trovi search
 

Hallo,

habe mir einen win dvd-brenner gedownloaded und offensichtilich einen virus eingefangen. Brauche dringend Hilfe!

Tausend Dank.

Hallo

:hallo:

Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
• Nur Scanns durchführen zu denen Du von einem Helfer aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
• Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
• Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf. Erschwert mir nämlich das auswerten.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Vista und Win7 User
Alle Tools mit Rechtsklick "als Administrator ausführen" starten.

Schritt 1

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo Aneri,

ich habe ein Problem mit den Logfiles - kann diese nicht hier editieren, da diese zu lang sind. Wie soll ich vorgehen?

:dankeschoen:

Teile die Logfiles zur not in mehrere Posts auf

[CODE]Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2014 01
Ran by Katharina (administrator) on WICHTLZWERG on 24-07-2014 20:39:59
Running from C:\Users\Katharina\Downloads
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [36352 2013-04-30] (Intel Corporation)
HKLM\...\Run: [DolbyTrayApp] => c:\program files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM\...\Run: [OnekeyStudio] => C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-09-14] (Lenovo)
HKLM\...\Run: [Energy Manager] => C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [15794160 2014-02-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [Lenovo Utility] => C:\Program Files (x86)\Lenovo\Energy Manager\Utility.exe [80368 2014-02-12] (Lenovo(beijing) Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778864 2013-08-30] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-07-04] (IDT, Inc.)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-14] (Vimicro)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [168464 2012-10-30] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [189520 2014-07-07] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132224 2013-02-28] ( (Atheros Communications))
HKU\S-1-5-21-3349096550-3144467483-3537340833-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-3349096550-3144467483-3537340833-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-3349096550-3144467483-3537340833-1002\...\Run: [Amazon Music] => C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe [3162944 2014-06-24] ()
HKU\S-1-5-21-3349096550-3144467483-3537340833-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Amazon Music] => C:\Users\Katharina\AppData\Local\Amazon Music\Amazon Music Helper.exe [3162944 2014-06-24] ()
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [184048 2013-12-26] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156256 2013-12-26] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: SugarSyncBackedUp -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncPending -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncRoot -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: SugarSyncShared -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&ISID=7224FBF2-2D57-47FB-89B0-FC5B6EB49A3A&SearchSource=55&CUI=&UM=6&UP=SPE6083BDE-BAFC-411E-A79F-641FA4D24565&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL =
SearchScopes: HKLM - {14810DE1-195E-4F23-B623-860FE40A0752} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {14810DE1-195E-4F23-B623-860FE40A0752} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&ISID=7224FBF2-2D57-47FB-89B0-FC5B6EB49A3A&SearchSource=58&CUI=&UM=6&UP=SPE6083BDE-BAFC-411E-A79F-641FA4D24565&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&ISID=7224FBF2-2D57-47FB-89B0-FC5B6EB49A3A&SearchSource=58&CUI=&UM=6&UP=SPE6083BDE-BAFC-411E-A79F-641FA4D24565&q={searchTerms}&SSPV=
SearchScopes: HKCU - {14810DE1-195E-4F23-B623-860FE40A0752} URL =
BHO-x32: mySecureSurfer -> {52EA1989-D16E-4560-9021-F0AD247DE4D1} -> C:\Users\Katharina\AppData\LocalLow\mySecureSurfer\IE\mySecureSurfer.dll (Soft-Ware International Ltd.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default
FF DefaultSearchEngine: Trovi search
FF SelectedSearchEngine: Trovi search
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-06-21]
FF Extension: mySecureSurfer - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{d64e478d-4dee-4bfb-afe4-30b84e6a3157} [2014-07-24]
FF Extension: Ghostery - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\firefox@ghostery.com.xpi [2014-06-21]
FF Extension: Adblock Plus - C:\Users\Katharina\AppData\Roaming\Mozilla\Firefox\Profiles\ekrrck2g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-21]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome:
=======
CHR Extension: (mySecureSurfer) - C:\Users\Katharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\agabegcgoagbgcpiegohpamfdpcnmfba [2014-07-24]
CHR HKLM-x32\...\Chrome\Extension: [agabegcgoagbgcpiegohpamfdpcnmfba] - C:\Users\Katharina\AppData\LocalLow\mySecureSurfer\CHROME\mySecureSurfer.crx [2014-06-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-02-28] (Qualcomm Atheros Commnucations)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [141392 2014-07-07] (Avira Operations GmbH & Co. KG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15344 2013-04-30] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-17] (Intel Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [337920 2013-07-04] (IDT, Inc.) [File not signed]
R2 VeriFaceSrv; C:\Program Files (x86)\Lenovo\Lenovo VeriFace\VfConnectorService.exe [68368 2014-02-12] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-07-16] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-02-28] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-02-28] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [100184 2013-04-09] (Intel Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-30] (Synaptics Incorporated)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1064704 2013-05-31] (Vimicro Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-07-16] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
R3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-07-24 20:39 - 2014-07-24 20:39 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64(1).exe
2014-07-24 18:38 - 2014-07-24 18:38 - 01084416 _____ (Farbar) C:\Users\Katharina\Downloads\FRST.exe
2014-07-24 18:21 - 2014-07-24 18:21 - 01110476 _____ () C:\Users\Katharina\Downloads\7z920.exe
2014-07-24 18:12 - 2014-07-24 20:39 - 00015862 _____ () C:\Users\Katharina\Downloads\FRST.txt
2014-07-24 18:12 - 2014-07-24 18:13 - 00022455 _____ () C:\Users\Katharina\Downloads\Addition.txt
2014-07-24 18:11 - 2014-07-24 20:39 - 00000000 ____D () C:\FRST
2014-07-24 18:10 - 2014-07-24 18:10 - 02093568 _____ (Farbar) C:\Users\Katharina\Downloads\FRST64.exe
2014-07-24 18:10 - 2014-07-24 18:10 - 00000017 _____ () C:\Users\Katharina\AppData\Local\resmon.resmoncfg
2014-07-24 17:53 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2014-07-24 17:46 - 2014-07-24 17:46 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012(1).exe
2014-07-24 17:43 - 2014-07-24 17:43 - 00000451 _____ () C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2014-07-24 17:30 - 2014-07-24 17:30 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Digiarty
