Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   PCPerformer und ctlmngui deiinstallieren (https://www.trojaner-board.de/155908-pcperformer-ctlmngui-deiinstallieren.html)

AsmW 01.07.2014 10:28
PCPerformer und ctlmngui deiinstallieren
 
Liste der Anhänge anzeigen (Anzahl: 1)
Hallo
ich habe folgendes Problem, ich kann die volgende Programme nich deinstalieren und seit ca. 2 Wochen bleibt der PC beim Start hängen, so dass ich den auch schon mal neu ausgesetzt habe.
anbei die Logs die FRST ist zu Groß, sowie OTL kann ich Zippen?

cosinus 01.07.2014 11:08
Hi und :hallo:

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

AsmW 01.07.2014 12:29
Danke erstmal,
anbei die CODE-Tags:
Defogger:
Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 10:22 on 01/07/2014 (baustelle)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
Addition:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-06-2014
Ran by baustelle at 2014-07-01 10:25:18
Running from C:\Users\baustelle\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.03.3000 - Acer Incorporated)
Acer Docs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 2.04.2005 - Acer)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.04.3002.6 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.04.3004.0 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.04.3006 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8101 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3126.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) Hidden
Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
NVIDIA Grafiktreiber 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.141.953 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.62 (Version: 327.62 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{46889070-D447-4936-A5D3-246DB972FA2E}) (Version: 2.0.6.16537 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.314 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.23 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.28145 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Speed Test App (HKLM-x32\...\Speed Test) (Version: 4.0.0.0 - Speed Analysis) <==== ATTENTION
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

==================== Restore Points  =========================

23-06-2014 07:48:14 gaebAVA wird installiert
24-06-2014 10:41:11 TuneUp Utilities 2014 wird installiert
01-07-2014 08:15:11 TuneUp Utilities 2014 wird entfernt

==================== Hosts content: ==========================

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {132E5B32-EBFB-4B37-BF3E-764BE5A3FB51} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2013-08-02] (Acer Incorporate)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {24667B1E-AA6C-449A-9AE8-F40D6592067B} - \PC Performer_UPDATES No Task File <==== ATTENTION
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3D2A0890-A0BE-481D-BE14-2BC65584A4D5} - \f69627e0-f2ac-4038-9182-e7441052272e-4 No Task File <==== ATTENTION
Task: {47909E3F-4797-4384-986F-74122BA93218} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4B662908-CE0C-4C71-A6DA-48B62309E9CC} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()
Task: {578B40AC-1DCD-46FD-A2CC-DEB72BB9E7CC} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {583EC5C8-9B1F-4909-B87F-25598BCB8AC9} - \APSnotifierPP3 No Task File <==== ATTENTION
Task: {5C6EA8D6-38F4-4767-A21A-3EFB3DFFD0EB} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08] (Adobe Systems Incorporated)
Task: {5D455775-21D2-48C9-810D-232437121FC4} - \f69627e0-f2ac-4038-9182-e7441052272e-5 No Task File <==== ATTENTION
Task: {6163FFE2-3998-47C1-8FD8-29652778F31F} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-02] (Acer Incorporate)
Task: {6AA573A9-9B82-4076-A04F-5354ACCA28FD} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6AD24646-CDF2-4676-BF8C-1E3BDE8FAB37} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2014-05-02] (Acer Incorporated)
Task: {6B8EB818-B34F-4CDA-BA36-6BDBB77A8136} - \PC Performer No Task File <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {72B1026B-9C46-4AA2-B558-D68350851035} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {89B3337A-9AC3-4CE3-A3C7-FFD85F0B6F19} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8CDBA99A-1668-4A9E-812E-127D498532B4} - \PC Performer_DEFAULT No Task File <==== ATTENTION
Task: {9D8902A6-D278-46B7-8C99-A0BC2DCCF6BA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-01] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {AC7C1995-936F-4333-BEA7-4BCBBF32786B} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {B358702F-E99A-4CDF-8B87-19A8153426ED} - \f69627e0-f2ac-4038-9182-e7441052272e-3 No Task File <==== ATTENTION
Task: {BE836F8D-A9F7-4ACC-B389-6C79D154CBB3} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {CE04F8CC-00F3-4B13-9A88-C8E0F05D2C0E} - \FF Watcher {D5B35EFA-3A80-4368-8740-A36386412600} No Task File <==== ATTENTION
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D1ABF4F2-4BEA-4D8D-9579-3C462173A3DA} - \APSnotifierPP2 No Task File <==== ATTENTION
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DC3316D1-E788-48F7-AB38-6DE605BEC27D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {DF640B52-2967-4486-9DCE-4785A6BD08CD} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {E0FD4188-E004-431D-B7C0-D527D10B61FB} - \f69627e0-f2ac-4038-9182-e7441052272e-2 No Task File <==== ATTENTION
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {F2A3E5AA-469C-49CA-8BE9-1E3F22BCA315} - \f69627e0-f2ac-4038-9182-e7441052272e-1 No Task File <==== ATTENTION
Task: {F70AB239-6F27-43AE-8D9F-406C36FCCB8F} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {F8A352E7-BAEF-4437-AD34-FEA0028E6DB5} - \f69627e0-f2ac-4038-9182-e7441052272e-11 No Task File <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-12-24 03:22 - 2013-12-24 03:22 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-12-24 03:20 - 2013-12-24 03:20 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-12-24 03:26 - 2013-12-24 03:26 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-02-28 02:39 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "fst_de_46"
HKCU\...\StartupApproved\Run: => "AcerCloud"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/29/2014 07:18:11 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (06/29/2014 07:18:11 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (06/29/2014 07:18:11 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (06/29/2014 07:18:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (06/29/2014 07:18:11 PM) (Source: Windows Search Service) (EventID: 3057) (User: )
Description: Der Plug-In-Manager <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
        (HRESULT : 0x8e5e0210) (0x8e5e0210)

Error: (06/29/2014 07:18:11 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  0xc0041801 (0xc0041801)

Error: (06/29/2014 07:18:11 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
        0x8e5e0210 (0x8e5e0210)

Error: (06/29/2014 07:18:11 PM) (Source: ESENT) (EventID: 455) (User: )
Description: SearchIndexer (412) Windows: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb00178.log.

Error: (06/25/2014 02:09:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe_stisvc, Version: 6.3.9600.16384, Zeitstempel: 0x5215dfe3
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.17031, Zeitstempel: 0x530895af
Ausnahmecode: 0xc0000008
Fehleroffset: 0x000000000009ca6a
ID des fehlerhaften Prozesses: 0x7bc
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe_stisvc0
Pfad der fehlerhaften Anwendung: svchost.exe_stisvc1
Pfad des fehlerhaften Moduls: svchost.exe_stisvc2
Berichtskennung: svchost.exe_stisvc3
Vollständiger Name des fehlerhaften Pakets: svchost.exe_stisvc4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe_stisvc5

Error: (06/24/2014 09:13:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 24.6.0.0, Zeitstempel: 0x386d4380
Name des fehlerhaften Moduls: d2d1.dll, Version: 6.3.9600.16473, Zeitstempel: 0x528d9db8
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0030c057
ID des fehlerhaften Prozesses: 0x1364
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Vollständiger Name des fehlerhaften Pakets: firefox.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5


System errors:
=============
Error: (07/01/2014 09:30:16 AM) (Source: bowser) (EventID: 8016) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "O2BOX" zum Namen "PC" auf Transport "NetBT_Tcpip_{24F481C3-4E92-4BD6-A212-FF4BC8A5C97B}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.

Error: (06/29/2014 07:18:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/29/2014 07:18:12 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126

Error: (06/29/2014 07:17:50 PM) (Source: bowser) (EventID: 8016) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "O2BOX" zum Namen "PC" auf Transport "NetBT_Tcpip_{24F481C3-4E92-4BD6-A212-FF4BC8A5C97B}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.

Error: (06/29/2014 07:17:37 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎29.‎06.‎2014 um 19:14:32 unerwartet heruntergefahren.

Error: (06/29/2014 03:16:17 PM) (Source: DCOM) (EventID: 10016) (User: pc)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}pcbaustelleS-1-5-21-3069840582-281615928-2227681027-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/29/2014 03:16:17 PM) (Source: DCOM) (EventID: 10016) (User: pc)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}pcbaustelleS-1-5-21-3069840582-281615928-2227681027-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/29/2014 03:16:17 PM) (Source: DCOM) (EventID: 10016) (User: pc)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}pcbaustelleS-1-5-21-3069840582-281615928-2227681027-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/29/2014 03:16:17 PM) (Source: DCOM) (EventID: 10016) (User: pc)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}pcbaustelleS-1-5-21-3069840582-281615928-2227681027-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/29/2014 03:16:17 PM) (Source: DCOM) (EventID: 10016) (User: pc)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}pcbaustelleS-1-5-21-3069840582-281615928-2227681027-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 27%
Total physical RAM: 3976.27 MB
Available physical RAM: 2881.26 MB
Total Pagefile: 4680.27 MB
Available Pagefile: 3477.11 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:913.7 GB) (Free:876.07 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: D0F2F4F1)

Partition: GPT Partition Type.

