - 2014-04-04 19:26 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-1001

2014-03-28 11:42 - 2014-04-04 19:27 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7A8D7FB8-DDC3-4B91-A888-39F945AA60AF}

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Intel Corporation

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA Corporation

2014-03-28 11:40 - 2014-04-04 16:55 - 00000000 ____D () C:\Users\Vincent

2014-03-28 11:40 - 2014-04-04 13:27 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-03-28 11:40 - 2014-04-04 13:27 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-03-28 11:40 - 2014-04-04 00:59 - 00001450 _____ () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-03-28 11:40 - 2014-04-03 18:16 - 00000000 ____D () C:\Users\Vincent\AppData\Local\VirtualStore

2014-03-28 11:40 - 2014-03-30 21:11 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Packages

2014-03-28 11:40 - 2014-03-28 11:40 - 00000020 ___SH () C:\Users\Vincent\ntuser.ini

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Vorlagen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Startmenü

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Netzwerkumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Lokale Einstellungen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Eigene Dateien

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Druckumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Musik

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Bilder

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Verlauf

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Adobe

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility

2014-03-28 11:40 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2014-03-27 17:46 - 2014-04-04 20:15 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-03-27 17:46 - 2014-03-28 11:41 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00002149 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-03-27 17:46 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2014-03-27 17:46 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin

2014-03-27 17:46 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2014-03-27 17:46 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2014-03-27 17:46 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2014-03-27 17:46 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

2014-03-27 17:46 - 2014-02-05 11:31 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2014-03-27 17:46 - 2014-02-05 11:30 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll

2014-03-27 17:46 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 18302384 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 14709720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys

2014-03-27 17:45 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 03093280 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00484296 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00409544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00377688 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll

2014-03-27 17:45 - 2014-03-04 16:35 - 00024544 _____ () C:\Windows\system32\nvinfo.pb

2014-03-27 17:45 - 2013-12-27 20:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2014-03-27 17:45 - 2013-12-27 20:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2014-03-27 17:45 - 2013-12-27 20:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll

2014-03-27 17:45 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2014-03-27 17:45 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll

2014-03-27 17:45 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll

2014-03-27 17:44 - 2014-04-04 20:10 - 01279749 _____ () C:\Windows\WindowsUpdate.log

2014-03-27 17:43 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-03-27 17:14 - 2014-03-27 17:14 - 01713704 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-03-27 17:14 - 2014-03-27 17:14 - 00000032 _____ () C:\csb.log

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE

2014-03-27 17:14 - 2013-10-28 11:02 - 00022240 _____ () C:\Windows\system32\Drivers\AppleCharger.sys

2014-03-27 17:14 - 2013-10-24 18:29 - 00022240 _____ () C:\Windows\system32\Drivers\UsbCharger.sys

2014-03-27 17:14 - 2010-04-06 17:30 - 00031272 _____ () C:\Windows\system32\AppleChargerSrv.exe

2014-03-27 17:13 - 2014-03-27 17:14 - 00000189 _____ () C:\Install.log

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____H () C:\ProgramData\DP45977C.lfl

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files\Realtek

2014-03-27 17:13 - 2013-10-29 14:19 - 00151256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll

2014-03-27 17:13 - 2013-10-29 12:25 - 03698904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys

2014-03-27 17:13 - 2013-10-29 09:03 - 00676825 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT

2014-03-27 17:13 - 2013-10-29 08:57 - 38251008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat

2014-03-27 17:13 - 2013-10-28 11:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll

2014-03-27 17:13 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll

2014-03-27 17:13 - 2013-10-18 10:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll

2014-03-27 17:13 - 2013-10-11 05:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll

2014-03-27 17:13 - 2013-10-09 14:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll

2014-03-27 17:13 - 2013-10-09 14:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll

2014-03-27 17:13 - 2013-10-07 05:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll

2014-03-27 17:13 - 2013-10-02 11:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll

2014-03-27 17:13 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll

2014-03-27 17:13 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll

2014-03-27 17:13 - 2013-09-09 09:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat

2014-03-27 17:13 - 2013-09-09 08:54 - 00833752 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys

2014-03-27 17:13 - 2013-09-09 08:54 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll

2014-03-27 17:13 - 2013-08-23 21:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll

2014-03-27 17:13 - 2013-08-20 11:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll

2014-03-27 17:13 - 2013-08-14 10:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll

2014-03-27 17:13 - 2013-08-14 10:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll

2014-03-27 17:13 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll

2014-03-27 17:13 - 2013-06-25 06:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll

2014-03-27 17:13 - 2013-06-25 06:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll

2014-03-27 17:13 - 2013-06-25 06:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll

2014-03-27 17:13 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl

2014-03-27 17:13 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll

2014-03-27 17:13 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll

2014-03-27 17:13 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll

2014-03-27 17:13 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll

2014-03-27 17:13 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll

2014-03-27 17:13 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll

2014-03-27 17:13 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll

2014-03-27 17:13 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll

2014-03-27 17:13 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll

2014-03-27 17:13 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll

2014-03-27 17:13 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll

2014-03-27 17:13 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2014-03-27 17:13 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll

2014-03-27 17:13 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll

2014-03-27 17:13 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll

2014-03-27 17:12 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-03-27 17:12 - 2014-03-27 17:12 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk

2014-03-27 17:12 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll

2014-03-27 17:12 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll

2014-03-27 17:12 - 2013-10-06 18:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll

2014-03-27 17:12 - 2013-10-03 21:35 - 07587824 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 02474736 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiVAD64.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00844784 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00771056 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00769520 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00754672 _____ (Intel Corporation) C:\Windows\system32\GfxUIHotKeyMenu.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00530416 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00396272 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00393712 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00391152 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

2014-03-27 17:12 - 2013-10-03 21:35 - 00153072 _____ (Intel Corporation) C:\Windows\system32\difx64.exe

2014-03-27 17:12 - 2013-09-17 02:21 - 00180224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3308.dll

2014-03-27 17:12 - 2013-09-17 02:19 - 00002944 _____ () C:\Windows\system32\iglhxs64.vp

2014-03-27 17:12 - 2013-09-17 02:17 - 13760512 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 12100096 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 11387392 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 09081856 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 07906304 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 06294528 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 04177920 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys

2014-03-27 17:12 - 2013-09-17 02:17 - 04067328 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 02384896 _____ () C:\Windows\system32\GfxRes.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00623104 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00548864 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00522240 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00521728 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00517120 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00516096 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00513536 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00513024 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00371200 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc

2014-03-27 17:12 - 2013-09-17 02:17 - 00365568 _____ () C:\Windows\system32\igdmd64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00345600 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00303104 _____ () C:\Windows\SysWOW64\igdmd32.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl

2014-03-27 17:12 - 2013-09-17 02:17 - 00265385 _____ () C:\Windows\system32\Gfxres.th-TH.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00251862 _____ () C:\Windows\system32\Gfxres.el-GR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00243712 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00233588 _____ () C:\Windows\system32\Gfxres.ru-RU.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00223744 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00220672 _____ () C:\Windows\system32\igdde64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00199481 _____ () C:\Windows\system32\Gfxres.ar-SA.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00197044 _____ () C:\Windows\system32\Gfxres.ja-JP.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00194048 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00191088 _____ () C:\Windows\system32\Gfxres.he-IL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00179353 _____ () C:\Windows\system32\Gfxres.ko-KR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00179230 _____ () C:\Windows\system32\Gfxres.it-IT.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176940 _____ () C:\Windows\system32\Gfxres.es-ES.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176666 _____ () C:\Windows\system32\Gfxres.fr-FR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00176638 _____ () C:\Windows\system32\Gfxres.de-DE.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00175259 _____ () C:\Windows\system32\Gfxres.ro-RO.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00174244 _____ () C:\Windows\system32\Gfxres.hu-HU.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173953 _____ () C:\Windows\system32\Gfxres.tr-TR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173813 _____ () C:\Windows\system32\Gfxres.pl-PL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00173495 _____ () C:\Windows\system32\Gfxres.nl-NL.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00172750 _____ () C:\Windows\system32\Gfxres.pt-BR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00172041 _____ () C:\Windows\system32\Gfxres.fi-FI.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171709 _____ () C:\Windows\system32\Gfxres.sk-SK.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171547 _____ () C:\Windows\system32\Gfxres.sv-SE.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00171310 _____ () C:\Windows\system32\Gfxres.pt-PT.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00170996 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00170175 _____ () C:\Windows\system32\Gfxres.hr-HR.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00166672 _____ () C:\Windows\system32\Gfxres.sl-SI.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00165374 _____ () C:\Windows\system32\Gfxres.nb-NO.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00164698 _____ () C:\Windows\system32\Gfxres.da-DK.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00160256 _____ () C:\Windows\system32\igdail64.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00159947 _____ () C:\Windows\system32\Gfxres.en-US.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00153249 _____ () C:\Windows\system32\Gfxres.zh-TW.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00151473 _____ () C:\Windows\system32\Gfxres.zh-CN.resources

2014-03-27 17:12 - 2013-09-17 02:17 - 00066560 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00029184 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll

2014-03-27 17:12 - 2013-09-17 02:17 - 00012288 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 13153792 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00492032 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00180736 _____ () C:\Windows\SysWOW64\igdde32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll

2014-03-27 17:12 - 2013-09-17 02:16 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 20943360 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 02974208 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 00290816 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll

2014-03-27 17:12 - 2013-09-17 02:11 - 00253440 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 25982976 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 03292672 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 00329216 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll

2014-03-27 17:12 - 2013-09-17 02:10 - 00304640 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll

2014-03-27 17:12 - 2013-09-17 02:01 - 04432896 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll

2014-03-27 17:12 - 2013-09-17 02:01 - 03523072 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll

2014-03-27 17:12 - 2013-09-16 13:17 - 00016344 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 02813952 _____ () C:\Windows\system32\iglhxa64.cpa

2014-03-27 17:12 - 2013-09-13 18:04 - 02064896 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01814016 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01423008 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSecureSourceFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01127424 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 01123328 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00650400 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiWinNextAgent64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00598688 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMux64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00344224 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiSilenceFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00214528 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00207008 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiUtils64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00179712 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00158720 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00148992 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00132608 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00127488 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00121504 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiMCUMD64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00093344 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiLogServer64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL

2014-03-27 17:12 - 2013-09-13 18:04 - 00064000 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL

2014-03-27 17:12 - 2013-09-13 18:04 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll

2014-03-27 17:12 - 2013-09-13 18:04 - 00044025 _____ () C:\Windows\system32\iglhxo64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043816 _____ () C:\Windows\system32\iglhxc64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043494 _____ () C:\Windows\system32\iglhxc64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043298 _____ () C:\Windows\system32\iglhxg64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00043256 _____ () C:\Windows\system32\iglhxg64.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00042079 _____ () C:\Windows\system32\iglhxo64_dev.vp

2014-03-27 17:12 - 2013-09-13 18:04 - 00001125 _____ () C:\Windows\system32\iglhxa64.vp

2014-03-27 17:12 - 2013-09-13 18:03 - 04009632 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAAC64.dll

2014-03-27 17:12 - 2013-09-13 18:03 - 00631456 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiAudioFilter64.dll

2014-03-27 17:12 - 2013-09-13 18:03 - 00176288 _____ (Intel Corporation) C:\Windows\system32\IntelWiDiDDEAgent64.dll

2014-03-27 17:12 - 2013-09-13 12:44 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll

2014-03-27 17:12 - 2013-09-09 22:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll

2014-03-27 17:12 - 2013-09-09 22:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll

2014-03-27 17:12 - 2013-09-09 22:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll

2014-03-27 17:12 - 2013-09-09 22:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll

2014-03-27 17:12 - 2013-08-05 12:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll

2014-03-27 17:12 - 2013-06-21 05:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll

2014-03-27 17:12 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll

2014-03-27 17:12 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll

2014-03-27 17:12 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll

2014-03-27 17:11 - 2014-04-03 22:17 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-03-27 17:11 - 2014-03-27 17:47 - 00000000 ____D () C:\ProgramData\Intel

2014-03-27 17:11 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\Intel

2014-03-27 17:11 - 2014-03-27 17:12 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____D () C:\Intel

2014-03-27 17:11 - 2013-09-17 02:21 - 00449528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys

2014-03-27 17:11 - 2013-09-16 13:17 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll

2014-03-27 17:11 - 2013-09-16 13:17 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys

2014-03-27 17:11 - 2013-08-21 16:16 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2014-03-27 17:10 - 2014-03-27 17:10 - 00000010 _____ () C:\Windows\GSetup.ini

2014-03-27 17:10 - 2009-08-27 09:04 - 00207400 ____R () C:\Windows\GSetup.exe

2014-03-27 17:07 - 2014-03-27 17:16 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-500

2014-03-27 17:06 - 2014-04-04 20:19 - 01780340 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-03-27 17:04 - 2013-08-22 07:17 - 02407936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-03-27 16:59 - 2014-04-04 13:25 - 00000000 ____D () C:\Windows\Panther
 

==================== One Month Modified Files and Folders =======
 

2014-04-04 20:21 - 2014-04-04 20:13 - 00000000 ____D () C:\FRST

2014-04-04 20:21 - 2014-04-03 18:12 - 00000000 ____D () C:\Users\Vincent\Desktop\Security

2014-04-04 20:19 - 2014-03-27 17:06 - 01780340 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-04-04 20:19 - 2013-08-23 01:24 - 00765378 _____ () C:\Windows\system32\perfh007.dat

2014-04-04 20:19 - 2013-08-23 01:24 - 00159696 _____ () C:\Windows\system32\perfc007.dat

2014-04-04 20:15 - 2014-04-04 13:27 - 00089504 _____ () C:\Windows\PFRO.log

2014-04-04 20:15 - 2014-03-27 17:46 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-04-04 20:15 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-04-04 20:14 - 2014-04-04 20:12 - 00000000 ____D () C:\04.04.14

