| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: search protect by conduitWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
14.12.2013, 21:17
| #1 |
 |  search protect by conduit Hallo, bei mir hatte sich "search protect" von conduit eingenistet. Ich habe daraufhin 2 mal Adwcleaner drüberlaufen lassen (erster Lauf Fund, 2. Lauf alles clean). Dann habe ich jetzt noch OTL.exe scannen lassen, kann aber mit dem Report nichts anfangen. Kann mal jemand drüberschauen? OTL logfile created on: 14.12.2013 19:36:08 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Install 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16750) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,89 Gb Total Physical Memory | 6,49 Gb Available Physical Memory | 82,22% Memory free 12,39 Gb Paging File | 10,82 Gb Available in Paging File | 87,35% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 372,60 Gb Total Space | 318,74 Gb Free Space | 85,54% Space Free | Partition Type: NTFS Drive D: | 537,80 Gb Total Space | 523,22 Gb Free Space | 97,29% Space Free | Partition Type: NTFS Computer Name: ASUS | User Name: Ralf | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013.12.14 19:34:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\Install\otl.exe PRC - [2013.12.14 03:36:50 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2013.12.14 03:36:30 | 001,164,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe PRC - [2013.12.14 03:36:26 | 000,972,872 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe PRC - [2013.12.14 03:36:23 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2013.12.14 03:36:22 | 000,683,576 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2013.09.03 06:53:50 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013.03.08 15:18:34 | 000,095,192 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe PRC - [2013.01.16 15:11:18 | 000,020,792 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe PRC - [2013.01.15 17:20:58 | 000,303,928 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe PRC - [2013.01.15 17:20:54 | 000,107,320 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe PRC - [2013.01.11 16:57:24 | 000,328,504 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe PRC - [2013.01.10 09:15:46 | 001,260,320 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2012.11.29 18:15:40 | 000,171,224 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe PRC - [2012.11.29 18:15:40 | 000,054,488 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe PRC - [2012.10.17 20:08:40 | 000,205,184 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe PRC - [2012.09.18 13:51:54 | 001,124,032 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe PRC - [2012.08.31 20:27:20 | 000,590,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe PRC - [2012.08.22 10:24:28 | 001,559,936 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe PRC - [2012.07.17 15:57:22 | 000,365,376 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2012.07.17 15:57:20 | 000,277,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2012.06.27 13:47:02 | 000,129,856 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe PRC - [2012.06.25 11:57:14 | 000,166,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe PRC - [2012.05.28 11:04:48 | 000,113,312 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe PRC - [2012.04.13 11:14:00 | 000,277,120 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe PRC - [2011.11.21 15:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe ========== Modules (No Company Name) ========== MOD - [2012.11.29 18:15:40 | 000,171,224 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe ========== Services (SafeList) ========== SRV:64bit: - [2013.11.02 00:48:44 | 001,907,896 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe -- (OfficeSvc) SRV:64bit: - [2013.08.16 06:39:26 | 002,371,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:64bit: - [2013.07.30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe -- (McSchedulerSvc) SRV:64bit: - [2013.07.30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe -- (mcpltsvc) SRV:64bit: - [2013.07.30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe -- (McOobeSv2) SRV:64bit: - [2013.07.02 01:44:21 | 000,016,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:64bit: - [2013.06.24 23:54:45 | 000,263,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:64bit: - [2013.04.26 09:03:28 | 000,467,456 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:64bit: - [2013.04.26 08:54:44 | 001,964,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:64bit: - [2013.04.26 08:54:44 | 000,438,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:64bit: - [2013.04.26 08:43:06 | 000,169,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:64bit: - [2013.04.26 08:13:52 | 000,116,736 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:64bit: - [2013.04.26 08:13:26 | 000,179,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:64bit: - [2013.04.26 08:13:26 | 000,178,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:64bit: - [2013.04.26 08:13:26 | 000,169,984 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:64bit: - [2013.01.18 08:20:42 | 000,033,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\DptfPolicyConfigTDPService.exe -- (DptfPolicyConfigTDPService) SRV:64bit: - [2013.01.18 08:20:42 | 000,031,632 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\DptfParticipantProcessorService.exe -- (DptfParticipantProcessorService) SRV:64bit: - [2012.07.26 04:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:64bit: - [2012.07.26 04:07:47 | 000,065,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:64bit: - [2012.07.26 04:07:40 | 000,283,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:64bit: - [2012.07.26 04:07:25 | 000,012,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:64bit: - [2012.07.26 04:06:34 | 000,743,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:64bit: - [2012.07.26 04:06:33 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:64bit: - [2012.07.26 04:06:33 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:64bit: - [2012.07.26 04:05:55 | 000,059,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:64bit: - [2012.07.26 04:05:34 | 000,037,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:64bit: - [2012.07.26 04:05:28 | 000,207,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:64bit: - [2012.07.26 04:05:24 | 000,342,016 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:64bit: - [2012.07.26 04:05:08 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AUInstallAgent.dll -- (AllUserInstallAgent) SRV:64bit: - [2012.07.26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:64bit: - [2012.07.26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:64bit: - [2012.07.26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:64bit: - [2012.07.26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:64bit: - [2012.07.26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:64bit: - [2012.07.26 01:24:02 | 000,336,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:64bit: - [2012.04.20 15:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV - [2013.12.14 03:36:50 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2013.12.14 03:36:30 | 001,164,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe -- (AntiVirWebService) SRV - [2013.12.14 03:36:26 | 000,972,872 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe -- (AntiVirMailService) SRV - [2013.12.14 03:36:23 | 000,440,376 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2013.09.03 06:53:50 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013.07.24 18:21:46 | 000,334,608 | ---- | M] (McAfee, Inc.) [On_Demand | Running] -- c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe -- (McAWFwk) SRV - [2013.01.15 17:20:54 | 000,107,320 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService) SRV - [2013.01.10 09:15:46 | 001,260,320 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012.12.19 07:10:38 | 000,072,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe -- (Asus WebStorage Windows Service) SRV - [2012.10.15 05:10:16 | 000,277,024 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2012.07.26 04:30:05 | 002,675,200 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2012.07.26 04:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2012.07.17 15:57:22 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2012.07.17 15:57:20 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2012.06.27 13:47:02 | 000,129,856 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R) SRV - [2012.06.25 11:57:14 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2012.04.13 11:14:00 | 000,277,120 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe -- (ASUS InstantOn) SRV - [2011.11.21 15:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2010.10.12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService) ========== Driver Services (SafeList) ========== DRV:64bit: - [2013.12.14 03:37:03 | 000,132,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avipbb.sys -- (avipbb) DRV:64bit: - [2013.12.14 03:37:03 | 000,107,416 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\Drivers\avgntflt.sys -- (avgntflt) DRV:64bit: - [2013.12.14 03:37:03 | 000,083,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\avnetflt.sys -- (avnetflt) DRV:64bit: - [2013.12.14 03:37:03 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\avkmgr.sys -- (avkmgr) DRV:64bit: - [2013.10.10 12:53:35 | 000,096,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\wfplwfs.sys -- (WFPLWFS) DRV:64bit: - [2013.10.05 07:10:20 | 000,285,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\spaceport.sys -- (spaceport) DRV:64bit: - [2013.10.02 03:50:07 | 000,447,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBHUB3.SYS -- (USBHUB3) DRV:64bit: - [2013.08.16 06:41:13 | 000,058,200 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\dam.sys -- (dam) DRV:64bit: - [2013.08.10 07:30:22 | 000,151,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\tpm.sys -- (TPM) DRV:64bit: - [2013.07.09 09:04:07 | 000,120,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpioclx.sys -- (GPIOClx0101) DRV:64bit: - [2013.07.02 02:41:47 | 000,337,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\USBXHCI.SYS -- (USBXHCI) DRV:64bit: - [2013.07.02 02:41:47 | 000,213,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\UCX01000.SYS -- (UCX01000) DRV:64bit: - [2013.07.02 01:44:14 | 000,036,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdBoot.sys -- (WdBoot) DRV:64bit: - [2013.07.01 23:08:49 | 000,247,216 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WdFilter.sys -- (WdFilter) DRV:64bit: - [2013.06.29 07:15:54 | 000,195,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2013.04.26 09:03:28 | 000,037,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:64bit: - [2013.04.26 08:54:44 | 000,028,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\msgpiowin32.sys -- (msgpiowin32) DRV:64bit: - [2013.04.26 08:49:58 | 000,029,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\BthhfHid.sys -- (bthhfhid) DRV:64bit: - [2013.04.26 08:46:00 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hidi2c.sys -- (hidi2c) DRV:64bit: - [2013.04.26 08:43:00 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\fxppm.sys -- (FxPPM) DRV:64bit: - [2013.04.26 08:21:13 | 000,027,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2013.04.26 08:19:03 | 000,056,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\sdstor.sys -- (sdstor) DRV:64bit: - [2013.04.26 08:19:03 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WSDScan.sys -- (WSDScan) DRV:64bit: - [2013.04.26 08:19:03 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\serscan.sys -- (StillCam) DRV:64bit: - [2013.04.26 08:13:22 | 003,265,256 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2013.04.26 08:13:22 | 000,533,224 