==================== End Of Log ============================

die nächsten kommen

AsmW 01.07.2014 12:34
FRST:
kommt geteilt
Teil1:
Code:
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133760 2013-12-24] ( (Atheros Communications))
HKU\S-1-5-21-3069840582-281615928-2227681027-1002\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18249472 2014-05-02] (Acer Incorporated)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {4DD40821-DE39-4006-A6A0-21CEF77E4A9B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {4DD40821-DE39-4006-A6A0-21CEF77E4A9B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {4DD40821-DE39-4006-A6A0-21CEF77E4A9B} URL =
BHO: Free Games - {0D5F364D-D6A9-43C1-BF0C-99B378972C5B} - C:\Program Files (x86)\Free Games\ScriptHost64.dll (BestOffers)
BHO-x32: Free Games - {0D5F364D-D6A9-43C1-BF0C-99B378972C5B} - C:\Program Files (x86)\Free Games\ScriptHost.dll (BestOffers)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\baustelle\AppData\Roaming\Mozilla\Firefox\Profiles\zl2pf6t0.default
FF NewTab: chrome://quick_start/content/index.html
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 - C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [318592 2013-12-24] (Windows (R) Win 7 DDK provider)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2800896 2014-05-02] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-02] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2013-12-12] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-12-24] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-01 10:24 - 2014-07-01 10:24 - 00010342 _____ () C:\Users\baustelle\Desktop\FRST.txt
2014-07-01 10:24 - 2014-07-01 10:24 - 00000000 ____D () C:\FRST
2014-07-01 10:21 - 2014-07-01 10:22 - 00000480 _____ () C:\Users\baustelle\Desktop\defogger_disable.log
2014-07-01 10:21 - 2014-07-01 10:21 - 00000000 _____ () C:\Users\baustelle\defogger_reenable
2014-07-01 10:03 - 2014-07-01 10:03 - 00380416 _____ () C:\Users\baustelle\Desktop\Gmer-19357.exe
2014-07-01 10:02 - 2014-07-01 10:02 - 02083328 _____ (Farbar) C:\Users\baustelle\Desktop\FRST64.exe
2014-07-01 10:00 - 2014-07-01 10:00 - 00050477 _____ () C:\Users\baustelle\Desktop\Defogger.exe
2014-07-01 09:55 - 2014-07-01 09:55 - 01346519 _____ () C:\Users\baustelle\Desktop\adwcleaner_3.214.exe
2014-07-01 09:37 - 2014-07-01 09:37 - 00602112 _____ (OldTimer Tools) C:\Users\baustelle\Desktop\OTL.exe
2014-06-29 21:02 - 2014-07-01 10:15 - 00942616 ____N () C:\Windows\WindowsUpdate.log
2014-06-27 18:45 - 2014-06-30 09:01 - 00000000 ____D () C:\Users\baustelle\Desktop\Rassenmäher
2014-06-26 21:22 - 2014-06-26 21:22 - 01128916 _____ (www.hellopdf.com ) C:\Users\baustelle\Downloads\pdf2wordsetup11.exe
2014-06-26 12:40 - 2014-06-26 21:23 - 00132608 ___SH () C:\Users\baustelle\Desktop\Thumbs.db
2014-06-25 14:56 - 2014-06-25 14:56 - 00370400 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-25 14:19 - 2014-06-25 14:19 - 00003396 _____ () C:\Windows\System32\Tasks\{636AC246-62C1-49FB-AB77-CEB3169D8ED9}
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\speedtest199
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\freegames197
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Program Files (x86)\Free Games
2014-06-25 13:43 - 2014-07-01 10:11 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-06-25 13:43 - 2014-06-25 13:43 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-25 10:31 - 2014-06-25 10:31 - 00000898 _____ () C:\Users\baustelle\Documents\Musik - Verknüpfung.lnk
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieUserList
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieSiteList
2014-06-24 21:04 - 2014-06-25 08:51 - 00000000 ____D () C:\Users\baustelle\AppData\Local\CrashDumps
2014-06-24 18:04 - 2014-06-24 18:04 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-24 18:01 - 2014-06-16 13:13 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxt1A4B.tmp
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\TuneUp Software
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Local\TuneUp Software
2014-06-24 12:40 - 2014-06-24 12:43 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-24 12:39 - 2014-06-24 18:04 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-24 12:37 - 2014-06-24 12:38 - 27883432 _____ (TuneUp Software) C:\Users\baustelle\Downloads\TuneUpUtilities2014_de96-DE.exe
2014-06-24 12:24 - 2014-06-30 14:53 - 00000000 ____D () C:\Users\baustelle\Desktop\Eigene_Dataien
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\Documents\gaeb AVA Projektablage
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Nix & Keitel
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Nix & Keitel
2014-06-23 09:49 - 2014-06-23 09:49 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WinRAR
2014-06-23 09:45 - 2014-06-23 09:45 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\Public\OEM
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\baustelle\Documents\clear.fi
2014-06-22 10:32 - 2014-06-22 10:32 - 00001076 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-06-22 10:32 - 2014-06-22 10:32 - 00000000 ____D () C:\Users\baustelle\AppData\Local\AcerCloud
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Doc
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiMedia
2014-06-22 10:30 - 2014-06-22 10:32 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer
2014-06-22 10:30 - 2014-06-22 10:31 - 00000000 ____D () C:\ProgramData\clear.fi
2014-06-22 10:30 - 2014-06-22 10:30 - 00001027 _____ () C:\Users\Public\Desktop\Acer Photo.lnk
2014-06-22 10:30 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\acer
2014-06-22 10:29 - 2014-06-22 10:29 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiPhoto
2014-06-21 13:07 - 2014-03-20 06:19 - 01291200 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-06-21 13:07 - 2014-03-20 05:48 - 21232792 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-21 13:07 - 2014-03-20 05:41 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-06-21 13:07 - 2014-03-20 05:41 - 00376152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2014-06-21 13:07 - 2014-03-20 05:40 - 01112536 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-06-21 13:07 - 2014-03-20 03:29 - 04268544 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-21 13:07 - 2014-03-20 03:20 - 18679216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-21 13:07 - 2014-03-20 02:53 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-06-21 13:07 - 2014-03-20 02:48 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2014-06-21 13:07 - 2014-03-20 01:55 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-06-21 13:07 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2014-06-21 13:07 - 2014-03-19 09:13 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-06-21 13:07 - 2014-03-19 07:57 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-06-21 13:07 - 2014-03-19 07:31 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-06-21 13:07 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-06-21 13:07 - 2014-03-19 06:41 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-21 13:07 - 2014-03-19 06:17 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-21 13:07 - 2014-03-13 14:35 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2014-06-21 13:07 - 2014-03-11 17:18 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-06-21 13:07 - 2014-03-11 16:03 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2014-06-21 13:07 - 2014-03-11 16:00 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2014-06-21 13:07 - 2014-03-11 15:21 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-06-21 13:07 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-06-21 13:07 - 2014-03-11 14:42 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-06-21 13:07 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-06-21 13:07 - 2014-03-08 22:47 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-06-21 13:07 - 2014-03-08 22:47 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-06-21 13:07 - 2014-03-08 22:40 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-06-21 13:07 - 2014-03-08 22:38 - 01542768 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-06-21 13:07 - 2014-03-08 22:35 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-06-21 13:07 - 2014-03-08 22:35 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-21 13:07 - 2014-03-08 17:29 - 01339240 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-21 13:07 - 2014-03-08 17:29 - 00356848 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-06-21 13:07 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2014-06-21 13:07 - 2014-03-08 10:33 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-06-21 13:07 - 2014-03-08 09:51 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-21 13:07 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2014-06-21 13:07 - 2014-03-08 09:09 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-21 13:07 - 2014-03-08 09:04 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-06-21 13:07 - 2014-03-08 09:03 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-06-21 13:07 - 2014-03-08 09:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-06-21 13:07 - 2014-03-08 08:50 - 01066496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-21 13:07 - 2014-03-08 08:48 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-06-21 13:07 - 2014-03-08 08:46 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-06-21 13:07 - 2014-03-08 08:41 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-06-21 13:07 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-06-21 13:07 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-06-21 13:07 - 2014-03-08 08:31 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-06-21 13:07 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-06-21 13:07 - 2014-03-08 08:09 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-21 13:07 - 2014-03-08 08:02 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-21 13:07 - 2014-03-08 07:41 - 01306624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-06-21 13:07 - 2014-03-08 07:11 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-06-21 13:07 - 2014-03-06 16:35 - 01466864 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-21 13:07 - 2014-03-06 16:34 - 02331000 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-21 13:07 - 2014-03-06 16:34 - 00113648 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-06-21 13:07 - 2014-03-06 14:53 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-06-21 13:07 - 2014-03-06 14:53 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-06-21 13:07 - 2014-03-06 14:51 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-06-21 13:07 - 2014-03-06 14:51 - 00488280 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-06-21 13:07 - 2014-03-06 14:51 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-06-21 13:07 - 2014-03-06 14:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-21 13:07 - 2014-03-06 14:40 - 00492256 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00467504 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00463264 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00244888 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-21 13:07 - 2014-03-06 14:39 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-06-21 13:07 - 2014-03-06 13:20 - 01200296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-21 13:07 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-06-21 13:07 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2014-06-21 13:07 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-06-21 13:07 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-06-21 13:07 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00406512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00388408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-21 13:07 - 2014-03-06 11:22 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-21 13:07 - 2014-03-06 11:22 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-06-21 13:07 - 2014-03-06 11:20 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-21 13:07 - 2014-03-06 11:20 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-21 13:07 - 2014-03-06 11:20 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-21 13:07 - 2014-03-06 11:19 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-06-21 13:07 - 2014-03-06 11:19 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2014-06-21 13:07 - 2014-03-06 11:08 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-21 13:07 - 2014-03-06 10:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-06-21 13:07 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-06-21 13:07 - 2014-03-06 10:00 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2014-06-21 13:07 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-06-21 13:07 - 2014-03-06 09:22 - 16875520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-21 13:07 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2014-06-21 13:07 - 2014-03-06 09:02 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-06-21 13:07 - 2014-03-06 08:59 - 12732416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-21 13:07 - 2014-03-06 08:51 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-06-21 13:07 - 2014-03-06 08:39 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-06-21 13:07 - 2014-03-06 08:34 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-21 13:07 - 2014-03-06 08:33 - 13286400 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-21 13:07 - 2014-03-06 08:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-21 13:07 - 2014-03-06 08:31 - 02479616 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-06-21 13:07 - 2014-03-06 08:29 - 11791360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-21 13:07 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2014-06-21 13:07 - 2014-03-06 08:24 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-06-21 13:07 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-06-21 13:07 - 2014-03-06 08:23 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-06-21 13:07 - 2014-03-06 08:21 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-21 13:07 - 2014-03-06 08:21 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2014-06-21 13:07 - 2014-03-06 08:16 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-21 13:07 - 2014-03-06 08:16 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-21 13:07 - 2014-03-06 08:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-06-21 13:07 - 2014-03-06 08:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-21 13:07 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-06-21 13:07 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-06-21 13:07 - 2014-03-06 08:05 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-21 13:07 - 2014-03-06 08:04 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-21 13:07 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2014-06-21 13:07 - 2014-03-06 07:54 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-21 13:07 - 2014-03-06 07:54 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-21 13:07 - 2014-03-06 07:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-06-21 13:07 - 2014-03-06 07:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-21 13:07 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2014-06-21 13:07 - 2014-03-06 07:35 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-06-21 13:07 - 2014-03-06 07:33 - 00839168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-21 13:07 - 2014-03-06 07:32 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-06-21 13:07 - 2014-03-06 07:28 - 08653824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-21 13:07 - 2014-03-06 07:27 - 05833728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-21 13:07 - 2014-03-06 07:21 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-21 13:07 - 2014-03-06 07:20 - 06641152 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-21 13:07 - 2014-03-04 14:25 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-06-21 13:07 - 2014-03-04 14:15 - 02519384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-21 13:07 - 2014-03-04 14:15 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-21 13:07 - 2014-03-04 14:14 - 00360512 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-06-21 13:07 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-06-21 13:07 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-06-21 13:07 - 2014-03-04 09:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-06-21 13:07 - 2014-03-04 09:13 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-06-21 13:07 - 2014-03-04 09:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-06-21 13:07 - 2014-03-04 09:00 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2014-06-21 13:07 - 2014-03-04 08:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-06-21 13:07 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-06-21 13:07 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2014-06-21 13:07 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2014-06-21 13:07 - 2014-03-04 08:15 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2014-06-21 13:07 - 2014-03-04 08:03 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-06-21 13:07 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2014-06-21 13:06 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2014-06-21 13:06 - 2014-03-19 07:50 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2014-06-21 13:06 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2014-06-21 13:06 - 2014-03-12 15:45 - 00387210 _____ () C:\Windows\system32\ApnDatabase.xml
2014-06-21 13:06 - 2014-03-11 17:45 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2014-06-21 13:06 - 2014-03-11 17:02 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2014-06-21 13:06 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-06-21 13:06 - 2014-03-11 16:25 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2014-06-21 13:06 - 2014-03-11 16:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2014-06-21 13:06 - 2014-03-08 11:34 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-06-21 13:06 - 2014-03-08 11:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2014-06-21 13:06 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-06-21 13:06 - 2014-03-08 10:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll
2014-06-21 13:06 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll
2014-06-21 13:06 - 2014-03-08 09:53 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-06-21 13:06 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-06-21 13:06 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-06-21 13:06 - 2014-03-08 08:04 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-06-21 13:06 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-06-21 13:06 - 2014-03-06 11:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-21 13:06 - 2014-03-06 11:24 - 00111616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-06-21 13:06 - 2014-03-06 11:24 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-06-21 13:06 - 2014-03-06 11:24 - 00033280 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2014-06-21 13:06 - 2014-03-06 11:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-06-21 13:06 - 2014-03-06 11:19 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-06-21 13:06 - 2014-03-06 11:19 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-21 13:06 - 2014-03-06 11:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-06-21 13:06 - 2014-03-06 11:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2014-06-21 13:06 - 2014-03-06 10:41 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll
2014-06-21 13:06 - 2014-03-06 10:37 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-21 13:06 - 2014-03-06 10:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-21 13:06 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2014-06-21 13:06 - 2014-03-06 10:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-21 13:06 - 2014-03-06 09:47 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-21 13:06 - 2014-03-06 09:44 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-21 13:06 - 2014-03-06 09:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-21 13:06 - 2014-03-06 08:57 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-21 13:06 - 2014-03-06 08:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-06-21 13:06 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2014-06-21 13:06 - 2014-03-06 08:01 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2014-06-21 13:06 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2014-06-21 13:06 - 2014-03-04 08:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2014-06-21 13:06 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2014-06-21 13:06 - 2014-03-04 08:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-06-21 13:06 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-06-21 13:06 - 2014-02-07 00:59 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-21 13:06 - 2014-02-06 23:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-21 13:06 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2014-06-21 13:06 - 2013-12-24 01:26 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2014-06-21 13:05 - 2014-04-09 14:00 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-06-21 13:05 - 2014-04-09 05:32 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2014-06-21 13:05 - 2014-04-09 05:31 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-06-21 13:05 - 2014-04-09 05:23 - 01705984 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-06-21 13:05 - 2014-04-09 05:21 - 03408896 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-06-21 13:05 - 2014-03-02 12:20 - 23549952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-21 13:05 - 2014-03-02 11:33 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-21 13:05 - 2014-02-26 08:29 - 02678784 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-21 13:03 - 2014-02-08 03:08 - 00139600 _____ () C:\Windows\system32\systemsf.ebd
2014-06-21 13:02 - 2014-02-22 18:59 - 01519520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-06-21 13:02 - 2014-02-22 18:59 - 01290688 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-06-21 13:02 - 2014-02-22 18:59 - 00526304 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-06-21 13:02 - 2014-02-22 18:15 - 01929608 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2014-06-21 13:02 - 2014-02-22 18:00 - 00590168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-21 13:02 - 2014-02-22 17:55 - 01435304 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2014-06-21 13:02 - 2014-02-22 17:53 - 03394384 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2014-06-21 13:02 - 2014-02-22 17:50 - 02588168 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-21 13:02 - 2014-02-22 17:50 - 00645104 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-06-21 13:02 - 2014-02-22 17:48 - 02574240 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-06-21 13:02 - 2014-02-22 17:46 - 01927600 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2014-06-21 13:02 - 2014-02-22 17:46 - 01445616 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2014-06-21 13:02 - 2014-02-22 17:46 - 01000424 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2014-06-21 13:02 - 2014-02-22 17:44 - 00539992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-06-21 13:02 - 2014-02-22 17:43 - 01727760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 02142976 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 01215832 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 00800552 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 00609456 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-21 13:02 - 2014-02-22 17:40 - 01118552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-06-21 13:02 - 2014-02-22 16:52 - 01767440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2014-06-21 13:02 - 2014-02-22 16:42 - 01017936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2014-06-21 13:02 - 2014-02-22 16:42 - 00422968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-06-21 13:02 - 2014-02-22 16:38 - 01374384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2014-06-21 13:02 - 2014-02-22 16:38 - 01077944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2014-06-21 13:02 - 2014-02-22 16:25 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-06-21 13:02 - 2014-02-22 16:08 - 01474104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 01011280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 00650736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 00518552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-21 13:02 - 2014-02-22 14:24 - 02825216 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-06-21 13:02 - 2014-02-22 14:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-06-21 13:02 - 2014-02-22 14:15 - 04192768 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-21 13:02 - 2014-02-22 14:08 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2014-06-21 13:02 - 2014-02-22 13:44 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-21 13:02 - 2014-02-22 13:28 - 02428928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2014-06-21 13:02 - 2014-02-22 13:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
2014-06-21 13:02 - 2014-02-22 13:00 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-21 13:02 - 2014-02-22 12:44 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-21 13:02 - 2014-02-22 12:38 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\DfpCommon.dll
2014-06-21 13:02 - 2014-02-22 12:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-21 13:02 - 2014-02-22 12:34 - 11742720 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2014-06-21 13:02 - 2014-02-22 12:06 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-21 13:02 - 2014-02-22 12:02 - 08946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2014-06-21 13:02 - 2014-02-22 12:01 - 02648064 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-21 13:02 - 2014-02-22 11:53 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-06-21 13:02 - 2014-02-22 11:52 - 01132032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2014-06-21 13:02 - 2014-02-22 11:47 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-06-21 13:02 - 2014-02-22 11:39 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-21 13:02 - 2014-02-22 11:38 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2014-06-21 13:02 - 2014-02-22 11:37 - 02220032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-21 13:02 - 2014-02-22 11:35 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll
2014-06-21 13:02 - 2014-02-22 11:33 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-21 13:02 - 2014-02-22 11:28 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-06-21 13:02 - 2014-02-22 11:26 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 03494912 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 02843136 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 00628224 _____ (Microsoft Corporation) C:\Windows\system32\msTextPrediction.dll
2014-06-21 13:02 - 2014-02-22 11:16 - 11776000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-06-21 13:02 - 2014-02-22 11:14 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2014-06-21 13:02 - 2014-02-22 11:13 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2014-06-21 13:02 - 2014-02-22 11:11 - 02262016 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-21 13:02 - 2014-02-22 11:11 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2014-06-21 13:02 - 2014-02-22 11:01 - 13933568 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-06-21 13:02 - 2014-02-22 11:00 - 01341440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2014-06-21 13:02 - 2014-02-22 11:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2014-06-21 13:02 - 2014-02-22 10:59 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2014-06-21 13:02 - 2014-02-22 10:59 - 00791552 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-06-21 13:02 - 2014-02-22 10:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-06-21 13:02 - 2014-02-22 10:54 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2014-06-21 13:02 - 2014-02-22 10:53 - 12027904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-21 13:02 - 2014-02-22 10:49 - 08874496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-21 13:02 - 2014-02-22 10:49 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-21 13:02 - 2014-02-22 10:47 - 00517120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2014-06-21 13:02 - 2014-02-22 10:44 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-06-21 13:02 - 2014-02-22 10:40 - 02368512 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-06-21 13:02 - 2014-02-22 10:39 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2014-06-21 13:02 - 2014-02-22 10:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-21 13:02 - 2014-02-22 10:37 - 01716736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-06-21 13:02 - 2014-02-22 10:34 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-21 13:02 - 2014-02-22 10:32 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-21 13:02 - 2014-02-22 10:27 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-21 13:02 - 2014-02-22 10:24 - 02760704 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-21 13:02 - 2014-02-22 10:22 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2014-06-21 13:02 - 2014-02-22 10:21 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2014-06-21 13:02 - 2014-02-22 10:06 - 01640960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2014-06-21 13:02 - 2014-02-22 10:04 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-21 13:02 - 2014-02-22 10:03 - 01496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2014-06-21 13:02 - 2014-02-22 10:01 - 00978944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-21 13:02 - 2014-01-29 10:53 - 01653352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00461176 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2014-06-21 13:01 - 2014-02-22 18:59 - 00407536 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00289752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00209160 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00139464 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2014-06-21 13:01 - 2014-02-22 18:59 - 00123448 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-21 13:01 - 2014-02-22 18:15 - 01206000 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
2014-06-21 13:01 - 2014-02-22 18:15 - 00531128 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-06-21 13:01 - 2014-02-22 18:15 - 00275312 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2014-06-21 13:01 - 2014-02-22 18:15 - 00188464 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2014-06-21 13:01 - 2014-02-22 18:02 - 00170952 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2014-06-21 13:01 - 2014-02-22 18:02 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-06-21 13:01 - 2014-02-22 18:02 - 00080048 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2014-06-21 13:01 - 2014-02-22 18:00 - 00249688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-06-21 13:01 - 2014-02-22 18:00 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-06-21 13:01 - 2014-02-22 18:00 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-06-21 13:01 - 2014-02-22 18:00 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys
2014-06-21 13:01 - 2014-02-22 17:59 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00388408 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00244848 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00152848 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00105864 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-06-21 13:01 - 2014-02-22 17:50 - 00761792 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2014-06-21 13:01 - 2014-02-22 17:50 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-06-21 13:01 - 2014-02-22 17:50 - 00258784 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-21 13:01 - 2014-02-22 17:50 - 00043408 _____ (Microsoft Corporation) C:\Windows\system32\CloudNotifications.exe
2014-06-21 13:01 - 2014-02-22 17:49 - 00384856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-21 13:01 - 2014-02-22 17:49 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-21 13:01 - 2014-02-22 17:49 - 00280920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-06-21 13:01 - 2014-02-22 17:49 - 00148824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-06-21 13:01 - 2014-02-22 17:49 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2014-06-21 13:01 - 2014-02-22 17:48 - 01791752 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2014-06-21 13:01 - 2014-02-22 17:48 - 00210736 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-06-21 13:01 - 2014-02-22 17:46 - 00669896 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-06-21 13:01 - 2014-02-22 17:44 - 00924504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2014-06-21 13:01 - 2014-02-22 17:44 - 00424280 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-06-21 13:01 - 2014-02-22 17:44 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-21 13:01 - 2014-02-22 17:44 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-21 13:01 - 2014-02-22 17:43 - 01659056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-06-21 13:01 - 2014-02-22 17:43 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-06-21 13:01 - 2014-02-22 17:43 - 01487520 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-06-21 13:01 - 2014-02-22 17:43 - 01356360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-06-21 13:01 - 2014-02-22 17:43 - 00142576 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-06-21 13:01 - 2014-02-22 17:41 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00391008 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00372360 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-21 13:01 - 2014-02-22 16:51 - 01063976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2014-06-21 13:01 - 2014-02-22 16:51 - 00140456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2014-06-21 13:01 - 2014-02-22 16:42 - 00410568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2014-06-21 13:01 - 2014-02-22 16:42 - 00369288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2014-06-21 13:01 - 2014-02-22 16:42 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2014-06-21 13:01 - 2014-02-22 16:42 - 00098072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-21 13:01 - 2014-02-22 16:38 - 00506120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2014-06-21 13:01 - 2014-02-22 16:38 - 00336232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2014-06-21 13:01 - 2014-02-22 16:38 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-06-21 13:01 - 2014-02-22 16:25 - 00180240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2014-06-21 13:01 - 2014-02-22 16:18 - 00477744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-06-21 13:01 - 2014-02-22 16:18 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2014-06-21 13:01 - 2014-02-22 16:18 - 00041320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudNotifications.exe
2014-06-21 13:01 - 2014-02-22 16:11 - 00490136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 01206000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00317584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-21 13:01 - 2014-02-22 14:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2014-06-21 13:01 - 2014-02-22 14:14 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-21 13:01 - 2014-02-22 14:14 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2014-06-21 13:01 - 2014-02-22 14:14 - 00033280 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2014-06-21 13:01 - 2014-02-22 14:11 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-06-21 13:01 - 2014-02-22 14:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-06-21 13:01 - 2014-02-22 14:07 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-06-21 13:01 - 2014-02-22 14:07 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\WofUtil.dll
2014-06-21 13:01 - 2014-02-22 14:07 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\clrhost.dll
2014-06-21 13:01 - 2014-02-22 14:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2014-06-21 13:01 - 2014-02-22 13:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2014-06-21 13:01 - 2014-02-22 13:54 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2014-06-21 13:01 - 2014-02-22 13:50 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-06-21 13:01 - 2014-02-22 13:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2014-06-21 13:01 - 2014-02-22 13:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-21 13:01 - 2014-02-22 13:41 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2014-06-21 13:01 - 2014-02-22 13:34 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll
2014-06-21 13:01 - 2014-02-22 13:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-21 13:01 - 2014-02-22 13:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe
2014-06-21 13:01 - 2014-02-22 13:17 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-21 13:01 - 2014-02-22 13:16 - 00617472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2014-06-21 13:01 - 2014-02-22 13:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clrhost.dll
2014-06-21 13:01 - 2014-02-22 13:15 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2014-06-21 13:01 - 2014-02-22 13:06 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2014-06-21 13:01 - 2014-02-22 13:05 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll
2014-06-21 13:01 - 2014-02-22 13:05 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2014-06-21 13:01 - 2014-02-22 13:01 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-06-21 13:01 - 2014-02-22 13:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-21 13:01 - 2014-02-22 12:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-21 13:01 - 2014-02-22 12:56 - 02862592 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-06-21 13:01 - 2014-02-22 12:56 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2014-06-21 13:01 - 2014-02-22 12:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-21 13:01 - 2014-02-22 12:52 - 02288640 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2014-06-21 13:01 - 2014-02-22 12:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\dfp.exe
2014-06-21 13:01 - 2014-02-22 12:41 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-06-21 13:01 - 2014-02-22 12:41 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-06-21 13:01 - 2014-02-22 12:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2014-06-21 13:01 - 2014-02-22 12:39 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-21 13:01 - 2014-02-22 12:37 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2014-06-21 13:01 - 2014-02-22 12:36 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-06-21 13:01 - 2014-02-22 12:33 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-21 13:01 - 2014-02-22 12:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-21 13:01 - 2014-02-22 12:27 - 00397824 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2014-06-21 13:01 - 2014-02-22 12:25 - 01428480 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2014-06-21 13:01 - 2014-02-22 12:22 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-06-21 13:01 - 2014-02-22 12:18 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-06-21 13:01 - 2014-02-22 12:18 - 00722432 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeui.exe
2014-06-21 13:01 - 2014-02-22 12:17 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2014-06-21 13:01 - 2014-02-22 12:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2014-06-21 13:01 - 2014-02-22 12:14 - 02811392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2014-06-21 13:01 - 2014-02-22 12:14 - 02165760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
2014-06-21 13:01 - 2014-02-22 12:14 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2014-06-21 13:01 - 2014-02-22 12:13 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2014-06-21 13:01 - 2014-02-22 12:12 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\PurchaseWindowsLicense.dll
2014-06-21 13:01 - 2014-02-22 12:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-06-21 13:01 - 2014-02-22 12:09 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2014-06-21 13:01 - 2014-02-22 12:09 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-21 13:01 - 2014-02-22 12:08 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2014-06-21 13:01 - 2014-02-22 12:05 - 01757184 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2014-06-21 13:01 - 2014-02-22 12:04 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2014-06-21 13:01 - 2014-02-22 12:04 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\WLanConn.dll
2014-06-21 13:01 - 2014-02-22 12:03 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-21 13:01 - 2014-02-22 12:02 - 00258560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-06-21 13:01 - 2014-02-22 12:01 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-06-21 13:01 - 2014-02-22 12:01 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2014-06-21 13:01 - 2014-02-22 12:01 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-06-21 13:01 - 2014-02-22 12:00 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-21 13:01 - 2014-02-22 12:00 - 00217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-06-21 13:01 - 2014-02-22 11:59 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2014-06-21 13:01 - 2014-02-22 11:57 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2014-06-21 13:01 - 2014-02-22 11:55 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-21 13:01 - 2014-02-22 11:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2014-06-21 13:01 - 2014-02-22 11:48 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-06-21 13:01 - 2014-02-22 11:48 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2014-06-21 13:01 - 2014-02-22 11:46 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-06-21 13:01 - 2014-02-22 11:45 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-06-21 13:01 - 2014-02-22 11:45 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2014-06-21 13:01 - 2014-02-22 11:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-06-21 13:01 - 2014-02-22 11:44 - 00675328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-06-21 13:01 - 2014-02-22 11:44 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-06-21 13:01 - 2014-02-22 11:43 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2014-06-21 13:01 - 2014-02-22 11:36 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2014-06-21 13:01 - 2014-02-22 11:35 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-06-21 13:01 - 2014-02-22 11:34 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2014-06-21 13:01 - 2014-02-22 11:34 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2014-06-21 13:01 - 2014-02-22 11:33 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-21 13:01 - 2014-02-22 11:33 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\DismApi.dll
2014-06-21 13:01 - 2014-02-22 11:32 - 01162752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2014-06-21 13:01 - 2014-02-22 11:31 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2014-06-21 13:01 - 2014-02-22 11:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2014-06-21 13:01 - 2014-02-22 11:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2014-06-21 13:01 - 2014-02-22 11:24 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2014-06-21 13:01 - 2014-02-22 11:23 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-06-21 13:01 - 2014-02-22 11:21 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-21 13:01 - 2014-02-22 11:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2014-06-21 13:01 - 2014-02-22 11:15 - 00211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe
2014-06-21 13:01 - 2014-02-22 11:14 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-06-21 13:01 - 2014-02-22 11:12 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DismApi.dll
2014-06-21 13:01 - 2014-02-22 11:11 - 02395136 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-06-21 13:01 - 2014-02-22 11:10 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2014-06-21 13:01 - 2014-02-22 11:10 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2014-06-21 13:01 - 2014-02-22 11:09 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2014-06-21 13:01 - 2014-02-22 11:08 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-06-21 13:01 - 2014-02-22 11:07 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-21 13:01 - 2014-02-22 11:07 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2014-06-21 13:01 - 2014-02-22 11:06 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-06-21 13:01 - 2014-02-22 11:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2014-06-21 13:01 - 2014-02-22 11:04 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-21 13:01 - 2014-02-22 11:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2014-06-21 13:01 - 2014-02-22 10:59 - 01403392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-06-21 13:01 - 2014-02-22 10:55 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2014-06-21 13:01 - 2014-02-22 10:54 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2014-06-21 13:01 - 2014-02-22 10:54 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll
2014-06-21 13:01 - 2014-02-22 10:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-06-21 13:01 - 2014-02-22 10:53 - 00876544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-06-21 13:01 - 2014-02-22 10:52 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2014-06-21 13:01 - 2014-02-22 10:52 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-21 13:01 - 2014-02-22 10:51 - 01258496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
2014-06-21 13:01 - 2014-02-22 10:51 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-06-21 13:01 - 2014-02-22 10:51 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2014-06-21 13:01 - 2014-02-22 10:49 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2014-06-21 13:01 - 2014-02-22 10:48 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2014-06-21 13:01 - 2014-02-22 10:48 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll
2014-06-21 13:01 - 2014-02-22 10:47 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll
2014-06-21 13:01 - 2014-02-22 10:47 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-06-21 13:01 - 2014-02-22 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\AltTab.dll
2014-06-21 13:01 - 2014-02-22 10:46 - 00824832 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-06-21 13:01 - 2014-02-22 10:45 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-06-21 13:01 - 2014-02-22 10:45 - 00169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2014-06-21 13:01 - 2014-02-22 10:44 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-06-21 13:01 - 2014-02-22 10:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-06-21 13:01 - 2014-02-22 10:43 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-06-21 13:01 - 2014-02-22 10:43 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2014-06-21 13:01 - 2014-02-22 10:43 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-06-21 13:01 - 2014-02-22 10:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2014-06-21 13:01 - 2014-02-22 10:42 - 00943104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WlanMM.dll
2014-06-21 13:01 - 2014-02-22 10:42 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2014-06-21 13:01 - 2014-02-22 10:42 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2014-06-21 13:01 - 2014-02-22 10:41 - 00662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-06-21 13:01 - 2014-02-22 10:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2014-06-21 13:01 - 2014-02-22 10:40 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-06-21 13:01 - 2014-02-22 10:38 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-06-21 13:01 - 2014-02-22 10:37 - 00658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-06-21 13:01 - 2014-02-22 10:36 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2014-06-21 13:01 - 2014-02-22 10:35 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-21 13:01 - 2014-02-22 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2014-06-21 13:01 - 2014-02-22 10:33 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2014-06-21 13:01 - 2014-02-22 10:31 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-06-21 13:01 - 2014-02-22 10:29 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2014-06-21 13:01 - 2014-02-22 10:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2014-06-21 13:01 - 2014-02-22 10:22 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-21 13:01 - 2014-02-22 10:21 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-21 13:01 - 2014-02-22 10:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2014-06-21 13:01 - 2014-02-22 10:19 - 00698880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-21 13:01 - 2014-02-22 10:18 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-06-21 13:01 - 2014-02-22 10:17 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-06-21 13:01 - 2014-02-22 10:01 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2014-06-21 13:01 - 2014-02-22 10:00 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2014-06-21 13:01 - 2014-02-22 06:33 - 00262335 _____ () C:\Windows\system32\dfpinc.dat
2014-06-21 13:01 - 2014-02-02 16:48 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-21 13:01 - 2014-02-02 15:33 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-21 13:01 - 2014-01-31 11:55 - 03596800 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-06-21 13:01 - 2014-01-31 11:35 - 03085824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-06-21 13:01 - 2014-01-31 11:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2014-06-21 13:01 - 2014-01-31 11:10 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2014-06-21 13:01 - 2014-01-31 10:18 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-06-21 13:01 - 2014-01-29 10:52 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2014-06-21 13:01 - 2014-01-29 09:44 - 01369736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-06-21 13:01 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2014-06-21 13:01 - 2014-01-29 02:17 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2014-06-21 13:01 - 2014-01-27 21:48 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2014-06-21 13:01 - 2014-01-27 19:04 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-21 13:01 - 2014-01-27 17:38 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-21 13:01 - 2014-01-17 19:24 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll
2014-06-21 13:01 - 2014-01-17 19:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll
2014-06-21 13:01 - 2014-01-08 03:30 - 00745328 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-06-21 13:01 - 2014-01-08 02:33 - 00552632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-06-21 13:01 - 2013-12-10 09:35 - 00530944 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2014-06-21 13:01 - 2013-12-04 17:54 - 00660480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-06-21 13:01 - 2013-12-04 17:16 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2014-06-21 13:01 - 2013-12-04 15:53 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2014-06-21 13:01 - 2013-11-11 01:41 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2014-06-21 13:00 - 2014-02-22 18:58 - 00036200 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2014-06-21 13:00 - 2014-02-22 18:15 - 00071888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2014-06-21 13:00 - 2014-02-22 17:59 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2014-06-21 13:00 - 2014-02-22 17:55 - 00162176 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2014-06-21 13:00 - 2014-02-22 17:55 - 00131168 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2014-06-21 13:00 - 2014-02-22 17:50 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2014-06-21 13:00 - 2014-02-22 17:50 - 00054816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-21 13:00 - 2014-02-22 17:50 - 00032544 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe
2014-06-21 13:00 - 2014-02-22 17:49 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2014-06-21 13:00 - 2014-02-22 17:49 - 00189784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2014-06-21 13:00 - 2014-02-22 17:49 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
2014-06-21 13:00 - 2014-02-22 17:43 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2014-06-21 13:00 - 2014-02-22 17:41 - 00028416 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-21 13:00 - 2014-02-22 16:52 - 00251504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powrprof.dll
2014-06-21 13:00 - 2014-02-22 16:42 - 00137344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2014-06-21 13:00 - 2014-02-22 16:41 - 00033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2014-06-21 13:00 - 2014-02-22 16:18 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2014-06-21 13:00 - 2014-02-22 16:18 - 00029912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe
2014-06-21 13:00 - 2014-02-22 16:08 - 00079496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2014-06-21 13:00 - 2014-02-22 14:20 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2014-06-21 13:00 - 2014-02-22 14:17 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2014-06-21 13:00 - 2014-02-22 14:17 - 00890880 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2014-06-21 13:00 - 2014-02-22 14:17 - 00874496 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2014-06-21 13:00 - 2014-02-22 14:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2014-06-21 13:00 - 2014-02-22 14:14 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2014-06-21 13:00 - 2014-02-22 14:08 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2014-06-21 13:00 - 2014-02-22 14:07 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-06-21 13:00 - 2014-02-22 14:06 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-06-21 13:00 - 2014-02-22 14:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2014-06-21 13:00 - 2014-02-22 14:03 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2014-06-21 13:00 - 2014-02-22 14:03 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2014-06-21 13:00 - 2014-02-22 14:01 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\spcompat.dll
2014-06-21 13:00 - 2014-02-22 14:00 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-06-21 13:00 - 2014-02-22 14:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2014-06-21 13:00 - 2014-02-22 13:59 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe
2014-06-21 13:00 - 2014-02-22 13:57 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-06-21 13:00 - 2014-02-22 13:50 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2014-06-21 13:00 - 2014-02-22 13:47 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2014-06-21 13:00 - 2014-02-22 13:47 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2014-06-21 13:00 - 2014-02-22 13:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-06-21 13:00 - 2014-02-22 13:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2014-06-21 13:00 - 2014-02-22 13:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\fhevents.dll
2014-06-21 13:00 - 2014-02-22 13:42 - 00038680 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2014-06-21 13:00 - 2014-02-22 13:37 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2014-06-21 13:00 - 2014-02-22 13:32 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2014-06-21 13:00 - 2014-02-22 13:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2014-06-21 13:00 - 2014-02-22 13:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll
2014-06-21 13:00 - 2014-02-22 13:25 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-06-21 13:00 - 2014-02-22 13:25 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2014-06-21 13:00 - 2014-02-22 13:25 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2014-06-21 13:00 - 2014-02-22 13:24 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2014-06-21 13:00 - 2014-02-22 13:24 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2014-06-21 13:00 - 2014-02-22 13:24 - 00780288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2014-06-21 13:00 - 2014-02-22 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SSShim.dll
2014-06-21 13:00 - 2014-02-22 13:24 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2014-06-21 13:00 - 2014-02-22 13:22 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2014-06-21 13:00 - 2014-02-22 13:22 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-06-21 13:00 - 2014-02-22 13:17 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll
2014-06-21 13:00 - 2014-02-22 13:16 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2014-06-21 13:00 - 2014-02-22 13:16 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-06-21 13:00 - 2014-02-22 13:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-06-21 13:00 - 2014-02-22 13:14 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\cleanmgr.exe
2014-06-21 13:00 - 2014-02-22 13:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2014-06-21 13:00 - 2014-02-22 13:11 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2014-06-21 13:00 - 2014-02-22 13:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-06-21 13:00 - 2014-02-22 13:09 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2014-06-21 13:00 - 2014-02-22 13:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2014-06-21 13:00 - 2014-02-22 13:07 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-06-21 13:00 - 2014-02-22 13:05 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\pnpclean.dll
2014-06-21 13:00 - 2014-02-22 13:05 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentHost.dll
2014-06-21 13:00 - 2014-02-22 13:04 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2014-06-21 13:00 - 2014-02-22 13:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-21 13:00 - 2014-02-22 13:02 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2014-06-21 13:00 - 2014-02-22 13:02 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2014-06-21 13:00 - 2014-02-22 13:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-06-21 13:00 - 2014-02-22 12:59 - 01283584 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2014-06-21 13:00 - 2014-02-22 12:59 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2014-06-21 13:00 - 2014-02-22 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-21 13:00 - 2014-02-22 12:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2014-06-21 13:00 - 2014-02-22 12:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\DAConn.dll
2014-06-21 13:00 - 2014-02-22 12:57 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2014-06-21 13:00 - 2014-02-22 12:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-06-21 13:00 - 2014-02-22 12:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-21 13:00 - 2014-02-22 12:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2014-06-21 13:00 - 2014-02-22 12:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2014-06-21 13:00 - 2014-02-22 12:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2014-06-21 13:00 - 2014-02-22 12:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
2014-06-21 13:00 - 2014-02-22 12:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2014-06-21 13:00 - 2014-02-22 12:51 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2014-06-21 13:00 - 2014-02-22 12:50 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
2014-06-21 13:00 - 2014-02-22 12:47 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmdskmgr.dll
2014-06-21 13:00 - 2014-02-22 12:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2014-06-21 13:00 - 2014-02-22 12:47 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2014-06-21 13:00 - 2014-02-22 12:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-21 13:00 - 2014-02-22 12:46 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2014-06-21 13:00 - 2014-02-22 12:41 - 02566656 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2014-06-21 13:00 - 2014-02-22 12:40 - 00304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-06-21 13:00 - 2014-02-22 12:40 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2014-06-21 13:00 - 2014-02-22 12:38 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2014-06-21 13:00 - 2014-02-22 12:36 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-06-21 13:00 - 2014-02-22 12:35 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2014-06-21 13:00 - 2014-02-22 12:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2014-06-21 13:00 - 2014-02-22 12:33 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2014-06-21 13:00 - 2014-02-22 12:32 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-06-21 13:00 - 2014-02-22 12:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cleanmgr.exe
2014-06-21 13:00 - 2014-02-22 12:29 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-21 13:00 - 2014-02-22 12:28 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-21 13:00 - 2014-02-22 12:25 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2014-06-21 13:00 - 2014-02-22 12:21 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2014-06-21 13:00 - 2014-02-22 12:21 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-21 13:00 - 2014-02-22 12:21 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
2014-06-21 13:00 - 2014-02-22 12:20 - 01152512 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2014-06-21 13:00 - 2014-02-22 12:18 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-06-21 13:00 - 2014-02-22 12:17 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-21 13:00 - 2014-02-22 12:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2014-06-21 13:00 - 2014-02-22 12:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2014-06-21 13:00 - 2014-02-22 12:16 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
2014-06-21 13:00 - 2014-02-22 12:16 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2014-06-21 13:00 - 2014-02-22 12:13 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2014-06-21 13:00 - 2014-02-22 12:13 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2014-06-21 13:00 - 2014-02-22 12:12 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
2014-06-21 13:00 - 2014-02-22 12:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2014-06-21 13:00 - 2014-02-22 12:09 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-21 13:00 - 2014-02-22 12:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
2014-06-21 13:00 - 2014-02-22 11:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-21 13:00 - 2014-02-22 11:56 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2014-06-21 13:00 - 2014-02-22 11:54 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-21 13:00 - 2014-02-22 11:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2014-06-21 13:00 - 2014-02-22 11:53 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-06-21 13:00 - 2014-02-22 11:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2014-06-21 13:00 - 2014-02-22 11:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll
2014-06-21 13:00 - 2014-02-22 11:49 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll
2014-06-21 13:00 - 2014-02-22 11:48 - 01136128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2014-06-21 13:00 - 2014-02-22 11:48 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2014-06-21 13:00 - 2014-02-22 11:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\winsku.dll
2014-06-21 13:00 - 2014-02-22 11:45 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2014-06-21 13:00 - 2014-02-22 11:45 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-06-21 13:00 - 2014-02-22 11:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2014-06-21 13:00 - 2014-02-22 11:43 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-06-21 13:00 - 2014-02-22 11:41 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2014-06-21 13:00 - 2014-02-22 11:40 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-06-21 13:00 - 2014-02-22 11:40 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-21 13:00 - 2014-02-22 11:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2014-06-21 13:00 - 2014-02-22 11:37 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-06-21 13:00 - 2014-02-22 11:36 - 01392640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2014-06-21 13:00 - 2014-02-22 11:36 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
2014-06-21 13:00 - 2014-02-22 11:36 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WLanConn.dll
2014-06-21 13:00 - 2014-02-22 11:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2014-06-21 13:00 - 2014-02-22 11:29 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-21 13:00 - 2014-02-22 11:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2014-06-21 13:00 - 2014-02-22 11:28 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2014-06-21 13:00 - 2014-02-22 11:27 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-06-21 13:00 - 2014-02-22 11:26 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2014-06-21 13:00 - 2014-02-22 11:26 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2014-06-21 13:00 - 2014-02-22 11:25 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbrand.dll
2014-06-21 13:00 - 2014-02-22 11:23 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2014-06-21 13:00 - 2014-02-22 11:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll
2014-06-21 13:00 - 2014-02-22 11:22 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2014-06-21 13:00 - 2014-02-22 11:22 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsku.dll
2014-06-21 13:00 - 2014-02-22 11:19 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-06-21 13:00 - 2014-02-22 11:19 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-06-21 13:00 - 2014-02-22 11:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxshared.dll
2014-06-21 13:00 - 2014-02-22 11:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2014-06-21 13:00 - 2014-02-22 11:07 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2014-06-21 13:00 - 2014-02-22 11:06 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2014-06-21 13:00 - 2014-02-22 11:04 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\slpts.dll
2014-06-21 13:00 - 2014-02-22 11:02 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2014-06-21 13:00 - 2014-02-22 11:02 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2014-06-21 13:00 - 2014-02-22 10:59 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-21 13:00 - 2014-02-22 10:58 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2014-06-21 13:00 - 2014-02-22 10:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-06-21 13:00 - 2014-02-22 10:55 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\energytask.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slpts.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2014-06-21 13:00 - 2014-02-22 10:54 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2014-06-21 13:00 - 2014-02-22 10:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\AepRoam.dll
2014-06-21 13:00 - 2014-02-22 10:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2014-06-21 13:00 - 2014-02-22 10:49 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2014-06-21 13:00 - 2014-02-22 10:49 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-06-21 13:00 - 2014-02-22 10:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-06-21 13:00 - 2014-02-22 10:48 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2014-06-21 13:00 - 2014-02-22 10:47 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll
2014-06-21 13:00 - 2014-02-22 10:46 - 03312128 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2014-06-21 13:00 - 2014-02-22 10:45 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2014-06-21 13:00 - 2014-02-22 10:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-06-21 13:00 - 2014-02-22 10:44 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2014-06-21 13:00 - 2014-02-22 10:44 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2014-06-21 13:00 - 2014-02-22 10:43 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2014-06-21 13:00 - 2014-02-22 10:43 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-06-21 13:00 - 2014-02-22 10:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Renewal.dll
2014-06-21 13:00 - 2014-02-22 10:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2014-06-21 13:00 - 2014-02-22 10:39 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2014-06-21 13:00 - 2014-02-22 10:39 - 00321536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
2014-06-21 13:00 - 2014-02-22 10:38 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-06-21 13:00 - 2014-02-22 10:35 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\SettingMonitor.dll
2014-06-21 13:00 - 2014-02-22 10:33 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingMonitor.dll
2014-06-21 13:00 - 2014-02-22 10:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2014-06-21 13:00 - 2014-02-22 10:30 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2014-06-21 13:00 - 2014-02-22 10:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll
2014-06-21 13:00 - 2014-02-22 10:20 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2014-06-21 13:00 - 2014-02-22 10:19 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2014-06-21 13:00 - 2014-02-22 10:17 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2014-06-21 13:00 - 2014-02-22 10:17 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2014-06-21 13:00 - 2014-02-22 09:54 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2014-06-21 13:00 - 2014-02-01 08:00 - 00002255 _____ () C:\Windows\SysWOW64\WimBootCompress.ini
2014-06-21 13:00 - 2014-02-01 08:00 - 00002255 _____ () C:\Windows\system32\WimBootCompress.ini
2014-06-21 13:00 - 2014-01-31 14:09 - 00081920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-06-21 13:00 - 2014-01-31 14:08 - 01200640 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-21 13:00 - 2014-01-31 13:59 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-21 13:00 - 2014-01-31 13:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-21 13:00 - 2014-01-31 11:19 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2014-06-21 13:00 - 2014-01-31 11:08 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2014-06-21 13:00 - 2014-01-31 11:04 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2014-06-21 13:00 - 2014-01-31 10:24 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-06-21 13:00 - 2014-01-29 10:40 - 00994136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2014-06-21 13:00 - 2014-01-29 02:18 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2014-06-21 13:00 - 2014-01-27 21:53 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-06-21 13:00 - 2014-01-22 08:21 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2014-06-21 13:00 - 2014-01-22 07:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2014-06-21 13:00 - 2013-12-04 20:41 - 00226304 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2014-06-21 13:00 - 2013-12-04 16:19 - 00439808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-06-21 13:00 - 2013-11-27 11:10 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2014-06-21 13:00 - 2013-11-27 10:56 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2014-06-21 13:00 - 2013-11-08 06:04 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-21 13:00 - 2013-11-08 05:47 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-21 12:59 - 2014-02-22 14:17 - 00008192 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 14:17 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 14:08 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2014-06-21 12:59 - 2014-02-22 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2014-06-21 12:59 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-06-21 12:59 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-06-21 12:59 - 2014-02-22 14:00 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\lpksetupproxyserv.dll
2014-06-21 12:59 - 2014-02-22 13:48 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2014-06-21 12:59 - 2014-02-22 13:39 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\fhsvcctl.dll
2014-06-21 12:59 - 2014-02-22 13:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\f3ahvoas.dll
2014-06-21 12:59 - 2014-02-22 13:25 - 00008192 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 13:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 13:17 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2014-06-21 12:59 - 2014-02-22 13:16 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-21 12:59 - 2014-02-22 13:08 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-06-21 12:59 - 2014-02-22 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2014-06-21 12:59 - 2014-02-22 13:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-06-21 12:59 - 2014-02-22 12:59 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
2014-06-21 12:59 - 2014-02-22 12:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-21 12:59 - 2014-02-22 12:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2014-06-21 12:59 - 2014-02-22 12:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-21 12:59 - 2014-02-22 12:03 - 02544128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2014-06-21 12:59 - 2014-02-22 11:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2014-06-21 12:59 - 2014-02-22 11:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2014-06-21 12:59 - 2014-02-22 11:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-06-21 12:59 - 2014-02-22 11:51 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2014-06-21 12:59 - 2014-02-22 11:27 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2014-06-21 12:59 - 2014-02-22 11:19 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\korwbrkr.dll
2014-06-21 12:59 - 2014-02-22 10:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-06-21 12:59 - 2014-02-22 10:55 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2014-06-21 12:59 - 2014-02-22 10:48 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2014-06-21 12:59 - 2014-02-22 10:39 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2014-06-21 12:59 - 2014-02-22 10:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2014-06-21 12:59 - 2014-02-22 10:20 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2014-06-21 12:59 - 2014-02-22 06:43 - 00002440 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-06-21 12:59 - 2014-02-08 03:08 - 00100197 _____ () C:\Windows\SysWOW64\RacRules.xml
2014-06-21 12:59 - 2014-02-08 03:08 - 00100197 _____ () C:\Windows\system32\RacRules.xml
2014-06-21 12:59 - 2014-02-01 08:00 - 00011109 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00011109 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007762 _____ () C:\Windows\SysWOW64\connectedsearch-suggestions.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007762 _____ () C:\Windows\system32\connectedsearch-suggestions.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007130 _____ () C:\Windows\SysWOW64\connectedsearch-zeroinput.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007130 _____ () C:\Windows\system32\connectedsearch-zeroinput.searchconnector-ms
2014-06-21 12:59 - 2014-01-27 19:54 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-21 12:59 - 2014-01-27 13:45 - 00050053 _____ () C:\Windows\system32\srms.dat
2014-06-21 12:59 - 2013-11-27 11:47 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2014-06-21 12:59 - 2013-11-27 11:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\finger.exe
2014-06-21 00:59 - 2014-06-21 01:03 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-21 00:56 - 2013-10-02 03:31 - 02214216 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll
2014-06-21 00:51 - 2014-06-30 11:05 - 00000000 ____D () C:\Users\baustelle\Desktop\bau
2014-06-20 22:25 - 2014-06-20 22:25 - 00000000 ____D () C:\Users\baustelle\Desktop\Tor Browser
2014-06-20 22:02 - 2014-06-20 22:02 - 00166428 _____ () C:\Users\baustelle\Downloads\BauLV-Demo.zip
2014-06-20 21:28 - 2014-06-30 18:47 - 00000000 ____D () C:\Users\baustelle\Desktop\FOTO
2014-06-20 21:09 - 2014-06-20 21:10 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-20 21:09 - 2014-06-01 17:17 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-20 16:38 - 2014-06-30 10:47 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Deployment
2014-06-20 16:38 - 2014-06-20 16:38 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Apps\2.0
2014-06-20 16:35 - 2014-06-20 16:35 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Adobe
2014-06-18 16:43 - 2014-06-18 16:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-18 16:34 - 2014-06-21 00:55 - 00000000 ____D () C:\Program Files (x86)\Convar