2014-04-04 20:14 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI

2014-04-04 20:11 - 2014-04-04 16:58 - 00152423 _____ () C:\Users\Vincent\Downloads\FRST.txt

2014-04-04 20:11 - 2014-04-04 16:58 - 00019515 _____ () C:\Users\Vincent\Downloads\Addition.txt

2014-04-04 20:10 - 2014-03-27 17:44 - 01279749 _____ () C:\Windows\WindowsUpdate.log

2014-04-04 20:00 - 2014-04-03 19:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-04-04 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru

2014-04-04 19:41 - 2014-04-04 19:41 - 00000000 ____D () C:\Windows\ERUNT

2014-04-04 19:36 - 2014-04-04 19:36 - 01038974 _____ (Thisisu) C:\Users\Vincent\Downloads\JRT.exe

2014-04-04 19:27 - 2014-03-28 11:42 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{7A8D7FB8-DDC3-4B91-A888-39F945AA60AF}

2014-04-04 19:26 - 2014-03-28 11:45 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-1001

2014-04-04 19:16 - 2014-04-04 16:37 - 00000000 ____D () C:\AdwCleaner

2014-04-04 18:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness

2014-04-04 18:27 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM

2014-04-04 17:46 - 2014-04-04 17:46 - 01110476 _____ () C:\Users\Vincent\Downloads\7z920.exe

2014-04-04 17:46 - 2014-04-04 17:46 - 00000988 _____ () C:\Users\Vincent\Desktop\7-Zip File Manager.lnk

2014-04-04 17:46 - 2014-04-04 17:46 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2014-04-04 17:22 - 2014-04-03 17:11 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-04-04 16:55 - 2014-04-04 16:55 - 00000476 _____ () C:\Users\Vincent\Downloads\defogger_disable.log

2014-04-04 16:55 - 2014-04-04 16:55 - 00000000 _____ () C:\Users\Vincent\defogger_reenable

2014-04-04 16:55 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent

2014-04-04 13:27 - 2014-03-28 11:40 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-04-04 13:27 - 2014-03-28 11:40 - 00000000 ___RD () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP

2014-04-04 13:27 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PLA

2014-04-04 13:25 - 2014-04-03 17:15 - 00000000 ____D () C:\Users\Vincent\AppData\Local\CrashDumps

2014-04-04 13:25 - 2014-03-27 16:59 - 00000000 ____D () C:\Windows\Panther

2014-04-04 13:23 - 2014-04-03 20:24 - 00000000 ____D () C:\Users\Vincent\Desktop\Games

2014-04-04 00:59 - 2014-04-03 16:23 - 00001159 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2014-04-04 00:59 - 2014-03-28 11:40 - 00001450 _____ () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2014-04-03 22:52 - 2014-04-03 22:52 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup(1).exe

2014-04-03 22:52 - 2014-04-03 22:52 - 00000520 _____ () C:\Users\Public\Desktop\Steam.lnk

2014-04-03 22:40 - 2014-04-03 22:40 - 00000000 ____D () C:\Users\Vincent\Neuer Ordner

2014-04-03 22:39 - 2014-04-03 22:39 - 01141680 _____ () C:\Users\Vincent\Downloads\Steamv13Setup.exe

2014-04-03 22:37 - 2014-04-03 20:24 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Windows\SysWOW64\xlive

2014-04-03 22:28 - 2014-04-03 22:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE

2014-04-03 22:17 - 2014-03-27 17:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information

2014-04-03 19:56 - 2014-04-03 19:56 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Macromedia

2014-04-03 19:55 - 2014-04-03 19:55 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-04-03 19:55 - 2014-04-03 19:55 - 00000000 ____D () C:\ProgramData\McAfee

2014-04-03 19:55 - 2014-04-03 19:54 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Adobe

2014-04-03 18:16 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\VirtualStore

2014-04-03 18:09 - 2014-04-03 18:09 - 03710504 _____ (Piriform Ltd) C:\Users\Vincent\Downloads\ccsetup412_slim.exe

2014-04-03 18:09 - 2014-04-03 18:09 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC

2014-04-03 18:09 - 2014-04-03 18:09 - 00000000 ____D () C:\Program Files\CCleaner

2014-04-03 17:56 - 2014-04-03 17:56 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security

2014-04-03 17:53 - 2014-04-03 16:29 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-04-03 17:11 - 2014-04-03 17:11 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2014-04-03 17:11 - 2014-04-03 17:10 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\Vincent\Downloads\mbam-setup-2.0.0.1000.exe

2014-04-03 16:59 - 2014-04-03 16:59 - 00000000 ____D () C:\Users\Vincent\Documents\Symantec

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\AppData\Local\cache

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 ____D () C:\Users\Vincent\.android