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2013.03.02 11:39:38 | 000,069,864 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\pdc.sys -- (pdc) DRV:64bit: - [2013.01.18 08:20:42 | 000,363,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\DptfManager.sys -- (DptfManager) DRV:64bit: - [2013.01.18 08:20:42 | 000,229,776 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\DptfDevProc.sys -- (DptfDevProc) DRV:64bit: - [2013.01.18 08:20:42 | 000,107,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\DptfDevDram.sys -- (DptfDevDram) DRV:64bit: - [2013.01.18 08:20:42 | 000,065,424 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\DptfDevGen.sys -- (DptfDevGen) DRV:64bit: - [2013.01.18 08:20:42 | 000,043,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\DptfDevFan.sys -- (DptfDevFan) DRV:64bit: - [2013.01.16 15:11:34 | 000,065,784 | ---- | M] (ASUS Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AsusTP.sys -- (ATP) DRV:64bit: - [2013.01.10 09:15:46 | 000,030,496 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\nvpciflt.sys -- (nvpciflt) DRV:64bit: - [2012.12.07 07:45:34 | 000,652,344 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\iaStorA.sys -- (iaStorA) DRV:64bit: - [2012.10.15 05:10:00 | 005,343,584 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2012.10.08 10:02:52 | 000,342,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\IntcDAud.sys -- (IntcDAud) DRV:64bit: - [2012.09.19 01:15:20 | 003,653,632 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\athw8x.sys -- (athr) DRV:64bit: - [2012.09.18 13:51:54 | 000,017,152 | ---- | M] (ASUSTek Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AiCharger.sys -- (AiCharger) DRV:64bit: - [2012.08.02 04:22:48 | 000,014,992 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kbfiltr.sys -- (kbfiltr) DRV:64bit: - [2012.07.30 17:04:12 | 000,690,832 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\Rt630x64.sys -- (RTL8168) DRV:64bit: - [2012.07.26 06:26:46 | 000,025,328 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2012.07.26 06:26:45 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\condrv.sys -- (condrv) DRV:64bit: - [2012.07.26 06:00:58 | 000,322,800 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:64bit: - [2012.07.26 06:00:58 | 000,106,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\VerifierExt.sys -- (VerifierExt) DRV:64bit: - [2012.07.26 06:00:58 | 000,097,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\uaspstor.sys -- (UASPStor) DRV:64bit: - [2012.07.26 06:00:57 | 000,077,040 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\acpiex.sys -- (acpiex) DRV:64bit: - [2012.07.26 06:00:55 | 000,077,552 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\storahci.sys -- (storahci) DRV:64bit: - [2012.07.26 06:00:55 | 000,064,240 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\mvumis.sys -- (mvumis) DRV:64bit: - [2012.07.26 06:00:55 | 000,030,960 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2012.07.26 06:00:52 | 000,092,400 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2012.07.26 06:00:52 | 000,081,136 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\lsi_sss.sys -- (LSI_SSS) DRV:64bit: - [2012.07.26 06:00:52 | 000,064,752 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2012.07.26 06:00:51 | 000,113,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:64bit: - [2012.07.26 06:00:51 | 000,081,136 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\EhStorClass.sys -- (EhStorClass) DRV:64bit: - [2012.07.26 06:00:49 | 000,258,288 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2012.07.26 06:00:49 | 000,106,736 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\3ware.sys -- (3ware) DRV:64bit: - [2012.07.26 06:00:49 | 000,076,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2012.07.26 06:00:48 | 000,026,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\Drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2012.07.26 05:57:54 | 000,361,200 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\clfs.sys -- (CLFS) DRV:64bit: - [2012.07.26 05:53:16 | 000,067,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vpci.sys -- (vpci) DRV:64bit: - [2012.07.26 04:17:38 | 000,036,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\terminpt.sys -- (terminpt) DRV:64bit: - [2012.07.26 03:29:47 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:64bit: - [2012.07.26 03:29:14 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mshidumdf.sys -- (mshidumdf) DRV:64bit: - [2012.07.26 03:29:08 | 000,048,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicDisplay.sys -- (BasicDisplay) DRV:64bit: - [2012.07.26 03:29:03 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\HyperVideo.sys -- (HyperVideo) DRV:64bit: - [2012.07.26 03:28:52 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\BasicRender.sys -- (BasicRender) DRV:64bit: - [2012.07.26 03:27:58 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\vmgencounter.sys -- (gencounter) DRV:64bit: - [2012.07.26 03:27:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\kdnic.sys -- (kdnic) DRV:64bit: - [2012.07.26 03:27:37 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpitime.sys -- (acpitime) DRV:64bit: - [2012.07.26 03:27:33 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\npsvctrig.sys -- (npsvctrig) DRV:64bit: - [2012.07.26 03:27:29 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:64bit: - [2012.07.26 03:27:16 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\acpipagr.sys -- (acpipagr) DRV:64bit: - [2012.07.26 03:27:01 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\hyperkbd.sys -- (hyperkbd) DRV:64bit: - [2012.07.26 03:26:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SerCx.sys -- (SerCx) DRV:64bit: - [2012.07.26 03:26:43 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\SpbCx.sys -- (SpbCx) DRV:64bit: - [2012.07.26 03:26:34 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2012.07.26 03:26:13 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\bthhfenum.sys -- (BthHFEnum) DRV:64bit: - [2012.07.26 03:25:57 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\dmvsc.sys -- (dmvsc) DRV:64bit: - [2012.07.26 03:25:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2012.07.26 03:25:13 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\wpcfltr.sys -- (wpcfltr) DRV:64bit: - [2012.07.26 03:25:01 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:64bit: - [2012.07.26 03:23:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\mslldp.sys -- (MsLldp) DRV:64bit: - [2012.07.26 03:23:42 | 000,097,792 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\Drivers\Ndu.sys -- (Ndu) DRV:64bit: - [2012.07.02 16:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2012.06.13 11:23:58 | 000,294,544 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\RtsBaStor.sys -- (RSBASTOR) DRV:64bit: - [2012.06.02 15:34:37 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\agrsm64.sys -- (AgereSoftModem) DRV:64bit: - [2012.06.02 15:31:50 | 008,604,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\NETwNs64.sys -- (NETwNs64) DRV:64bit: - [2012.06.02 15:31:38 | 000,333,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\e1i63x64.sys -- (e1iexpress) DRV:64bit: - [2012.05.31 04:47:44 | 000,021,152 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\AsHIDSwitch64.sys -- (HIDSwitch) DRV - [2011.09.07 10:55:04 | 000,017,536 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO) DRV - [2010.05.26 03:45:48 | 000,012,416 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\eSupport\eDriver\I386\AsPrOb64.sys -- (ASUSProcObsrv) DRV - [2009.07.02 18:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1001\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1002\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://mail.google.com/mail/u/0/?hl=de#inbox IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1002\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-4081666312-209533117-2721160021-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}: C:\PROGRAM FILES\V-BATES\FIREFOX FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}: C:\Program Files\V-bates\Firefox FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2013.12.14 02:04:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions O1 HOSTS File: ([2012.07.26 06:26:49 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.) O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe (ASUS Cloud Corporation) O4 - HKLM..\Run: [ATLauncher] C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe (McAfee, Inc.) O4 - HKLM..\Run: [ATUninstallIcon] C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe (McAfee, Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [mcpltui_exe] "C:\Program Files\Common~1\McAfee\Platform\mcuicnt.exe" /platui File not found O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) O4 - HKU\S-1-5-21-4081666312-209533117-2721160021-1002..\Run: [HP Deskjet 3520 series (NET)] C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Main present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-4081666312-209533117-2721160021-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation) O8:64bit: - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation) O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation) O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5CF96332-E569-4830-91A3-1442A39DC81B}: DhcpNameServer = 172.16.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C7F5F99C-C416-42B8-9C2B-AD988BEA38E0}: DhcpNameServer = 192.168.178.1 O18:64bit: - Protocol\Handler\osf - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O30 - LSA: Security Packages - (livessp) - File not found O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013.12.14 19:08:23 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2013.12.14 16:16:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HTMLFIX [2013.12.14 16:16:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mresreg [2013.12.14 15:54:36 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Programs [2013.12.14 15:46:44 | 000,000,000 | ---D | C] -- C:\Users\Ralf\Documents\PageBreeze [2013.12.14 15:46:03 | 000,203,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RICHTX32.OCX [2013.12.14 15:46:03 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vb6stkit.dll [2013.12.14 15:46:03 | 000,097,280 | ---- | C] (Visual Components, Inc.) -- C:\Windows\SysWow64\vspell32.ocx [2013.12.14 15:46:03 | 000,070,656 | ---- | C] (Visual Components, Inc.) -- C:\Windows\SysWow64\vspell32.dll [2013.12.14 15:46:03 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PageBreeze [2013.12.14 15:46:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PageBreeze [2013.12.14 15:46:02 | 000,644,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx [2013.12.14 15:46:02 | 000,369,696 | ---- | C] (Microsoft Corporation ) -- C:\Windows\SysWow64\Comct332.ocx [2013.12.14 15:46:02 | 000,140,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Comdlg32.ocx [2013.12.14 15:46:02 | 000,089,600 | ---- | C] (AY Software Corporation) -- C:\Windows\SysWow64\Leocx32.ocx [2013.12.14 15:46:02 | 000,084,992 | ---- | C] (AY Software Corporation) -- C:\Windows\SysWow64\Ledit32.dll [2013.12.14 15:45:59 | 001,847,296 | ---- | C] (Chilkat Software, Inc.) -- C:\Windows\SysWow64\ChilkatFtp2.dll [2013.12.14 15:45:59 | 001,531,904 | ---- | C] (Chilkat Software, Inc.) -- C:\Windows\SysWow64\ChilkatCert.dll [2013.12.14 15:45:59 | 000,659,456 | ---- | C] (Chilkat Software, Inc.) -- C:\Windows\SysWow64\ckstring.dll [2013.12.14 15:45:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PageBreeze [2013.12.14 15:41:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\phase5 [2013.12.14 11:34:00 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Microsoft Help [2013.12.14 10:19:22 | 013,661,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.UI.Xaml.dll [2013.12.14 10:19:17 | 010,799,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.UI.Xaml.dll [2013.12.14 10:19:15 | 001,173,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAutomationCore.dll [2013.12.14 10:19:15 | 000,914,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAutomationCore.dll [2013.12.14 10:19:15 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ubpm.dll [2013.12.14 10:19:15 | 000,151,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tpm.sys [2013.12.14 10:19:14 | 000,247,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ubpm.dll [2013.12.14 10:19:14 | 000,061,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\crashdmp.sys [2013.12.14 10:19:03 | 001,622,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2013.12.14 10:19:03 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2013.12.14 10:19:03 | 000,773,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2013.12.14 10:19:03 | 000,628,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2013.12.14 10:19:03 | 000,626,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\resutils.dll [2013.12.14 10:19:03 | 000,488,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll [2013.12.14 10:19:03 | 000,447,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBHUB3.SYS [2013.12.14 10:19:03 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll [2013.12.14 10:19:03 | 000,302,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll [2013.12.14 10:19:03 | 000,285,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\spaceport.sys [2013.12.14 10:19:02 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUSettingsProvider.dll [2013.12.14 10:19:02 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\storewuauth.dll [2013.12.14 10:19:02 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2013.12.14 10:19:02 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2013.12.14 10:19:02 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2013.12.14 10:19:02 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2013.12.14 10:19:02 | 000,059,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2013.12.14 10:19:02 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [2013.12.14 10:19:02 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2013.12.14 10:18:49 | 002,273,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll [2013.12.14 10:18:48 | 002,839,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll [2013.12.14 10:18:48 | 001,025,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2013.12.14 10:18:48 | 000,327,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys [2013.12.14 10:18:47 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanmm.dll [2013.12.14 10:18:47 | 000,439,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFault.exe [2013.12.14 10:18:47 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll [2013.12.14 10:18:47 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.Networking.BackgroundTransfer.dll [2013.12.14 10:18:47 | 000,385,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFault.exe [2013.12.14 10:18:47 | 000,370,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wwanadvui.dll [2013.12.14 10:18:47 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LocationApi.dll [2013.12.14 10:18:47 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.Networking.BackgroundTransfer.dll [2013.12.14 10:18:47 | 000,263,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmsvc.dll [2013.12.14 10:18:47 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LocationApi.dll [2013.12.14 10:18:47 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll [2013.12.14 10:18:47 | 000,195,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sdbus.sys [2013.12.14 10:18:47 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmmbase.dll [2013.12.14 10:18:47 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winmmbase.dll [2013.12.14 10:18:47 | 000,125,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dumpsd.sys [2013.12.14 10:18:47 | 000,120,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\msgpioclx.sys [2013.12.14 10:18:47 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winmm.dll [2013.12.14 10:18:47 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\openfiles.exe [2013.12.14 10:18:47 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wcmcsp.dll [2013.12.14 10:18:47 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\openfiles.exe [2013.12.14 10:18:18 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Diagnostics [2013.12.14 03:39:14 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\Avira [2013.12.14 03:38:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2013.12.14 03:38:36 | 000,132,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys [2013.12.14 03:38:36 | 000,107,416 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys [2013.12.14 03:38:36 | 000,083,160 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys [2013.12.14 03:38:36 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys [2013.12.14 03:38:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2013.12.14 03:38:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira [2013.12.14 03:20:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verwaltung [2013.12.14 03:02:58 | 000,000,000 | --SD | C] -- C:\Users\Ralf\Documents\Meine Websites [2013.12.14 03:01:56 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2013.12.14 03:01:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression [2013.12.14 03:01:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8 [2013.12.14 03:01:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Expression [2013.12.14 02:45:32 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\DoNotTrackPlus [2013.12.14 02:11:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MWSnap [2013.12.14 02:04:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CheckPoint [2013.12.14 02:04:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013.12.14 02:04:05 | 000,000,000 | ---D | C] -- C:\ProgramData\CheckPoint [2013.12.13 19:00:05 | 000,694,240 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013.12.13 19:00:05 | 000,078,304 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013.12.13 18:54:47 | 000,000,000 | R--D | C] -- C:\Windows\BrowserChoice [2013.12.13 18:32:22 | 000,000,000 | ---D | C] -- C:\sources [2013.12.13 16:26:38 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WS_FTP [2013.12.13 16:26:31 | 000,000,000 | ---D | C] -- C:\Program Files\WS_FTP [2013.12.13 16:11:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MWSnap [2013.12.13 14:27:19 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Desktop\Programme [2013.12.13 14:26:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited [2013.12.13 14:26:42 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\Canneverbe Limited [2013.12.13 14:26:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CDBurnerXP [2013.12.13 14:13:36 | 000,000,000 | ---D | C] -- C:\Users\Ralf\Documents\Benutzerdefinierte Office-Vorlagen [2013.12.13 12:51:28 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Cyberlink [2013.12.13 12:51:25 | 000,000,000 | ---D | C] -- C:\Users\Ralf\Documents\CyberLink [2013.12.13 12:51:25 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\CyberLink [2013.12.13 12:51:25 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink [2013.12.13 12:32:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Visan [2013.12.13 12:32:54 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Photo Creations [2013.12.13 12:32:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP Photo Creations [2013.12.13 12:32:51 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\HpUpdate [2013.12.13 12:32:49 | 000,741,480 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\SysNative\HPDiscoPMB011.dll [2013.12.13 12:32:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP [2013.12.13 12:32:37 | 000,000,000 | ---D | C] -- C:\ProgramData\HP [2013.12.13 12:32:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP [2013.12.13 12:32:36 | 000,000,000 | ---D | C] -- C:\Program Files\HP [2013.12.13 12:27:54 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\HP [2013.12.13 10:56:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2013.12.13 10:52:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 [2013.12.13 10:51:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office 15 [2013.12.13 10:18:26 | 003,959,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013.12.13 10:18:20 | 000,915,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll [2013.12.13 10:18:19 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013.12.13 10:18:19 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013.12.13 10:18:17 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013.12.13 10:18:17 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013.12.13 10:18:15 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013.12.13 10:18:14 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013.12.13 10:18:14 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013.12.13 10:18:14 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll [2013.12.13 10:18:14 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll [2013.12.13 10:18:14 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013.12.13 10:17:06 | 000,247,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdFilter.sys [2013.12.13 10:17:05 | 000,036,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdBoot.sys [2013.12.13 10:16:07 | 000,888,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshwfp.dll [2013.12.13 10:16:07 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll [2013.12.13 10:16:07 | 000,381,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FWPUCLNT.DLL [2013.12.13 10:16:07 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL [2013.12.13 10:16:06 | 000,096,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wfplwfs.sys [2013.12.13 10:14:19 | 002,371,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSService.dll [2013.12.13 10:14:19 | 000,209,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NotificationUI.exe [2013.12.13 10:14:18 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll [2013.12.13 10:14:16 | 000,688,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSShared.dll [2013.12.13 10:14:16 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSetupUI.dll [2013.12.13 10:14:15 | 000,562,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSShared.dll [2013.12.13 10:14:15 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll [2013.12.13 10:14:15 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll [2013.12.13 10:14:14 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll [2013.12.13 10:14:14 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll [2013.12.13 10:14:13 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSSync.dll [2013.12.13 10:14:13 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSSync.dll [2013.12.13 10:14:13 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2013.12.13 10:14:12 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSClient.dll [2013.12.13 10:14:12 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.dll [2013.12.13 10:14:12 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe [2013.12.13 10:14:12 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll [2013.12.13 10:14:11 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSClient.dll [2013.12.13 10:14:11 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhostex.exe [2013.12.13 10:14:11 | 000,058,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dam.sys [2013.12.13 10:14:10 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2013.12.13 10:14:08 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll [2013.12.13 10:14:08 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2013.12.13 10:14:08 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcln.dll [2013.12.13 10:14:02 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll [2013.12.13 10:10:33 