AsmW 01.07.2014 12:39
FRST:
Teil 2:
Code:
2014-06-18 16:01 - 2014-07-01 09:56 - 00000000 ____D () C:\AdwCleaner
2014-06-18 15:16 - 2014-01-04 17:54 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll
2014-06-18 15:16 - 2014-01-04 17:08 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll
2014-06-18 15:16 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-18 15:16 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-18 15:16 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-06-18 15:16 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2014-06-18 15:16 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2014-06-18 15:16 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2014-06-18 15:16 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2014-06-18 15:16 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2014-06-18 15:16 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2014-06-18 15:15 - 2013-11-27 17:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-06-18 15:14 - 2013-11-27 17:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-06-18 15:14 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-06-18 15:14 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-06-18 15:14 - 2013-11-27 14:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2014-06-18 15:14 - 2013-11-27 12:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-06-18 15:14 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-06-18 15:14 - 2013-11-27 11:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2014-06-18 15:14 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2014-06-18 15:14 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-06-18 15:14 - 2013-11-25 01:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-06-18 15:14 - 2013-11-23 09:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll
2014-06-18 15:14 - 2013-11-23 09:13 - 00019456 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2014-06-18 15:14 - 2013-11-23 06:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-06-18 15:14 - 2013-11-21 08:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll
2014-06-18 15:14 - 2013-11-15 16:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2014-06-18 15:14 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2014-06-18 15:14 - 2013-11-15 16:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-06-18 15:11 - 2013-11-11 04:48 - 00039768 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-06-18 15:11 - 2013-11-01 13:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-06-18 15:11 - 2013-10-26 03:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2014-06-18 15:06 - 2014-06-18 15:06 - 00000989 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-06-18 15:06 - 2014-06-18 15:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:37 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-06-18 15:05 - 2014-06-18 15:06 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00001007 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\Users\baustelle\Documents\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-18 15:05 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-06-18 15:05 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-06-18 15:05 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-06-18 15:05 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-06-18 15:05 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2014-06-18 15:05 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-06-18 15:05 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2014-06-18 15:04 - 2014-06-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Windows\PCHEALTH
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-06-18 15:00 - 2014-06-25 11:28 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Microsoft Help
2014-06-18 15:00 - 2014-06-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-18 15:00 - 2014-06-18 15:00 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-18 14:59 - 2014-06-18 14:59 - 00000000 __RHD () C:\MSOCache
2014-06-18 14:57 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-06-18 14:57 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-06-18 14:57 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-18 14:57 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-18 14:57 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2014-06-18 14:57 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2014-06-18 14:57 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2014-06-18 14:57 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2014-06-18 14:57 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-18 14:57 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-18 14:57 - 2014-01-07 07:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-06-18 14:57 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-06-18 14:57 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2014-06-18 14:57 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2014-06-18 14:57 - 2013-12-09 02:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-18 14:57 - 2013-12-09 02:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-06-18 14:57 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-06-18 14:57 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-18 14:57 - 2013-11-23 06:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-06-18 14:57 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-06-18 14:57 - 2013-11-21 08:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-06-18 14:57 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-06-18 14:57 - 2013-10-19 10:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-06-18 14:57 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-06-18 14:56 - 2014-01-07 09:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2014-06-18 14:56 - 2014-01-07 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2014-06-18 14:56 - 2013-11-27 13:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2014-06-18 14:56 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-06-18 14:56 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-06-18 14:56 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-06-18 14:55 - 2014-06-21 19:42 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-18 14:55 - 2014-06-18 14:55 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-18 14:52 - 2014-06-18 14:52 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer Aspire R7 Tutorial
2014-06-18 14:50 - 2014-06-18 14:49 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Mozilla
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-06-18 14:47 - 2014-06-18 14:47 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 14:45 - 2014-06-18 14:45 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Avira
2014-06-18 14:43 - 2014-06-24 10:55 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-18 14:43 - 2014-06-18 14:43 - 00002046 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-18 14:43 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-18 14:43 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-18 14:39 - 2014-06-18 14:39 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WildTangent
2014-06-18 14:16 - 2014-07-01 10:21 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3069840582-281615928-2227681027-1002
2014-06-18 14:15 - 2014-06-18 14:15 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Macromedia
2014-06-18 12:47 - 2014-06-24 21:13 - 00000000 ____D () C:\Users\baustelle\AppData\Local\clear.fi
2014-06-18 12:47 - 2014-06-18 12:47 - 00000000 ____D () C:\Users\baustelle\PicStream
2014-06-18 12:46 - 2014-06-18 12:46 - 00001276 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Atheros
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Program Files\Accessory Store
2014-06-18 12:45 - 2014-07-01 10:21 - 00000000 ____D () C:\Users\baustelle
2014-06-18 12:45 - 2014-06-25 13:49 - 00000000 ____D () C:\Users\baustelle\AppData\Local\VirtualStore
2014-06-18 12:45 - 2014-06-21 01:03 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Packages
2014-06-18 12:45 - 2014-06-20 16:35 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Adobe
2014-06-18 12:45 - 2014-06-18 12:45 - 00001454 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-18 12:45 - 2014-06-18 12:45 - 00000020 ___SH () C:\Users\baustelle\ntuser.ini
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Vorlagen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Startmenü
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Netzwerkumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Lokale Einstellungen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Eigene Dateien
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Druckumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Musik
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Bilder
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Verlauf
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Anwendungsdaten
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Anwendungsdaten
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Dokumente und Einstellungen

==================== One Month Modified Files and Folders =======

2014-07-01 10:24 - 2014-07-01 10:24 - 00010342 _____ () C:\Users\baustelle\Desktop\FRST.txt
2014-07-01 10:24 - 2014-07-01 10:24 - 00000000 ____D () C:\FRST
2014-07-01 10:22 - 2014-07-01 10:21 - 00000480 _____ () C:\Users\baustelle\Desktop\defogger_disable.log
2014-07-01 10:21 - 2014-07-01 10:21 - 00000000 _____ () C:\Users\baustelle\defogger_reenable
2014-07-01 10:21 - 2014-06-18 14:16 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3069840582-281615928-2227681027-1002
2014-07-01 10:21 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle
2014-07-01 10:15 - 2014-06-29 21:02 - 00942616 ____N () C:\Windows\WindowsUpdate.log
2014-07-01 10:15 - 2014-02-28 02:56 - 00002896 _____ () C:\Windows\System32\Tasks\Quick Access
2014-07-01 10:14 - 2014-02-28 03:03 - 00003336 _____ () C:\Windows\System32\Tasks\AcerCloud
2014-07-01 10:14 - 2014-02-28 02:56 - 00002904 _____ () C:\Windows\System32\Tasks\Launch Manager
2014-07-01 10:11 - 2014-06-25 13:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-07-01 10:03 - 2014-07-01 10:03 - 00380416 _____ () C:\Users\baustelle\Desktop\Gmer-19357.exe
2014-07-01 10:02 - 2014-07-01 10:02 - 02083328 _____ (Farbar) C:\Users\baustelle\Desktop\FRST64.exe
2014-07-01 10:00 - 2014-07-01 10:00 - 00050477 _____ () C:\Users\baustelle\Desktop\Defogger.exe
2014-07-01 10:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-01 09:57 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-01 09:56 - 2014-06-18 16:01 - 00000000 ____D () C:\AdwCleaner
2014-07-01 09:55 - 2014-07-01 09:55 - 01346519 _____ () C:\Users\baustelle\Desktop\adwcleaner_3.214.exe
2014-07-01 09:37 - 2014-07-01 09:37 - 00602112 _____ (OldTimer Tools) C:\Users\baustelle\Desktop\OTL.exe
2014-07-01 09:34 - 2014-02-28 11:03 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-01 09:34 - 2014-02-28 11:03 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-01 09:34 - 2014-01-14 11:58 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-30 18:47 - 2014-06-20 21:28 - 00000000 ____D () C:\Users\baustelle\Desktop\FOTO
2014-06-30 14:53 - 2014-06-24 12:24 - 00000000 ____D () C:\Users\baustelle\Desktop\Eigene_Dataien
2014-06-30 11:05 - 2014-06-21 00:51 - 00000000 ____D () C:\Users\baustelle\Desktop\bau
2014-06-30 10:47 - 2014-06-20 16:38 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Deployment
2014-06-30 09:01 - 2014-06-27 18:45 - 00000000 ____D () C:\Users\baustelle\Desktop\Rassenmäher
2014-06-27 14:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-26 21:23 - 2014-06-26 12:40 - 00132608 ___SH () C:\Users\baustelle\Desktop\Thumbs.db
2014-06-26 21:22 - 2014-06-26 21:22 - 01128916 _____ (www.hellopdf.com ) C:\Users\baustelle\Downloads\pdf2wordsetup11.exe
2014-06-25 14:56 - 2014-06-25 14:56 - 00370400 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-25 14:24 - 2014-02-28 02:59 - 00000000 ____D () C:\ProgramData\install_clap
2014-06-25 14:24 - 2014-01-14 11:50 - 00000000 ____D () C:\Windows\Panther
2014-06-25 14:19 - 2014-06-25 14:19 - 00003396 _____ () C:\Windows\System32\Tasks\{636AC246-62C1-49FB-AB77-CEB3169D8ED9}
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\speedtest199
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\freegames197
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Program Files (x86)\Free Games
2014-06-25 13:49 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle\AppData\Local\VirtualStore
2014-06-25 13:43 - 2014-06-25 13:43 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-25 11:28 - 2014-06-18 15:00 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Microsoft Help
2014-06-25 10:31 - 2014-06-25 10:31 - 00000898 _____ () C:\Users\baustelle\Documents\Musik - Verknüpfung.lnk
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieUserList
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieSiteList
2014-06-25 08:51 - 2014-06-24 21:04 - 00000000 ____D () C:\Users\baustelle\AppData\Local\CrashDumps
2014-06-24 21:13 - 2014-06-18 12:47 - 00000000 ____D () C:\Users\baustelle\AppData\Local\clear.fi
2014-06-24 18:04 - 2014-06-24 18:04 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-24 18:04 - 2014-06-24 12:39 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-24 18:04 - 2014-01-14 12:19 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-24 12:43 - 2014-06-24 12:40 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\TuneUp Software
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Local\TuneUp Software
2014-06-24 12:38 - 2014-06-24 12:37 - 27883432 _____ (TuneUp Software) C:\Users\baustelle\Downloads\TuneUpUtilities2014_de96-DE.exe
2014-06-24 10:55 - 2014-06-18 14:43 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\Documents\gaeb AVA Projektablage
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Nix & Keitel
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Nix & Keitel
2014-06-23 09:59 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-06-23 09:49 - 2014-06-23 09:49 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WinRAR
2014-06-23 09:45 - 2014-06-23 09:45 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-06-23 09:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery
2014-06-23 08:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\Public\OEM
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\baustelle\Documents\clear.fi
2014-06-22 10:41 - 2014-02-28 02:56 - 00000000 ____D () C:\ProgramData\OEM
2014-06-22 10:32 - 2014-06-22 10:32 - 00001076 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-06-22 10:32 - 2014-06-22 10:32 - 00000000 ____D () C:\Users\baustelle\AppData\Local\AcerCloud
2014-06-22 10:32 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer
2014-06-22 10:32 - 2014-01-14 12:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-06-22 10:32 - 2014-01-14 12:27 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Doc
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiMedia
2014-06-22 10:31 - 2014-06-22 10:30 - 00000000 ____D () C:\ProgramData\clear.fi
2014-06-22 10:31 - 2014-02-28 03:04 - 00001178 _____ () C:\Users\Public\Desktop\Acer Docs.lnk
2014-06-22 10:31 - 2014-01-14 11:41 - 00000000 ___HD () C:\OEM
2014-06-22 10:30 - 2014-06-22 10:30 - 00001027 _____ () C:\Users\Public\Desktop\Acer Photo.lnk
2014-06-22 10:30 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\acer
2014-06-22 10:29 - 2014-06-22 10:29 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiPhoto
2014-06-21 19:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-21 19:42 - 2014-06-18 14:55 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-21 18:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-21 18:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\th-TH
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\he-IL
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\et-EE
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\en-GB
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing
2014-06-21 18:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-06-21 18:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-06-21 13:29 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-21 01:03 - 2014-06-21 00:59 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-21 01:03 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Packages
2014-06-21 00:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-21 00:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-21 00:55 - 2014-06-18 16:34 - 00000000 ____D () C:\Program Files (x86)\Convar
2014-06-20 22:25 - 2014-06-20 22:25 - 00000000 ____D () C:\Users\baustelle\Desktop\Tor Browser
2014-06-20 22:02 - 2014-06-20 22:02 - 00166428 _____ () C:\Users\baustelle\Downloads\BauLV-Demo.zip
2014-06-20 21:10 - 2014-06-20 21:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-20 21:10 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-06-20 21:10 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-20 21:09 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-20 16:38 - 2014-06-20 16:38 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Apps\2.0
2014-06-20 16:35 - 2014-06-20 16:35 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Adobe
2014-06-20 16:35 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Adobe
2014-06-20 14:52 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-06-18 21:39 - 2013-08-22 17:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template
2014-06-18 16:43 - 2014-06-18 16:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-18 16:03 - 2014-02-28 02:59 - 00000000 ____D () C:\ProgramData\Norton
2014-06-18 15:37 - 2014-06-18 15:05 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-06-18 15:15 - 2014-02-28 02:59 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-06-18 15:06 - 2014-06-18 15:06 - 00000989 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-06-18 15:06 - 2014-06-18 15:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-06-18 15:06 - 2014-06-18 15:05 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00001007 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\Users\baustelle\Documents\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-18 15:04 - 2014-06-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-18 15:04 - 2014-06-18 15:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Windows\PCHEALTH
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-06-18 15:03 - 2014-02-28 02:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-06-18 15:00 - 2014-06-18 15:00 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-18 15:00 - 2013-08-22 21:11 - 00000000 ____D () C:\Windows\ShellNew
2014-06-18 14:59 - 2014-06-18 14:59 - 00000000 __RHD () C:\MSOCache
2014-06-18 14:55 - 2014-06-18 14:55 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-18 14:52 - 2014-06-18 14:52 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer Aspire R7 Tutorial
2014-06-18 14:49 - 2014-06-18 14:50 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Mozilla
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-06-18 14:47 - 2014-06-18 14:47 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 14:45 - 2014-06-18 14:45 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00002046 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-18 14:42 - 2014-01-14 12:29 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-18 14:42 - 2014-01-14 12:29 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-18 14:42 - 2014-01-14 12:29 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-18 14:39 - 2014-06-18 14:39 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WildTangent
2014-06-18 14:39 - 2014-01-14 12:19 - 00000000 ____D () C:\ProgramData\WildTangent
2014-06-18 14:39 - 2014-01-14 12:19 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-06-18 14:15 - 2014-06-18 14:15 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Macromedia
2014-06-18 12:47 - 2014-06-18 12:47 - 00000000 ____D () C:\Users\baustelle\PicStream
2014-06-18 12:46 - 2014-06-18 12:46 - 00001276 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Atheros
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Program Files\Accessory Store
2014-06-18 12:45 - 2014-06-18 12:45 - 00001454 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-18 12:45 - 2014-06-18 12:45 - 00000020 ___SH () C:\Users\baustelle\ntuser.ini
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Vorlagen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Startmenü
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Netzwerkumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Lokale Einstellungen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Eigene Dateien
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Druckumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Musik
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Bilder
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Verlauf
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Anwendungsdaten
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-06-18 12:40 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-06-18 12:40 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-06-16 13:13 - 2014-06-24 18:01 - 00043320 _____ (TuneUp Software) C:\Windows\system32\uxt1A4B.tmp
2014-06-01 17:17 - 2014-06-20 21:09 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\baustelle\AppData\Local\Temp\avgnt.exe
C:\Users\baustelle\AppData\Local\Temp\Quarantine.exe
C:\Users\baustelle\AppData\Local\Temp\TUUUninstallHelper.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-01-14 11:51

==================== End Of Log ============================
GMER:
Code:
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-01 10:40:50
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000032 WDC_WD10JPVX-22JC3T0 rev.01.01A01 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\BAUSTE~1\AppData\Local\Temp\ugldapow.sys


---- User code sections - GMER 2.1 ----

.text    C:\Windows\system32\nvvsvc.exe[212] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 506                                  00007ff83984169a 4 bytes [84, 39, F8, 7F]
.text    C:\Windows\system32\nvvsvc.exe[212] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 514                                  00007ff8398416a2 4 bytes [84, 39, F8, 7F]
.text    C:\Windows\system32\nvvsvc.exe[212] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 118                                      00007ff83984181a 4 bytes [84, 39, F8, 7F]
.text    C:\Windows\system32\nvvsvc.exe[212] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 142                                      00007ff839841832 4 bytes [84, 39, F8, 7F]
.text    C:\Windows\system32\mfevtps.exe[1872] C:\Windows\system32\psapi.dll!GetModuleBaseNameA + 506                                00007ff83984169a 4 bytes [84, 39, F8, 7F]
.text    C:\Windows\system32\mfevtps.exe[1872] C:\Windows\system32\psapi.dll!GetModuleBaseNameA + 514                                00007ff8398416a2 4 bytes [84, 39, F8, 7F]
.text    C:\Windows\system32\mfevtps.exe[1872] C:\Windows\system32\psapi.dll!QueryWorkingSet + 118                                    00007ff83984181a 4 bytes [84, 39, F8, 7F]
.text    C:\Windows\system32\mfevtps.exe[1872] C:\Windows\system32\psapi.dll!QueryWorkingSet + 142                                    00007ff839841832 4 bytes [84, 39, F8, 7F]
.text    C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe[3720] C:\Windows\SYSTEM32\WSOCK32.dll!setsockopt + 194  00007ff82bfb1f6a 4 bytes [FB, 2B, F8, 7F]
.text    C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe[3720] C:\Windows\SYSTEM32\WSOCK32.dll!setsockopt + 218  00007ff82bfb1f82 4 bytes [FB, 2B, F8, 7F]
.text    C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe[4060] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 506      00007ff83984169a 4 bytes [84, 39, F8, 7F]
.text    C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe[4060] C:\Windows\system32\PSAPI.DLL!GetModuleBaseNameA + 514      00007ff8398416a2 4 bytes [84, 39, F8, 7F]
.text    C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe[4060] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 118          00007ff83984181a 4 bytes [84, 39, F8, 7F]
.text    C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe[4060] C:\Windows\system32\PSAPI.DLL!QueryWorkingSet + 142          00007ff839841832 4 bytes [84, 39, F8, 7F]

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [660:684]                                                                                      fffff96000945b90
Thread  C:\Windows\Explorer.EXE [2280:4764]                                                                                          00007ff8310fd6bc
---- Processes - GMER 2.1 ----

Library  c:\windows\system32\uxtuneup.dll (*** suspicious ***) @ C:\Windows\system32\svchost.exe [500]                                00007ff8347c0000

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                                                                                                        unknown MBR code

---- EOF - GMER 2.1 ----

AsmW 01.07.2014 12:42
OTL: Teil 1
Code:
OTL logfile created on: 01.07.2014 10:43:29 - Run 2
OTL by OldTimer - Version 3.2.69.0    Folder = C:\Users\baustelle\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17031)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,88 Gb Total Physical Memory | 2,68 Gb Available Physical Memory | 69,06% Memory free
4,57 Gb Paging File | 3,29 Gb Available in Paging File | 71,89% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 913,70 Gb Total Space | 876,05 Gb Free Space | 95,88% Space Free | Partition Type: NTFS
 
Computer Name: PC | User Name: baustelle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014.07.01 09:37:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\baustelle\Desktop\OTL.exe
PRC - [2014.06.24 10:56:04 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2014.06.24 10:55:52 | 000,750,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2014.06.24 10:55:52 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2014.05.08 15:48:38 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014.05.02 21:46:46 | 002,800,896 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
PRC - [2014.05.02 21:46:44 | 008,557,824 | ---- | M] (Acer Cloud Technology) -- C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
PRC - [2014.04.30 09:13:14 | 001,716,264 | ---- | M] (pdfforge GmbH) -- C:\Program Files (x86)\PDF Architect 2\ws.exe
PRC - [2013.10.29 01:51:04 | 001,364,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013.09.04 01:53:48 | 000,390,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2013.09.04 01:53:42 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
PRC - [2012.07.14 02:27:00 | 000,769,432 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
 
 
========== Modules (No Company Name) ==========
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2014.03.08 07:41:25 | 001,306,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:64bit: - [2014.03.06 09:02:13 | 000,834,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2014.03.06 08:34:46 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2014.02.22 17:53:10 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:64bit: - [2014.02.22 11:57:16 | 000,710,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2014.02.22 11:26:58 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2014.02.22 11:25:39 | 000,399,872 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2014.02.22 11:25:14 | 000,269,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2014.02.22 11:23:58 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2014.01.27 17:38:59 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:64bit: - [2013.12.10 09:35:18 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:64bit: - [2013.11.23 06:50:00 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2013.10.19 07:37:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2013.08.31 12:00:10 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
SRV:64bit: - [2013.08.22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2013.08.22 13:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:64bit: - [2013.08.22 13:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2013.08.22 13:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2013.08.22 13:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2013.08.22 13:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2013.08.22 12:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2013.08.22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:64bit: - [2013.08.22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2013.08.22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2013.08.22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:64bit: - [2013.08.22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2013.08.22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:64bit: - [2013.08.22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:64bit: - [2013.08.22 12:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:64bit: - [2013.08.22 11:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:64bit: - [2013.08.22 11:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2013.08.22 11:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:64bit: - [2013.08.22 11:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2013.08.22 11:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:64bit: - [2013.08.22 11:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2013.08.22 11:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2013.08.22 11:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2013.08.07 13:40:08 | 000,182,752 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2013.08.07 13:36:38 | 000,219,272 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV - [2014.06.24 10:56:04 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2014.06.24 10:55:52 | 000,430,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2014.06.06 06:38:37 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014.05.08 15:48:38 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014.05.02 21:46:46 | 002,800,896 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe -- (CCDMonitorService)
SRV - [2014.04.30 09:13:14 | 001,716,264 | ---- | M] (pdfforge GmbH) [On_Demand | Running] -- C:\Program Files (x86)\PDF Architect 2\ws.exe -- (PDF Architect 2)
SRV - [2014.04.30 09:13:14 | 000,861,736 | ---- | M] (pdfforge GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe -- (pdfforge CrashHandler)
SRV - [2013.12.24 03:26:48 | 000,318,592 | ---- | M] (Windows (R) Win 7 DDK provider) [Auto | Running] -- C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
SRV - [2013.10.29 01:51:04 | 001,364,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.10.08 18:33:11 | 000,279,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2013.09.04 01:53:48 | 000,390,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2013.09.04 01:53:42 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
SRV - [2013.08.31 11:25:30 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2013.08.22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2013.08.22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2013.08.22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2013.08.02 19:47:44 | 000,457,768 | ---- | M] (Acer Incorporate) [Auto | Running] -- C:\Programme\Acer\Acer Launch Manager\LMSvc.exe -- (LMSvc)
SRV - [2013.08.02 19:33:16 | 000,448,040 | ---- | M] (Acer Incorporate) [On_Demand | Running] -- C:\Programme\Acer\Acer Quick Access\RMSvc.exe -- (RMSvc)
SRV - [2013.08.02 19:33:14 | 000,457,768 | ---- | M] (Acer Incorporate) [On_Demand | Running] -- C:\Programme\Acer\Acer Quick Access\QASvc.exe -- (QASvc)
SRV - [2013.07.05 17:19:04 | 000,663,592 | ---- | M] (Acer Incorporated) [On_Demand | Running] -- C:\Programme\Acer\Acer Power Management\ePowerSvc.exe -- (ePowerSvc)
SRV - [2013.05.11 18:45:54 | 000,822,232 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Programme\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
SRV - [2013.05.11 18:45:38 | 000,733,696 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV - [2012.07.14 02:27:00 | 000,769,432 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2014.06.24 10:55:52 | 000,117,712 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2014.05.09 11:16:43 | 000,130,584 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2014.05.09 11:16:43 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2014.03.20 05:41:20 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2014.03.13 14:35:24 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof)
DRV:64bit: - [2014.03.08 22:40:16 | 000,136,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2014.03.08 22:35:45 | 000,467,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2014.02.22 18:00:25 | 000,236,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2014.02.22 17:50:31 | 000,054,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:64bit: - [2014.02.22 17:49:51 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2014.02.22 17:49:49 | 000,384,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2014.02.22 17:49:49 | 000,189,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
DRV:64bit: - [2014.02.22 17:49:49 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2014.02.22 17:49:47 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2014.02.22 17:44:13 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS)
DRV:64bit: - [2014.02.22 14:14:02 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2013.12.24 03:00:52 | 000,597,192 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:64bit: - [2013.12.24 03:00:52 | 000,137,928 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:64bit: - [2013.12.24 03:00:52 | 000,077,464 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:64bit: - [2013.12.24 03:00:50 | 000,338,120 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:64bit: - [2013.12.24 03:00:50 | 000,179,432 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:64bit: - [2013.12.24 03:00:50 | 000,116,424 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt)
DRV:64bit: - [2013.12.24 03:00:50 | 000,089,800 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:64bit: - [2013.12.24 03:00:50 | 000,034,384 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:64bit: - [2013.12.12 02:10:38 | 003,881,472 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athwbx.sys -- (athr)
DRV:64bit: - [2013.12.04 20:41:54 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
DRV:64bit: - [2013.11.11 04:48:41 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:64bit: - [2013.11.01 13:39:53 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:64bit: - [2013.10.31 02:29:36 | 000,236,888 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2013.10.31 02:29:36 | 000,124,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:64bit: - [2013.10.31 02:28:47 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2013.10.26 03:54:32 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:64bit: - [2013.10.05 17:25:54 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:64bit: - [2013.10.02 03:31:08 | 000,370,504 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2013.10.01 19:25:25 | 000,449,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2013.10.01 19:16:26 | 004,185,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2013.09.26 11:08:22 | 000,039,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2013.09.26 11:08:22 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2013.09.14 16:06:57 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2013.09.04 01:53:44 | 000,099,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64)
DRV:64bit: - [2013.08.30 12:05:34 | 000,356,056 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
DRV:64bit: - [2013.08.22 21:11:06 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2013.08.22 21:11:03 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2013.08.22 15:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:64bit: - [2013.08.22 15:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2013.08.22 14:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:64bit: - [2013.08.22 14:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2013.08.22 14:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2013.08.22 14:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2013.08.22 14:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2013.08.22 14:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2013.08.22 14:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2013.08.22 14:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2013.08.22 14:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2013.08.22 14:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV:64bit: - [2013.08.22 14:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:64bit: - [2013.08.22 14:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2013.08.22 14:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2013.08.22 14:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:64bit: - [2013.08.22 14:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2013.08.22 14:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2013.08.22 14:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2013.08.22 14:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2013.08.22 14:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2013.08.22 14:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2013.08.22 14:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2013.08.22 14:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:64bit: - [2013.08.22 14:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2013.08.22 14:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2013.08.22 14:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:64bit: - [2013.08.22 14:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:64bit: - [2013.08.22 14:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2013.08.22 13:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:64bit: - [2013.08.22 13:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2013.08.22 13:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2013.08.22 13:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2013.08.22 13:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2013.08.22 13:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2013.08.22 13:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:64bit: - [2013.08.22 13:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2013.08.22 13:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2013.08.22 13:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2013.08.22 13:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:64bit: - [2013.08.22 13:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2013.08.22 13:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2013.08.22 13:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2013.08.22 13:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2013.08.22 13:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2013.08.22 13:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2013.08.22 13:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
DRV:64bit: - [2013.08.22 13:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:64bit: - [2013.08.22 13:36:17 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2013.08.22 13:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2013.08.22 13:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2013.08.22 10:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
DRV:64bit: - [2013.08.13 01:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:64bit: - [2013.08.10 02:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:64bit: - [2013.08.07 15:23:46 | 000,644,968 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:64bit: - [2013.08.07 13:43:14 | 000,070,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2013.08.07 13:40:20 | 000,343,568 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2013.08.07 13:38:20 | 000,776,168 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2013.08.07 13:37:02 | 000,519,064 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek)
DRV:64bit: - [2013.08.07 13:36:06 | 000,310,224 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2013.08.07 13:35:44 | 000,179,664 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2013.08.07 13:20:04 | 000,069,264 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mfeelamk.sys -- (mfeelamk)
DRV:64bit: - [2013.07.30 20:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:64bit: - [2013.07.25 21:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:64bit: - [2013.07.17 03:59:00 | 000,021,360 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMDriver.sys -- (LMDriver)
DRV:64bit: - [2013.07.17 03:59:00 | 000,014,680 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RadioShim.sys -- (RadioShim)
DRV:64bit: - [2013.06.18 16:45:14 | 000,425,984 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{4DD40821-DE39-4006-A6A0-21CEF77E4A9B}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{4DD40821-DE39-4006-A6A0-21CEF77E4A9B}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:30.0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\PDF Architect 2: C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
 