2014-04-03 16:42 - 2014-04-03 16:42 - 00000000 _____ () C:\Users\Vincent\daemonprocess.txt

2014-04-03 16:41 - 2014-04-03 16:41 - 00000044 _____ () C:\Users\Vincent\AppData\Roaming\WB.CFG

2014-04-03 16:41 - 2014-04-03 16:41 - 00000000 ____D () C:\Program Files (x86)\Browser Guard

2014-04-03 16:29 - 2014-04-03 16:29 - 00177312 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

2014-04-03 16:29 - 2014-04-03 16:29 - 00007631 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\ProgramData\Norton

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared

2014-04-03 16:29 - 2014-04-03 16:29 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security

2014-04-03 16:28 - 2014-04-03 16:28 - 01038704 _____ (Amazon Services LLC) C:\Users\Vincent\Downloads\Norton_Internet_Security_2014_1_PC_Downloader.exe

2014-04-03 16:25 - 2014-04-03 16:25 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\nsv514.tmp

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\ProgramData\Mozilla

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-04-03 16:23 - 2014-04-03 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-04-03 14:36 - 2014-04-03 14:23 - 00000000 ____D () C:\ProgramData\NFS Underground

2014-04-03 11:08 - 2014-04-03 16:41 - 01176896 _____ (AnyProtect.com) C:\Users\Vincent\AppData\Local\AnyProtectScannerSetup.exe

2014-04-02 16:40 - 2014-04-02 11:57 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Meine Die Schlacht um Mittelerde-Dateien

2014-04-01 13:04 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache

2014-03-30 21:11 - 2014-03-30 21:11 - 00003560 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask

2014-03-30 21:11 - 2014-03-30 21:09 - 00000000 ___RD () C:\Windows\BrowserChoice

2014-03-30 21:11 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\Packages

2014-03-30 21:10 - 2013-08-22 16:44 - 00335992 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender

2014-03-30 21:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe

2014-03-30 21:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism

2014-03-29 19:16 - 2014-03-29 19:15 - 00000000 ____D () C:\Windows\system32\MRT

2014-03-29 19:16 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies

2014-03-28 13:50 - 2014-03-28 13:50 - 00000000 ____D () C:\Program Files (x86)\MSBuild

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\Reference Assemblies

2014-03-28 13:49 - 2014-03-28 13:49 - 00000000 ____D () C:\Program Files\MSBuild

2014-03-28 13:49 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\MUI

2014-03-28 13:49 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\MUI

2014-03-28 13:48 - 2014-03-28 13:48 - 00000000 ____D () C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP

2014-03-28 13:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore

2014-03-28 13:45 - 2014-03-28 13:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf

2014-03-28 13:34 - 2014-03-28 13:34 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Macromedia

2014-03-28 13:31 - 2014-03-28 13:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Intel Corporation

2014-03-28 11:41 - 2014-03-28 11:41 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA Corporation

2014-03-28 11:41 - 2014-03-27 17:46 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation

2014-03-28 11:40 - 2014-03-28 11:40 - 00000020 ___SH () C:\Users\Vincent\ntuser.ini

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Vorlagen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Startmenü

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Netzwerkumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Lokale Einstellungen

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Eigene Dateien

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Druckumgebung

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Musik

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Documents\Eigene Bilder

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Verlauf

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\AppData\Local\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 _SHDL () C:\Users\Vincent\Anwendungsdaten

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Roaming\Adobe

2014-03-28 11:40 - 2014-03-28 11:40 - 00000000 ____D () C:\Users\Vincent\AppData\Local\NVIDIA

2014-03-27 17:47 - 2014-03-27 17:11 - 00000000 ____D () C:\ProgramData\Intel

2014-03-27 17:46 - 2014-03-27 17:46 - 00002149 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation

2014-03-27 17:46 - 2014-03-27 17:46 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies

2014-03-27 17:46 - 2014-03-27 17:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

2014-03-27 17:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help

2014-03-27 17:16 - 2014-03-27 17:07 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3470804408-3089260794-795954559-500

2014-03-27 17:14 - 2014-03-27 17:14 - 01713704 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2014-03-27 17:14 - 2014-03-27 17:14 - 00000032 _____ () C:\csb.log

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:14 - 00000000 ____D () C:\Program Files (x86)\GIGABYTE

2014-03-27 17:14 - 2014-03-27 17:13 - 00000189 _____ () C:\Install.log

2014-03-27 17:14 - 2014-03-27 17:11 - 00000000 ____D () C:\Program Files\Intel

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____H () C:\ProgramData\DP45977C.lfl

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM

2014-03-27 17:13 - 2014-03-27 17:13 - 00000000 ____D () C:\Program Files\Realtek

2014-03-27 17:13 - 2014-03-27 17:12 - 00000000 ____D () C:\Program Files (x86)\Realtek