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll [2013.12.13 10:10:30 | 000,652,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2013.12.13 10:07:38 | 000,054,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys [2013.12.13 10:07:20 | 001,300,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll [2013.12.13 10:06:23 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll [2013.12.13 10:05:57 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys [2013.12.13 10:05:57 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys [2013.12.13 10:05:52 | 001,890,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2013.12.13 09:58:59 | 001,255,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe [2013.12.13 09:58:59 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe [2013.12.13 09:58:59 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2013.12.13 09:58:48 | 000,411,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS [2013.12.13 09:58:01 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Adobe [2013.12.13 09:56:02 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll [2013.12.13 09:56:02 | 000,496,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll [2013.12.13 09:55:51 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgentc.exe [2013.12.13 09:55:51 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe [2013.12.13 09:55:37 | 001,011,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reseteng.dll [2013.12.13 09:55:37 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll [2013.12.13 09:55:20 | 000,362,496 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2013.12.13 09:55:20 | 000,300,032 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2013.12.13 09:55:20 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2013.12.13 09:55:20 | 000,035,328 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2013.12.13 09:55:14 | 000,468,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFMediaEngine.dll [2013.12.13 09:55:14 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFMediaEngine.dll [2013.12.13 09:55:11 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2013.12.13 09:53:04 | 000,498,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2013.12.13 09:53:04 | 000,021,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2013.12.13 09:52:40 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll [2013.12.13 09:52:39 | 000,112,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2013.12.13 09:51:23 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2013.12.13 09:51:20 | 002,842,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2013.12.13 09:51:20 | 002,620,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2013.12.13 09:51:02 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll [2013.12.13 09:51:02 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2013.12.13 09:50:49 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrobj.dll [2013.12.13 09:50:49 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll [2013.12.13 09:50:49 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx [2013.12.13 09:50:48 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrobj.dll [2013.12.13 09:50:48 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll [2013.12.13 09:50:48 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe [2013.12.13 09:50:48 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe [2013.12.13 09:50:31 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2013.12.13 09:50:31 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apprepapi.dll [2013.12.13 09:50:31 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apprepsync.dll [2013.12.13 09:50:31 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apprepapi.dll [2013.12.13 09:50:31 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apprepsync.dll [2013.12.13 09:50:16 | 000,337,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBXHCI.SYS [2013.12.13 09:50:16 | 000,213,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\UCX01000.SYS [2013.12.13 09:50:12 | 002,062,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll [2013.12.13 09:50:12 | 001,711,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll [2013.12.13 09:49:38 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll [2013.12.13 09:49:38 | 002,382,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll [2013.12.13 09:49:36 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll [2013.12.13 09:49:36 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll [2013.12.13 09:49:11 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll [2013.12.13 09:49:11 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll [2013.12.13 09:48:59 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys [2013.12.13 09:48:41 | 006,987,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2013.12.13 09:48:31 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tssdisai.dll [2013.12.13 09:48:30 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDWebAI.dll [2013.12.13 09:48:29 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appserverai.dll [2013.12.13 09:48:29 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmHostAI.dll [2013.12.13 09:48:27 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe [2013.12.13 09:48:27 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe [2013.12.13 09:47:25 | 010,116,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twinui.dll [2013.12.13 09:47:24 | 008,858,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twinui.dll [2013.12.13 09:47:24 | 002,304,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll [2013.12.13 09:47:24 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll [2013.12.13 09:47:23 | 002,035,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2013.12.13 09:47:23 | 000,069,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pdc.sys [2013.12.13 09:47:01 | 000,312,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll [2013.12.13 09:47:01 | 000,273,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll [2013.12.13 09:32:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Anti-Theft Service [2013.12.13 09:31:25 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\Macromedia [2013.12.13 09:30:44 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\ASUS WebStorage [2013.12.13 09:30:11 | 000,000,000 | R--D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2013.12.13 09:30:11 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Searches [2013.12.13 09:30:11 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Contacts [2013.12.13 09:30:11 | 000,000,000 | R--D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2013.12.13 09:30:09 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\Adobe [2013.12.13 09:29:20 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\VirtualStore [2013.12.13 09:29:10 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Packages [2013.12.13 09:29:07 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\ASUS [2013.12.13 09:28:51 | 000,000,000 | --SD | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Videos [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Saved Games [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Pictures [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Music [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Links [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Favorites [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Downloads [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Documents [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\Desktop [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2013.12.13 09:28:51 | 000,000,000 | R--D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Vorlagen [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\AppData\Local\Verlauf [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\AppData\Local\Temporary Internet Files [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Startmenü [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\SendTo [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Recent [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Netzwerkumgebung [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Lokale Einstellungen [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Documents\Eigene Videos [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Documents\Eigene Musik [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Eigene Dateien [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Documents\Eigene Bilder [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Druckumgebung [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Cookies [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\AppData\Local\Anwendungsdaten [2013.12.13 09:28:51 | 000,000,000 | -HSD | C] -- C:\Users\Ralf\Anwendungsdaten [2013.12.13 09:28:51 | 000,000,000 | -H-D | C] -- C:\Users\Ralf\AppData [2013.12.13 09:28:51 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Temp [2013.12.13 09:28:51 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Local\Microsoft [2013.12.13 09:28:51 | 000,000,000 | ---D | C] -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2013.11.17 00:23:00 | 000,000,000 | ---D | C] -- C:\eSupport [2013.11.16 16:00:31 | 000,000,000 | ---D | C] -- C:\ProgramData\USBChargerPlus [2013.11.16 15:53:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AT Service [2013.11.16 15:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\McAfeeEx [2013.11.16 15:51:18 | 000,000,000 | ---D | C] -- C:\ProgramData\P4G [2013.11.16 15:51:18 | 000,000,000 | ---D | C] -- C:\Program Files\ASUS [2013.11.16 15:49:41 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUSDVD [2013.11.16 15:48:00 | 000,029,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2013.11.16 15:48:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CyberLink [2013.11.16 15:47:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp [2013.11.16 15:45:07 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sda [2013.11.16 15:45:04 | 009,888,912 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysWow64\RtsBaStorIcon.dll [2013.11.16 15:45:04 | 000,294,544 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtsBaStor.sys [2013.11.16 15:43:03 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX [2013.11.16 15:42:08 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2013.11.16 15:42:08 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek [2013.11.16 15:41:55 | 003,684,936 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2013.11.16 15:41:55 | 002,746,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2013.11.16 15:41:55 | 002,099,480 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib64.dll [2013.11.16 15:41:55 | 001,658,440 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2013.11.16 15:41:55 | 001,361,336 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosade.dll [2013.11.16 15:41:55 | 000,854,072 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tostae64.dll [2013.11.16 15:41:55 | 000,853,208 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2013.11.16 15:41:55 | 000,836,544 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo264.dll [2013.11.16 15:41:55 | 000,590,904 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosasm64.dll [2013.11.16 15:41:55 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2013.11.16 15:41:55 | 000,331,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2013.11.16 15:41:55 | 000,221,024 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll [2013.11.16 15:41:55 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2013.11.16 15:41:55 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2013.11.16 15:41:55 | 000,186,360 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosoera64.dll [2013.11.16 15:41:55 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2013.11.16 15:41:55 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2013.11.16 15:41:55 | 000,148,416 