 
[2014.06.18 14:48:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\baustelle\AppData\Roaming\mozilla\Extensions
[2014.07.01 09:56:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\baustelle\AppData\Roaming\mozilla\Firefox\Profiles\zl2pf6t0.default\extensions
[2014.06.18 14:47:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2014.06.18 14:47:52 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
O1 HOSTS File: ([2013.08.22 15:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Free Games) - {0D5F364D-D6A9-43C1-BF0C-99B378972C5B} - C:\Program Files (x86)\Free Games\ScriptHost64.dll (BestOffers)
O2 - BHO: (Free Games) - {0D5F364D-D6A9-43C1-BF0C-99B378972C5B} - C:\Program Files (x86)\Free Games\ScriptHost.dll (BestOffers)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKCU..\Run: [AcerCloud] C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe (Acer Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: BtvStack = "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe" (Atheros Communications)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{24F481C3-4E92-4BD6-A212-FF4BC8A5C97B}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7F563E37-67C6-4DFC-AEDC-F3B02C50ED5C}: DhcpNameServer = 127.0.0.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\System32\Userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (bj.dll) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014.07.01 10:41:53 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\PDF Architect 2
[2014.07.01 10:24:11 | 000,000,000 | ---D | C] -- C:\FRST
[2014.07.01 10:02:29 | 002,083,328 | ---- | C] (Farbar) -- C:\Users\baustelle\Desktop\FRST64.exe
[2014.07.01 09:37:36 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\baustelle\Desktop\OTL.exe
[2014.06.27 18:45:29 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Desktop\Rassenmäher
[2014.06.27 14:57:34 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Diagnostics
[2014.06.25 14:05:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Uninstall Information
[2014.06.25 14:05:37 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\speedtest199
[2014.06.25 14:05:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Games
[2014.06.25 14:05:29 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\freegames197
[2014.06.25 13:43:08 | 000,000,000 | ---D | C] -- C:\ProgramData\CanonIJPLM
[2014.06.25 13:43:04 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonIJETV
[2014.06.25 13:42:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon
[2014.06.25 09:05:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\AppData\Local\EmieUserList
[2014.06.25 09:05:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\AppData\Local\EmieSiteList
[2014.06.24 21:04:29 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\CrashDumps
[2014.06.24 12:42:53 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\TuneUp Software
[2014.06.24 12:42:53 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\TuneUp Software
[2014.06.24 12:40:04 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2014.06.24 12:39:51 | 000,000,000 | -HSD | C] -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
[2014.06.24 12:39:51 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2014.06.24 12:24:56 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Desktop\Eigene_Dataien
[2014.06.23 10:01:45 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Documents\gaeb AVA Projektablage
[2014.06.23 10:01:44 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Nix & Keitel
[2014.06.23 10:01:28 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Nix & Keitel
[2014.06.23 09:49:08 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\WinRAR
[2014.06.23 09:45:23 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2014.06.23 09:43:41 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014.06.23 09:43:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014.06.23 09:43:30 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2014.06.22 10:41:52 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Documents\clear.fi
[2014.06.22 10:32:04 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\AcerCloud
[2014.06.22 10:31:33 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Doc
[2014.06.22 10:31:01 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\ClearfiMedia
[2014.06.22 10:30:24 | 000,000,000 | ---D | C] -- C:\ProgramData\clear.fi
[2014.06.22 10:30:17 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Acer
[2014.06.22 10:30:04 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\acer
[2014.06.22 10:29:53 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\ClearfiPhoto
[2014.06.21 13:07:30 | 016,875,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll
[2014.06.21 13:07:28 | 012,732,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll
[2014.06.21 13:07:26 | 008,653,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Search.dll
[2014.06.21 13:07:26 | 007,425,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2014.06.21 13:07:26 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Shell.Search.UriHandler.dll
[2014.06.21 13:07:25 | 013,286,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll
[2014.06.21 13:07:23 | 006,641,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2014.06.21 13:07:22 | 011,791,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll
[2014.06.21 13:07:22 | 005,833,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Search.dll
[2014.06.21 13:07:22 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Shell.Search.UriHandler.dll
[2014.06.21 13:07:21 | 005,770,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2014.06.21 13:07:20 | 004,268,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncEngine.dll
[2014.06.21 13:07:20 | 002,900,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll
[2014.06.21 13:07:19 | 002,373,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2014.06.21 13:07:18 | 002,641,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2014.06.21 13:07:18 | 002,133,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2014.06.21 13:07:18 | 001,306,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentServer.dll
[2014.06.21 13:07:17 | 002,317,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2014.06.21 13:07:17 | 002,141,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2014.06.21 13:07:17 | 002,088,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2014.06.21 13:07:17 | 001,542,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2014.06.21 13:07:17 | 001,054,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.appcore.dll
[2014.06.21 13:07:16 | 002,270,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll
[2014.06.21 13:07:16 | 001,411,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2014.06.21 13:07:16 | 001,112,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2014.06.21 13:07:15 | 001,779,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2014.06.21 13:07:15 | 001,764,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2014.06.21 13:07:15 | 001,129,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll
[2014.06.21 13:07:15 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.appcore.dll
[2014.06.21 13:07:14 | 001,291,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2014.06.21 13:07:14 | 001,230,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.dll
[2014.06.21 13:07:14 | 001,023,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2014.06.21 13:07:14 | 000,958,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFMediaEngine.dll
[2014.06.21 13:07:14 | 000,918,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MrmCoreR.dll
[2014.06.21 13:07:13 | 001,466,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll
[2014.06.21 13:07:13 | 001,339,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2014.06.21 13:07:13 | 000,950,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll
[2014.06.21 13:07:13 | 000,888,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.dll
[2014.06.21 13:07:13 | 000,801,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFMediaEngine.dll
[2014.06.21 13:07:13 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidprov.dll
[2014.06.21 13:07:12 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2014.06.21 13:07:12 | 000,655,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2014.06.21 13:07:12 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MrmCoreR.dll
[2014.06.21 13:07:12 | 000,492,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfsvr.dll
[2014.06.21 13:07:11 | 000,518,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2014.06.21 13:07:11 | 000,388,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfsvr.dll
[2014.06.21 13:07:11 | 000,356,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dcomp.dll
[2014.06.21 13:07:10 | 000,669,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasapi32.dll
[2014.06.21 13:07:10 | 000,379,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2014.06.21 13:07:10 | 000,364,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AUDIOKSE.dll
[2014.06.21 13:07:10 | 000,356,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidprov.dll
[2014.06.21 13:07:09 | 001,656,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\GdiPlus.dll
[2014.06.21 13:07:09 | 000,834,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netlogon.dll
[2014.06.21 13:07:09 | 000,157,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wof.sys
[2014.06.21 13:07:08 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll
[2014.06.21 13:07:08 | 000,305,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AUDIOKSE.dll
[2014.06.21 13:07:08 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Sensors.dll
[2014.06.21 13:07:08 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dcomp.dll
[2014.06.21 13:07:07 | 001,351,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GdiPlus.dll
[2014.06.21 13:07:07 | 000,924,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentExtensions.dll
[2014.06.21 13:07:07 | 000,376,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\clfs.sys
[2014.06.21 13:07:06 | 000,872,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDrive.exe
[2014.06.21 13:07:06 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDriveTelemetry.dll
[2014.06.21 13:07:06 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2014.06.21 13:07:06 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppXDeploymentClient.dll
[2014.06.21 13:07:06 | 000,247,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsApi.dll
[2014.06.21 13:07:06 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Sensors.dll
[2014.06.21 13:07:05 | 000,621,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MDMAgent.exe
[2014.06.21 13:07:05 | 000,488,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2014.06.21 13:07:05 | 000,467,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2014.06.21 13:07:05 | 000,463,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEng.dll
[2014.06.21 13:07:05 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2014.06.21 13:07:05 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppXDeploymentClient.dll
[2014.06.21 13:07:04 | 000,390,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2014.06.21 13:07:04 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2014.06.21 13:07:04 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEndpointBuilder.dll
[2014.06.21 13:07:04 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsApi.dll
[2014.06.21 13:07:03 | 000,467,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBHUB3.SYS
[2014.06.21 13:07:03 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MDEServer.exe
[2014.06.21 13:07:03 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2014.06.21 13:07:03 | 000,244,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2014.06.21 13:07:03 | 000,113,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2014.06.21 13:07:02 | 000,360,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2014.06.21 13:07:02 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2014.06.21 13:07:02 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReInfo.dll
[2014.06.21 13:07:02 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxAllUserStore.dll
[2014.06.21 13:07:02 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxAllUserStore.dll
[2014.06.21 13:07:02 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2014.06.21 13:07:01 | 001,015,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aclui.dll
[2014.06.21 13:07:01 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlangpui.dll
[2014.06.21 13:07:01 | 000,412,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL
[2014.06.21 13:07:01 | 000,355,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2014.06.21 13:07:01 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanapi.dll
[2014.06.21 13:07:01 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafWfdProvider.dll
[2014.06.21 13:07:00 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Graphics.Printing.dll
[2014.06.21 13:07:00 | 000,428,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2014.06.21 13:07:00 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSDMon.dll
[2014.06.21 13:07:00 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll
[2014.06.21 13:07:00 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2014.06.21 13:07:00 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanapi.dll
[2014.06.21 13:07:00 | 000,136,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wfplwfs.sys
[2014.06.21 13:07:00 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvinst.exe
[2014.06.21 13:06:59 | 000,731,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll
[2014.06.21 13:06:59 | 000,731,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adtschema.dll
[2014.06.21 13:06:59 | 000,425,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll
[2014.06.21 13:06:59 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2014.06.21 13:06:59 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\w32tm.exe
[2014.06.21 13:06:58 | 001,843,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll
[2014.06.21 13:06:58 | 001,816,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll
[2014.06.21 13:06:58 | 000,386,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlangpui.dll
[2014.06.21 13:06:58 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapibase.dll
[2014.06.21 13:06:58 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2014.06.21 13:06:58 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
[2014.06.21 13:06:58 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32tm.exe
[2014.06.21 13:06:58 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvcfg.exe
[2014.06.21 13:06:58 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CredentialMigrationHandler.dll
[2014.06.21 13:06:57 | 001,057,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdvidcrl.dll
[2014.06.21 13:06:57 | 000,887,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aclui.dll
[2014.06.21 13:06:57 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Graphics.Printing.dll
[2014.06.21 13:06:57 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LocationApi.dll
[2014.06.21 13:06:57 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Scanners.dll
[2014.06.21 13:06:57 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMapi.dll
[2014.06.21 13:06:57 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CredentialMigrationHandler.dll
[2014.06.21 13:06:56 | 000,794,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvewiz.dll
[2014.06.21 13:06:56 | 000,717,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll
[2014.06.21 13:06:56 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll
[2014.06.21 13:06:56 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LocationApi.dll
[2014.06.21 13:06:56 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReInfo.dll
[2014.06.21 13:06:56 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Scanners.dll
[2014.06.21 13:06:56 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevPropMgr.dll
[2014.06.21 13:06:56 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BitLockerDeviceEncryption.exe
[2014.06.21 13:06:56 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxproxy.dll
[2014.06.21 13:06:56 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2014.06.21 13:06:55 | 000,567,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2014.06.21 13:06:55 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetNetworkLocation.dll
[2014.06.21 13:06:55 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxproxy.dll
[2014.06.21 13:06:54 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvidcrl.dll
[2014.06.21 13:06:54 | 000,443,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlansec.dll
[2014.06.21 13:06:54 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WsmWmiPl.dll
[2014.06.21 13:06:54 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\l2gpstore.dll
[2014.06.21 13:06:54 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanhlp.dll
[2014.06.21 13:06:54 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanhlp.dll
[2014.06.21 13:06:53 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeHdCfgLib.dll
[2014.06.21 13:06:53 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\l2gpstore.dll
[2014.06.21 13:06:53 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2014.06.21 13:05:32 | 002,678,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingsHandlers.dll
[2014.06.21 13:05:10 | 001,705,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2014.06.21 13:05:10 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll
[2014.06.21 13:05:10 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storewuauth.dll
[2014.06.21 13:05:10 | 000,054,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2014.06.21 13:02:56 | 011,742,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\glcndFilter.dll
[2014.06.21 13:02:55 | 003,394,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSService.dll
[2014.06.21 13:02:55 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll
[2014.06.21 13:02:55 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll
[2014.06.21 13:02:50 | 008,946,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\glcndFilter.dll
[2014.06.21 13:02:48 | 005,784,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2014.06.21 13:02:45 | 008,874,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Data.Pdf.dll
[2014.06.21 13:02:41 | 013,933,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2014.06.21 13:02:41 | 001,435,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2014.06.21 13:02:38 | 003,494,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2014.06.21 13:02:37 | 012,027,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Data.Pdf.dll
[2014.06.21 13:02:36 | 011,776,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2014.06.21 13:02:35 | 002,142,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfcore.dll
[2014.06.21 13:02:30 | 001,927,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\combase.dll
[2014.06.21 13:02:29 | 002,368,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2014.06.21 13:02:29 | 001,576,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidsvc.dll
[2014.06.21 13:02:28 | 002,144,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfcore.dll
[2014.06.21 13:02:27 | 002,643,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2014.06.21 13:02:27 | 001,374,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\combase.dll
[2014.06.21 13:02:26 | 002,943,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll
[2014.06.21 13:02:25 | 001,728,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dui70.dll
[2014.06.21 13:02:24 | 001,716,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2014.06.21 13:02:23 | 002,574,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2014.06.21 13:02:21 | 002,843,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2014.06.21 13:02:21 | 001,445,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll
[2014.06.21 13:02:21 | 001,132,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Globalization.dll
[2014.06.21 13:02:20 | 002,100,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsAdminFlowUI.dll
[2014.06.21 13:02:19 | 002,588,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpcMon.exe
[2014.06.21 13:02:19 | 001,640,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Immersive.dll
[2014.06.21 13:02:19 | 001,341,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dui70.dll
[2014.06.21 13:02:19 | 001,290,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctf.dll
[2014.06.21 13:02:18 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Streaming.dll
[2014.06.21 13:02:18 | 000,628,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msTextPrediction.dll
[2014.06.21 13:02:17 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Security.Authentication.OnlineId.dll
[2014.06.21 13:02:17 | 000,647,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncHost.exe
[2014.06.21 13:02:15 | 001,727,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2014.06.21 13:02:15 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Globalization.dll
[2014.06.21 13:02:14 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncCore.dll
[2014.06.21 13:02:13 | 002,648,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WpcWebSync.dll
[2014.06.21 13:02:13 | 001,215,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfnetsrc.dll
[2014.06.21 13:02:13 | 000,800,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfnetcore.dll
[2014.06.21 13:02:12 | 001,496,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Immersive.dll
[2014.06.21 13:02:12 | 001,077,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll
[2014.06.21 13:02:12 | 001,000,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinTypes.dll
[2014.06.21 13:02:11 | 002,825,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2014.06.21 13:02:11 | 002,410,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2014.06.21 13:02:11 | 000,791,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uDWM.dll
[2014.06.21 13:02:10 | 001,929,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll
[2014.06.21 13:02:10 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Media.Streaming.dll
[2014.06.21 13:02:10 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2014.06.21 13:02:10 | 000,526,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll
[2014.06.21 13:02:10 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DfpCommon.dll
[2014.06.21 13:02:10 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WofTasks.dll
[2014.06.21 13:02:09 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinapi.dll
[2014.06.21 13:02:08 | 001,621,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll
[2014.06.21 13:02:07 | 001,011,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfnetsrc.dll
[2014.06.21 13:02:07 | 000,609,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2014.06.21 13:02:07 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Security.Authentication.OnlineId.dll
[2014.06.21 13:02:07 | 000,517,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncHost.exe
[2014.06.21 13:02:06 | 000,422,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2014.06.21 13:02:05 | 001,653,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2014.06.21 13:02:05 | 000,645,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SHCore.dll
[2014.06.21 13:02:04 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2014.06.21 13:02:04 | 000,650,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfnetcore.dll
[2014.06.21 13:02:03 | 002,760,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2014.06.21 13:02:03 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncCore.dll
[2014.06.21 13:02:02 | 002,220,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Wpc.dll
[2014.06.21 13:02:02 | 000,556,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinapi.dll
[2014.06.21 13:02:01 | 002,428,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2014.06.21 13:02:01 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll
[2014.06.21 13:02:01 | 000,825,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2014.06.21 13:02:01 | 000,518,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2014.06.21 13:02:00 | 001,519,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2014.06.21 13:01:59 | 000,576,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSync.dll
[2014.06.21 13:01:58 | 001,399,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmde.dll
[2014.06.21 13:01:58 | 000,881,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll
[2014.06.21 13:01:58 | 000,424,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2014.06.21 13:01:58 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmsvc.dll
[2014.06.21 13:01:57 | 002,395,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storagewmi.dll
[2014.06.21 13:01:57 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wimgapi.dll
[2014.06.21 13:01:57 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll
[2014.06.21 13:01:57 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WofUtil.dll
[2014.06.21 13:01:56 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll
[2014.06.21 13:01:56 | 000,477,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SHCore.dll
[2014.06.21 13:01:56 | 000,391,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MMDevAPI.dll
[2014.06.21 13:01:55 | 001,206,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Taskmgr.exe
[2014.06.21 13:01:55 | 000,997,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reseteng.dll
[2014.06.21 13:01:55 | 000,555,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinapi.appcore.dll
[2014.06.21 13:01:55 | 000,530,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppReadiness.dll
[2014.06.21 13:01:54 | 000,698,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSShared.dll
[2014.06.21 13:01:54 | 000,551,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll
[2014.06.21 13:01:54 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSync.dll
[2014.06.21 13:01:53 | 001,258,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll
[2014.06.21 13:01:53 | 001,063,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Taskmgr.exe
[2014.06.21 13:01:53 | 000,707,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll
[2014.06.21 13:01:53 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recimg.exe
[2014.06.21 13:01:53 | 000,569,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpncore.dll
[2014.06.21 13:01:53 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfp.exe
[2014.06.21 13:01:52 | 001,287,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mispace.dll
[2014.06.21 13:01:52 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2014.06.21 13:01:52 | 001,107,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perftrack.dll
[2014.06.21 13:01:51 | 001,162,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll
[2014.06.21 13:01:51 | 000,710,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.dll
[2014.06.21 13:01:51 | 000,669,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2014.06.21 13:01:51 | 000,635,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WWAHost.exe
[2014.06.21 13:01:51 | 000,461,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFault.exe
[2014.06.21 13:01:51 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bisrv.dll
[2014.06.21 13:01:50 | 001,428,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RecoveryDrive.exe
[2014.06.21 13:01:50 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mispace.dll
[2014.06.21 13:01:50 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\energy.dll
[2014.06.21 13:01:49 | 000,968,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2014.06.21 13:01:49 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2014.06.21 13:01:49 | 000,545,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2014.06.21 13:01:49 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WWAHost.exe
[2014.06.21 13:01:49 | 000,419,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinapi.appcore.dll
[2014.06.21 13:01:49 | 000,307,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2014.06.21 13:01:48 | 001,659,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2014.06.21 13:01:48 | 001,374,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2014.06.21 13:01:48 | 000,854,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSShared.dll
[2014.06.21 13:01:48 | 000,410,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFault.exe
[2014.06.21 13:01:46 | 001,584,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\workfolderssvc.dll
[2014.06.21 13:01:46 | 001,519,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2014.06.21 13:01:46 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DismApi.dll
[2014.06.21 13:01:46 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2014.06.21 13:01:45 | 001,403,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\storagewmi.dll
[2014.06.21 13:01:44 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2014.06.21 13:01:44 | 000,367,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssph.dll
[2014.06.21 13:01:43 | 001,487,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2014.06.21 13:01:43 | 001,356,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2014.06.21 13:01:43 | 000,384,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spaceport.sys
[2014.06.21 13:01:42 | 002,043,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2014.06.21 13:01:42 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll
[2014.06.21 13:01:42 | 000,441,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssph.dll
[2014.06.21 13:01:42 | 000,388,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
[2014.06.21 13:01:42 | 000,372,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvproc.dll
[2014.06.21 13:01:41 | 001,967,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2014.06.21 13:01:41 | 001,224,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll
[2014.06.21 13:01:41 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll
[2014.06.21 13:01:40 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2014.06.21 13:01:39 | 001,791,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMALFXGFXDSP.dll
[2014.06.21 13:01:39 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msctfuimanager.dll
[2014.06.21 13:01:39 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchProtocolHost.exe
[2014.06.21 13:01:38 | 001,206,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmde.dll
[2014.06.21 13:01:38 | 000,824,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2014.06.21 13:01:38 | 000,531,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2014.06.21 13:01:38 | 000,407,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll
[2014.06.21 13:01:36 | 000,761,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iuilp.dll
[2014.06.21 13:01:36 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2014.06.21 13:01:36 | 000,716,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
[2014.06.21 13:01:36 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msctfuimanager.dll
[2014.06.21 13:01:36 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2014.06.21 13:01:36 | 000,244,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll
[2014.06.21 13:01:35 | 001,185,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll
[2014.06.21 13:01:35 | 000,832,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll
[2014.06.21 13:01:35 | 000,747,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidcli.dll
[2014.06.21 13:01:35 | 000,317,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvproc.dll
[2014.06.21 13:01:34 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MrmIndexer.dll
[2014.06.21 13:01:34 | 000,369,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll
[2014.06.21 13:01:34 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmrdvcore.dll
[2014.06.21 13:01:34 | 000,336,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bcryptprimitives.dll
[2014.06.21 13:01:34 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slc.dll
[2014.06.21 13:01:33 | 000,912,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nettrace.dll
[2014.06.21 13:01:33 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2014.06.21 13:01:33 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2014.06.21 13:01:33 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxPackaging.dll
[2014.06.21 13:01:33 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Dism.exe
[2014.06.21 13:01:33 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Vpn.dll
[2014.06.21 13:01:32 | 000,609,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll
[2014.06.21 13:01:32 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll
[2014.06.21 13:01:31 | 001,757,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPDMC.exe
[2014.06.21 13:01:31 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
[2014.06.21 13:01:30 | 000,324,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFCaptureEngine.dll
[2014.06.21 13:01:30 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psmsrv.dll
[2014.06.21 13:01:29 | 001,008,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WlanMM.dll
[2014.06.21 13:01:29 | 000,834,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osk.exe
[2014.06.21 13:01:28 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll
[2014.06.21 13:01:28 | 000,388,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ninput.dll
[2014.06.21 13:01:28 | 000,372,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2014.06.21 13:01:28 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\InputSwitch.dll
[2014.06.21 13:01:27 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authz.dll
[2014.06.21 13:01:27 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys
[2014.06.21 13:01:26 | 002,288,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll
[2014.06.21 13:01:26 | 000,356,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2014.06.21 13:01:26 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rascustom.dll
[2014.06.21 13:01:25 | 002,862,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2014.06.21 13:01:25 | 000,628,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2014.06.21 13:01:25 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2014.06.21 13:01:25 | 000,469,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2014.06.21 13:01:24 | 000,615,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdbui.dll
[2014.06.21 13:01:24 | 000,289,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll
[2014.06.21 13:01:24 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlidcredprov.dll
[2014.06.21 13:01:24 | 000,258,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettingsAdminFlows.exe
[2014.06.21 13:01:24 | 000,123,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmapi.dll
[2014.06.21 13:01:23 | 003,596,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2014.06.21 13:01:23 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DismApi.dll
[2014.06.21 13:01:23 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mdmregistration.dll
[2014.06.21 13:01:22 | 000,285,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFCaptureEngine.dll
[2014.06.21 13:01:22 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSClient.dll
[2014.06.21 13:01:22 | 000,105,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptsslp.dll
[2014.06.21 13:01:21 | 002,811,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2014.06.21 13:01:21 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MrmIndexer.dll
[2014.06.21 13:01:21 | 000,210,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe
[2014.06.21 13:01:21 | 000,089,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptsslp.dll
[2014.06.21 13:01:20 | 000,745,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2014.06.21 13:01:20 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Connectivity.dll
[2014.06.21 13:01:20 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2014.06.21 13:01:20 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Dism.exe
[2014.06.21 13:01:19 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AppxPackaging.dll
[2014.06.21 13:01:19 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\InputSwitch.dll
[2014.06.21 13:01:19 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SkyDriveShell.dll
[2014.06.21 13:01:19 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2014.06.21 13:01:18 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcrypt.dll
[2014.06.21 13:01:16 | 000,591,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2014.06.21 13:01:15 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.HumanInterfaceDevice.dll
[2014.06.21 13:01:15 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clrhost.dll
[2014.06.21 13:01:14 | 001,144,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanmm.dll