2014-03-27 17:12 - 2014-03-27 17:12 - 00000728 _____ () C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk

2014-03-27 17:12 - 2014-03-27 17:11 - 00000000 ____D () C:\Program Files (x86)\Intel

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf

2014-03-27 17:11 - 2014-03-27 17:11 - 00000000 ____D () C:\Intel

2014-03-27 17:10 - 2014-03-27 17:10 - 00000010 _____ () C:\Windows\GSetup.ini

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Druckumgebung

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Programme

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Vorlagen

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Startmenü

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Dokumente

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien

2014-03-27 17:00 - 2014-03-27 17:00 - 00000000 _SHDL () C:\Dokumente und Einstellungen

2014-03-27 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery

2014-03-27 17:00 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default

2014-03-27 16:59 - 2013-08-22 17:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template

2014-03-05 09:26 - 2014-04-03 17:11 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-03-05 09:26 - 2014-04-03 17:11 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-03-05 09:26 - 2014-04-03 17:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-03-05 00:53 - 2013-08-22 17:38 - 00693240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-03-05 00:53 - 2013-08-22 17:38 - 00105464 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys

[2014-03-29 18:33] - [2014-01-31 18:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02
 
 
 

LastRegBack: 2014-03-27 16:59
 

==================== End Of Log ============================

Addition:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014

Ran by Vincent at 2014-04-04 20:21:59

Running from C:\Users\Vincent\Desktop\Security

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
 

==================== Installed Programs ======================
 

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )

Additional Offer (HKLM-x32\...\{4FFDD113-2C3C-453E-845C-D5DD6DB90CEF}_is1) (Version:  - )

Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)

Browser Guard (HKLM-x32\...\Browser Guard) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 4.12 - Piriform)

Dawn of War - Soulstorm (HKLM-x32\...\{20533183-D42D-4261-A125-956736FBEA8C}) (Version: 1.00.0000 - THQ)

Dawn of War - Soulstorm (x32 Version: 1.00.0000 - THQ) Hidden

Die Schlacht um Mittelerde(tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version:  - )

Foxtab (HKLM-x32\...\foxtab) (Version:  - FoxTab) <==== ATTENTION

GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden

Genesis (HKCU\...\genesis) (Version:  - )

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden

Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden

Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)

Microsoft Games for Windows - LIVE (HKLM-x32\...\{F112F66E-25CA-42DD-983C-6118EB38F606}) (Version: 3.0.89.0 - Microsoft Corporation)

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}) (Version: 3.0.19.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)

NFS Underground (HKLM-x32\...\{A99968BE-C155-474C-0089-33239DEE1CE2}) (Version:  - )

Norton Internet Security (HKLM-x32\...\NIS) (Version: 20.4.0.40 - Symantec Corporation)

NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden

NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden

NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)

NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden

NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden

NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)

ON_OFF Charge 2 B13.1028.1 (HKLM-x32\...\InstallShield_{6B4ED6F7-BB88-4945-B0C6-01410E1BAC3A}) (Version: 1.00.0000 - GIGABYTE)

ON_OFF Charge 2 B13.1028.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.21.909.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7076 - Realtek Semiconductor Corp.)

SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Warhammer 40,000: Dawn of War – Dark Crusade (HKLM-x32\...\Steam App 4580) (Version:  - Relic Entertainment)

Warhammer 40,000: Dawn of War - Game of the Year Edition (HKLM-x32\...\Steam App 4570) (Version:  - Relic Entertainment)

Warhammer 40,000: Dawn of War – Winter Assault (HKLM-x32\...\Steam App 9310) (Version:  - Relic Entertainment)
 

==================== Restore Points  =========================
 

28-03-2014 11:48:26 Windows Modules Installer

03-04-2014 14:25:49 Uniblue SpeedUpMyPC installation
 

==================== Hosts content: ==========================
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask

Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)

Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)

Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance

Task: {5087AC0D-9866-41DD-8064-81ACA4C2DCEE} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {530BD7EF-1B9E-49D4-852B-74886DC818F5} - \FoxTab No Task File

Task: {54367674-17FE-4260-B888-3282A9CF82B2} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)

Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task

Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask

Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task

Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask

Task: {9E03B1D9-AE33-4231-BDE8-0E8CBFD949E4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-03] (Adobe Systems Incorporated)

Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work

Task: {A7CAADFF-D711-48B8-AF2F-F9A63933652A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-03-18] (Piriform Ltd)

Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask

Task: {D2DA2CCE-DAFC-4048-866D-71538F02111D} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)

Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing

Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization

Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE

Task: {FD7D27B1-EA93-4113-B22B-2266B911CC28} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-02-04] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2014-03-27 17:46 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-03-31 19:11 - 2014-03-31 19:11 - 01459712 _____ () C:\Windows\assembly\NativeImages_v4.0.30319_64\Windows.UI\3363e49b745a5ddf1aaf80b18c175191\Windows.UI.ni.dll

2014-04-03 16:29 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\20.4.0.40\wincfi39.dll

2014-03-27 17:11 - 2013-09-16 13:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Disabled items from MSCONFIG ==============
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/04/2014 08:14:30 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 07:56:25 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16502, Zeitstempel: 0x52c35a76

Ausnahmecode: 0xc0000374

Fehleroffset: 0x000e2fd8

ID des fehlerhaften Prozesses: 0x11e0

Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0

Pfad der fehlerhaften Anwendung: firefox.exe1

Pfad des fehlerhaften Moduls: firefox.exe2

Berichtskennung: firefox.exe3

Vollständiger Name des fehlerhaften Pakets: firefox.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5
 

Error: (04/04/2014 07:48:55 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16502, Zeitstempel: 0x52c35a76

Ausnahmecode: 0xc0000374

Fehleroffset: 0x000e2fd8

ID des fehlerhaften Prozesses: 0xb50

Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0

Pfad der fehlerhaften Anwendung: firefox.exe1

Pfad des fehlerhaften Moduls: firefox.exe2

Berichtskennung: firefox.exe3

Vollständiger Name des fehlerhaften Pakets: firefox.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5
 

Error: (04/04/2014 07:15:26 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 06:27:54 PM) (Source: Microsoft-Windows-Defrag) (User: )

Description: Das Volume "System-reserviert" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)
 

Error: (04/04/2014 06:08:10 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 28.0.0.5186, Zeitstempel: 0x53240e37

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.16502, Zeitstempel: 0x52c35a76

Ausnahmecode: 0xc0000374

Fehleroffset: 0x000e2fd8

ID des fehlerhaften Prozesses: 0x11b4

Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0

Pfad der fehlerhaften Anwendung: firefox.exe1

Pfad des fehlerhaften Moduls: firefox.exe2

Berichtskennung: firefox.exe3

Vollständiger Name des fehlerhaften Pakets: firefox.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5
 

Error: (04/04/2014 04:41:22 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 03:44:48 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 03:30:11 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (04/04/2014 03:13:15 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 
 

System errors:

=============

Error: (04/04/2014 07:16:02 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Service Component of VO" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (04/04/2014 06:28:48 PM) (Source: DCOM) (User: Vincents-PC)

Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
 

Error: (04/04/2014 06:28:18 PM) (Source: DCOM) (User: Vincents-PC)

Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
 

Error: (04/04/2014 05:26:53 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:26:08 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:26:08 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:25:33 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:25:33 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:21:57 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 

Error: (04/04/2014 05:21:57 PM) (Source: SRTSP) (User: )

Description: Error loading virus definitions.
 
 

Microsoft Office Sessions:

=========================

Error: (04/04/2014 08:14:30 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 07:56:25 PM) (Source: Application Error)(User: )

Description: firefox.exe28.0.0.518653240e37ntdll.dll6.3.9600.1650252c35a76c0000374000e2fd811e001cf502e9a26da45C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Windows\SYSTEM32\ntdll.dll7026ce5b-bc22-11e3-8259-74d4351dd749
 

Error: (04/04/2014 07:48:55 PM) (Source: Application Error)(User: )

Description: firefox.exe28.0.0.518653240e37ntdll.dll6.3.9600.1650252c35a76c0000374000e2fd8b5001cf502e1c88e6efC:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Windows\SYSTEM32\ntdll.dll63a899e1-bc21-11e3-8259-74d4351dd749
 

Error: (04/04/2014 07:15:26 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 06:27:54 PM) (Source: Microsoft-Windows-Defrag)(User: )

Description: System-reserviertFalscher Parameter. (0x80070057)
 

Error: (04/04/2014 06:08:10 PM) (Source: Application Error)(User: )

Description: firefox.exe28.0.0.518653240e37ntdll.dll6.3.9600.1650252c35a76c0000374000e2fd811b401cf501a9b982ed1C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Windows\SYSTEM32\ntdll.dll50866176-bc13-11e3-8258-74d4351dd749
 

Error: (04/04/2014 04:41:22 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: )

Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
 

Error: (04/04/2014 03:44:48 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 03:30:11 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 

Error: (04/04/2014 03:13:15 PM) (Source: Desktop Window Manager)(User: )

Description: 0x8898008d
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 17%

Total physical RAM: 8070.62 MB

Available physical RAM: 6626.2 MB

Total Pagefile: 9990.62 MB

Available Pagefile: 8609.65 MB

Total Virtual: 131072 MB

Available Virtual: 131071.83 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:111.45 GB) (Free:82.17 GB) NTFS

Drive d: () (Fixed) (Total:931.51 GB) (Free:918.47 GB) NTFS

Drive e: (NFSUDISK2) (CDROM) (Total:0.64 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: FE42FFF7)
 

Partition: GPT Partition Type.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: FE42FFFA)
 

Partition: GPT Partition Type.
 