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo.dll [2013.11.16 15:41:55 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll [2013.11.16 15:41:55 | 000,078,688 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll [2013.11.16 15:41:55 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll [2013.11.16 15:41:55 | 000,065,944 | ---- | C] (TOSHIBA CORPORATION.) -- C:\Windows\SysNative\tepeqapo64.dll [2013.11.16 15:41:55 | 000,014,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll [2013.11.16 15:41:54 | 015,792,640 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2013.11.16 15:41:54 | 001,276,128 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2013.11.16 15:41:54 | 000,988,896 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2013.11.16 15:41:54 | 000,613,448 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll [2013.11.16 15:41:54 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2013.11.16 15:41:54 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2013.11.16 15:41:54 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2013.11.16 15:41:54 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2013.11.16 15:41:54 | 000,129,096 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll [2013.11.16 15:41:54 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2013.11.16 15:41:54 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2013.11.16 15:41:53 | 007,164,176 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll [2013.11.16 15:41:53 | 000,434,960 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll [2013.11.16 15:41:53 | 000,141,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll [2013.11.16 15:41:53 | 000,124,176 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll [2013.11.16 15:41:53 | 000,075,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll [2013.11.16 15:41:52 | 013,367,576 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek64.dll [2013.11.16 15:41:52 | 002,032,584 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll [2013.11.16 15:41:52 | 001,888,536 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek264.dll [2013.11.16 15:41:52 | 000,908,056 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll [2013.11.16 15:41:52 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll [2013.11.16 15:41:52 | 000,395,208 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2013.11.16 15:41:52 | 000,394,616 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2013.11.16 15:41:52 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2013.11.16 15:41:51 | 002,722,848 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2013.11.16 15:41:51 | 001,756,264 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll [2013.11.16 15:41:51 | 001,568,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll [2013.11.16 15:41:51 | 001,486,952 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll [2013.11.16 15:41:51 | 000,728,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll [2013.11.16 15:41:51 | 000,712,296 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll [2013.11.16 15:41:51 | 000,693,352 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll [2013.11.16 15:41:51 | 000,501,192 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll [2013.11.16 15:41:51 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll [2013.11.16 15:41:51 | 000,487,368 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll [2013.11.16 15:41:51 | 000,432,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll [2013.11.16 15:41:51 | 000,428,648 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll [2013.11.16 15:41:51 | 000,415,688 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll [2013.11.16 15:41:51 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll [2013.11.16 15:41:51 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll [2013.11.16 15:41:51 | 000,241,768 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll [2013.11.16 15:41:51 | 000,202,336 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2013.11.16 15:41:51 | 000,110,592 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll [2013.11.16 15:41:51 | 000,108,640 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2013.11.16 15:41:50 | 002,079,816 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2013.11.16 15:41:50 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2013.11.16 15:41:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2013.11.16 15:41:14 | 000,690,832 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt630x64.sys [2013.11.16 15:41:14 | 000,074,344 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll [2013.11.16 15:41:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2013.11.16 15:41:07 | 000,015,168 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll [2013.11.16 15:41:02 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2013.11.16 15:40:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent [2013.11.16 15:40:36 | 000,062,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys [2013.11.16 15:38:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2013.11.16 15:38:16 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\NV [2013.11.16 15:38:16 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\NV [2013.11.16 15:38:14 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2013.11.16 15:38:06 | 006,382,880 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll [2013.11.16 15:38:06 | 003,460,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll [2013.11.16 15:38:06 | 002,558,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll [2013.11.16 15:38:06 | 000,997,664 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll [2013.11.16 15:38:06 | 000,118,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll [2013.11.16 15:38:06 | 000,063,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll [2013.11.16 15:38:06 | 000,055,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll [2013.11.16 15:37:41 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2013.11.16 15:37:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2013.11.16 15:37:18 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2013.11.16 15:37:17 | 002,824,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll [2013.11.16 15:37:17 | 002,504,096 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll [2013.11.16 15:37:17 | 001,814,304 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco64.dll [2013.11.16 15:37:17 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco64.dll [2013.11.16 15:37:14 | 026,931,488 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2013.11.16 15:37:14 | 020,450,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2013.11.16 15:37:14 | 018,054,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2013.11.16 15:37:14 | 015,052,728 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2013.11.16 15:37:14 | 012,641,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2013.11.16 15:37:14 | 007,565,088 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2013.11.16 15:37:14 | 006,263,632 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2013.11.16 15:37:14 | 001,107,440 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll [2013.11.16 15:37:14 | 000,958,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll [2013.11.16 15:37:14 | 000,420,128 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvEncodeAPI64.dll [2013.11.16 15:37:14 | 000,364,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvEncodeAPI.dll [2013.11.16 15:37:14 | 000,245,872 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll [2013.11.16 15:37:14 | 000,201,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll [2013.11.16 15:37:14 | 000,030,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys [2013.11.16 15:37:13 | 025,256,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2013.11.16 15:37:13 | 015,129,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll [2013.11.16 15:37:13 | 009,390,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2013.11.16 15:37:13 | 007,932,256 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2013.11.16 15:37:13 | 002,904,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2013.11.16 15:37:13 | 002,720,544 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2013.11.16 15:37:13 | 002,344,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2013.11.16 15:37:13 | 001,985,824 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2013.11.16 15:37:10 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2013.11.16 15:36:57 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation [2013.11.16 15:34:59 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel [2013.11.16 15:34:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel [2013.11.16 15:34:40 | 000,056,832 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.DLL [2013.11.16 15:34:40 | 000,056,320 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.DLL [2013.11.16 15:30:49 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll [2013.11.16 15:30:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel [2013.11.16 15:30:45 | 000,000,000 | -H-D | C] -- C:\Intel [2013.11.16 15:30:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Qualcomm Atheros [2013.11.16 15:30:09 | 003,653,632 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athw8x.sys [2013.11.16 15:30:09 | 003,653,632 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\SysNative\athw8x.sys [2013.11.16 15:30:09 | 000,000,000 | ---D | C] -- C:\Windows\Options [2013.11.16 15:30:08 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2013.11.16 15:29:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Qualcomm Atheros [2013.11.16 15:23:31 | 000,000,000 | -HSD | C] -- C:\System Volume Information ========== Files - Modified Within 30 Days ========== [2013.12.14 19:34:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013.12.14 19:32:52 | 000,001,938 | ---- | M] () -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk [2013.12.14 19:32:41 | 000,000,062 | ---- | M] () -- C:\Users\Ralf\AppData\Roaming\sp_data.sys [2013.12.14 19:32:03 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2013.12.14 19:32:00 | 2480,963,583 | -HS- | M] () -- C:\hiberfil.sys [2013.12.14 19:11:24 | 000,421,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013.12.14 18:05:06 | 000,041,625 | ---- | M] () -- C:\Users\Ralf\Desktop\131214_Lapo_Leichte_Erholung_ohne_Ältere.pdf [2013.12.14 15:47:39 | 000,000,427 | ---- | M] () -- C:\Windows\pagebreeze.ini [2013.12.14 15:46:05 | 000,000,044 | ---- | M] () -- C:\Windows\formbreeze.ini [2013.12.14 14:12:28 | 000,284,181 | ---- | M] () -- C:\Users\Ralf\Desktop\131214_DZ_Fachkräfteangebot nutzen.pdf [2013.12.14 14:07:59 | 000,282,105 | ---- | M] () -- C:\Users\Ralf\Desktop\131214_DP_Fachkräfteangebot nutzen.pdf [2013.12.14 03:37:03 | 000,132,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys [2013.12.14 03:37:03 | 000,107,416 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys [2013.12.14 03:37:03 | 000,083,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys [2013.12.14 03:37:03 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys [2013.12.14 03:23:54 | 000,000,403 | ---- | M] () -- C:\Windows\ODBC.INI [2013.12.14 02:36:25 | 000,001,134 | ---- | M] () -- C:\Users\Ralf\Desktop\Snipping Tool.lnk [2013.12.14 01:45:26 | 000,000,947 | ---- | M] () -- C:\Users\Ralf\Desktop\V Limburg.lnk [2013.12.13 17:21:23 | 000,000,756 | ---- | M] () -- C:\Users\Ralf\Desktop\Ampuria.lnk [2013.12.13 17:21:18 | 000,000,756 | ---- | M] () -- C:\Users\Ralf\Desktop\Holland.lnk [2013.12.13 17:21:10 | 000,001,385 | ---- | M] () -- C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk [2013.12.13 16:35:09 | 000,029,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2013.12.13 14:58:11 | 000,759,192 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2013.12.13 14:58:11 | 000,716,302 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013.12.13 