AsmW 01.07.2014 12:45
OTL:
Teil 2
Code:
[2014.06.21 13:01:14 | 000,779,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osk.exe
[2014.06.21 13:01:14 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wimserv.exe
[2014.06.21 13:01:14 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WLanConn.dll
[2014.06.21 13:01:14 | 000,448,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2014.06.21 13:01:14 | 000,236,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys
[2014.06.21 13:01:14 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe
[2014.06.21 13:01:14 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSClient.dll
[2014.06.21 13:01:14 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscinterop.dll
[2014.06.21 13:01:14 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll
[2014.06.21 13:01:13 | 000,797,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PurchaseWindowsLicense.dll
[2014.06.21 13:01:13 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\microsoft-windows-system-events.dll
[2014.06.21 13:01:13 | 000,032,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ploptin.dll
[2014.06.21 13:01:12 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
[2014.06.21 13:01:12 | 002,165,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll
[2014.06.21 13:01:12 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SkyDriveShell.dll
[2014.06.21 13:01:11 | 000,943,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WlanMM.dll
[2014.06.21 13:01:11 | 000,722,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeui.exe
[2014.06.21 13:01:11 | 000,693,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcfg.dll
[2014.06.21 13:01:11 | 000,506,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinTypes.dll
[2014.06.21 13:01:11 | 000,180,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe
[2014.06.21 13:01:11 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwm.exe
[2014.06.21 13:01:10 | 000,935,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasgcw.dll
[2014.06.21 13:01:10 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmdskmgr.dll
[2014.06.21 13:01:10 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2014.06.21 13:01:10 | 000,083,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2014.06.21 13:01:09 | 003,085,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2014.06.21 13:01:09 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll
[2014.06.21 13:01:09 | 000,170,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2014.06.21 13:01:09 | 000,139,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wermgr.exe
[2014.06.21 13:01:08 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ninput.dll
[2014.06.21 13:01:08 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mdmregistration.dll
[2014.06.21 13:01:08 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.HumanInterfaceDevice.dll
[2014.06.21 13:01:08 | 000,151,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys
[2014.06.21 13:01:08 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clrhost.dll
[2014.06.21 13:01:05 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll
[2014.06.21 13:01:05 | 000,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe
[2014.06.21 13:01:05 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BioCredProv.dll
[2014.06.21 13:01:05 | 000,142,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2014.06.21 13:01:05 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AltTab.dll
[2014.06.21 13:01:04 | 000,463,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RASMM.dll
[2014.06.21 13:01:04 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhcpl.dll
[2014.06.21 13:01:04 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll
[2014.06.21 13:01:04 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll
[2014.06.21 13:01:04 | 000,209,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imm32.dll
[2014.06.21 13:01:04 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlayToManager.dll
[2014.06.21 13:01:04 | 000,188,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemreset.exe
[2014.06.21 13:01:03 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
[2014.06.21 13:01:03 | 000,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2014.06.21 13:01:03 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll
[2014.06.21 13:01:03 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fsutil.exe
[2014.06.21 13:01:02 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\das.dll
[2014.06.21 13:01:02 | 000,397,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll
[2014.06.21 13:01:02 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2014.06.21 13:01:02 | 000,146,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\msgpioclx.sys
[2014.06.21 13:01:02 | 000,080,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhostex.exe
[2014.06.21 13:01:02 | 000,043,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CloudNotifications.exe
[2014.06.21 13:01:01 | 000,897,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2014.06.21 13:01:01 | 000,660,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Devices.Bluetooth.dll
[2014.06.21 13:01:01 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserLanguagesCpl.dll
[2014.06.21 13:01:01 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFilterHost.exe
[2014.06.21 13:01:01 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fsutil.exe
[2014.06.21 13:01:01 | 000,041,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CloudNotifications.exe
[2014.06.21 13:01:00 | 000,924,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\refs.sys
[2014.06.21 13:01:00 | 000,275,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powrprof.dll
[2014.06.21 13:01:00 | 000,140,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2014.06.21 13:01:00 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssprxy.dll
[2014.06.21 13:01:00 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BasicRender.sys
[2014.06.21 13:00:59 | 002,537,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2014.06.21 13:00:59 | 001,392,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPDMC.exe
[2014.06.21 13:00:59 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2014.06.21 13:00:59 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.Connectivity.dll
[2014.06.21 13:00:59 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\newdev.dll
[2014.06.21 13:00:59 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe
[2014.06.21 13:00:59 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepic.dll
[2014.06.21 13:00:58 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
[2014.06.21 13:00:58 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BthLEEnum.sys
[2014.06.21 13:00:58 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll
[2014.06.21 13:00:58 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dmvdsitf.dll
[2014.06.21 13:00:58 | 000,101,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RestoreOptIn.exe
[2014.06.21 13:00:58 | 000,079,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdstor.sys
[2014.06.21 13:00:57 | 000,488,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2014.06.21 13:00:57 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2014.06.21 13:00:57 | 000,413,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2014.06.21 13:00:57 | 000,137,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wermgr.exe
[2014.06.21 13:00:57 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContent.dll
[2014.06.21 13:00:56 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MbaeApiPublic.dll
[2014.06.21 13:00:56 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MicrosoftAccountTokenProvider.dll
[2014.06.21 13:00:56 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\microsoft-windows-kernel-power-events.dll
[2014.06.21 13:00:56 | 000,032,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountBroker.exe
[2014.06.21 13:00:55 | 000,835,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasgcw.dll
[2014.06.21 13:00:55 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WLanConn.dll
[2014.06.21 13:00:55 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlayToManager.dll
[2014.06.21 13:00:54 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3mm.dll
[2014.06.21 13:00:54 | 000,094,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcd.dll
[2014.06.21 13:00:54 | 000,089,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RestoreOptIn.exe
[2014.06.21 13:00:54 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AppxSysprep.dll
[2014.06.21 13:00:53 | 000,308,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll
[2014.06.21 13:00:53 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\newdev.dll
[2014.06.21 13:00:53 | 000,029,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountBroker.exe
[2014.06.21 13:00:52 | 003,312,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootux.dll
[2014.06.21 13:00:52 | 000,131,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easinvoker.exe
[2014.06.21 13:00:52 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DAMM.dll
[2014.06.21 13:00:52 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscinterop.dll
[2014.06.21 13:00:51 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WiFiDisplay.dll
[2014.06.21 13:00:51 | 000,079,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bcd.dll
[2014.06.21 13:00:51 | 000,071,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpfve.sys
[2014.06.21 13:00:51 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll
[2014.06.21 13:00:48 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cleanmgr.exe
[2014.06.21 13:00:48 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cleanmgr.exe
[2014.06.21 13:00:48 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samlib.dll
[2014.06.21 13:00:48 | 000,054,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wpcfltr.sys
[2014.06.21 13:00:47 | 000,325,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS
[2014.06.21 13:00:47 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2014.06.21 13:00:45 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll
[2014.06.21 13:00:45 | 000,189,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS
[2014.06.21 13:00:45 | 000,162,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthHost.exe
[2014.06.21 13:00:44 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceaccess.dll
[2014.06.21 13:00:44 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\korwbrkr.dll
[2014.06.21 13:00:44 | 000,036,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe
[2014.06.21 13:00:43 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\BioCredProv.dll
[2014.06.21 13:00:43 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmvdsitf.dll
[2014.06.21 13:00:43 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll
[2014.06.21 13:00:43 | 000,033,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe
[2014.06.21 13:00:42 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll
[2014.06.21 13:00:42 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\easwrt.dll
[2014.06.21 13:00:42 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll
[2014.06.21 13:00:41 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2014.06.21 13:00:41 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll
[2014.06.21 13:00:41 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CloudStorageWizard.exe
[2014.06.21 13:00:41 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll
[2014.06.21 13:00:40 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrobj.dll
[2014.06.21 13:00:40 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dmdskmgr.dll
[2014.06.21 13:00:40 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2014.06.21 13:00:40 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmcsp.dll
[2014.06.21 13:00:40 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll
[2014.06.21 13:00:39 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll
[2014.06.21 13:00:39 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthBroker.dll
[2014.06.21 13:00:39 | 000,038,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContentServer.exe
[2014.06.21 13:00:39 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winbrand.dll
[2014.06.21 13:00:38 | 001,152,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscui.cpl
[2014.06.21 13:00:38 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWWIN.EXE
[2014.06.21 13:00:38 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deviceaccess.dll
[2014.06.21 13:00:38 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2014.06.21 13:00:38 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MicrosoftAccountTokenProvider.dll
[2014.06.21 13:00:38 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slpts.dll
[2014.06.21 13:00:37 | 000,902,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe
[2014.06.21 13:00:37 | 000,557,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintDialogs.dll
[2014.06.21 13:00:37 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2014.06.21 13:00:37 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbadmin.exe
[2014.06.21 13:00:37 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MbaeApiPublic.dll
[2014.06.21 13:00:37 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpnprv.dll
[2014.06.21 13:00:37 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll
[2014.06.21 13:00:37 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.Sockets.PushEnabledApplication.dll
[2014.06.21 13:00:37 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll
[2014.06.21 13:00:36 | 001,057,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll
[2014.06.21 13:00:36 | 000,874,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe
[2014.06.21 13:00:36 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll
[2014.06.21 13:00:36 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BootMenuUX.dll
[2014.06.21 13:00:36 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Media.Renewal.dll
[2014.06.21 13:00:36 | 000,028,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe
[2014.06.21 13:00:36 | 000,027,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SysResetErr.exe
[2014.06.21 13:00:35 | 000,890,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe
[2014.06.21 13:00:35 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll
[2014.06.21 13:00:35 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidcredprov.dll
[2014.06.21 13:00:35 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrobj.dll
[2014.06.21 13:00:35 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe
[2014.06.21 13:00:35 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll
[2014.06.21 13:00:35 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2014.06.21 13:00:34 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe
[2014.06.21 13:00:34 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\migisol.dll
[2014.06.21 13:00:34 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2014.06.21 13:00:34 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2014.06.21 13:00:34 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
[2014.06.21 13:00:34 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slpts.dll
[2014.06.21 13:00:33 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe
[2014.06.21 13:00:33 | 000,792,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe
[2014.06.21 13:00:33 | 000,780,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe
[2014.06.21 13:00:33 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll
[2014.06.21 13:00:33 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DAConn.dll
[2014.06.21 13:00:33 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winbrand.dll
[2014.06.21 13:00:32 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dafBth.dll
[2014.06.21 13:00:32 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2014.06.21 13:00:32 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2014.06.21 13:00:32 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhevents.dll
[2014.06.21 13:00:31 | 000,439,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Devices.Bluetooth.dll
[2014.06.21 13:00:31 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWWIN.EXE
[2014.06.21 13:00:31 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2014.06.21 13:00:31 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthBroker.dll
[2014.06.21 13:00:31 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IdCtrls.dll
[2014.06.21 13:00:31 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll
[2014.06.21 13:00:30 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2014.06.21 13:00:30 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spcompat.dll
[2014.06.21 13:00:30 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.Sockets.PushEnabledApplication.dll
[2014.06.21 13:00:30 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\StorageContextHandler.dll
[2014.06.21 13:00:30 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\watchdog.sys
[2014.06.21 13:00:29 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgrade.exe
[2014.06.21 13:00:29 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe
[2014.06.21 13:00:28 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll
[2014.06.21 13:00:28 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe
[2014.06.21 13:00:28 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\energytask.dll
[2014.06.21 13:00:27 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll
[2014.06.21 13:00:25 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\devinv.dll
[2014.06.21 13:00:25 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werui.dll
[2014.06.21 13:00:23 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.exe
[2014.06.21 13:00:20 | 000,592,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll
[2014.06.21 13:00:20 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2014.06.21 13:00:20 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RelPost.exe
[2014.06.21 13:00:20 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnpclean.dll
[2014.06.21 13:00:19 | 000,544,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlidcli.dll
[2014.06.21 13:00:19 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingMonitor.dll
[2014.06.21 13:00:19 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceassociation.dll
[2014.06.21 13:00:18 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2014.06.21 13:00:18 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PlayToDevice.dll
[2014.06.21 13:00:18 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingMonitor.dll
[2014.06.21 13:00:18 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dasHost.exe
[2014.06.21 13:00:17 | 001,136,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscui.cpl
[2014.06.21 13:00:17 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll
[2014.06.21 13:00:16 | 000,586,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2014.06.21 13:00:16 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\offreg.dll
[2014.06.21 13:00:16 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\offreg.dll
[2014.06.21 13:00:16 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2014.06.21 13:00:16 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2014.06.21 13:00:16 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgentc.exe
[2014.06.21 13:00:16 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2014.06.21 13:00:15 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PrintDialogs.dll
[2014.06.21 13:00:15 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.dll
[2014.06.21 13:00:15 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winsku.dll
[2014.06.21 13:00:15 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll
[2014.06.21 13:00:15 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CloudStorageWizard.exe
[2014.06.21 13:00:15 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SSShim.dll
[2014.06.21 13:00:14 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2014.06.21 13:00:14 | 000,203,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PlayToDevice.dll
[2014.06.21 13:00:14 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IdCtrls.dll
[2014.06.21 13:00:14 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2014.06.21 13:00:14 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\deviceassociation.dll
[2014.06.21 13:00:14 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msshooks.dll
[2014.06.21 13:00:13 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserLanguagesCpl.dll
[2014.06.21 13:00:13 | 000,468,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemSettings.Handlers.dll
[2014.06.21 13:00:13 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\werui.dll
[2014.06.21 13:00:13 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.exe
[2014.06.21 13:00:13 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf3216.dll
[2014.06.21 13:00:12 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll
[2014.06.21 13:00:12 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\f3ahvoas.dll
[2014.06.21 13:00:11 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx
[2014.06.21 13:00:11 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SrTasks.exe
[2014.06.21 13:00:11 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe
[2014.06.21 13:00:10 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsdyn.dll
[2014.06.21 13:00:10 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe
[2014.06.21 13:00:10 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsku.dll
[2014.06.21 13:00:10 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\easwrt.dll
[2014.06.21 13:00:10 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LockScreenContentHost.dll
[2014.06.21 13:00:09 | 002,566,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll
[2014.06.21 13:00:09 | 000,504,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairing.dll
[2014.06.21 13:00:09 | 000,183,808 | ---- | C] (Microsoft Corp.) -- C:\Windows\SysNative\Defrag.exe
[2014.06.21 13:00:09 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AepRoam.dll
[2014.06.21 13:00:08 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe
[2014.06.21 13:00:08 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe
[2014.06.21 13:00:07 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll
[2014.06.21 13:00:07 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ConfigureExpandedStorage.dll
[2014.06.21 13:00:07 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ConfigureExpandedStorage.dll
[2014.06.21 13:00:07 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sxshared.dll
[2014.06.21 13:00:07 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msshooks.dll
[2014.06.21 13:00:06 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe
[2014.06.21 13:00:05 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2014.06.21 13:00:05 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2014.06.21 13:00:05 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2014.06.21 13:00:05 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2014.06.21 13:00:03 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincorlib.dll
[2014.06.21 13:00:03 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2014.06.21 13:00:02 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-session-winsta-l1-1-0.dll
[2014.06.21 13:00:01 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincorlib.dll
[2014.06.21 13:00:01 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe
[2014.06.21 12:59:58 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BulkOperationHost.exe
[2014.06.21 12:59:58 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll
[2014.06.21 12:59:57 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll
[2014.06.21 12:59:56 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2014.06.21 12:59:56 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SettingSyncPolicy.dll
[2014.06.21 12:59:55 | 000,761,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WorkfoldersControl.dll
[2014.06.21 12:59:55 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll
[2014.06.21 12:59:55 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\finger.exe
[2014.06.21 12:59:54 | 002,544,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll
[2014.06.21 12:59:54 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\GlobCollationHost.dll
[2014.06.21 12:59:54 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SettingSyncPolicy.dll
[2014.06.21 12:59:53 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll
[2014.06.21 12:59:53 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StorageContextHandler.dll
[2014.06.21 12:59:52 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\GlobCollationHost.dll
[2014.06.21 12:59:52 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll
[2014.06.21 12:59:52 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe
[2014.06.21 12:59:52 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dataclen.dll
[2014.06.21 12:59:52 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-session-winsta-l1-1-0.dll
[2014.06.21 12:59:51 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\korwbrkr.dll
[2014.06.21 12:59:51 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-kernel32-package-l1-1-1.dll
[2014.06.21 12:59:51 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-kernel32-package-l1-1-1.dll
[2014.06.21 12:59:50 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll
[2014.06.21 12:59:49 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2014.06.21 12:59:49 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dataclen.dll
[2014.06.21 12:59:49 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fhsvcctl.dll
[2014.06.21 12:59:48 | 000,527,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2014.06.21 12:59:48 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetupproxyserv.dll
[2014.06.21 12:59:48 | 000,008,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-ntuser-private-l1-1-1.dll
[2014.06.21 12:59:48 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimeng.dll
[2014.06.21 12:59:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2014.06.21 12:59:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2014.06.21 12:59:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ext-ms-win-ntuser-private-l1-1-0.dll
[2014.06.21 12:59:47 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2014.06.21 12:59:47 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winbici.dll
[2014.06.21 12:59:47 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveskybackup.dll
[2014.06.21 12:59:47 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\finger.exe
[2014.06.21 12:59:47 | 000,008,192 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-ntuser-private-l1-1-1.dll
[2014.06.21 12:59:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-ntuser-private-l1-1-0.dll
[2014.06.21 12:59:47 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ext-ms-win-networking-wcmapi-l1-1-0.dll
[2014.06.21 12:59:46 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2014.06.21 12:59:46 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\f3ahvoas.dll
[2014.06.21 00:59:57 | 000,000,000 | R--D | C] -- C:\Windows\BrowserChoice
[2014.06.21 00:56:18 | 002,214,216 | ---- | C] (ELAN Microelectronics Corp.) -- C:\Windows\ETDUninst.dll
[2014.06.21 00:51:48 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Desktop\bau
[2014.06.20 22:25:55 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Desktop\Tor Browser
[2014.06.20 21:28:05 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Desktop\FOTO
[2014.06.20 21:09:29 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2014.06.20 16:38:34 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\assembly
[2014.06.20 16:38:31 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Deployment
[2014.06.20 16:38:31 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Apps
[2014.06.20 16:35:58 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Adobe
[2014.06.18 16:34:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Convar
[2014.06.18 16:01:09 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.06.18 15:16:07 | 000,842,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.dll
[2014.06.18 15:16:07 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2014.06.18 15:16:06 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2014.06.18 15:16:05 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MsSpellCheckingFacility.dll
[2014.06.18 15:16:04 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sti.dll
[2014.06.18 15:15:00 | 003,210,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2014.06.18 15:14:59 | 002,804,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2014.06.18 15:14:51 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll
[2014.06.18 15:14:50 | 000,809,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmp4srcsnk.dll
[2014.06.18 15:14:50 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ubpm.dll
[2014.06.18 15:14:49 | 000,663,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmp4srcsnk.dll
[2014.06.18 15:14:49 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2014.06.18 15:14:48 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll
[2014.06.18 15:14:48 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Graphics.dll
[2014.06.18 15:14:47 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
[2014.06.18 15:14:47 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Graphics.dll
[2014.06.18 15:14:46 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2014.06.18 15:14:46 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bi.dll
[2014.06.18 15:14:46 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\BtaMPM.sys
[2014.06.18 15:14:45 | 000,513,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
[2014.06.18 15:14:45 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2014.06.18 15:14:45 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\deviceregistration.dll
[2014.06.18 15:11:18 | 000,086,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pdc.sys
[2014.06.18 15:11:16 | 000,146,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\SerCx2.sys
[2014.06.18 15:11:15 | 000,039,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\intelpep.sys
[2014.06.18 15:06:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
[2014.06.18 15:05:59 | 000,000,000 | ---D | C] -- C:\Users\baustelle\Documents\PDF Architect 2
[2014.06.18 15:05:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDF Architect 2
[2014.06.18 15:05:33 | 000,000,000 | ---D | C] -- C:\ProgramData\PDF Architect 2
[2014.06.18 15:05:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
[2014.06.18 15:05:26 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCT2.OCX
[2014.06.18 15:05:26 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMAPI32.OCX
[2014.06.18 15:05:26 | 000,110,264 | ---- | C] (pdfforge GmbH) -- C:\Windows\SysNative\pdfcmon.dll
[2014.06.18 15:05:25 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCDE.DLL
[2014.06.18 15:05:25 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL
[2014.06.18 15:05:25 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCC2DE.DLL
[2014.06.18 15:05:25 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPIDE.DLL
[2014.06.18 15:05:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator
[2014.06.18 15:04:55 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Programs
[2014.06.18 15:04:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2014.06.18 15:03:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works
[2014.06.18 15:03:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2014.06.18 15:03:49 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2014.06.18 15:00:51 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2014.06.18 15:00:09 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Microsoft Help
[2014.06.18 15:00:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2014.06.18 14:59:40 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2014.06.18 14:57:47 | 000,075,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2014.06.18 14:57:45 | 000,570,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2014.06.18 14:57:41 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2014.06.18 14:57:41 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2014.06.18 14:57:12 | 004,604,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2014.06.18 14:57:11 | 002,397,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2014.06.18 14:57:07 | 000,393,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2014.06.18 14:57:07 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2014.06.18 14:57:05 | 000,764,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmpeg2srcsnk.dll
[2014.06.18 14:57:04 | 004,175,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll
[2014.06.18 14:57:04 | 000,669,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmpeg2srcsnk.dll
[2014.06.18 14:57:03 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll
[2014.06.18 14:57:03 | 001,486,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll
[2014.06.18 14:57:03 | 001,238,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll
[2014.06.18 14:57:03 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll
[2014.06.18 14:57:03 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2014.06.18 14:57:03 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll
[2014.06.18 14:56:59 | 000,236,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdFilter.sys
[2014.06.18 14:56:59 | 000,124,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdNisDrv.sys
[2014.06.18 14:56:59 | 000,035,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdBoot.sys
[2014.06.18 14:56:56 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSCollect.exe
[2014.06.18 14:56:45 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pcaui.exe
[2014.06.18 14:56:45 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pcaui.exe
[2014.06.18 14:55:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2014.06.18 14:55:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2014.06.18 14:55:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2014.06.18 14:52:27 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Acer Aspire R7 Tutorial
[2014.06.18 14:50:09 | 000,084,720 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
[2014.06.18 14:48:04 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Mozilla
[2014.06.18 14:48:03 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Mozilla
[2014.06.18 14:47:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2014.06.18 14:47:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2014.06.18 14:47:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014.06.18 14:47:04 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2014.06.18 14:45:11 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Avira
[2014.06.18 14:43:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2014.06.18 14:43:38 | 000,130,584 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
[2014.06.18 14:43:38 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2014.06.18 14:43:37 | 000,117,712 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2014.06.18 14:43:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2014.06.18 14:43:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2014.06.18 14:39:28 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\WildTangent
[2014.06.18 14:15:19 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Macromedia
[2014.06.18 12:47:59 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\clear.fi
[2014.06.18 12:47:58 | 000,000,000 | ---D | C] -- C:\Users\baustelle\PicStream
[2014.06.18 12:46:48 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Atheros
[2014.06.18 12:46:12 | 000,000,000 | ---D | C] -- C:\Program Files\Accessory Store
[2014.06.18 12:46:06 | 000,000,000 | ---D | C] -- C:\ProgramData\OEM_YAHOO
[2014.06.18 12:46:01 | 000,000,000 | R--D | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014.06.18 12:46:01 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Searches
[2014.06.18 12:46:01 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Contacts
[2014.06.18 12:46:01 | 000,000,000 | R--D | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014.06.18 12:45:54 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Adobe
[2014.06.18 12:45:51 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\VirtualStore
[2014.06.18 12:45:41 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Packages
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Vorlagen
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\AppData\Local\Verlauf
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\AppData\Local\Temporary Internet Files
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Startmenü
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\SendTo
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Recent
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Netzwerkumgebung
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Lokale Einstellungen
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Documents\Eigene Videos
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Documents\Eigene Musik
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Eigene Dateien
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Documents\Eigene Bilder
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Druckumgebung
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Cookies
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\AppData\Local\Anwendungsdaten
[2014.06.18 12:45:40 | 000,000,000 | -HSD | C] -- C:\Users\baustelle\Anwendungsdaten
[2014.06.18 12:45:35 | 000,000,000 | --SD | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft
[2014.06.18 12:45:35 | 000,000,000 | R--D | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2014.06.18 12:45:35 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Desktop
[2014.06.18 12:45:35 | 000,000,000 | R--D | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014.06.18 12:45:35 | 000,000,000 | R--D | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2014.06.18 12:45:35 | 000,000,000 | -H-D | C] -- C:\Users\baustelle\AppData
[2014.06.18 12:45:35 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Temp
[2014.06.18 12:45:35 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Local\Microsoft
[2014.06.18 12:45:35 | 000,000,000 | ---D | C] -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Videos
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Saved Games
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Pictures
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Music
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Links
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Favorites
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Downloads
[2014.06.18 12:45:34 | 000,000,000 | R--D | C] -- C:\Users\baustelle\Documents
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\Programme
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2014.06.18 12:40:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2014.06.18 12:40:04 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014.07.01 10:21:57 | 000,000,000 | ---- | M] () -- C:\Users\baustelle\defogger_reenable
[2014.07.01 10:03:32 | 000,380,416 | ---- | M] () -- C:\Users\baustelle\Desktop\Gmer-19357.exe
[2014.07.01 10:02:30 | 002,083,328 | ---- | M] (Farbar) -- C:\Users\baustelle\Desktop\FRST64.exe
[2014.07.01 10:00:53 | 000,050,477 | ---- | M] () -- C:\Users\baustelle\Desktop\Defogger.exe
[2014.07.01 09:59:10 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014.07.01 09:57:08 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2014.07.01 09:57:06 | 3335,536,640 | -HS- | M] () -- C:\hiberfil.sys
[2014.07.01 09:55:20 | 001,346,519 | ---- | M] () -- C:\Users\baustelle\Desktop\adwcleaner_3.214.exe
[2014.07.01 09:37:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\baustelle\Desktop\OTL.exe
[2014.07.01 09:34:23 | 001,776,918 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014.07.01 09:34:23 | 000,765,582 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2014.07.01 09:34:23 | 000,722,476 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014.07.01 09:34:23 | 000,159,366 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2014.07.01 09:34:23 | 000,135,592 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014.06.30 11:35:09 | 001,328,729 | ---- | M] () -- C:\Users\baustelle\Desktop\2013_PA_Dachsteine_Details_S28-47.pdf
[2014.06.25 14:56:40 | 000,370,400 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014.06.25 10:31:48 | 000,000,898 | ---- | M] () -- C:\Users\baustelle\Documents\Musik - Verknüpfung.lnk
[2014.06.24 10:55:52 | 000,117,712 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2014.06.22 10:32:28 | 000,001,076 | ---- | M] () -- C:\Users\Public\Desktop\Acer Portal.lnk
[2014.06.22 10:31:39 | 000,001,178 | ---- | M] () -- C:\Users\Public\Desktop\Acer Docs.lnk
[2014.06.22 10:30:36 | 000,001,027 | ---- | M] () -- C:\Users\Public\Desktop\Acer Photo.lnk
[2014.06.18 16:43:48 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2014.06.18 15:06:01 | 000,000,989 | ---- | M] () -- C:\Users\Public\Desktop\PDF Architect 2.lnk
[2014.06.18 15:05:28 | 000,001,007 | ---- | M] () -- C:\Users\Public\Desktop\PDFCreator.lnk
[2014.06.18 14:55:39 | 000,002,003 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2014.06.18 14:49:14 | 000,084,720 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
[2014.06.18 14:47:55 | 000,001,123 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014.06.18 14:47:17 | 000,000,838 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014.06.18 14:43:51 | 000,002,046 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2014.07.01 10:21:57 | 000,000,000 | ---- | C] () -- C:\Users\baustelle\defogger_reenable
[2014.07.01 10:03:32 | 000,380,416 | ---- | C] () -- C:\Users\baustelle\Desktop\Gmer-19357.exe
[2014.07.01 10:00:53 | 000,050,477 | ---- | C] () -- C:\Users\baustelle\Desktop\Defogger.exe
[2014.07.01 09:55:20 | 001,346,519 | ---- | C] () -- C:\Users\baustelle\Desktop\adwcleaner_3.214.exe
[2014.06.30 11:35:08 | 001,328,729 | ---- | C] () -- C:\Users\baustelle\Desktop\2013_PA_Dachsteine_Details_S28-47.pdf
[2014.06.25 14:56:31 | 000,370,400 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014.06.25 10:31:48 | 000,000,898 | ---- | C] () -- C:\Users\baustelle\Documents\Musik - Verknüpfung.lnk
[2014.06.22 10:32:28 | 000,001,076 | ---- | C] () -- C:\Users\Public\Desktop\Acer Portal.lnk
[2014.06.22 10:30:27 | 000,001,027 | ---- | C] () -- C:\Users\Public\Desktop\Acer Photo.lnk
[2014.06.21 13:06:53 | 000,387,210 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml
[2014.06.21 13:03:12 | 000,139,600 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2014.06.21 13:01:51 | 000,262,335 | ---- | C] () -- C:\Windows\SysNative\dfpinc.dat
[2014.06.21 13:00:27 | 000,002,255 | ---- | C] () -- C:\Windows\SysWow64\WimBootCompress.ini
[2014.06.21 13:00:27 | 000,002,255 | ---- | C] () -- C:\Windows\SysNative\WimBootCompress.ini
[2014.06.21 12:59:54 | 000,100,197 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2014.06.21 12:59:54 | 000,100,197 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2014.06.21 12:59:53 | 000,007,762 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-suggestions.searchconnector-ms
[2014.06.21 12:59:53 | 000,007,762 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-suggestions.searchconnector-ms
[2014.06.21 12:59:53 | 000,007,130 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-zeroinput.searchconnector-ms
[2014.06.21 12:59:53 | 000,007,130 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-zeroinput.searchconnector-ms
[2014.06.21 12:59:46 | 000,011,109 | ---- | C] () -- C:\Windows\SysWow64\connectedsearch-results.searchconnector-ms
[2014.06.21 12:59:45 | 000,011,109 | ---- | C] () -- C:\Windows\SysNative\connectedsearch-results.searchconnector-ms
[2014.06.21 12:59:43 | 000,050,053 | ---- | C] () -- C:\Windows\SysNative\srms.dat
[2014.06.21 12:59:40 | 000,002,440 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
[2014.06.18 16:43:48 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2014.06.18 15:16:01 | 000,138,240 | ---- | C] () -- C:\Windows\SysNative\OEMLicense.dll
[2014.06.18 15:16:01 | 000,103,936 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2014.06.18 15:06:01 | 000,000,989 | ---- | C] () -- C:\Users\Public\Desktop\PDF Architect 2.lnk
[2014.06.18 15:05:28 | 000,001,007 | ---- | C] () -- C:\Users\Public\Desktop\PDFCreator.lnk
[2014.06.18 14:55:39 | 000,002,457 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2014.06.18 14:55:39 | 000,002,003 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2014.06.18 14:47:55 | 000,001,135 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2014.06.18 14:47:55 | 000,001,123 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2014.06.18 14:47:16 | 000,000,838 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014.06.18 14:43:51 | 000,002,046 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2014.06.18 12:46:47 | 000,001,276 | ---- | C] () -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
[2014.06.18 12:45:54 | 000,001,454 | ---- | C] () -- C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014.06.18 12:40:05 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
[2014.06.18 12:39:59 | 3335,536,640 | -HS- | C] () -- C:\hiberfil.sys
[2014.02.28 02:43:24 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2014.01.14 11:42:39 | 000,343,040 | ---- | C] () -- C:\Windows\SysWow64\igdmd32.dll
[2014.01.14 11:42:38 | 000,180,736 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2014.01.14 11:42:37 | 000,142,848 | ---- | C] () -- C:\Windows\SysWow64\igdail32.dll
[2013.08.22 17:36:43 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2013.08.22 17:36:42 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2013.08.22 16:46:23 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2013.08.22 09:01:23 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2013.08.22 05:32:36 | 000,046,080 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2013.08.22 01:55:20 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2013.08.22 01:52:39 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2013.05.11 18:17:52 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
 
========== ZeroAccess Check ==========
 
[2014.02.28 03:03:18 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014.03.20 05:48:41 | 021,232,792 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014.03.20 03:20:53 | 018,679,216 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013.08.22 11:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2013.08.22 04:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013.08.22 11:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >
danke nochmal ich hoffe das ich bis jetzt alles richtig gemacht habe

cosinus 01.07.2014 13:03
Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


AsmW 01.07.2014 13:48
JRT:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by baustelle on 01.07.2014 at 14:29:56,98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.07.2014 at 14:34:33,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Teil1:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-06-2014
Ran by baustelle (administrator) on PC on 01-07-2014 14:43:57
Running from C:\Users\baustelle\Desktop
Platform: Windows 8.1 (Update 1) (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133760 2013-12-24] ( (Atheros Communications))
HKU\S-1-5-21-3069840582-281615928-2227681027-1002\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18249472 2014-05-02] (Acer Incorporated)