2014-07-24 17:28 - 2014-07-24 17:29 - 00000163 _____ () C:\WINDOWS\Reimage.ini
2014-07-24 17:28 - 2014-07-24 17:28 - 00000133 _____ () C:\Users\Katharina\Desktop\Amazon.de.url
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\Downloads\winx-dvd-author
2014-07-24 17:28 - 2014-07-24 17:28 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Google
2014-07-24 17:26 - 2014-07-24 17:26 - 00667392 _____ (© 2014 ClientConnect Ltd.) C:\Users\Katharina\Downloads\winx-dvd-author.exe
2014-07-23 22:12 - 2014-07-23 22:12 - 01459302 _____ () C:\Users\Katharina\Desktop\Slideshow 2014-07-23.MVM
2014-07-23 20:51 - 2014-07-23 20:54 - 00016384 ___SH () C:\Users\Katharina\Documents\Thumbs.db
2014-07-20 16:21 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-07-20 16:21 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-07-20 16:21 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-07-20 13:01 - 2014-07-20 13:01 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-07-19 21:15 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvcfg.exe
2014-07-19 21:15 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-07-19 21:15 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-07-17 11:18 - 2014-07-17 11:18 - 00000000 ____D () C:\Program Files\Common Files\Atheros
2014-07-17 07:21 - 2014-07-24 17:45 - 00000000 __RDO () C:\Users\Katharina\OneDrive
2014-07-17 07:19 - 2014-07-17 07:19 - 00001465 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 07:19 - 2014-07-17 07:19 - 00000020 ___SH () C:\Users\Katharina\ntuser.ini
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 06:50 - 2014-07-17 06:50 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 06:49 - 2014-07-24 18:21 - 01137003 _____ () C:\WINDOWS\WindowsUpdate.log
2014-07-17 06:49 - 2014-07-17 06:49 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-07-17 06:44 - 2014-07-17 06:44 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-07-16 23:30 - 2014-07-18 21:34 - 00000000 ___DC () C:\WINDOWS\Panther
2014-07-16 23:29 - 2014-07-20 16:50 - 00000000 ____D () C:\Windows.old
2014-07-16 23:29 - 2014-07-16 23:29 - 00308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-07-16 23:29 - 2014-07-16 23:29 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 03048904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-07-16 23:28 - 2014-07-16 23:28 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02834944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01336648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-07-16 23:28 - 2014-07-16 23:28 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-07-16 23:28 - 2014-07-16 23:28 - 00055328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2014-07-16 23:27 - 2014-07-16 23:27 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-07-16 23:27 - 2014-07-16 23:27 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-07-16 23:27 - 2014-07-16 23:27 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-07-16 23:27 - 2014-07-16 23:27 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02900992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02479616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02373784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02331000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02270208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02141912 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02088160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 02030080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 02013016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01779800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01764864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01679128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 01542768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01291200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01112536 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01095488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00836096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00800256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00488280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00406912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00390488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00387210 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-07-16 23:26 - 2014-07-16 23:26 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlangpui.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00379224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00376152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00360512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00356848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00355832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00264192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-07-16 23:26 - 2014-07-16 23:26 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00186368 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Scanners.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00113648 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00094016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2014-07-16 23:26 - 2014-07-16 23:26 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\l2gpstore.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpipreg.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SetNetworkLocation.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxproxy.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-07-16 23:26 - 2014-07-16 23:26 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-07-16 23:26 - 2014-07-16 23:26 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00467800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-07-16 23:24 - 2014-07-16 23:24 - 00440664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00419672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-07-16 23:24 - 2014-07-16 23:24 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-07-16 23:24 - 2014-07-16 23:24 - 00089944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-07-16 23:24 - 2014-07-16 23:24 - 00027480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-07-16 23:23 - 2014-07-16 23:23 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00086688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00080032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt_map.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-07-16 23:23 - 2014-07-16 23:23 - 00028320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mrt100.dll