14:58:11 | 000,158,376 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2013.12.13 14:58:11 | 000,135,164 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013.12.13 14:58:10 | 004,568,320 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013.12.13 13:11:48 | 000,001,349 | ---- | M] () -- C:\Users\Ralf\Desktop\Absage ampuria.lnk [2013.12.13 13:09:05 | 000,000,966 | ---- | M] () -- C:\Users\Ralf\Desktop\2014-NRW.pdf - Verknüpfung.lnk [2013.12.13 13:09:00 | 000,000,966 | ---- | M] () -- C:\Users\Ralf\Desktop\2013-NRW.pdf - Verknüpfung.lnk [2013.12.13 13:08:15 | 000,001,108 | ---- | M] () -- C:\Users\Ralf\Desktop\Calculator.lnk [2013.12.13 13:05:54 | 000,001,732 | ---- | M] () -- C:\Users\Ralf\Desktop\2013 ampuria.lnk [2013.12.13 13:05:23 | 000,001,457 | ---- | M] () -- C:\Users\Ralf\Desktop\Angebot für Folgejahr ampuria.lnk [2013.12.13 13:05:00 | 000,001,385 | ---- | M] () -- C:\Users\Ralf\Desktop\Angebot für Folgejahr NL.lnk [2013.12.13 13:04:40 | 000,001,263 | ---- | M] () -- C:\Users\Ralf\Desktop\Absage NL.lnk [2013.12.13 13:04:14 | 000,001,739 | ---- | M] () -- C:\Users\Ralf\Desktop\2013 NL.lnk [2013.12.13 13:02:12 | 000,001,732 | ---- | M] () -- C:\Users\Ralf\Desktop\2014 ampuia.lnk [2013.12.13 12:32:33 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini [2013.12.13 09:53:44 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2013.12.04 01:53:54 | 000,694,240 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013.12.04 01:53:54 | 000,078,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013.11.23 07:43:58 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll [2013.11.23 06:05:01 | 000,368,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll [2013.11.16 16:01:02 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK [2013.11.16 15:53:26 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevProc_01009.Wdf [2013.11.16 15:53:25 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevFan_01009.Wdf [2013.11.16 15:53:23 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevGen_01009.Wdf [2013.11.16 15:53:22 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfManager_01009.Wdf [2013.11.16 15:53:22 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevDram_01009.Wdf [2013.11.16 15:36:10 | 000,016,316 | ---- | M] () -- C:\Windows\SysNative\results.xml ========== Files Created - No Company Name ========== [2013.12.14 19:11:04 | 000,421,888 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013.12.14 18:05:06 | 000,041,625 | ---- | C] () -- C:\Users\Ralf\Desktop\131214_Lapo_Leichte_Erholung_ohne_Ältere.pdf [2013.12.14 15:46:05 | 000,000,427 | ---- | C] () -- C:\Windows\pagebreeze.ini [2013.12.14 15:46:05 | 000,000,044 | ---- | C] () -- C:\Windows\formbreeze.ini [2013.12.14 14:12:28 | 000,284,181 | ---- | C] () -- C:\Users\Ralf\Desktop\131214_DZ_Fachkräfteangebot nutzen.pdf [2013.12.14 14:07:58 | 000,282,105 | ---- | C] () -- C:\Users\Ralf\Desktop\131214_DP_Fachkräfteangebot nutzen.pdf [2013.12.14 10:19:03 | 000,385,528 | ---- | C] () -- C:\Windows\SysNative\ApnDatabase.xml [2013.12.14 03:20:26 | 000,000,403 | ---- | C] () -- C:\Windows\ODBC.INI [2013.12.14 02:36:25 | 000,001,134 | ---- | C] () -- C:\Users\Ralf\Desktop\Snipping Tool.lnk [2013.12.14 01:45:26 | 000,000,947 | ---- | C] () -- C:\Users\Ralf\Desktop\V Limburg.lnk [2013.12.13 19:04:46 | 000,002,143 | R-S- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Choice.lnk [2013.12.13 17:21:23 | 000,000,756 | ---- | C] () -- C:\Users\Ralf\Desktop\Ampuria.lnk [2013.12.13 17:21:18 | 000,000,756 | ---- | C] () -- C:\Users\Ralf\Desktop\Holland.lnk [2013.12.13 17:21:10 | 000,001,385 | ---- | C] () -- C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk [2013.12.13 14:26:42 | 000,001,901 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk [2013.12.13 13:11:48 | 000,001,349 | ---- | C] () -- C:\Users\Ralf\Desktop\Absage ampuria.lnk [2013.12.13 13:09:05 | 000,000,966 | ---- | C] () -- C:\Users\Ralf\Desktop\2014-NRW.pdf - Verknüpfung.lnk [2013.12.13 13:09:00 | 000,000,966 | ---- | C] () -- C:\Users\Ralf\Desktop\2013-NRW.pdf - Verknüpfung.lnk [2013.12.13 13:08:15 | 000,001,108 | ---- | C] () -- C:\Users\Ralf\Desktop\Calculator.lnk [2013.12.13 13:05:54 | 000,001,732 | ---- | C] () -- C:\Users\Ralf\Desktop\2013 ampuria.lnk [2013.12.13 13:05:23 | 000,001,457 | ---- | C] () -- C:\Users\Ralf\Desktop\Angebot für Folgejahr ampuria.lnk [2013.12.13 13:05:00 | 000,001,385 | ---- | C] () -- C:\Users\Ralf\Desktop\Angebot für Folgejahr NL.lnk [2013.12.13 13:04:40 | 000,001,263 | ---- | C] () -- C:\Users\Ralf\Desktop\Absage NL.lnk [2013.12.13 13:04:14 | 000,001,739 | ---- | C] () -- C:\Users\Ralf\Desktop\2013 NL.lnk [2013.12.13 13:02:12 | 000,001,732 | ---- | C] () -- C:\Users\Ralf\Desktop\2014 ampuia.lnk [2013.12.13 12:34:05 | 000,001,938 | ---- | C] () -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk [2013.12.13 12:32:33 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini [2013.12.13 11:29:19 | 000,002,062 | ---- | C] () -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk [2013.12.13 10:14:04 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll [2013.12.13 09:53:44 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2013.12.13 09:30:50 | 000,000,062 | ---- | C] () -- C:\Users\Ralf\AppData\Roaming\sp_data.sys [2013.12.13 09:30:09 | 000,001,440 | ---- | C] () -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2013.12.13 09:28:51 | 000,002,098 | ---- | C] () -- C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk [2013.11.16 16:01:02 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK [2013.11.16 15:54:11 | 000,022,016 | ---- | C] () -- C:\Windows\SysWow64\ASUS.scr [2013.11.16 15:53:26 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevProc_01009.Wdf [2013.11.16 15:53:25 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevFan_01009.Wdf [2013.11.16 15:53:23 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevGen_01009.Wdf [2013.11.16 15:53:22 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfManager_01009.Wdf [2013.11.16 15:53:22 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_DptfDevDram_01009.Wdf [2013.11.16 15:53:17 | 000,002,032 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk [2013.11.16 15:41:55 | 003,585,776 | ---- | C] () -- C:\Windows\SysNative\drivers\rtvienna.dat [2013.11.16 15:41:54 | 000,407,889 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT [2013.11.16 15:38:06 | 002,934,933 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin [2013.11.16 15:37:14 | 000,017,266 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb [2013.11.16 15:36:10 | 000,016,316 | ---- | C] () -- C:\Windows\SysNative\results.xml [2013.11.16 15:30:09 | 000,332,937 | ---- | C] () -- C:\Windows\SysNative\athw8x.inf [2013.11.16 15:30:09 | 000,080,063 | ---- | C] () -- C:\Windows\SysNative\athw8x.cat [2013.11.16 15:27:50 | 2480,963,583 | -HS- | C] () -- C:\hiberfil.sys [2013.11.16 15:23:33 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys [2013.04.26 00:15:21 | 000,024,576 | ---- | C] () -- C:\ProgramData\SetStretch.exe [2013.04.26 00:15:21 | 000,000,256 | ---- | C] () -- C:\ProgramData\SetStretch.cmd [2013.04.26 00:15:21 | 000,000,103 | ---- | C] () -- C:\ProgramData\SetStretch.VBS [2013.04.24 14:31:35 | 000,004,362 | ---- | C] () -- C:\Windows\SysWow64\DptfInvalidPolicyRemover.ini [2013.04.24 14:30:17 | 000,598,780 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin [2013.04.24 14:30:05 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2013.04.24 14:30:03 | 000,755,048 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin [2012.07.26 09:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2012.07.26 09:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2012.07.26 08:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2012.07.26 02:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2012.07.25 21:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2012.07.25 21:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2012.07.25 21:22:56 | 000,267,284 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng600.bin [2012.07.25 21:22:54 | 000,963,376 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng600.bin [2012.06.02 15:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2012.04.20 14:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll ========== ZeroAccess Check ========== [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.03.06 07:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.03.06 06:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012.07.26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012.07.26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012.07.26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report > Zum Seitenanfang Zum Seitenanfang Zitieren Bearbeiten |
|
14.12.2013, 22:58
| #2 |
| /// the machine /// TB-Ausbilder    | search protect by conduit hi,
__________________ So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
14.12.2013, 23:19
| #3 |
| | search protect by conduit Hier die beiden Scans:
__________________1. FRST-Text FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2013 01
Ran by Ralf (administrator) on ASUS on 14-12-2013 23:12:15
Running from C:\Users\Ralf\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Reimage®) C:\Program Files\AntiToolbar\ReiGuard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-23] (Realtek Semiconductor)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\aprp.exe [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [ATLauncher] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [ATUninstallIcon] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [644656 2013-08-17] (McAfee, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-12-14] (Avira Operations GmbH & Co. KG)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-01-10] (NVIDIA Corporation)
Startup: C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mail.google.com/mail/u/0/?hl=de#inbox
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 AntiToolbarProtector; C:\Program Files\AntiToolbar\ReiGuard.exe [4389224 2013-09-15] (Reimage®)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [972872 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] ()
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [31632 2013-01-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [33168 2013-01-18] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
R2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-11-02] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-01-16] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132600 2013-12-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83160 2013-12-14] (Avira Operations GmbH & Co. KG)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107920 2013-01-18] (Intel Corporation)
R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [43408 2013-01-18] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [65424 2013-01-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229776 2013-01-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363920 2013-01-18] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U0 msahci;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-14 23:12 - 2013-12-14 23:12 - 00013479 _____ C:\Users\Ralf\Desktop\FRST.txt
2013-12-14 23:12 - 2013-12-14 23:12 - 00000000 ____D C:\FRST
2013-12-14 23:10 - 2013-12-14 23:10 - 01927796 _____ (Farbar) C:\Users\Ralf\Desktop\FRST64.exe
2013-12-14 21:54 - 2013-12-14 21:54 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-14 21:54 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Mozilla
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\CDB
2013-12-14 21:35 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\AntiToolbar
2013-12-14 21:35 - 2013-12-14 21:36 - 00000000 ____D C:\Program Files\AntiToolbar
2013-12-14 21:35 - 2013-12-14 21:35 - 04464656 _____ (AVG Technologies) C:\TRANSLATE
2013-12-14 21:30 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\Avg2013