==================== Internet (Whitelisted) ====================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {4DD40821-DE39-4006-A6A0-21CEF77E4A9B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {4DD40821-DE39-4006-A6A0-21CEF77E4A9B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {4DD40821-DE39-4006-A6A0-21CEF77E4A9B} URL =
BHO: Free Games - {0D5F364D-D6A9-43C1-BF0C-99B378972C5B} - C:\Program Files (x86)\Free Games\ScriptHost64.dll (BestOffers)
BHO-x32: Free Games - {0D5F364D-D6A9-43C1-BF0C-99B378972C5B} - C:\Program Files (x86)\Free Games\ScriptHost.dll (BestOffers)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\baustelle\AppData\Roaming\Mozilla\Firefox\Profiles\zl2pf6t0.default
FF NewTab: chrome://quick_start/content/index.html
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 - C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [318592 2013-12-24] (Windows (R) Win 7 DDK provider)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2800896 2014-05-02] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-02] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1716264 2014-04-30] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-04-30] (pdfforge GmbH)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-02] (Acer Incorporate)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-02] (Acer Incorporate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2013-12-12] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-12-24] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-01 14:34 - 2014-07-01 14:34 - 00000688 _____ () C:\Users\baustelle\Desktop\JRT.txt
2014-07-01 14:29 - 2014-07-01 14:29 - 00000000 ____D () C:\Windows\ERUNT
2014-07-01 14:27 - 2014-07-01 14:27 - 00001754 _____ () C:\Users\baustelle\Desktop\AdwCleaner[S7].txt
2014-07-01 14:26 - 2014-07-01 14:26 - 00001350 _____ () C:\Windows\PFRO.log
2014-07-01 14:23 - 2014-07-01 14:23 - 01016261 _____ (Thisisu) C:\Users\baustelle\Desktop\JRT.exe
2014-07-01 10:50 - 2014-07-01 10:50 - 00290332 _____ () C:\Users\baustelle\Desktop\OTL.Txt
2014-07-01 10:50 - 2014-07-01 10:50 - 00071818 _____ () C:\Users\baustelle\Desktop\Extras.Txt
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\PDF Architect 2
2014-07-01 10:40 - 2014-07-01 10:40 - 00003532 _____ () C:\Users\baustelle\Desktop\Gmer.txt
2014-07-01 10:25 - 2014-07-01 10:25 - 00025560 _____ () C:\Users\baustelle\Desktop\Addition_a (1).txt
2014-07-01 10:24 - 2014-07-01 14:43 - 00010658 _____ () C:\Users\baustelle\Desktop\FRST.txt
2014-07-01 10:24 - 2014-07-01 14:43 - 00000000 ____D () C:\FRST
2014-07-01 10:24 - 2014-07-01 10:25 - 00153288 _____ () C:\Users\baustelle\Desktop\Addition_a (2).txt
2014-07-01 10:21 - 2014-07-01 10:22 - 00000480 _____ () C:\Users\baustelle\Desktop\defogger_disable.log
2014-07-01 10:21 - 2014-07-01 10:21 - 00000000 _____ () C:\Users\baustelle\defogger_reenable
2014-07-01 10:03 - 2014-07-01 10:03 - 00380416 _____ () C:\Users\baustelle\Desktop\Gmer-19357.exe
2014-07-01 10:02 - 2014-07-01 10:02 - 02083328 _____ (Farbar) C:\Users\baustelle\Desktop\FRST64.exe
2014-07-01 10:00 - 2014-07-01 10:00 - 00050477 _____ () C:\Users\baustelle\Desktop\Defogger.exe
2014-07-01 09:55 - 2014-07-01 09:55 - 01346519 _____ () C:\Users\baustelle\Desktop\adwcleaner_3.214.exe
2014-07-01 09:37 - 2014-07-01 09:37 - 00602112 _____ (OldTimer Tools) C:\Users\baustelle\Desktop\OTL.exe
2014-06-29 21:02 - 2014-07-01 14:37 - 01411156 _____ () C:\Windows\WindowsUpdate.log
2014-06-27 18:45 - 2014-06-30 09:01 - 00000000 ____D () C:\Users\baustelle\Desktop\Rassenmäher
2014-06-26 21:22 - 2014-06-26 21:22 - 01128916 _____ (www.hellopdf.com ) C:\Users\baustelle\Downloads\pdf2wordsetup11.exe
2014-06-26 12:40 - 2014-07-01 11:17 - 00142848 ___SH () C:\Users\baustelle\Desktop\Thumbs.db
2014-06-25 14:56 - 2014-06-25 14:56 - 00370400 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-25 14:19 - 2014-06-25 14:19 - 00003396 _____ () C:\Windows\System32\Tasks\{636AC246-62C1-49FB-AB77-CEB3169D8ED9}
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\speedtest199
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\freegames197
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Program Files (x86)\Free Games
2014-06-25 13:43 - 2014-07-01 10:11 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-06-25 13:43 - 2014-06-25 13:43 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-25 10:31 - 2014-06-25 10:31 - 00000898 _____ () C:\Users\baustelle\Documents\Musik - Verknüpfung.lnk
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieUserList
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieSiteList
2014-06-24 21:04 - 2014-06-25 08:51 - 00000000 ____D () C:\Users\baustelle\AppData\Local\CrashDumps
2014-06-24 18:04 - 2014-06-24 18:04 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\TuneUp Software
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Local\TuneUp Software
2014-06-24 12:40 - 2014-06-24 12:43 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-24 12:39 - 2014-06-24 18:04 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-24 12:37 - 2014-06-24 12:38 - 27883432 _____ (TuneUp Software) C:\Users\baustelle\Downloads\TuneUpUtilities2014_de96-DE.exe
2014-06-24 12:24 - 2014-06-30 14:53 - 00000000 ____D () C:\Users\baustelle\Desktop\Eigene_Dataien
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\Documents\gaeb AVA Projektablage
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Nix & Keitel
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Nix & Keitel
2014-06-23 09:49 - 2014-06-23 09:49 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WinRAR
2014-06-23 09:45 - 2014-06-23 09:45 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\Public\OEM
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\baustelle\Documents\clear.fi
2014-06-22 10:32 - 2014-06-22 10:32 - 00001076 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-06-22 10:32 - 2014-06-22 10:32 - 00000000 ____D () C:\Users\baustelle\AppData\Local\AcerCloud
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Doc
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiMedia
2014-06-22 10:30 - 2014-06-22 10:32 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer
2014-06-22 10:30 - 2014-06-22 10:31 - 00000000 ____D () C:\ProgramData\clear.fi
2014-06-22 10:30 - 2014-06-22 10:30 - 00001027 _____ () C:\Users\Public\Desktop\Acer Photo.lnk
2014-06-22 10:30 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\acer
2014-06-22 10:29 - 2014-06-22 10:29 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiPhoto
2014-06-21 13:07 - 2014-03-20 06:19 - 01291200 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-06-21 13:07 - 2014-03-20 05:48 - 21232792 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-21 13:07 - 2014-03-20 05:41 - 02013016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-06-21 13:07 - 2014-03-20 05:41 - 00376152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2014-06-21 13:07 - 2014-03-20 05:40 - 01112536 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-06-21 13:07 - 2014-03-20 03:29 - 04268544 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-21 13:07 - 2014-03-20 03:20 - 18679216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-21 13:07 - 2014-03-20 02:53 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-06-21 13:07 - 2014-03-20 02:48 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\ReInfo.dll
2014-06-21 13:07 - 2014-03-20 01:55 - 01036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-06-21 13:07 - 2014-03-20 01:39 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2014-06-21 13:07 - 2014-03-19 09:13 - 00836096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-06-21 13:07 - 2014-03-19 07:57 - 00621568 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-06-21 13:07 - 2014-03-19 07:31 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-06-21 13:07 - 2014-03-19 07:08 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-06-21 13:07 - 2014-03-19 06:41 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-21 13:07 - 2014-03-19 06:17 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-21 13:07 - 2014-03-13 14:35 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wof.sys
2014-06-21 13:07 - 2014-03-11 17:18 - 01015808 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-06-21 13:07 - 2014-03-11 16:03 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2014-06-21 13:07 - 2014-03-11 16:00 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2014-06-21 13:07 - 2014-03-11 15:21 - 00918528 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-06-21 13:07 - 2014-03-11 15:02 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-06-21 13:07 - 2014-03-11 14:42 - 02641920 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-06-21 13:07 - 2014-03-11 14:35 - 02317824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-06-21 13:07 - 2014-03-08 22:47 - 00565536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-06-21 13:07 - 2014-03-08 22:47 - 00180056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-06-21 13:07 - 2014-03-08 22:40 - 00136024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2014-06-21 13:07 - 2014-03-08 22:38 - 01542768 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-06-21 13:07 - 2014-03-08 22:35 - 00467800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-06-21 13:07 - 2014-03-08 22:35 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-21 13:07 - 2014-03-08 17:29 - 01339240 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-21 13:07 - 2014-03-08 17:29 - 00356848 _____ (Microsoft Corporation) C:\Windows\system32\dcomp.dll
2014-06-21 13:07 - 2014-03-08 13:34 - 01095488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2014-06-21 13:07 - 2014-03-08 10:33 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-06-21 13:07 - 2014-03-08 09:51 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-21 13:07 - 2014-03-08 09:47 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spp.dll
2014-06-21 13:07 - 2014-03-08 09:09 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-21 13:07 - 2014-03-08 09:04 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll
2014-06-21 13:07 - 2014-03-08 09:03 - 00939520 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-06-21 13:07 - 2014-03-08 09:01 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-06-21 13:07 - 2014-03-08 08:50 - 01066496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-21 13:07 - 2014-03-08 08:48 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll
2014-06-21 13:07 - 2014-03-08 08:46 - 01063424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-06-21 13:07 - 2014-03-08 08:41 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-06-21 13:07 - 2014-03-08 08:40 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll
2014-06-21 13:07 - 2014-03-08 08:37 - 00755712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-06-21 13:07 - 2014-03-08 08:31 - 00222720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dcomp.dll
2014-06-21 13:07 - 2014-03-08 08:30 - 00197632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll
2014-06-21 13:07 - 2014-03-08 08:09 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-21 13:07 - 2014-03-08 08:02 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-21 13:07 - 2014-03-08 07:41 - 01306624 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2014-06-21 13:07 - 2014-03-08 07:11 - 00924160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2014-06-21 13:07 - 2014-03-06 16:35 - 01466864 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-21 13:07 - 2014-03-06 16:34 - 02331000 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-21 13:07 - 2014-03-06 16:34 - 00113648 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-06-21 13:07 - 2014-03-06 14:53 - 02141912 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-06-21 13:07 - 2014-03-06 14:53 - 00518552 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-06-21 13:07 - 2014-03-06 14:51 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-06-21 13:07 - 2014-03-06 14:51 - 00488280 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-06-21 13:07 - 2014-03-06 14:51 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-06-21 13:07 - 2014-03-06 14:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-21 13:07 - 2014-03-06 14:40 - 00492256 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00467504 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00463264 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-21 13:07 - 2014-03-06 14:40 - 00244888 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-21 13:07 - 2014-03-06 14:39 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-06-21 13:07 - 2014-03-06 13:20 - 01200296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-21 13:07 - 2014-03-06 13:19 - 00390488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-06-21 13:07 - 2014-03-06 13:19 - 00094016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll
2014-06-21 13:07 - 2014-03-06 13:13 - 01779800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-06-21 13:07 - 2014-03-06 13:13 - 00406912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-06-21 13:07 - 2014-03-06 12:46 - 01679128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00406512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00388408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-21 13:07 - 2014-03-06 12:35 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-21 13:07 - 2014-03-06 11:22 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-21 13:07 - 2014-03-06 11:22 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2014-06-21 13:07 - 2014-03-06 11:20 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-21 13:07 - 2014-03-06 11:20 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-21 13:07 - 2014-03-06 11:20 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-21 13:07 - 2014-03-06 11:19 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-06-21 13:07 - 2014-03-06 11:19 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.Search.UriHandler.dll
2014-06-21 13:07 - 2014-03-06 11:08 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-21 13:07 - 2014-03-06 10:38 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-06-21 13:07 - 2014-03-06 10:20 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-06-21 13:07 - 2014-03-06 10:00 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2014-06-21 13:07 - 2014-03-06 09:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-06-21 13:07 - 2014-03-06 09:22 - 16875520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-21 13:07 - 2014-03-06 09:16 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2014-06-21 13:07 - 2014-03-06 09:02 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-06-21 13:07 - 2014-03-06 08:59 - 12732416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-21 13:07 - 2014-03-06 08:51 - 02900992 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-06-21 13:07 - 2014-03-06 08:39 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-06-21 13:07 - 2014-03-06 08:34 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-21 13:07 - 2014-03-06 08:33 - 13286400 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-21 13:07 - 2014-03-06 08:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-21 13:07 - 2014-03-06 08:31 - 02479616 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-06-21 13:07 - 2014-03-06 08:29 - 11791360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-21 13:07 - 2014-03-06 08:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2014-06-21 13:07 - 2014-03-06 08:24 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-06-21 13:07 - 2014-03-06 08:23 - 02270208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2014-06-21 13:07 - 2014-03-06 08:23 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dafWfdProvider.dll
2014-06-21 13:07 - 2014-03-06 08:21 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-21 13:07 - 2014-03-06 08:21 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2014-06-21 13:07 - 2014-03-06 08:16 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-21 13:07 - 2014-03-06 08:16 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-21 13:07 - 2014-03-06 08:13 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-06-21 13:07 - 2014-03-06 08:13 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-21 13:07 - 2014-03-06 08:11 - 02030080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-06-21 13:07 - 2014-03-06 08:09 - 01764864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2014-06-21 13:07 - 2014-03-06 08:05 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-21 13:07 - 2014-03-06 08:04 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-21 13:07 - 2014-03-06 08:04 - 00226304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2014-06-21 13:07 - 2014-03-06 07:54 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-21 13:07 - 2014-03-06 07:54 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-21 13:07 - 2014-03-06 07:47 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-06-21 13:07 - 2014-03-06 07:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-21 13:07 - 2014-03-06 07:42 - 00280576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2014-06-21 13:07 - 2014-03-06 07:35 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-06-21 13:07 - 2014-03-06 07:33 - 00839168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-21 13:07 - 2014-03-06 07:32 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-06-21 13:07 - 2014-03-06 07:28 - 08653824 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-21 13:07 - 2014-03-06 07:27 - 05833728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-21 13:07 - 2014-03-06 07:21 - 05770752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-21 13:07 - 2014-03-06 07:20 - 06641152 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-21 13:07 - 2014-03-04 14:25 - 02373784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-06-21 13:07 - 2014-03-04 14:15 - 02519384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-21 13:07 - 2014-03-04 14:15 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-21 13:07 - 2014-03-04 14:14 - 00360512 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-06-21 13:07 - 2014-03-04 13:16 - 02088160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-06-21 13:07 - 2014-03-04 13:10 - 00355832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-06-21 13:07 - 2014-03-04 09:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-06-21 13:07 - 2014-03-04 09:13 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-06-21 13:07 - 2014-03-04 09:08 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-06-21 13:07 - 2014-03-04 09:00 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2014-06-21 13:07 - 2014-03-04 08:50 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-06-21 13:07 - 2014-03-04 08:42 - 00494592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-06-21 13:07 - 2014-03-04 08:39 - 00254976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2014-06-21 13:07 - 2014-03-04 08:32 - 00356864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2014-06-21 13:07 - 2014-03-04 08:15 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.dll
2014-06-21 13:07 - 2014-03-04 08:03 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-06-21 13:07 - 2014-03-04 07:52 - 00605184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2014-06-21 13:06 - 2014-03-20 01:36 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2014-06-21 13:06 - 2014-03-19 07:50 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2014-06-21 13:06 - 2014-03-19 07:20 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32tm.exe
2014-06-21 13:06 - 2014-03-12 15:45 - 00387210 _____ () C:\Windows\system32\ApnDatabase.xml
2014-06-21 13:06 - 2014-03-11 17:45 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2014-06-21 13:06 - 2014-03-11 17:02 - 00794112 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2014-06-21 13:06 - 2014-03-11 16:28 - 00887296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-06-21 13:06 - 2014-03-11 16:25 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerDeviceEncryption.exe
2014-06-21 13:06 - 2014-03-11 16:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2014-06-21 13:06 - 2014-03-08 11:34 - 00731648 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-06-21 13:06 - 2014-03-08 11:02 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2014-06-21 13:06 - 2014-03-08 10:44 - 00731648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-06-21 13:06 - 2014-03-08 10:25 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\SetNetworkLocation.dll
2014-06-21 13:06 - 2014-03-08 10:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxproxy.dll
2014-06-21 13:06 - 2014-03-08 09:53 - 01843712 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-06-21 13:06 - 2014-03-08 09:12 - 01816576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-06-21 13:06 - 2014-03-08 08:25 - 00264192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-06-21 13:06 - 2014-03-08 08:04 - 00717312 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-06-21 13:06 - 2014-03-08 07:58 - 00567296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-06-21 13:06 - 2014-03-06 11:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-21 13:06 - 2014-03-06 11:24 - 00111616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-06-21 13:06 - 2014-03-06 11:24 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-06-21 13:06 - 2014-03-06 11:24 - 00033280 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2014-06-21 13:06 - 2014-03-06 11:22 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-06-21 13:06 - 2014-03-06 11:19 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-06-21 13:06 - 2014-03-06 11:19 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-21 13:06 - 2014-03-06 11:19 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-06-21 13:06 - 2014-03-06 11:08 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2014-06-21 13:06 - 2014-03-06 10:41 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\DevPropMgr.dll
2014-06-21 13:06 - 2014-03-06 10:37 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-21 13:06 - 2014-03-06 10:28 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-21 13:06 - 2014-03-06 10:10 - 00058368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\l2gpstore.dll
2014-06-21 13:06 - 2014-03-06 10:09 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-21 13:06 - 2014-03-06 09:47 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-21 13:06 - 2014-03-06 09:44 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-21 13:06 - 2014-03-06 09:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-21 13:06 - 2014-03-06 08:57 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-21 13:06 - 2014-03-06 08:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-06-21 13:06 - 2014-03-06 08:06 - 00386560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlangpui.dll
2014-06-21 13:06 - 2014-03-06 08:01 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Scanners.dll
2014-06-21 13:06 - 2014-03-06 07:51 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Scanners.dll
2014-06-21 13:06 - 2014-03-04 08:56 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RMapi.dll
2014-06-21 13:06 - 2014-03-04 08:05 - 00402432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.dll
2014-06-21 13:06 - 2014-03-04 08:03 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\CredentialMigrationHandler.dll
2014-06-21 13:06 - 2014-03-04 07:54 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CredentialMigrationHandler.dll
2014-06-21 13:06 - 2014-02-07 00:59 - 00425984 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-21 13:06 - 2014-02-06 23:26 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-21 13:06 - 2013-12-24 01:28 - 00262656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2014-06-21 13:06 - 2013-12-24 01:26 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2014-06-21 13:05 - 2014-04-09 14:00 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-06-21 13:05 - 2014-04-09 05:32 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2014-06-21 13:05 - 2014-04-09 05:31 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-06-21 13:05 - 2014-04-09 05:23 - 01705984 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-06-21 13:05 - 2014-04-09 05:21 - 03408896 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-06-21 13:05 - 2014-03-02 12:20 - 23549952 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-21 13:05 - 2014-03-02 11:33 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-21 13:05 - 2014-02-26 08:29 - 02678784 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-21 13:03 - 2014-02-08 03:08 - 00139600 _____ () C:\Windows\system32\systemsf.ebd
2014-06-21 13:02 - 2014-02-22 18:59 - 01519520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-06-21 13:02 - 2014-02-22 18:59 - 01290688 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-06-21 13:02 - 2014-02-22 18:59 - 00526304 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-06-21 13:02 - 2014-02-22 18:15 - 01929608 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2014-06-21 13:02 - 2014-02-22 18:00 - 00590168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-21 13:02 - 2014-02-22 17:55 - 01435304 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2014-06-21 13:02 - 2014-02-22 17:53 - 03394384 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2014-06-21 13:02 - 2014-02-22 17:50 - 02588168 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-21 13:02 - 2014-02-22 17:50 - 00645104 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-06-21 13:02 - 2014-02-22 17:48 - 02574240 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-06-21 13:02 - 2014-02-22 17:46 - 01927600 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2014-06-21 13:02 - 2014-02-22 17:46 - 01445616 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2014-06-21 13:02 - 2014-02-22 17:46 - 01000424 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2014-06-21 13:02 - 2014-02-22 17:44 - 00539992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-06-21 13:02 - 2014-02-22 17:43 - 01727760 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 02142976 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 01215832 _____ (Microsoft Corporation) C:\Windows\system32\mfnetsrc.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 00800552 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2014-06-21 13:02 - 2014-02-22 17:41 - 00609456 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-21 13:02 - 2014-02-22 17:40 - 01118552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-06-21 13:02 - 2014-02-22 16:52 - 01767440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2014-06-21 13:02 - 2014-02-22 16:42 - 01017936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2014-06-21 13:02 - 2014-02-22 16:42 - 00422968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-06-21 13:02 - 2014-02-22 16:38 - 01374384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2014-06-21 13:02 - 2014-02-22 16:38 - 01077944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2014-06-21 13:02 - 2014-02-22 16:25 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-06-21 13:02 - 2014-02-22 16:08 - 01474104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 01011280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 00650736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2014-06-21 13:02 - 2014-02-22 16:04 - 00518552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-21 13:02 - 2014-02-22 14:24 - 02825216 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-06-21 13:02 - 2014-02-22 14:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-06-21 13:02 - 2014-02-22 14:15 - 04192768 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-21 13:02 - 2014-02-22 14:08 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2014-06-21 13:02 - 2014-02-22 13:44 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-21 13:02 - 2014-02-22 13:28 - 02428928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2014-06-21 13:02 - 2014-02-22 13:17 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OobeFldr.dll
2014-06-21 13:02 - 2014-02-22 13:00 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-21 13:02 - 2014-02-22 12:44 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-21 13:02 - 2014-02-22 12:38 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\DfpCommon.dll
2014-06-21 13:02 - 2014-02-22 12:36 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-21 13:02 - 2014-02-22 12:34 - 11742720 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2014-06-21 13:02 - 2014-02-22 12:06 - 02943488 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-21 13:02 - 2014-02-22 12:02 - 08946688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2014-06-21 13:02 - 2014-02-22 12:01 - 02648064 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-21 13:02 - 2014-02-22 11:53 - 00825344 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-06-21 13:02 - 2014-02-22 11:52 - 01132032 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2014-06-21 13:02 - 2014-02-22 11:47 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-06-21 13:02 - 2014-02-22 11:39 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-21 13:02 - 2014-02-22 11:38 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2014-06-21 13:02 - 2014-02-22 11:37 - 02220032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-21 13:02 - 2014-02-22 11:35 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WofTasks.dll
2014-06-21 13:02 - 2014-02-22 11:33 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-21 13:02 - 2014-02-22 11:28 - 02643456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-06-21 13:02 - 2014-02-22 11:26 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 03494912 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 02843136 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2014-06-21 13:02 - 2014-02-22 11:23 - 00628224 _____ (Microsoft Corporation) C:\Windows\system32\msTextPrediction.dll
2014-06-21 13:02 - 2014-02-22 11:16 - 11776000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-06-21 13:02 - 2014-02-22 11:14 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2014-06-21 13:02 - 2014-02-22 11:13 - 01728000 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2014-06-21 13:02 - 2014-02-22 11:11 - 02262016 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-21 13:02 - 2014-02-22 11:11 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2014-06-21 13:02 - 2014-02-22 11:01 - 13933568 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-06-21 13:02 - 2014-02-22 11:00 - 01341440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dui70.dll
2014-06-21 13:02 - 2014-02-22 11:00 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2014-06-21 13:02 - 2014-02-22 10:59 - 01621504 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2014-06-21 13:02 - 2014-02-22 10:59 - 00791552 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-06-21 13:02 - 2014-02-22 10:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-06-21 13:02 - 2014-02-22 10:54 - 00647168 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2014-06-21 13:02 - 2014-02-22 10:53 - 12027904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-21 13:02 - 2014-02-22 10:49 - 08874496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-21 13:02 - 2014-02-22 10:49 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-21 13:02 - 2014-02-22 10:47 - 00517120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2014-06-21 13:02 - 2014-02-22 10:44 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-06-21 13:02 - 2014-02-22 10:40 - 02368512 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-06-21 13:02 - 2014-02-22 10:39 - 00556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2014-06-21 13:02 - 2014-02-22 10:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-21 13:02 - 2014-02-22 10:37 - 01716736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-06-21 13:02 - 2014-02-22 10:34 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-21 13:02 - 2014-02-22 10:32 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-21 13:02 - 2014-02-22 10:27 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-21 13:02 - 2014-02-22 10:24 - 02760704 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-21 13:02 - 2014-02-22 10:22 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncCore.dll
2014-06-21 13:02 - 2014-02-22 10:21 - 00600576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2014-06-21 13:02 - 2014-02-22 10:06 - 01640960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2014-06-21 13:02 - 2014-02-22 10:04 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-21 13:02 - 2014-02-22 10:03 - 01496576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2014-06-21 13:02 - 2014-02-22 10:01 - 00978944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-21 13:02 - 2014-01-29 10:53 - 01653352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00461176 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2014-06-21 13:01 - 2014-02-22 18:59 - 00407536 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00289752 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00209160 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2014-06-21 13:01 - 2014-02-22 18:59 - 00139464 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2014-06-21 13:01 - 2014-02-22 18:59 - 00123448 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-21 13:01 - 2014-02-22 18:15 - 01206000 _____ (Microsoft Corporation) C:\Windows\system32\Taskmgr.exe
2014-06-21 13:01 - 2014-02-22 18:15 - 00531128 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-06-21 13:01 - 2014-02-22 18:15 - 00275312 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2014-06-21 13:01 - 2014-02-22 18:15 - 00188464 _____ (Microsoft Corporation) C:\Windows\system32\systemreset.exe
2014-06-21 13:01 - 2014-02-22 18:02 - 00170952 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2014-06-21 13:01 - 2014-02-22 18:02 - 00083120 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-06-21 13:01 - 2014-02-22 18:02 - 00080048 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2014-06-21 13:01 - 2014-02-22 18:00 - 00249688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-06-21 13:01 - 2014-02-22 18:00 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-06-21 13:01 - 2014-02-22 18:00 - 00151384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-06-21 13:01 - 2014-02-22 18:00 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys
2014-06-21 13:01 - 2014-02-22 17:59 - 00032088 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00388408 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00244848 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00152848 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2014-06-21 13:01 - 2014-02-22 17:55 - 00105864 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-06-21 13:01 - 2014-02-22 17:50 - 00761792 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2014-06-21 13:01 - 2014-02-22 17:50 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-06-21 13:01 - 2014-02-22 17:50 - 00258784 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-21 13:01 - 2014-02-22 17:50 - 00043408 _____ (Microsoft Corporation) C:\Windows\system32\CloudNotifications.exe
2014-06-21 13:01 - 2014-02-22 17:49 - 00384856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-21 13:01 - 2014-02-22 17:49 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-21 13:01 - 2014-02-22 17:49 - 00280920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-06-21 13:01 - 2014-02-22 17:49 - 00148824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-06-21 13:01 - 2014-02-22 17:49 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2014-06-21 13:01 - 2014-02-22 17:48 - 01791752 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2014-06-21 13:01 - 2014-02-22 17:48 - 00210736 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-06-21 13:01 - 2014-02-22 17:46 - 00669896 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-06-21 13:01 - 2014-02-22 17:44 - 00924504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2014-06-21 13:01 - 2014-02-22 17:44 - 00424280 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-06-21 13:01 - 2014-02-22 17:44 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-21 13:01 - 2014-02-22 17:44 - 00311640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-21 13:01 - 2014-02-22 17:43 - 01659056 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-06-21 13:01 - 2014-02-22 17:43 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-06-21 13:01 - 2014-02-22 17:43 - 01487520 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-06-21 13:01 - 2014-02-22 17:43 - 01356360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-06-21 13:01 - 2014-02-22 17:43 - 00142576 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-06-21 13:01 - 2014-02-22 17:41 - 01399176 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 01374384 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00391008 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00372360 _____ (Microsoft Corporation) C:\Windows\system32\msvproc.dll
2014-06-21 13:01 - 2014-02-22 17:41 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-21 13:01 - 2014-02-22 16:51 - 01063976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Taskmgr.exe
2014-06-21 13:01 - 2014-02-22 16:51 - 00140456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2014-06-21 13:01 - 2014-02-22 16:42 - 00410568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2014-06-21 13:01 - 2014-02-22 16:42 - 00369288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2014-06-21 13:01 - 2014-02-22 16:42 - 00232896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sqmapi.dll
2014-06-21 13:01 - 2014-02-22 16:42 - 00098072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-21 13:01 - 2014-02-22 16:38 - 00506120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2014-06-21 13:01 - 2014-02-22 16:38 - 00336232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2014-06-21 13:01 - 2014-02-22 16:38 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-06-21 13:01 - 2014-02-22 16:25 - 00180240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2014-06-21 13:01 - 2014-02-22 16:18 - 00477744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-06-21 13:01 - 2014-02-22 16:18 - 00419928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2014-06-21 13:01 - 2014-02-22 16:18 - 00041320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudNotifications.exe
2014-06-21 13:01 - 2014-02-22 16:11 - 00490136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 01206000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00317584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvproc.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00296448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MMDevAPI.dll
2014-06-21 13:01 - 2014-02-22 16:04 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-21 13:01 - 2014-02-22 14:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2014-06-21 13:01 - 2014-02-22 14:14 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-21 13:01 - 2014-02-22 14:14 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2014-06-21 13:01 - 2014-02-22 14:14 - 00033280 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2014-06-21 13:01 - 2014-02-22 14:11 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-06-21 13:01 - 2014-02-22 14:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2014-06-21 13:01 - 2014-02-22 14:07 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-06-21 13:01 - 2014-02-22 14:07 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\WofUtil.dll
2014-06-21 13:01 - 2014-02-22 14:07 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\clrhost.dll
2014-06-21 13:01 - 2014-02-22 14:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2014-06-21 13:01 - 2014-02-22 13:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2014-06-21 13:01 - 2014-02-22 13:54 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2014-06-21 13:01 - 2014-02-22 13:50 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-06-21 13:01 - 2014-02-22 13:47 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2014-06-21 13:01 - 2014-02-22 13:46 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-21 13:01 - 2014-02-22 13:41 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2014-06-21 13:01 - 2014-02-22 13:34 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll
2014-06-21 13:01 - 2014-02-22 13:30 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-21 13:01 - 2014-02-22 13:25 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\recimg.exe
2014-06-21 13:01 - 2014-02-22 13:17 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-21 13:01 - 2014-02-22 13:16 - 00617472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2014-06-21 13:01 - 2014-02-22 13:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clrhost.dll
2014-06-21 13:01 - 2014-02-22 13:15 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imm32.dll
2014-06-21 13:01 - 2014-02-22 13:06 - 00148992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slc.dll
2014-06-21 13:01 - 2014-02-22 13:05 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll
2014-06-21 13:01 - 2014-02-22 13:05 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2014-06-21 13:01 - 2014-02-22 13:01 - 00112640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-06-21 13:01 - 2014-02-22 13:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-21 13:01 - 2014-02-22 12:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-21 13:01 - 2014-02-22 12:56 - 02862592 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-06-21 13:01 - 2014-02-22 12:56 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2014-06-21 13:01 - 2014-02-22 12:54 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-21 13:01 - 2014-02-22 12:52 - 02288640 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2014-06-21 13:01 - 2014-02-22 12:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\dfp.exe
2014-06-21 13:01 - 2014-02-22 12:41 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-06-21 13:01 - 2014-02-22 12:41 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-06-21 13:01 - 2014-02-22 12:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2014-06-21 13:01 - 2014-02-22 12:39 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-21 13:01 - 2014-02-22 12:37 - 00912384 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2014-06-21 13:01 - 2014-02-22 12:36 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-06-21 13:01 - 2014-02-22 12:33 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-21 13:01 - 2014-02-22 12:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-21 13:01 - 2014-02-22 12:27 - 00397824 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2014-06-21 13:01 - 2014-02-22 12:25 - 01428480 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2014-06-21 13:01 - 2014-02-22 12:22 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-06-21 13:01 - 2014-02-22 12:18 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-06-21 13:01 - 2014-02-22 12:18 - 00722432 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeui.exe
2014-06-21 13:01 - 2014-02-22 12:17 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\fhcfg.dll
2014-06-21 13:01 - 2014-02-22 12:15 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2014-06-21 13:01 - 2014-02-22 12:14 - 02811392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2014-06-21 13:01 - 2014-02-22 12:14 - 02165760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SyncCenter.dll
2014-06-21 13:01 - 2014-02-22 12:14 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2014-06-21 13:01 - 2014-02-22 12:13 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2014-06-21 13:01 - 2014-02-22 12:12 - 00797696 _____ (Microsoft Corporation) C:\Windows\system32\PurchaseWindowsLicense.dll
2014-06-21 13:01 - 2014-02-22 12:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-06-21 13:01 - 2014-02-22 12:09 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2014-06-21 13:01 - 2014-02-22 12:09 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-21 13:01 - 2014-02-22 12:08 - 00997888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2014-06-21 13:01 - 2014-02-22 12:05 - 01757184 _____ (Microsoft Corporation) C:\Windows\system32\WMPDMC.exe
2014-06-21 13:01 - 2014-02-22 12:04 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2014-06-21 13:01 - 2014-02-22 12:04 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\WLanConn.dll
2014-06-21 13:01 - 2014-02-22 12:03 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-21 13:01 - 2014-02-22 12:02 - 00258560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-06-21 13:01 - 2014-02-22 12:01 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-06-21 13:01 - 2014-02-22 12:01 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2014-06-21 13:01 - 2014-02-22 12:01 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-06-21 13:01 - 2014-02-22 12:00 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-21 13:01 - 2014-02-22 12:00 - 00217600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-06-21 13:01 - 2014-02-22 11:59 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll
2014-06-21 13:01 - 2014-02-22 11:57 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2014-06-21 13:01 - 2014-02-22 11:55 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-21 13:01 - 2014-02-22 11:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2014-06-21 13:01 - 2014-02-22 11:48 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-06-21 13:01 - 2014-02-22 11:48 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2014-06-21 13:01 - 2014-02-22 11:46 - 00528896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-06-21 13:01 - 2014-02-22 11:45 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-06-21 13:01 - 2014-02-22 11:45 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2014-06-21 13:01 - 2014-02-22 11:45 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-06-21 13:01 - 2014-02-22 11:44 - 00675328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-06-21 13:01 - 2014-02-22 11:44 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-06-21 13:01 - 2014-02-22 11:43 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2014-06-21 13:01 - 2014-02-22 11:36 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2014-06-21 13:01 - 2014-02-22 11:35 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-06-21 13:01 - 2014-02-22 11:34 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2014-06-21 13:01 - 2014-02-22 11:34 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2014-06-21 13:01 - 2014-02-22 11:33 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-21 13:01 - 2014-02-22 11:33 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\DismApi.dll
2014-06-21 13:01 - 2014-02-22 11:32 - 01162752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2014-06-21 13:01 - 2014-02-22 11:31 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mdmregistration.dll
2014-06-21 13:01 - 2014-02-22 11:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2014-06-21 13:01 - 2014-02-22 11:26 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2014-06-21 13:01 - 2014-02-22 11:25 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2014-06-21 13:01 - 2014-02-22 11:24 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2014-06-21 13:01 - 2014-02-22 11:23 - 00344576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-06-21 13:01 - 2014-02-22 11:21 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-21 13:01 - 2014-02-22 11:18 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\UserLanguagesCpl.dll
2014-06-21 13:01 - 2014-02-22 11:15 - 00211968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dism.exe
2014-06-21 13:01 - 2014-02-22 11:14 - 00752640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-06-21 13:01 - 2014-02-22 11:12 - 00459776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DismApi.dll
2014-06-21 13:01 - 2014-02-22 11:11 - 02395136 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-06-21 13:01 - 2014-02-22 11:10 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2014-06-21 13:01 - 2014-02-22 11:10 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2014-06-21 13:01 - 2014-02-22 11:09 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2014-06-21 13:01 - 2014-02-22 11:08 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2014-06-21 13:01 - 2014-02-22 11:07 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-21 13:01 - 2014-02-22 11:07 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2014-06-21 13:01 - 2014-02-22 11:06 - 01035264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-06-21 13:01 - 2014-02-22 11:04 - 01107456 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2014-06-21 13:01 - 2014-02-22 11:04 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-21 13:01 - 2014-02-22 11:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\PlayToManager.dll
2014-06-21 13:01 - 2014-02-22 10:59 - 01403392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-06-21 13:01 - 2014-02-22 10:55 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2014-06-21 13:01 - 2014-02-22 10:54 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\rdbui.dll
2014-06-21 13:01 - 2014-02-22 10:54 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll
2014-06-21 13:01 - 2014-02-22 10:54 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-06-21 13:01 - 2014-02-22 10:53 - 00876544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-06-21 13:01 - 2014-02-22 10:52 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2014-06-21 13:01 - 2014-02-22 10:52 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-21 13:01 - 2014-02-22 10:51 - 01258496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll
2014-06-21 13:01 - 2014-02-22 10:51 - 00716288 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-06-21 13:01 - 2014-02-22 10:51 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2014-06-21 13:01 - 2014-02-22 10:49 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\msctfuimanager.dll
2014-06-21 13:01 - 2014-02-22 10:48 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2014-06-21 13:01 - 2014-02-22 10:48 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll
2014-06-21 13:01 - 2014-02-22 10:47 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll
2014-06-21 13:01 - 2014-02-22 10:47 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-06-21 13:01 - 2014-02-22 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\AltTab.dll
2014-06-21 13:01 - 2014-02-22 10:46 - 00824832 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-06-21 13:01 - 2014-02-22 10:45 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-06-21 13:01 - 2014-02-22 10:45 - 00169472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2014-06-21 13:01 - 2014-02-22 10:44 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-06-21 13:01 - 2014-02-22 10:44 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-06-21 13:01 - 2014-02-22 10:43 - 00644608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-06-21 13:01 - 2014-02-22 10:43 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2014-06-21 13:01 - 2014-02-22 10:43 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-06-21 13:01 - 2014-02-22 10:43 - 00117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2014-06-21 13:01 - 2014-02-22 10:42 - 00943104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WlanMM.dll
2014-06-21 13:01 - 2014-02-22 10:42 - 00709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctfuimanager.dll
2014-06-21 13:01 - 2014-02-22 10:42 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2014-06-21 13:01 - 2014-02-22 10:41 - 00662528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-06-21 13:01 - 2014-02-22 10:40 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\fhcpl.dll
2014-06-21 13:01 - 2014-02-22 10:40 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-06-21 13:01 - 2014-02-22 10:38 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-06-21 13:01 - 2014-02-22 10:37 - 00658432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-06-21 13:01 - 2014-02-22 10:36 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\InputSwitch.dll
2014-06-21 13:01 - 2014-02-22 10:35 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-21 13:01 - 2014-02-22 10:34 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2014-06-21 13:01 - 2014-02-22 10:33 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2014-06-21 13:01 - 2014-02-22 10:31 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-06-21 13:01 - 2014-02-22 10:29 - 00191488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputSwitch.dll
2014-06-21 13:01 - 2014-02-22 10:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\MrmIndexer.dll
2014-06-21 13:01 - 2014-02-22 10:22 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-21 13:01 - 2014-02-22 10:21 - 00854528 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-21 13:01 - 2014-02-22 10:21 - 00518144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmIndexer.dll
2014-06-21 13:01 - 2014-02-22 10:19 - 00698880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-21 13:01 - 2014-02-22 10:18 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-06-21 13:01 - 2014-02-22 10:17 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-06-21 13:01 - 2014-02-22 10:01 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2014-06-21 13:01 - 2014-02-22 10:00 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2014-06-21 13:01 - 2014-02-22 06:33 - 00262335 _____ () C:\Windows\system32\dfpinc.dat
2014-06-21 13:01 - 2014-02-02 16:48 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-21 13:01 - 2014-02-02 15:33 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-21 13:01 - 2014-01-31 11:55 - 03596800 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-06-21 13:01 - 2014-01-31 11:35 - 03085824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-06-21 13:01 - 2014-01-31 11:15 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2014-06-21 13:01 - 2014-01-31 11:10 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2014-06-21 13:01 - 2014-01-31 10:18 - 01185280 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-06-21 13:01 - 2014-01-29 10:52 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2014-06-21 13:01 - 2014-01-29 09:44 - 01369736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-06-21 13:01 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rascustom.dll
2014-06-21 13:01 - 2014-01-29 02:17 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Vpn.dll
2014-06-21 13:01 - 2014-01-27 21:48 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2014-06-21 13:01 - 2014-01-27 19:04 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-21 13:01 - 2014-01-27 17:38 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-21 13:01 - 2014-01-17 19:24 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\ninput.dll
2014-06-21 13:01 - 2014-01-17 19:04 - 00292864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ninput.dll
2014-06-21 13:01 - 2014-01-08 03:30 - 00745328 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-06-21 13:01 - 2014-01-08 02:33 - 00552632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-06-21 13:01 - 2013-12-10 09:35 - 00530944 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll
2014-06-21 13:01 - 2013-12-04 17:54 - 00660480 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-06-21 13:01 - 2013-12-04 17:16 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2014-06-21 13:01 - 2013-12-04 15:53 - 00473600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2014-06-21 13:01 - 2013-11-11 01:41 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2014-06-21 13:00 - 2014-02-22 18:58 - 00036200 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2014-06-21 13:00 - 2014-02-22 18:15 - 00071888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2014-06-21 13:00 - 2014-02-22 17:59 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\SysResetErr.exe
2014-06-21 13:00 - 2014-02-22 17:55 - 00162176 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2014-06-21 13:00 - 2014-02-22 17:55 - 00131168 _____ (Microsoft Corporation) C:\Windows\system32\easinvoker.exe
2014-06-21 13:00 - 2014-02-22 17:50 - 00101216 _____ (Microsoft Corporation) C:\Windows\system32\RestoreOptIn.exe
2014-06-21 13:00 - 2014-02-22 17:50 - 00054816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-21 13:00 - 2014-02-22 17:50 - 00032544 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountBroker.exe
2014-06-21 13:00 - 2014-02-22 17:49 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2014-06-21 13:00 - 2014-02-22 17:49 - 00189784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2014-06-21 13:00 - 2014-02-22 17:49 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
2014-06-21 13:00 - 2014-02-22 17:43 - 00094560 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll
2014-06-21 13:00 - 2014-02-22 17:41 - 00028416 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-21 13:00 - 2014-02-22 16:52 - 00251504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powrprof.dll
2014-06-21 13:00 - 2014-02-22 16:42 - 00137344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2014-06-21 13:00 - 2014-02-22 16:41 - 00033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2014-06-21 13:00 - 2014-02-22 16:18 - 00089848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RestoreOptIn.exe
2014-06-21 13:00 - 2014-02-22 16:18 - 00029912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserAccountBroker.exe
2014-06-21 13:00 - 2014-02-22 16:08 - 00079496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll
2014-06-21 13:00 - 2014-02-22 14:20 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2014-06-21 13:00 - 2014-02-22 14:17 - 00902144 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2014-06-21 13:00 - 2014-02-22 14:17 - 00890880 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2014-06-21 13:00 - 2014-02-22 14:17 - 00874496 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2014-06-21 13:00 - 2014-02-22 14:17 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2014-06-21 13:00 - 2014-02-22 14:14 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2014-06-21 13:00 - 2014-02-22 14:08 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2014-06-21 13:00 - 2014-02-22 14:07 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-06-21 13:00 - 2014-02-22 14:06 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-06-21 13:00 - 2014-02-22 14:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\offreg.dll
2014-06-21 13:00 - 2014-02-22 14:03 - 00349696 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2014-06-21 13:00 - 2014-02-22 14:03 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2014-06-21 13:00 - 2014-02-22 14:01 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\spcompat.dll
2014-06-21 13:00 - 2014-02-22 14:00 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-06-21 13:00 - 2014-02-22 14:00 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2014-06-21 13:00 - 2014-02-22 13:59 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgrade.exe
2014-06-21 13:00 - 2014-02-22 13:57 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-06-21 13:00 - 2014-02-22 13:50 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2014-06-21 13:00 - 2014-02-22 13:47 - 00589312 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2014-06-21 13:00 - 2014-02-22 13:47 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2014-06-21 13:00 - 2014-02-22 13:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-06-21 13:00 - 2014-02-22 13:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2014-06-21 13:00 - 2014-02-22 13:45 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\fhevents.dll
2014-06-21 13:00 - 2014-02-22 13:42 - 00038680 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2014-06-21 13:00 - 2014-02-22 13:37 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2014-06-21 13:00 - 2014-02-22 13:32 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2014-06-21 13:00 - 2014-02-22 13:29 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2014-06-21 13:00 - 2014-02-22 13:27 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\dot3mm.dll
2014-06-21 13:00 - 2014-02-22 13:25 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-06-21 13:00 - 2014-02-22 13:25 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2014-06-21 13:00 - 2014-02-22 13:25 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2014-06-21 13:00 - 2014-02-22 13:24 - 00800256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2014-06-21 13:00 - 2014-02-22 13:24 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2014-06-21 13:00 - 2014-02-22 13:24 - 00780288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2014-06-21 13:00 - 2014-02-22 13:24 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SSShim.dll
2014-06-21 13:00 - 2014-02-22 13:24 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-session-winsta-l1-1-0.dll
2014-06-21 13:00 - 2014-02-22 13:22 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\easwrt.dll
2014-06-21 13:00 - 2014-02-22 13:22 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-06-21 13:00 - 2014-02-22 13:17 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\DAMM.dll
2014-06-21 13:00 - 2014-02-22 13:16 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2014-06-21 13:00 - 2014-02-22 13:16 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-06-21 13:00 - 2014-02-22 13:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-06-21 13:00 - 2014-02-22 13:14 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\cleanmgr.exe
2014-06-21 13:00 - 2014-02-22 13:13 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\offreg.dll
2014-06-21 13:00 - 2014-02-22 13:11 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll
2014-06-21 13:00 - 2014-02-22 13:09 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-06-21 13:00 - 2014-02-22 13:09 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2014-06-21 13:00 - 2014-02-22 13:08 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2014-06-21 13:00 - 2014-02-22 13:07 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-06-21 13:00 - 2014-02-22 13:05 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\pnpclean.dll
2014-06-21 13:00 - 2014-02-22 13:05 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentHost.dll
2014-06-21 13:00 - 2014-02-22 13:04 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2014-06-21 13:00 - 2014-02-22 13:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-21 13:00 - 2014-02-22 13:02 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContent.dll
2014-06-21 13:00 - 2014-02-22 13:02 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2014-06-21 13:00 - 2014-02-22 13:01 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-06-21 13:00 - 2014-02-22 12:59 - 01283584 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2014-06-21 13:00 - 2014-02-22 12:59 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2014-06-21 13:00 - 2014-02-22 12:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-21 13:00 - 2014-02-22 12:58 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2014-06-21 13:00 - 2014-02-22 12:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\DAConn.dll
2014-06-21 13:00 - 2014-02-22 12:57 - 00165376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2014-06-21 13:00 - 2014-02-22 12:57 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-06-21 13:00 - 2014-02-22 12:56 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-21 13:00 - 2014-02-22 12:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2014-06-21 13:00 - 2014-02-22 12:55 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2014-06-21 13:00 - 2014-02-22 12:55 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\SrTasks.exe
2014-06-21 13:00 - 2014-02-22 12:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PkgMgr.exe
2014-06-21 13:00 - 2014-02-22 12:52 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2014-06-21 13:00 - 2014-02-22 12:51 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2014-06-21 13:00 - 2014-02-22 12:50 - 00136192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskpart.exe
2014-06-21 13:00 - 2014-02-22 12:47 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmdskmgr.dll