2014-07-16 23:23 - 2014-07-16 23:23 - 00026784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mrt100.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-07-16 23:22 - 2014-07-16 23:22 - 03360256 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 02151424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01975296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-07-16 23:22 - 2014-07-16 23:22 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-07-16 23:22 - 2014-07-16 23:22 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-07-16 23:21 - 2014-07-16 23:21 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00419928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-07-16 23:21 - 2014-07-16 23:21 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-07-16 23:21 - 2014-07-16 23:21 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 21268952 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 18755672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 07425368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 07173120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 06645248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05774848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 05104640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 04269056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02688000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02124840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01466856 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 01403856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01308160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01209616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01029120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00881616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00765408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00707048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00669856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00629760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00609448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00589656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00518544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00467496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00463256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-07-16 23:20 - 2014-07-16 23:20 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00407016 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00406504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00384856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-07-16 23:20 - 2014-07-16 23:20 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00364640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00360792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00337240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00324888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00310616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00307304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00305768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00285144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00263424 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00257880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00244880 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00201920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00180056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00178184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00130144 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00125496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00123224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00111528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00098584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srclient.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tlscsp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-07-16 23:20 - 2014-07-16 23:20 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00032600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00028408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2014-07-16 23:20 - 2014-07-16 23:20 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-07-16 23:20 - 2014-07-16 23:20 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-07-16 23:18 - 2014-07-16 23:18 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files\MSBuild
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-07-16 23:16 - 2014-07-16 23:16 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-16 23:15 - 2014-07-16 22:37 - 00000000 ____D () C:\Recovery
2014-07-16 23:15 - 2013-08-03 06:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-07-16 23:15 - 2013-08-03 06:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-07-16 23:15 - 2013-08-03 06:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-07-16 22:44 - 2014-07-16 22:44 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:44 - 2014-07-16 22:44 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
2014-07-16 22:43 - 2014-07-16 22:43 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-07-16 22:41 - 2014-07-24 17:06 - 00000000 ____D () C:\Users\Katharina
2014-07-16 22:41 - 2014-07-17 06:49 - 00032388 _____ () C:\WINDOWS\diagwrn.xml
2014-07-16 22:41 - 2014-07-17 06:49 - 00032388 _____ () C:\WINDOWS\diagerr.xml
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-07-16 22:41 - 2014-07-16 22:42 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Vorlagen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Startmenü
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Netzwerkumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Lokale Einstellungen
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Eigene Dateien
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Druckumgebung
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Musik
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Documents\Eigene Bilder
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Verlauf
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\AppData\Local\Anwendungsdaten
2014-07-16 22:41 - 2014-07-16 22:41 - 00000000 _SHDL () C:\Users\Katharina\Anwendungsdaten
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-07-16 22:41 - 2014-03-18 12:11 - 00000369 _____ () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-16 22:41 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-16 22:33 - 2014-07-16 22:43 - 00000000 ____D () C:\Program Files\Intel
2014-07-16 22:33 - 2014-07-16 22:33 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-07-16 22:33 - 2014-07-16 22:33 - 00000000 ____D () C:\Program Files (x86)\USB Camera
2014-07-16 22:33 - 2013-06-11 18:42 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-07-16 22:33 - 2013-06-11 18:42 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-07-16 22:32 - 2014-07-16 22:32 - 00000000 ____D () C:\Program Files\Synaptics
2014-07-16 21:59 - 2014-07-17 06:49 - 00006580 _____ () C:\WINDOWS\comsetup.log
2014-07-16 13:42 - 2014-07-16 18:12 - 00014889 _____ () C:\Users\Katharina\Desktop\Vorratsliste.ods
2014-07-12 11:40 - 2014-07-21 16:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-07-08 19:26 - 2014-07-08 20:17 - 00032202 _____ () C:\Users\Katharina\Desktop\Lipödem.odt
2014-07-05 21:44 - 2014-07-05 21:45 - 00001102 _____ () C:\DelFix.txt