==================== End Of Log ============================

cosinus

05.04.2014 14:36

Ok, Kontrollscans bitte:

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Atinuvian

05.04.2014 17:16

mbam

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlauf Datum: 05.04.2014

Suchlauf-Zeit: 17:55:06

Logdatei: mbam.txt

Administrator: Ja
 

Version: 2.00.1.1004

Malware Datenbank: v2014.04.05.03

Rootkit Datenbank: v2014.03.27.01

Lizenz: Testversion

Malware Schutz: Aktiviert

Bösartiger Webseiten Schutz: Aktiviert

Chameleon: Deaktiviert
 

Betriebssystem: Windows 8.1

CPU: x64

Dateisystem: NTFS

Benutzer: Vincent
 

Suchlauf-Art: Bedrohungs-Suchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 235631

Verstrichene Zeit: 4 Min, 30 Sek
 

Speicher: Aktiviert

Autostart: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Aktiviert

Shuriken: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(No malicious items detected)
 

Module: 0

(No malicious items detected)
 

Registrierungsschlüssel: 0

(No malicious items detected)
 

Registrierungswerte: 0

(No malicious items detected)
 

Registrierungsdaten: 0

(No malicious items detected)
 

Ordner: 0

(No malicious items detected)
 

Dateien: 0

(No malicious items detected)
 

Physische Sektoren: 0

(No malicious items detected)
 
 

(end)

ESET

Code:

ESETSmartInstaller@High as downloader log:

Can not open internetESETSmartInstaller@High as downloader log:

Can not open internet# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=0097290b3251c449b3d149e529b2631e

# engine=17766

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-04-05 04:09:07

# local_time=2014-04-05 06:09:07 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.2.9200 NT 

# compatibility_mode=3591 16777213 100 91 103284 159339531 0 0

# compatibility_mode=5893 16776574 100 94 179025 14030444 0 0

# scanned=115403

# found=3

# cleaned=0

# scan_time=503

sh=175A8A0C7650EF29B0E1AE7137F5F48FDFCD6588 ft=1 fh=deea2a09617af006 vn="a variant of Win32/AdWare.SpeedingUpMyPC.G application" ac=I fn="C:\Users\Vincent\AppData\Local\Temp\is45637729\329393821_stp.EXE"

sh=175A8A0C7650EF29B0E1AE7137F5F48FDFCD6588 ft=1 fh=deea2a09617af006 vn="a variant of Win32/AdWare.SpeedingUpMyPC.G application" ac=I fn="C:\Users\Vincent\AppData\Local\Temp\is45637729\330610460_stp.EXE"

sh=175A8A0C7650EF29B0E1AE7137F5F48FDFCD6588 ft=1 fh=deea2a09617af006 vn="a variant of Win32/AdWare.SpeedingUpMyPC.G application" ac=I fn="C:\Users\Vincent\AppData\Local\Temp\is45637729\332088858_stp.EXE"

cosinus

06.04.2014 12:32

Nur Reste in TEMP

TFC - Temp File Cleaner

Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Atinuvian

06.04.2014 16:18

So, ich hab das TFC ausgeführt. Ich denke, es ist alles in Ordnung, mir fällt sonst nichts auf.

Vielen herzlichen Dank für Deine Bemühungen! Ich hab langsam echt am Rad gedreht, aber jetzt ist das Surfen wieder richtig entspannt. Danke!

Ich seh mir den CookieCuller gleich mal an.

Ich wünsch Dir noch einen schönen Sonntag :)

cosinus

07.04.2014 00:04

Dann wären wir durch! :daumenhoc

Falls du noch Lob oder Kritik loswerden möchtest => Lob, Kritik und Wünsche - Trojaner-Board

Die Programme, die hier zum Einsatz kamen, können alle deinstalliert werden.

Helfen kann dir dabei delfix:

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Bitte abschließend noch die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.

Microsoftupdate
Windows XP:Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.
Windows Vista/7: Start, Systemsteuerung, Windows-Update

PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks findest du hier => Browsers and Plugins - FilePony.de

Alle Plugins im Firefox-Browser kannst du auch ganz einfach hier auf Aktualität prüfen => https://www.mozilla.org/de/plugincheck

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.

Java-Update
Veraltete Java-Installationen sind ein großes Sicherheitsrisiko, daher solltest Du die alten Versionen deinstallieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software (bzw. Programme und Funktionen) und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

Alle Zeitangaben in WEZ +1. Es ist jetzt 09:25 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131