AsmW 01.07.2014 13:51
FRST Teil 2:
Code:
2014-06-21 13:00 - 2014-02-22 12:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2014-06-21 13:00 - 2014-02-22 12:47 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2014-06-21 13:00 - 2014-02-22 12:47 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-21 13:00 - 2014-02-22 12:46 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2014-06-21 13:00 - 2014-02-22 12:41 - 02566656 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2014-06-21 13:00 - 2014-02-22 12:40 - 00304640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe
2014-06-21 13:00 - 2014-02-22 12:40 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2014-06-21 13:00 - 2014-02-22 12:38 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\easwrt.dll
2014-06-21 13:00 - 2014-02-22 12:36 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-06-21 13:00 - 2014-02-22 12:35 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2014-06-21 13:00 - 2014-02-22 12:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2014-06-21 13:00 - 2014-02-22 12:33 - 00402944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\zipfldr.dll
2014-06-21 13:00 - 2014-02-22 12:32 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-06-21 13:00 - 2014-02-22 12:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cleanmgr.exe
2014-06-21 13:00 - 2014-02-22 12:29 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-21 13:00 - 2014-02-22 12:28 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-21 13:00 - 2014-02-22 12:25 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2014-06-21 13:00 - 2014-02-22 12:21 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfrgui.exe
2014-06-21 13:00 - 2014-02-22 12:21 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-21 13:00 - 2014-02-22 12:21 - 00045568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\acppage.dll
2014-06-21 13:00 - 2014-02-22 12:20 - 01152512 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2014-06-21 13:00 - 2014-02-22 12:18 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-06-21 13:00 - 2014-02-22 12:17 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-21 13:00 - 2014-02-22 12:17 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2014-06-21 13:00 - 2014-02-22 12:16 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sud.dll
2014-06-21 13:00 - 2014-02-22 12:16 - 00308224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srchadmin.dll
2014-06-21 13:00 - 2014-02-22 12:16 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2014-06-21 13:00 - 2014-02-22 12:13 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2014-06-21 13:00 - 2014-02-22 12:13 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\newdev.dll
2014-06-21 13:00 - 2014-02-22 12:12 - 00352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwizeng.dll
2014-06-21 13:00 - 2014-02-22 12:09 - 00097280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\migisol.dll
2014-06-21 13:00 - 2014-02-22 12:09 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-21 13:00 - 2014-02-22 12:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netid.dll
2014-06-21 13:00 - 2014-02-22 11:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-21 13:00 - 2014-02-22 11:56 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2014-06-21 13:00 - 2014-02-22 11:54 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-21 13:00 - 2014-02-22 11:54 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\deviceassociation.dll
2014-06-21 13:00 - 2014-02-22 11:53 - 00545280 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-06-21 13:00 - 2014-02-22 11:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2014-06-21 13:00 - 2014-02-22 11:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll
2014-06-21 13:00 - 2014-02-22 11:49 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll
2014-06-21 13:00 - 2014-02-22 11:48 - 01136128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl
2014-06-21 13:00 - 2014-02-22 11:48 - 00355328 _____ (Microsoft Corporation) C:\Windows\system32\wincorlib.dll
2014-06-21 13:00 - 2014-02-22 11:46 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\winsku.dll
2014-06-21 13:00 - 2014-02-22 11:45 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2014-06-21 13:00 - 2014-02-22 11:45 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-06-21 13:00 - 2014-02-22 11:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2014-06-21 13:00 - 2014-02-22 11:43 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-06-21 13:00 - 2014-02-22 11:41 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2014-06-21 13:00 - 2014-02-22 11:40 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-06-21 13:00 - 2014-02-22 11:40 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-21 13:00 - 2014-02-22 11:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dasHost.exe
2014-06-21 13:00 - 2014-02-22 11:37 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-06-21 13:00 - 2014-02-22 11:36 - 01392640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2014-06-21 13:00 - 2014-02-22 11:36 - 00835584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasgcw.dll
2014-06-21 13:00 - 2014-02-22 11:36 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WLanConn.dll
2014-06-21 13:00 - 2014-02-22 11:30 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2014-06-21 13:00 - 2014-02-22 11:29 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-21 13:00 - 2014-02-22 11:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2014-06-21 13:00 - 2014-02-22 11:28 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceassociation.dll
2014-06-21 13:00 - 2014-02-22 11:27 - 00484864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-06-21 13:00 - 2014-02-22 11:26 - 00299008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2014-06-21 13:00 - 2014-02-22 11:26 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.exe
2014-06-21 13:00 - 2014-02-22 11:25 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winbrand.dll
2014-06-21 13:00 - 2014-02-22 11:23 - 00256000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2014-06-21 13:00 - 2014-02-22 11:23 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll
2014-06-21 13:00 - 2014-02-22 11:22 - 00336384 _____ (Microsoft Corporation) C:\Windows\system32\MbaeApiPublic.dll
2014-06-21 13:00 - 2014-02-22 11:22 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsku.dll
2014-06-21 13:00 - 2014-02-22 11:19 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-06-21 13:00 - 2014-02-22 11:19 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Sockets.PushEnabledApplication.dll
2014-06-21 13:00 - 2014-02-22 11:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sxshared.dll
2014-06-21 13:00 - 2014-02-22 11:09 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2014-06-21 13:00 - 2014-02-22 11:07 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscinterop.dll
2014-06-21 13:00 - 2014-02-22 11:06 - 00251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MbaeApiPublic.dll
2014-06-21 13:00 - 2014-02-22 11:04 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\slpts.dll
2014-06-21 13:00 - 2014-02-22 11:02 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2014-06-21 13:00 - 2014-02-22 11:02 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2014-06-21 13:00 - 2014-02-22 10:59 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-21 13:00 - 2014-02-22 10:58 - 00544768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2014-06-21 13:00 - 2014-02-22 10:57 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-06-21 13:00 - 2014-02-22 10:55 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\ConfigureExpandedStorage.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\energytask.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slpts.dll
2014-06-21 13:00 - 2014-02-22 10:55 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2014-06-21 13:00 - 2014-02-22 10:54 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToManager.dll
2014-06-21 13:00 - 2014-02-22 10:54 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\AepRoam.dll
2014-06-21 13:00 - 2014-02-22 10:51 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2014-06-21 13:00 - 2014-02-22 10:49 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettings.Handlers.dll
2014-06-21 13:00 - 2014-02-22 10:49 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-06-21 13:00 - 2014-02-22 10:49 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-06-21 13:00 - 2014-02-22 10:48 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ConfigureExpandedStorage.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2014-06-21 13:00 - 2014-02-22 10:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2014-06-21 13:00 - 2014-02-22 10:47 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll
2014-06-21 13:00 - 2014-02-22 10:46 - 03312128 _____ (Microsoft Corporation) C:\Windows\system32\bootux.dll
2014-06-21 13:00 - 2014-02-22 10:45 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\PlayToDevice.dll
2014-06-21 13:00 - 2014-02-22 10:45 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-06-21 13:00 - 2014-02-22 10:44 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2014-06-21 13:00 - 2014-02-22 10:44 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2014-06-21 13:00 - 2014-02-22 10:43 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BioCredProv.dll
2014-06-21 13:00 - 2014-02-22 10:43 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-06-21 13:00 - 2014-02-22 10:43 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Renewal.dll
2014-06-21 13:00 - 2014-02-22 10:40 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PlayToDevice.dll
2014-06-21 13:00 - 2014-02-22 10:39 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2014-06-21 13:00 - 2014-02-22 10:39 - 00321536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\provsvc.dll
2014-06-21 13:00 - 2014-02-22 10:38 - 00470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-06-21 13:00 - 2014-02-22 10:35 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\SettingMonitor.dll
2014-06-21 13:00 - 2014-02-22 10:33 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingMonitor.dll
2014-06-21 13:00 - 2014-02-22 10:31 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2014-06-21 13:00 - 2014-02-22 10:30 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\wpnprv.dll
2014-06-21 13:00 - 2014-02-22 10:24 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll
2014-06-21 13:00 - 2014-02-22 10:20 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\AuthBroker.dll
2014-06-21 13:00 - 2014-02-22 10:19 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2014-06-21 13:00 - 2014-02-22 10:17 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\CloudStorageWizard.exe
2014-06-21 13:00 - 2014-02-22 10:17 - 00109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudStorageWizard.exe
2014-06-21 13:00 - 2014-02-22 09:54 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVolSSO.dll
2014-06-21 13:00 - 2014-02-01 08:00 - 00002255 _____ () C:\Windows\SysWOW64\WimBootCompress.ini
2014-06-21 13:00 - 2014-02-01 08:00 - 00002255 _____ () C:\Windows\system32\WimBootCompress.ini
2014-06-21 13:00 - 2014-01-31 14:09 - 00081920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-06-21 13:00 - 2014-01-31 14:08 - 01200640 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-21 13:00 - 2014-01-31 13:59 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-21 13:00 - 2014-01-31 13:11 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-21 13:00 - 2014-01-31 11:19 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dafBth.dll
2014-06-21 13:00 - 2014-01-31 11:08 - 00507392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2014-06-21 13:00 - 2014-01-31 11:04 - 00409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2014-06-21 13:00 - 2014-01-31 10:24 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-06-21 13:00 - 2014-01-29 10:40 - 00994136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2014-06-21 13:00 - 2014-01-29 02:18 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2014-06-21 13:00 - 2014-01-27 21:53 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-06-21 13:00 - 2014-01-22 08:21 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\deviceaccess.dll
2014-06-21 13:00 - 2014-01-22 07:50 - 00147968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\deviceaccess.dll
2014-06-21 13:00 - 2013-12-04 20:41 - 00226304 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BthLEEnum.sys
2014-06-21 13:00 - 2013-12-04 16:19 - 00439808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-06-21 13:00 - 2013-11-27 11:10 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2014-06-21 13:00 - 2013-11-27 10:56 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netiohlp.dll
2014-06-21 13:00 - 2013-11-08 06:04 - 00488960 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-21 13:00 - 2013-11-08 05:47 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-21 12:59 - 2014-02-22 14:17 - 00008192 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 14:17 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-session-winsta-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-ntuser-private-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 14:17 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\ext-ms-win-kernel32-package-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 14:08 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2014-06-21 12:59 - 2014-02-22 14:08 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2014-06-21 12:59 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2014-06-21 12:59 - 2014-02-22 14:08 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2014-06-21 12:59 - 2014-02-22 14:00 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\lpksetupproxyserv.dll
2014-06-21 12:59 - 2014-02-22 13:48 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2014-06-21 12:59 - 2014-02-22 13:39 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\fhsvcctl.dll
2014-06-21 12:59 - 2014-02-22 13:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\f3ahvoas.dll
2014-06-21 12:59 - 2014-02-22 13:25 - 00008192 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 13:25 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-ntuser-private-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-networking-wcmapi-l1-1-0.dll
2014-06-21 12:59 - 2014-02-22 13:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\ext-ms-win-kernel32-package-l1-1-1.dll
2014-06-21 12:59 - 2014-02-22 13:17 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\BulkOperationHost.exe
2014-06-21 12:59 - 2014-02-22 13:16 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-21 12:59 - 2014-02-22 13:08 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-06-21 12:59 - 2014-02-22 13:07 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2014-06-21 12:59 - 2014-02-22 13:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-06-21 12:59 - 2014-02-22 12:59 - 00163328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ocsetapi.dll
2014-06-21 12:59 - 2014-02-22 12:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-21 12:59 - 2014-02-22 12:35 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2014-06-21 12:59 - 2014-02-22 12:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-21 12:59 - 2014-02-22 12:03 - 02544128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2014-06-21 12:59 - 2014-02-22 11:59 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2014-06-21 12:59 - 2014-02-22 11:54 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2014-06-21 12:59 - 2014-02-22 11:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-06-21 12:59 - 2014-02-22 11:51 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\fveskybackup.dll
2014-06-21 12:59 - 2014-02-22 11:27 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2014-06-21 12:59 - 2014-02-22 11:19 - 00146944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\korwbrkr.dll
2014-06-21 12:59 - 2014-02-22 10:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-06-21 12:59 - 2014-02-22 10:55 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2014-06-21 12:59 - 2014-02-22 10:48 - 00034304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dataclen.dll
2014-06-21 12:59 - 2014-02-22 10:39 - 00193024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl
2014-06-21 12:59 - 2014-02-22 10:22 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncPolicy.dll
2014-06-21 12:59 - 2014-02-22 10:20 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncPolicy.dll
2014-06-21 12:59 - 2014-02-22 06:43 - 00002440 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-06-21 12:59 - 2014-02-22 06:37 - 00000369 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-06-21 12:59 - 2014-02-08 03:08 - 00100197 _____ () C:\Windows\SysWOW64\RacRules.xml
2014-06-21 12:59 - 2014-02-08 03:08 - 00100197 _____ () C:\Windows\system32\RacRules.xml
2014-06-21 12:59 - 2014-02-01 08:00 - 00011109 _____ () C:\Windows\SysWOW64\connectedsearch-results.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00011109 _____ () C:\Windows\system32\connectedsearch-results.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007762 _____ () C:\Windows\SysWOW64\connectedsearch-suggestions.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007762 _____ () C:\Windows\system32\connectedsearch-suggestions.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007130 _____ () C:\Windows\SysWOW64\connectedsearch-zeroinput.searchconnector-ms
2014-06-21 12:59 - 2014-02-01 08:00 - 00007130 _____ () C:\Windows\system32\connectedsearch-zeroinput.searchconnector-ms
2014-06-21 12:59 - 2014-01-27 19:54 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-21 12:59 - 2014-01-27 13:45 - 00050053 _____ () C:\Windows\system32\srms.dat
2014-06-21 12:59 - 2013-11-27 11:47 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2014-06-21 12:59 - 2013-11-27 11:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\finger.exe
2014-06-21 00:59 - 2014-06-21 01:03 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-21 00:56 - 2013-10-02 03:31 - 02214216 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll
2014-06-21 00:51 - 2014-06-30 11:05 - 00000000 ____D () C:\Users\baustelle\Desktop\bau
2014-06-20 22:25 - 2014-06-20 22:25 - 00000000 ____D () C:\Users\baustelle\Desktop\Tor Browser
2014-06-20 22:02 - 2014-06-20 22:02 - 00166428 _____ () C:\Users\baustelle\Downloads\BauLV-Demo.zip
2014-06-20 21:28 - 2014-06-30 18:47 - 00000000 ____D () C:\Users\baustelle\Desktop\FOTO
2014-06-20 21:09 - 2014-06-20 21:10 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-20 21:09 - 2014-06-01 17:17 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-20 16:38 - 2014-06-30 10:47 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Deployment
2014-06-20 16:38 - 2014-06-20 16:38 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Apps\2.0
2014-06-20 16:35 - 2014-06-20 16:35 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Adobe
2014-06-18 16:43 - 2014-06-18 16:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-18 16:34 - 2014-06-21 00:55 - 00000000 ____D () C:\Program Files (x86)\Convar
2014-06-18 16:01 - 2014-07-01 14:25 - 00000000 ____D () C:\AdwCleaner
2014-06-18 15:16 - 2014-01-04 17:54 - 00138240 _____ () C:\Windows\system32\OEMLicense.dll
2014-06-18 15:16 - 2014-01-04 17:08 - 00103936 _____ () C:\Windows\SysWOW64\OEMLicense.dll
2014-06-18 15:16 - 2014-01-03 01:54 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-18 15:16 - 2014-01-03 01:48 - 00336896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-18 15:16 - 2014-01-01 01:57 - 01214976 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-06-18 15:16 - 2013-12-31 01:34 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sti.dll
2014-06-18 15:16 - 2013-12-31 01:32 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2014-06-18 15:16 - 2013-12-27 10:57 - 00842752 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.dll
2014-06-18 15:16 - 2013-12-27 09:03 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2014-06-18 15:16 - 2013-12-21 09:21 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2014-06-18 15:16 - 2013-12-17 09:21 - 00408576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2014-06-18 15:15 - 2013-11-27 17:34 - 03210528 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-06-18 15:14 - 2013-11-27 17:27 - 00809872 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-06-18 15:14 - 2013-11-27 16:00 - 00663680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-06-18 15:14 - 2013-11-27 15:47 - 02804528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-06-18 15:14 - 2013-11-27 14:02 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2014-06-18 15:14 - 2013-11-27 12:24 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-06-18 15:14 - 2013-11-27 11:46 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-06-18 15:14 - 2013-11-27 11:10 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.dll
2014-06-18 15:14 - 2013-11-27 10:56 - 00218112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.dll
2014-06-18 15:14 - 2013-11-25 01:30 - 00513536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-06-18 15:14 - 2013-11-25 01:28 - 00589824 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-06-18 15:14 - 2013-11-23 09:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\bi.dll
2014-06-18 15:14 - 2013-11-23 09:13 - 00019456 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BtaMPM.sys
2014-06-18 15:14 - 2013-11-23 06:50 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-06-18 15:14 - 2013-11-21 08:58 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\deviceregistration.dll
2014-06-18 15:14 - 2013-11-15 16:59 - 00470016 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2014-06-18 15:14 - 2013-11-15 16:25 - 00433664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
2014-06-18 15:14 - 2013-11-15 16:08 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2014-06-18 15:11 - 2013-11-11 04:48 - 00039768 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-06-18 15:11 - 2013-11-01 13:39 - 00086872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-06-18 15:11 - 2013-10-26 03:54 - 00146776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SerCx2.sys
2014-06-18 15:06 - 2014-06-18 15:06 - 00000989 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-06-18 15:06 - 2014-06-18 15:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:37 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-06-18 15:05 - 2014-06-18 15:06 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00001007 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\Users\baustelle\Documents\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-18 15:05 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-06-18 15:05 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-06-18 15:05 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-06-18 15:05 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-06-18 15:05 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2014-06-18 15:05 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-06-18 15:05 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2014-06-18 15:04 - 2014-06-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Windows\PCHEALTH
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-06-18 15:00 - 2014-06-25 11:28 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Microsoft Help
2014-06-18 15:00 - 2014-06-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-18 15:00 - 2014-06-18 15:00 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-18 14:59 - 2014-06-18 14:59 - 00000000 __RHD () C:\MSOCache
2014-06-18 14:57 - 2014-02-22 14:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-06-18 14:57 - 2014-02-22 13:24 - 00124416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-06-18 14:57 - 2014-01-29 08:41 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-18 14:57 - 2014-01-29 02:36 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-18 14:57 - 2014-01-27 21:07 - 04175360 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2014-06-18 14:57 - 2014-01-27 20:23 - 02873344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2014-06-18 14:57 - 2014-01-27 19:18 - 01486848 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2014-06-18 14:57 - 2014-01-27 19:00 - 01238016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2014-06-18 14:57 - 2014-01-18 01:04 - 00764864 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-18 14:57 - 2014-01-17 23:54 - 00669352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-18 14:57 - 2014-01-07 07:00 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-06-18 14:57 - 2014-01-07 06:30 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-06-18 14:57 - 2013-12-21 16:51 - 06353960 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2014-06-18 14:57 - 2013-12-21 10:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2014-06-18 14:57 - 2013-12-09 02:27 - 02152448 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-18 14:57 - 2013-12-09 02:19 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-06-18 14:57 - 2013-12-09 01:55 - 00444928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-06-18 14:57 - 2013-12-09 01:54 - 01317376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-18 14:57 - 2013-11-23 06:34 - 00393216 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-06-18 14:57 - 2013-11-23 06:13 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-06-18 14:57 - 2013-11-21 08:42 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-06-18 14:57 - 2013-11-21 07:44 - 03936256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-06-18 14:57 - 2013-10-19 10:53 - 00075360 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-06-18 14:57 - 2013-10-19 09:14 - 00070680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-06-18 14:56 - 2014-01-07 09:03 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2014-06-18 14:56 - 2014-01-07 07:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pcaui.exe
2014-06-18 14:56 - 2013-11-27 13:41 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2014-06-18 14:56 - 2013-10-31 02:29 - 00236888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-06-18 14:56 - 2013-10-31 02:29 - 00124760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-06-18 14:56 - 2013-10-31 02:28 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-06-18 14:55 - 2014-06-21 19:42 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-18 14:55 - 2014-06-18 14:55 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-18 14:52 - 2014-06-18 14:52 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer Aspire R7 Tutorial
2014-06-18 14:50 - 2014-06-18 14:49 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Mozilla
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-06-18 14:47 - 2014-06-18 14:47 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 14:45 - 2014-06-18 14:45 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Avira
2014-06-18 14:43 - 2014-06-24 10:55 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-18 14:43 - 2014-06-18 14:43 - 00002046 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-18 14:43 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-18 14:43 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-18 14:39 - 2014-06-18 14:39 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WildTangent
2014-06-18 14:16 - 2014-07-01 10:39 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3069840582-281615928-2227681027-1002
2014-06-18 14:15 - 2014-06-18 14:15 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Macromedia
2014-06-18 12:47 - 2014-06-24 21:13 - 00000000 ____D () C:\Users\baustelle\AppData\Local\clear.fi
2014-06-18 12:47 - 2014-06-18 12:47 - 00000000 ____D () C:\Users\baustelle\PicStream
2014-06-18 12:46 - 2014-06-18 12:46 - 00001276 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Atheros
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Program Files\Accessory Store
2014-06-18 12:45 - 2014-07-01 10:21 - 00000000 ____D () C:\Users\baustelle
2014-06-18 12:45 - 2014-06-25 13:49 - 00000000 ____D () C:\Users\baustelle\AppData\Local\VirtualStore
2014-06-18 12:45 - 2014-06-21 01:03 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Packages
2014-06-18 12:45 - 2014-06-20 16:35 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Adobe
2014-06-18 12:45 - 2014-06-18 12:45 - 00001454 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-18 12:45 - 2014-06-18 12:45 - 00000020 ___SH () C:\Users\baustelle\ntuser.ini
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Vorlagen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Startmenü
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Netzwerkumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Lokale Einstellungen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Eigene Dateien
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Druckumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Musik
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Bilder
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Verlauf
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Anwendungsdaten
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Anwendungsdaten
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-18 12:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Dokumente und Einstellungen