2014-07-05 21:44 - 2014-07-05 21:44 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-07-02 18:58 - 2014-07-02 18:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-02 18:57 - 2014-07-02 18:58 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Katharina\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-01 18:30 - 2014-07-01 18:42 - 00017536 _____ () C:\Users\Katharina\Desktop\Menüpläne.odt
2014-07-01 09:39 - 2014-07-16 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-01 09:39 - 2014-07-01 09:39 - 00001046 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-01 09:39 - 2014-07-01 09:39 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-01 09:38 - 2014-07-01 09:39 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-07-01 09:38 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMAPI32.OCX
2014-07-01 09:38 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2014-07-01 09:38 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPIDE.DLL
2014-07-01 09:38 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6DE.DLL
2014-07-01 09:38 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCDE.DLL
2014-07-01 09:38 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCC2DE.DLL
2014-07-01 09:17 - 2013-09-01 12:59 - 01103872 _____ () C:\WINDOWS\SysWOW64\CBLCtlsU.ocx
2014-07-01 09:17 - 2013-07-13 12:15 - 00805376 _____ () C:\WINDOWS\SysWOW64\EditCtlsU.ocx
2014-07-01 09:17 - 2013-07-12 22:57 - 00539648 _____ () C:\WINDOWS\SysWOW64\LblCtlsU.ocx
2014-07-01 09:17 - 2013-04-05 13:55 - 00476160 _____ () C:\WINDOWS\SysWOW64\TabStripCtlU.ocx
2014-07-01 09:17 - 2013-03-28 23:13 - 00645632 _____ () C:\WINDOWS\SysWOW64\BtnCtlsU.ocx
2014-07-01 09:17 - 2013-03-03 14:37 - 01061888 _____ () C:\WINDOWS\SysWOW64\ExLvwU.ocx
2014-07-01 09:04 - 2014-07-01 09:04 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-06-30 20:56 - 2014-06-30 20:56 - 00000000 ____D () C:\Users\Katharina\dwhelper
2014-06-30 20:42 - 2014-07-16 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Audio Pack
2014-06-30 20:42 - 2014-06-30 20:42 - 00001329 _____ () C:\Users\Katharina\Desktop\Easy Audio Cutter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001313 _____ () C:\Users\Katharina\Desktop\Free CD Ripper.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00001311 _____ () C:\Users\Katharina\Desktop\Free Mp3 Wma Converter.lnk
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\FreeAudioPack
2014-06-30 20:42 - 2014-06-30 20:42 - 00000000 ____D () C:\Program Files (x86)\Free mp3 Wma Converter
2014-06-30 20:42 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2014-06-30 20:42 - 2011-09-29 14:20 - 02084864 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDesign.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 01986560 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudFile.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 01212416 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioInfos.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00484352 _____ () C:\WINDOWS\SysWOW64\lame_enc.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00479232 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioVisu.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00458752 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudPlayer.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00454656 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioRecord.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00417792 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDisplay.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00348160 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\WMAFile.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr70.dll
2014-06-30 20:42 - 2011-09-29 14:20 - 00164144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMCT232.OCX
2014-06-30 20:42 - 2011-09-29 14:20 - 00116296 _____ () C:\WINDOWS\SysWOW64\NCTWMAProfiles.prx
2014-06-30 20:42 - 2011-09-29 14:19 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00224016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTL32.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00119568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6FR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00115920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msinet.OCX
2014-06-30 20:42 - 2011-09-29 14:19 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6STKIT.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2fr.dll
2014-06-30 20:42 - 2011-09-29 14:19 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CMDLGFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTFR.DLL
2014-06-30 20:42 - 2011-09-29 14:19 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetfr.DLL
2014-06-30 20:32 - 2014-06-30 20:32 - 00001163 _____ () C:\Users\Katharina\Desktop\Amazon Music.lnk
2014-06-30 20:31 - 2014-06-30 20:31 - 38534920 _____ (Amazon) C:\Users\Katharina\Downloads\AmazonMusicInstaller.exe
2014-06-30 20:26 - 2014-06-30 20:27 - 09659608 _____ () C:\Users\Katharina\Downloads\AmazonMusicImporterInstaller-2.1.0._V337128703_.exe
2014-06-30 17:25 - 2014-06-30 17:25 - 00015074 _____ () C:\Users\Katharina\Documents\Saisonkalender_Obst_Gemüse.odt
2014-06-30 16:28 - 2014-06-30 16:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-06-30 15:58 - 2014-07-23 22:16 - 01853538 _____ () C:\Users\Katharina\Documents\Unbenannt 1.odt
2014-06-29 09:34 - 2014-06-30 20:27 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Adobe
2014-06-27 20:26 - 2014-06-27 20:26 - 00000000 ____D () C:\Users\Katharina\AppData\Local\Macromedia
2014-06-26 21:02 - 2014-06-26 21:02 - 00955246 _____ () C:\Users\Katharina\Desktop\Hochzeitstag 26082014.MVM
2014-06-26 20:59 - 2014-06-26 20:59 - 00000000 ____D () C:\Users\Katharina\AppData\Local\CrashDumps
2014-06-26 20:43 - 2014-06-26 20:43 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\WebApp
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\Documents\CyberLink
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\Lenovo
2014-06-26 20:40 - 2014-06-26 20:40 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\CyberLink
2014-06-26 13:32 - 2014-06-26 20:50 - 00023040 ___SH () C:\Users\Katharina\Downloads\Thumbs.db
2014-06-26 13:30 - 2014-07-16 22:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2014-06-26 13:30 - 2014-06-26 13:31 - 00000000 ____D () C:\ProgramData\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00001051 _____ () C:\Users\Public\Desktop\MAGIX Slideshow Maker 2.lnk
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Users\Katharina\Documents\MAGIX
2014-06-26 13:30 - 2014-06-26 13:30 - 00000000 ____D () C:\Program Files (x86)\MAGIX
2014-06-26 13:27 - 2014-06-26 13:31 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\MAGIX
2014-06-26 13:09 - 2014-06-26 13:10 - 00000000 ____D () C:\Users\Katharina\AppData\Local\AquaSoft
2014-06-26 13:09 - 2014-06-26 13:09 - 00000000 ____D () C:\Users\Katharina\AppData\Roaming\AquaSoft
2014-06-24 17:24 - 2014-07-21 16:53 - 00167936 ___SH () C:\Users\Katharina\Desktop\Thumbs.db
2014-06-24 16:40 - 2014-06-24 16:40 - 00000000 ____D () C:\sources
2014-06-24 16:39 - 2014-07-10 09:53 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\CrashDumps

[/CODE]

Hallo

das klappt ja ganz gut bisher

Schritt 1:

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2:

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3:

erstelle ein neues FRST Logfile und poste es hier

Hi

das MBam Logfile ist nicht das richtige...

Hat MBAM etwas gefunden?


Schritt 1:
Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

• Öffne die TFC.exe.
  Vista und Win 7 User mit Rechtsklick "als Administrator starten".
• Schließe alle anderen Programme.
• Drücke auf den Button Start.
• Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Schritt 2:

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hey Aneri,

hier nochmals das MBAM file

Hallo Aneri,

sorry hier nochmals - mit deaktivierter Firewall - das Logfile.

Danke für Deine Hilfe!

Hallo

besteht das Problem mit TroviSearch noch?

Schritt 1:
Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.



Wenn hier alles gutaus sieht räumen wir noch auf und sichern das System ab.
Das Tool testet die wichtigsten Programme auf ihren aktuellen Stand

Hallo,

offensichtlich ist von Trovi nichts mehr zu sehen (es öffnet sich ganz normal Mozilla).

Schritt 1:

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

zum Absichern:

Wunderbar dein System ist soweit ich das sehen kann sauber. :daumenhoc

Hier noch ein paar Tipps zur Absicherung deines Systems.

Benutzerkonto Einstellungen:



Systemupdates:



Besonders Java erfährt zur Zeit regelmäßig sicherheitsrelevante Updates



Antivirensoftware



Zusätzlicher Schutz



Sicheres Browsen



alternatives Browsen





Wenn du noch Zeit und Lust hast kannst du gern eine Rückmeldung im "Lob und Kritik" Forum loswerden ;)