==================== One Month Modified Files and Folders =======

2014-07-01 14:44 - 2014-07-01 10:24 - 00010658 _____ () C:\Users\baustelle\Desktop\FRST.txt
2014-07-01 14:43 - 2014-07-01 10:24 - 00000000 ____D () C:\FRST
2014-07-01 14:37 - 2014-06-29 21:02 - 01411156 _____ () C:\Windows\WindowsUpdate.log
2014-07-01 14:34 - 2014-07-01 14:34 - 00000688 _____ () C:\Users\baustelle\Desktop\JRT.txt
2014-07-01 14:29 - 2014-07-01 14:29 - 00000000 ____D () C:\Windows\ERUNT
2014-07-01 14:27 - 2014-07-01 14:27 - 00001754 _____ () C:\Users\baustelle\Desktop\AdwCleaner[S7].txt
2014-07-01 14:26 - 2014-07-01 14:26 - 00001350 _____ () C:\Windows\PFRO.log
2014-07-01 14:26 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-01 14:25 - 2014-06-18 16:01 - 00000000 ____D () C:\AdwCleaner
2014-07-01 14:23 - 2014-07-01 14:23 - 01016261 _____ (Thisisu) C:\Users\baustelle\Desktop\JRT.exe
2014-07-01 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-01 11:17 - 2014-06-26 12:40 - 00142848 ___SH () C:\Users\baustelle\Desktop\Thumbs.db
2014-07-01 10:50 - 2014-07-01 10:50 - 00290332 _____ () C:\Users\baustelle\Desktop\OTL.Txt
2014-07-01 10:50 - 2014-07-01 10:50 - 00071818 _____ () C:\Users\baustelle\Desktop\Extras.Txt
2014-07-01 10:41 - 2014-07-01 10:41 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\PDF Architect 2
2014-07-01 10:40 - 2014-07-01 10:40 - 00003532 _____ () C:\Users\baustelle\Desktop\Gmer.txt
2014-07-01 10:39 - 2014-06-18 14:16 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3069840582-281615928-2227681027-1002
2014-07-01 10:25 - 2014-07-01 10:25 - 00025560 _____ () C:\Users\baustelle\Desktop\Addition_a (1).txt
2014-07-01 10:25 - 2014-07-01 10:24 - 00153288 _____ () C:\Users\baustelle\Desktop\Addition_a (2).txt
2014-07-01 10:22 - 2014-07-01 10:21 - 00000480 _____ () C:\Users\baustelle\Desktop\defogger_disable.log
2014-07-01 10:21 - 2014-07-01 10:21 - 00000000 _____ () C:\Users\baustelle\defogger_reenable
2014-07-01 10:21 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle
2014-07-01 10:15 - 2014-02-28 02:56 - 00002896 _____ () C:\Windows\System32\Tasks\Quick Access
2014-07-01 10:14 - 2014-02-28 03:03 - 00003336 _____ () C:\Windows\System32\Tasks\AcerCloud
2014-07-01 10:14 - 2014-02-28 02:56 - 00002904 _____ () C:\Windows\System32\Tasks\Launch Manager
2014-07-01 10:11 - 2014-06-25 13:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-07-01 10:03 - 2014-07-01 10:03 - 00380416 _____ () C:\Users\baustelle\Desktop\Gmer-19357.exe
2014-07-01 10:02 - 2014-07-01 10:02 - 02083328 _____ (Farbar) C:\Users\baustelle\Desktop\FRST64.exe
2014-07-01 10:00 - 2014-07-01 10:00 - 00050477 _____ () C:\Users\baustelle\Desktop\Defogger.exe
2014-07-01 09:55 - 2014-07-01 09:55 - 01346519 _____ () C:\Users\baustelle\Desktop\adwcleaner_3.214.exe
2014-07-01 09:37 - 2014-07-01 09:37 - 00602112 _____ (OldTimer Tools) C:\Users\baustelle\Desktop\OTL.exe
2014-07-01 09:34 - 2014-02-28 11:03 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-01 09:34 - 2014-02-28 11:03 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-01 09:34 - 2014-01-14 11:58 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-30 18:47 - 2014-06-20 21:28 - 00000000 ____D () C:\Users\baustelle\Desktop\FOTO
2014-06-30 14:53 - 2014-06-24 12:24 - 00000000 ____D () C:\Users\baustelle\Desktop\Eigene_Dataien
2014-06-30 11:05 - 2014-06-21 00:51 - 00000000 ____D () C:\Users\baustelle\Desktop\bau
2014-06-30 10:47 - 2014-06-20 16:38 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Deployment
2014-06-30 09:01 - 2014-06-27 18:45 - 00000000 ____D () C:\Users\baustelle\Desktop\Rassenmäher
2014-06-27 14:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-26 21:22 - 2014-06-26 21:22 - 01128916 _____ (www.hellopdf.com ) C:\Users\baustelle\Downloads\pdf2wordsetup11.exe
2014-06-25 14:56 - 2014-06-25 14:56 - 00370400 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-25 14:24 - 2014-02-28 02:59 - 00000000 ____D () C:\ProgramData\install_clap
2014-06-25 14:24 - 2014-01-14 11:50 - 00000000 ____D () C:\Windows\Panther
2014-06-25 14:19 - 2014-06-25 14:19 - 00003396 _____ () C:\Windows\System32\Tasks\{636AC246-62C1-49FB-AB77-CEB3169D8ED9}
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\speedtest199
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Users\baustelle\AppData\Local\freegames197
2014-06-25 14:05 - 2014-06-25 14:05 - 00000000 ____D () C:\Program Files (x86)\Free Games
2014-06-25 13:49 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle\AppData\Local\VirtualStore
2014-06-25 13:43 - 2014-06-25 13:43 - 00000000 ___HD () C:\ProgramData\CanonIJETV
2014-06-25 13:42 - 2014-06-25 13:42 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-06-25 11:28 - 2014-06-18 15:00 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Microsoft Help
2014-06-25 10:31 - 2014-06-25 10:31 - 00000898 _____ () C:\Users\baustelle\Documents\Musik - Verknüpfung.lnk
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieUserList
2014-06-25 09:05 - 2014-06-25 09:05 - 00000000 __SHD () C:\Users\baustelle\AppData\Local\EmieSiteList
2014-06-25 08:51 - 2014-06-24 21:04 - 00000000 ____D () C:\Users\baustelle\AppData\Local\CrashDumps
2014-06-24 21:13 - 2014-06-18 12:47 - 00000000 ____D () C:\Users\baustelle\AppData\Local\clear.fi
2014-06-24 18:04 - 2014-06-24 18:04 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-06-24 18:04 - 2014-06-24 12:39 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-24 18:04 - 2014-01-14 12:19 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-24 12:43 - 2014-06-24 12:40 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\TuneUp Software
2014-06-24 12:42 - 2014-06-24 12:42 - 00000000 ____D () C:\Users\baustelle\AppData\Local\TuneUp Software
2014-06-24 12:38 - 2014-06-24 12:37 - 27883432 _____ (TuneUp Software) C:\Users\baustelle\Downloads\TuneUpUtilities2014_de96-DE.exe
2014-06-24 10:55 - 2014-06-18 14:43 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\Documents\gaeb AVA Projektablage
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Nix & Keitel
2014-06-23 10:01 - 2014-06-23 10:01 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Nix & Keitel
2014-06-23 09:59 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-06-23 09:49 - 2014-06-23 09:49 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WinRAR
2014-06-23 09:45 - 2014-06-23 09:45 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-06-23 09:43 - 2014-06-23 09:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-06-23 09:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\Recovery
2014-06-23 08:48 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\Public\OEM
2014-06-22 10:41 - 2014-06-22 10:41 - 00000000 ____D () C:\Users\baustelle\Documents\clear.fi
2014-06-22 10:41 - 2014-02-28 02:56 - 00000000 ____D () C:\ProgramData\OEM
2014-06-22 10:32 - 2014-06-22 10:32 - 00001076 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-06-22 10:32 - 2014-06-22 10:32 - 00000000 ____D () C:\Users\baustelle\AppData\Local\AcerCloud
2014-06-22 10:32 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer
2014-06-22 10:32 - 2014-01-14 12:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2014-06-22 10:32 - 2014-01-14 12:27 - 00000000 ____D () C:\Program Files (x86)\Acer
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Doc
2014-06-22 10:31 - 2014-06-22 10:31 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiMedia
2014-06-22 10:31 - 2014-06-22 10:30 - 00000000 ____D () C:\ProgramData\clear.fi
2014-06-22 10:31 - 2014-02-28 03:04 - 00001178 _____ () C:\Users\Public\Desktop\Acer Docs.lnk
2014-06-22 10:31 - 2014-01-14 11:41 - 00000000 ___HD () C:\OEM
2014-06-22 10:30 - 2014-06-22 10:30 - 00001027 _____ () C:\Users\Public\Desktop\Acer Photo.lnk
2014-06-22 10:30 - 2014-06-22 10:30 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\acer
2014-06-22 10:29 - 2014-06-22 10:29 - 00000000 ____D () C:\Users\baustelle\AppData\Local\ClearfiPhoto
2014-06-21 19:47 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-21 19:42 - 2014-06-18 14:55 - 00000000 ____D () C:\ProgramData\Adobe
2014-06-21 18:30 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-21 18:30 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\th-TH
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\migwiz
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\he-IL
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\et-EE
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\en-GB
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Multimedia Platform
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices
2014-06-21 18:29 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Multimedia Platform
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\Dism
2014-06-21 18:29 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\servicing
2014-06-21 18:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2014-06-21 18:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2014-06-21 13:29 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-21 01:03 - 2014-06-21 00:59 - 00000000 ___RD () C:\Windows\BrowserChoice
2014-06-21 01:03 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Packages
2014-06-21 00:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-21 00:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-21 00:55 - 2014-06-18 16:34 - 00000000 ____D () C:\Program Files (x86)\Convar
2014-06-20 22:25 - 2014-06-20 22:25 - 00000000 ____D () C:\Users\baustelle\Desktop\Tor Browser
2014-06-20 22:02 - 2014-06-20 22:02 - 00166428 _____ () C:\Users\baustelle\Downloads\BauLV-Demo.zip
2014-06-20 21:10 - 2014-06-20 21:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-20 21:10 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates
2014-06-20 21:10 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-20 21:09 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-20 16:38 - 2014-06-20 16:38 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Apps\2.0
2014-06-20 16:35 - 2014-06-20 16:35 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Adobe
2014-06-20 16:35 - 2014-06-18 12:45 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Adobe
2014-06-20 14:52 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-06-18 21:39 - 2013-08-22 17:36 - 00262144 _____ () C:\Windows\system32\config\BCD-Template
2014-06-18 16:43 - 2014-06-18 16:43 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-06-18 16:03 - 2014-02-28 02:59 - 00000000 ____D () C:\ProgramData\Norton
2014-06-18 15:37 - 2014-06-18 15:05 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-06-18 15:06 - 2014-06-18 15:06 - 00000989 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-06-18 15:06 - 2014-06-18 15:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-06-18 15:06 - 2014-06-18 15:05 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00001007 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\Users\baustelle\Documents\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-06-18 15:05 - 2014-06-18 15:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-06-18 15:04 - 2014-06-18 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-18 15:04 - 2014-06-18 15:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Windows\PCHEALTH
2014-06-18 15:03 - 2014-06-18 15:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-06-18 15:03 - 2014-02-28 02:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-06-18 15:00 - 2014-06-18 15:00 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-06-18 15:00 - 2013-08-22 21:11 - 00000000 ____D () C:\Windows\ShellNew
2014-06-18 14:59 - 2014-06-18 14:59 - 00000000 __RHD () C:\MSOCache
2014-06-18 14:55 - 2014-06-18 14:55 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-06-18 14:55 - 2014-06-18 14:55 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-06-18 14:52 - 2014-06-18 14:52 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Acer Aspire R7 Tutorial
2014-06-18 14:49 - 2014-06-18 14:50 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Mozilla
2014-06-18 14:48 - 2014-06-18 14:48 - 00000000 ____D () C:\Users\baustelle\AppData\Local\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00002780 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-06-18 14:47 - 2014-06-18 14:47 - 00001135 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00001123 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\ProgramData\Mozilla
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 14:47 - 2014-06-18 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-18 14:45 - 2014-06-18 14:45 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00002046 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\ProgramData\Avira
2014-06-18 14:43 - 2014-06-18 14:43 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-18 14:42 - 2014-01-14 12:29 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-18 14:42 - 2014-01-14 12:29 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-18 14:42 - 2014-01-14 12:29 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-18 14:39 - 2014-06-18 14:39 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\WildTangent
2014-06-18 14:39 - 2014-01-14 12:19 - 00000000 ____D () C:\ProgramData\WildTangent
2014-06-18 14:39 - 2014-01-14 12:19 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-06-18 14:15 - 2014-06-18 14:15 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Macromedia
2014-06-18 12:47 - 2014-06-18 12:47 - 00000000 ____D () C:\Users\baustelle\PicStream
2014-06-18 12:46 - 2014-06-18 12:46 - 00001276 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Users\baustelle\AppData\Roaming\Atheros
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-06-18 12:46 - 2014-06-18 12:46 - 00000000 ____D () C:\Program Files\Accessory Store
2014-06-18 12:45 - 2014-06-18 12:45 - 00001454 _____ () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-18 12:45 - 2014-06-18 12:45 - 00000020 ___SH () C:\Users\baustelle\ntuser.ini
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Vorlagen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Startmenü
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Netzwerkumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Lokale Einstellungen
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Eigene Dateien
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Druckumgebung
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Musik
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Documents\Eigene Bilder
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Verlauf
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\AppData\Local\Anwendungsdaten
2014-06-18 12:45 - 2014-06-18 12:45 - 00000000 _SHDL () C:\Users\baustelle\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-06-18 12:40 - 2014-06-18 12:40 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-06-18 12:40 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-06-18 12:40 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2014-06-01 17:17 - 2014-06-20 21:09 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\baustelle\AppData\Local\Temp\avgnt.exe
C:\Users\baustelle\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-01-14 11:51

==================== End Of Log ============================
kommischerweise habe ich 2 Addition aber von heute morgen ca. 10:45 und nicht die Aktuelle woran kann es Liegen?

cosinus 01.07.2014 13:53
Log vom adwCleaner fehlt.

Zitat:
und nicht die Aktuelle woran kann es Liegen?
Weil du vergessen hast, an entsprechender Stelle einen Haken zu setzen.

http://saved.im/mtg0mjy4yjlu/2014-04...ryscantool.png

AsmW 01.07.2014 19:29
anbei die Addition
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-06-2014
Ran by baustelle at 2014-07-01 15:44:43
Running from C:\Users\baustelle\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.03.3000 - Acer Incorporated)
Acer Docs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 2.04.2005 - Acer)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.04.3002.6 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.04.3004.0 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.04.3006 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8101 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3126.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) Hidden
Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3316 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
NVIDIA Grafiktreiber 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.141.953 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.62 (Version: 327.62 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{46889070-D447-4936-A5D3-246DB972FA2E}) (Version: 2.0.6.16537 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.314 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.23 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.28145 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Speed Test App (HKLM-x32\...\Speed Test) (Version: 4.0.0.0 - Speed Analysis) <==== ATTENTION
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

==================== Restore Points  =========================

23-06-2014 07:48:14 gaebAVA wird installiert
24-06-2014 10:41:11 TuneUp Utilities 2014 wird installiert
01-07-2014 08:15:11 TuneUp Utilities 2014 wird entfernt

==================== Hosts content: ==========================

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {132E5B32-EBFB-4B37-BF3E-764BE5A3FB51} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2013-08-02] (Acer Incorporate)
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {24667B1E-AA6C-449A-9AE8-F40D6592067B} - \PC Performer_UPDATES No Task File <==== ATTENTION
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3D2A0890-A0BE-481D-BE14-2BC65584A4D5} - \f69627e0-f2ac-4038-9182-e7441052272e-4 No Task File <==== ATTENTION
Task: {47909E3F-4797-4384-986F-74122BA93218} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4B662908-CE0C-4C71-A6DA-48B62309E9CC} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()
Task: {578B40AC-1DCD-46FD-A2CC-DEB72BB9E7CC} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {583EC5C8-9B1F-4909-B87F-25598BCB8AC9} - \APSnotifierPP3 No Task File <==== ATTENTION
Task: {5C6EA8D6-38F4-4767-A21A-3EFB3DFFD0EB} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-05-08] (Adobe Systems Incorporated)
Task: {5D455775-21D2-48C9-810D-232437121FC4} - \f69627e0-f2ac-4038-9182-e7441052272e-5 No Task File <==== ATTENTION
Task: {6163FFE2-3998-47C1-8FD8-29652778F31F} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-02] (Acer Incorporate)
Task: {6AA573A9-9B82-4076-A04F-5354ACCA28FD} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6AD24646-CDF2-4676-BF8C-1E3BDE8FAB37} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2014-05-02] (Acer Incorporated)
Task: {6B8EB818-B34F-4CDA-BA36-6BDBB77A8136} - \PC Performer No Task File <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {72B1026B-9C46-4AA2-B558-D68350851035} - \APSnotifierPP1 No Task File <==== ATTENTION
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {89B3337A-9AC3-4CE3-A3C7-FFD85F0B6F19} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8CDBA99A-1668-4A9E-812E-127D498532B4} - \PC Performer_DEFAULT No Task File <==== ATTENTION
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A3E29030-4688-4EDB-ADF4-1735EC74B393} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-01] (Microsoft Corporation)
Task: {AC7C1995-936F-4333-BEA7-4BCBBF32786B} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {B358702F-E99A-4CDF-8B87-19A8153426ED} - \f69627e0-f2ac-4038-9182-e7441052272e-3 No Task File <==== ATTENTION
Task: {BE836F8D-A9F7-4ACC-B389-6C79D154CBB3} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {CE04F8CC-00F3-4B13-9A88-C8E0F05D2C0E} - \FF Watcher {D5B35EFA-3A80-4368-8740-A36386412600} No Task File <==== ATTENTION
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D1ABF4F2-4BEA-4D8D-9579-3C462173A3DA} - \APSnotifierPP2 No Task File <==== ATTENTION
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DC3316D1-E788-48F7-AB38-6DE605BEC27D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-05-20] (Piriform Ltd)
Task: {DF640B52-2967-4486-9DCE-4785A6BD08CD} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {E0FD4188-E004-431D-B7C0-D527D10B61FB} - \f69627e0-f2ac-4038-9182-e7441052272e-2 No Task File <==== ATTENTION
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {F2A3E5AA-469C-49CA-8BE9-1E3F22BCA315} - \f69627e0-f2ac-4038-9182-e7441052272e-1 No Task File <==== ATTENTION
Task: {F70AB239-6F27-43AE-8D9F-406C36FCCB8F} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {F8A352E7-BAEF-4437-AD34-FEA0028E6DB5} - \f69627e0-f2ac-4038-9182-e7441052272e-11 No Task File <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2013-12-24 03:22 - 2013-12-24 03:22 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-12-24 03:20 - 2013-12-24 03:20 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-12-24 03:26 - 2013-12-24 03:26 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-02-28 02:39 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-06-18 14:47 - 2014-06-06 06:38 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "fst_de_46"
HKCU\...\StartupApproved\Run: => "AcerCloud"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 32%
Total physical RAM: 3976.27 MB
Available physical RAM: 2683.17 MB
Total Pagefile: 4680.27 MB
Available Pagefile: 3100.31 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:913.7 GB) (Free:875.96 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 932 GB) (Disk ID: D0F2F4F1)

Partition: GPT Partition Type.

==================== End Of Log ============================
Sorry habe den AWL vergessen zu posten
AWL:
Code:
# AdwCleaner v3.214 - Bericht erstellt am 01/07/2014 um 14:25:21
# Aktualisiert 29/06/2014 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : baustelle - PC
# Gestartet von : C:\Users\baustelle\Desktop\adwcleaner_3.214.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17037


-\\ Mozilla Firefox v30.0 (de)

[ Datei : C:\Users\baustelle\AppData\Roaming\Mozilla\Firefox\Profiles\zl2pf6t0.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [12763 octets] - [18/06/2014 16:01:16]
AdwCleaner[R1].txt - [914 octets] - [18/06/2014 16:09:31]
AdwCleaner[R2].txt - [1120 octets] - [21/06/2014 01:04:19]
AdwCleaner[R3].txt - [1094 octets] - [21/06/2014 18:27:13]
AdwCleaner[R4].txt - [1214 octets] - [23/06/2014 09:58:27]
AdwCleaner[R5].txt - [7680 octets] - [25/06/2014 14:07:27]
AdwCleaner[R6].txt - [1455 octets] - [26/06/2014 21:08:29]
AdwCleaner[R7].txt - [2455 octets] - [01/07/2014 09:55:41]
AdwCleaner[R8].txt - [1693 octets] - [01/07/2014 14:24:59]
AdwCleaner[S0].txt - [10979 octets] - [18/06/2014 16:03:11]
AdwCleaner[S1].txt - [1135 octets] - [21/06/2014 01:04:55]
AdwCleaner[S2].txt - [1156 octets] - [21/06/2014 18:27:53]
AdwCleaner[S3].txt - [1276 octets] - [23/06/2014 09:58:56]
AdwCleaner[S4].txt - [7465 octets] - [25/06/2014 14:08:01]
AdwCleaner[S5].txt - [1516 octets] - [26/06/2014 21:09:13]
AdwCleaner[S6].txt - [2516 octets] - [01/07/2014 09:56:28]
AdwCleaner[S7].txt - [1614 octets] - [01/07/2014 14:25:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [1674 octets] ##########
Danke nochmal

cosinus 01.07.2014 19:36
Wie oft hast du den adwCleaner denn da ausgeführt? :wtf:

AsmW 01.07.2014 19:42
Öfters ist es schädlich?

cosinus 01.07.2014 19:52
Nein ich wunder mich nur :zunge:
Solange du keine Zwangsstörung entwickelst und AdwCleaner nach jedem Windows-Boot ausführst geht das so i.o. :D

Okay, dann Kontrollscans mit MBAM und ESET bitte:

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Alle Zeitangaben in WEZ +1. Es ist jetzt 22:21 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131