2013-12-14 19:11 - 2013-12-14 19:11 - 00421888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-14 19:08 - 2013-12-14 21:49 - 00000000 ____D C:\AdwCleaner
2013-12-14 16:16 - 2013-12-14 18:46 - 00000000 ____D C:\Program Files (x86)\HTMLFIX
2013-12-14 16:16 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\mresreg
2013-12-14 15:46 - 2013-12-14 15:47 - 00000427 _____ C:\Windows\pagebreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000044 _____ C:\Windows\formbreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\Documents\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PageBreeze
2013-12-14 15:46 - 1999-05-15 00:24 - 00097280 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\vspell32.ocx
2013-12-14 15:46 - 1998-11-22 14:23 - 00084992 _____ (AY Software Corporation) C:\Windows\SysWOW64\Ledit32.dll
2013-12-14 15:46 - 1998-11-18 11:40 - 00089600 _____ (AY Software Corporation) C:\Windows\SysWOW64\Leocx32.ocx
2013-12-14 15:46 - 1998-06-26 00:00 - 00644400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomct2.ocx
2013-12-14 15:46 - 1998-06-24 00:00 - 00369696 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\Comct332.ocx
2013-12-14 15:46 - 1998-06-24 00:00 - 00203576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RICHTX32.OCX
2013-12-14 15:46 - 1998-06-24 00:00 - 00140096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2013-12-14 15:46 - 1998-06-18 00:00 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vb6stkit.dll
2013-12-14 15:46 - 1997-02-24 17:44 - 00070656 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\vspell32.dll
2013-12-14 15:45 - 2013-12-14 15:46 - 00000000 ____D C:\Program Files (x86)\PageBreeze
2013-12-14 15:45 - 2012-12-12 18:30 - 00659456 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ckstring.dll
2013-12-14 15:45 - 2012-12-12 18:27 - 01847296 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ChilkatFtp2.dll
2013-12-14 15:45 - 2012-12-12 18:26 - 01531904 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ChilkatCert.dll
2013-12-14 15:41 - 2013-12-14 15:45 - 00000000 ____D C:\Program Files (x86)\phase5
2013-12-14 11:34 - 2013-12-14 11:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\Microsoft Help
2013-12-14 10:19 - 2013-10-09 02:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-12-14 10:19 - 2013-10-08 23:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-12-14 10:19 - 2013-10-08 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-12-14 10:19 - 2013-10-08 23:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-12-14 10:19 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2013-12-14 10:19 - 2013-10-03 23:09 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml
2013-12-14 10:19 - 2013-10-02 03:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-12-14 10:19 - 2013-09-28 06:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-12-14 10:19 - 2013-09-28 04:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-12-14 10:19 - 2013-09-19 08:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-12-14 10:19 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-12-14 10:19 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2013-12-14 10:19 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2013-12-14 10:19 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2013-12-14 10:19 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2013-12-14 10:19 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2013-12-14 10:19 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2013-12-14 10:19 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2013-12-14 10:19 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2013-12-14 10:19 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-12-14 10:19 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2013-12-14 10:19 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-12-14 10:19 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-12-14 10:19 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-12-14 10:19 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2013-12-14 10:19 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2013-12-14 10:19 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2013-12-14 10:18 - 2013-07-09 09:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2013-12-14 10:18 - 2013-07-09 07:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2013-12-14 10:18 - 2013-07-09 05:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2013-12-14 10:18 - 2013-07-09 04:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll
2013-12-14 10:18 - 2013-07-08 23:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2013-12-14 10:18 - 2013-07-06 01:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-12-14 10:18 - 2013-07-03 01:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-12-14 10:18 - 2013-07-03 01:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2013-12-14 10:18 - 2013-07-03 01:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-12-14 10:18 - 2013-07-03 01:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-12-14 10:18 - 2013-06-30 23:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2013-12-14 10:18 - 2013-06-30 23:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2013-12-14 10:18 - 2013-06-29 07:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2013-12-14 10:18 - 2013-06-29 07:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2013-12-14 10:18 - 2013-06-29 06:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2013-12-14 10:18 - 2013-06-26 04:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2013-12-14 10:18 - 2013-06-26 03:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2013-12-14 10:18 - 2013-06-24 23:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-12-14 10:18 - 2013-06-24 23:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2013-12-14 10:18 - 2013-06-24 23:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2013-12-14 10:18 - 2013-06-19 06:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2013-12-14 10:18 - 2013-06-19 06:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2013-12-14 10:18 - 2013-06-18 23:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2013-12-14 10:18 - 2013-06-18 23:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2013-12-14 10:18 - 2013-06-12 00:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2013-12-14 10:18 - 2013-06-12 00:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2013-12-14 10:18 - 2013-06-06 09:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-12-14 03:39 - 2013-12-14 03:39 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\ProgramData\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 03:38 - 2013-12-14 03:37 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 03:20 - 2013-12-14 03:23 - 00000403 _____ C:\Windows\ODBC.INI
2013-12-14 03:20 - 2013-12-14 03:23 - 00000035 _____ C:\Windows\vbaddin.ini
2013-12-14 03:02 - 2013-12-14 03:02 - 00000000 ___SD C:\Users\Ralf\Documents\Meine Websites
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Expression
2013-12-14 03:01 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-14 02:45 - 2013-12-14 02:45 - 00000000 ____D C:\Users\Ralf\AppData\Local\DoNotTrackPlus
2013-12-14 02:36 - 2013-12-14 02:36 - 00001134 _____ C:\Users\Ralf\Desktop\Snipping Tool.lnk
2013-12-14 02:11 - 2013-12-14 02:43 - 00000000 ____D C:\Program Files (x86)\MWSnap
2013-12-14 02:11 - 2013-12-14 02:11 - 00000921 _____ C:\Users\UpdatusUser\Desktop\MWSnap 3.lnk
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\ProgramData\CheckPoint
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-12-14 01:45 - 2013-12-14 01:45 - 00000947 _____ C:\Users\Ralf\Desktop\V Limburg.lnk
2013-12-13 19:04 - 2013-12-13 19:04 - 00003540 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-13 19:00 - 2013-12-04 01:53 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 19:00 - 2013-12-04 01:53 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-13 18:54 - 2013-12-13 19:04 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-13 18:32 - 2013-12-13 18:32 - 00000000 ____D C:\sources
2013-12-13 17:21 - 2013-12-13 17:21 - 00001385 _____ C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Holland.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Ampuria.lnk
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WS_FTP
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Program Files\WS_FTP
2013-12-13 14:27 - 2013-12-14 15:48 - 00000000 ___RD C:\Users\Ralf\Desktop\Programme
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2013-12-13 14:13 - 2013-12-13 14:13 - 00000000 ____D C:\Users\Ralf\Documents\Benutzerdefinierte Office-Vorlagen
2013-12-13 13:11 - 2013-12-13 13:11 - 00001349 _____ C:\Users\Ralf\Desktop\Absage ampuria.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2014-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2013-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:08 - 2013-12-13 13:08 - 00001108 _____ C:\Users\Ralf\Desktop\Calculator.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001732 _____ C:\Users\Ralf\Desktop\2013 ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001457 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001385 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001739 _____ C:\Users\Ralf\Desktop\2013 NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001263 _____ C:\Users\Ralf\Desktop\Absage NL.lnk
2013-12-13 13:03 - 2013-12-13 13:03 - 00001739 _____ C:\Users\Ralf\Desktop\2014 NL.xls.lnk
2013-12-13 13:02 - 2013-12-13 13:02 - 00001732 _____ C:\Users\Ralf\Desktop\2014 ampuia.lnk
2013-12-13 12:53 - 2013-12-13 12:53 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\Documents\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Local\Cyberlink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-13 12:32 - 2013-12-13 12:32 - 00000057 _____ C:\ProgramData\Ament.ini
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\HpUpdate
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\Visan
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP
2013-12-13 12:32 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMB011.dll
2013-12-13 12:27 - 2013-12-13 12:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\HP
2013-12-13 11:29 - 2013-12-13 11:29 - 00002062 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk
2013-12-13 10:51 - 2013-12-13 13:25 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-12-13 10:18 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 10:18 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 10:18 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 10:18 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 10:18 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 10:18 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-13 10:18 - 2013-05-15 23:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-12-13 10:18 - 2013-05-15 23:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-12-13 10:18 - 2013-05-14 14:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 10:18 - 2013-05-14 10:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 10:18 - 2013-02-21 11:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-13 10:18 - 2013-02-21 11:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 10:18 - 2013-02-21 11:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 10:18 - 2013-02-19 10:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-12-13 10:17 - 2013-07-02 01:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-12-13 10:17 - 2013-07-01 23:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-12-13 10:16 - 2013-10-10 12:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2013-12-13 10:16 - 2013-10-10 10:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-13 10:16 - 2013-10-10 10:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-12-13 10:16 - 2013-06-10 20:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-13 10:16 - 2013-06-10 20:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-13 10:16 - 2013-06-10 20:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-12-13 10:16 - 2013-06-10 20:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-12-13 10:14 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-12-13 10:14 - 2013-08-16 06:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2013-12-13 10:14 - 2013-08-16 06:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2013-12-13 10:14 - 2013-08-16 06:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2013-12-13 10:14 - 2013-08-16 06:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2013-12-13 10:14 - 2013-08-16 06:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-12-13 10:14 - 2013-08-16 06:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-12-13 10:14 - 2013-08-15 23:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2013-12-13 10:14 - 2013-08-15 23:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2013-12-13 10:14 - 2013-03-02 03:45 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-12-13 10:14 - 2013-03-02 03:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2013-12-13 10:10 - 2013-10-19 06:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-13 10:10 - 2013-10-19 05:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-13 10:10 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-12-13 10:10 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-12-13 10:07 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-13 10:07 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-13 10:07 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-12-13 10:07 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-12-13 10:06 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-12-13 10:06 - 2013-07-05 23:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-12-13 10:06 - 2013-05-24 00:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-12-13 10:06 - 2013-05-23 23:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-12-13 10:05 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-12-13 10:05 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-13 10:05 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-12-13 10:05 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-12-13 10:05 - 2013-06-29 04:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-12-13 10:05 - 2013-05-04 05:48 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2013-12-13 09:58 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Local\Adobe
2013-12-13 09:58 - 2013-07-09 07:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-13 09:58 - 2013-04-24 00:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-12-13 09:58 - 2013-04-24 00:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-12-13 09:58 - 2013-04-23 23:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-12-13 09:58 - 2013-04-23 23:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-12-13 09:58 - 2013-03-02 10:59 - 00411880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-12-13 09:56 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-13 09:56 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-12-13 09:56 - 2013-06-01 10:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-12-13 09:56 - 2013-06-01 10:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-12-13 09:55 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-12-13 09:55 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-12-13 09:55 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-12-13 09:55 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-12-13 09:55 - 2013-04-11 23:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-12-13 09:55 - 2013-04-11 23:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-12-13 09:55 - 2013-03-02 09:23 - 00375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2013-12-13 09:55 - 2013-03-02 09:22 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2013-12-13 09:55 - 2013-03-02 03:44 - 01011200 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2013-12-13 09:55 - 2013-03-02 03:44 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2013-12-13 09:55 - 2013-02-05 23:31 - 00622080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-12-13 09:55 - 2013-02-05 23:29 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-12-13 09:55 - 2013-02-05 23:28 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-12-13 09:55 - 2013-02-05 23:28 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-12-13 09:55 - 2012-10-24 04:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2013-12-13 09:55 - 2012-10-24 03:48 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2013-12-13 09:53 - 2013-12-13 09:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-13 09:53 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-13 09:53 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-12-13 09:53 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-12-13 09:52 - 2013-03-06 08:10 - 00112872 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-12-13 09:52 - 2013-03-06 07:31 - 19758592 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-12-13 09:52 - 2013-03-06 07:31 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-12-13 09:52 - 2013-03-06 07:29 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-12-13 09:52 - 2013-03-06 06:03 - 17561600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-12-13 09:52 - 2013-03-06 06:03 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-12-13 09:51 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-13 09:51 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-13 09:51 - 2013-05-04 07:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-12-13 09:51 - 2013-05-04 05:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-12-13 09:51 - 2013-04-27 06:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-12-13 09:50 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-13 09:50 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2013-12-13 09:50 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-13 09:50 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-13 09:50 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-13 09:50 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2013-12-13 09:50 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-13 09:50 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-13 09:50 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-13 09:50 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-12-13 09:50 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-12-13 09:50 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-12-13 09:50 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-12-13 09:50 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-12-13 09:50 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-12-13 09:50 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-12-13 09:50 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-12-13 09:50 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-12-13 09:50 - 2013-03-15 01:17 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2013-12-13 09:49 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-13 09:49 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-13 09:49 - 2013-11-07 00:18 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-13 09:49 - 2013-04-03 00:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-12-13 09:49 - 2013-04-03 00:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-12-13 09:49 - 2013-03-22 04:49 - 02382336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-12-13 09:49 - 2013-03-21 23:47 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-12-13 09:48 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-13 09:48 - 2013-08-07 06:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-12-13 09:48 - 2013-04-11 07:40 - 06987528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-13 09:48 - 2012-11-10 05:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-12-13 09:48 - 2012-11-10 05:23 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-12-13 09:48 - 2012-11-10 05:22 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\RDWebAI.dll
2013-12-13 09:48 - 2012-11-10 05:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VmHostAI.dll
2013-12-13 09:48 - 2012-11-10 05:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\appserverai.dll
2013-12-13 09:47 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-13 09:47 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-13 09:47 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-12-13 09:47 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-13 09:47 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-12-13 09:47 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-12-13 09:47 - 2013-03-02 11:39 - 00069864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2013-12-13 09:47 - 2013-03-02 03:43 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2013-12-13 09:36 - 2013-12-14 19:43 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4081666312-209533117-2721160021-1002
2013-12-13 09:31 - 2013-12-13 09:31 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Macromedia
2013-12-13 09:30 - 2013-12-14 23:05 - 00000062 _____ C:\Users\Ralf\AppData\Roaming\sp_data.sys
2013-12-13 09:30 - 2013-12-14 03:23 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-13 09:30 - 2013-12-13 11:28 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-13 09:30 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Adobe
2013-12-13 09:30 - 2013-12-13 09:30 - 00001440 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-13 09:30 - 2013-12-13 09:30 - 00000192 _____ C:\Windows\FixPatch.log
2013-12-13 09:30 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\ASUS WebStorage
2013-12-13 09:29 - 2013-12-14 16:16 - 00000000 ____D C:\Users\Ralf\AppData\Local\VirtualStore
2013-12-13 09:29 - 2013-12-13 19:04 - 00000000 ____D C:\Users\Ralf\AppData\Local\Packages
2013-12-13 09:29 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\ASUS
2013-12-13 09:28 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000020 ___SH C:\Users\Ralf\ntuser.ini
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Vorlagen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Startmenü
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Netzwerkumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Lokale Einstellungen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Eigene Dateien
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Druckumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Musik
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Bilder
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Verlauf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Anwendungsdaten
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Anwendungsdaten
2013-12-13 09:28 - 2013-04-26 08:59 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 09:28 - 2013-04-26 00:16 - 00002098 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-17 00:23 - 2013-11-16 15:49 - 00000000 ____D C:\eSupport
2013-11-17 00:20 - 2013-08-15 11:54 - 00000044 _____ C:\Windows\AsToolCDVer.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00039480 _____ C:\Windows\AsChkDev.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00000000 _____ C:\Windows\SysWOW64\Drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK
2013-11-16 16:00 - 2013-11-16 16:00 - 00000000 ____D C:\ProgramData\USBChargerPlus
2013-11-16 15:54 - 2013-11-16 15:54 - 00003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2013-11-16 15:54 - 2013-11-16 15:54 - 00002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2013-11-16 15:54 - 2013-01-10 15:20 - 00022016 _____ C:\Windows\SysWOW64\ASUS.scr
2013-11-16 15:53 - 2013-12-13 09:33 - 00000000 ____D C:\Program Files\McAfeeEx
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf
2013-11-16 15:51 - 2013-11-16 15:54 - 00000000 ____D C:\Program Files\ASUS
2013-11-16 15:51 - 2013-11-16 15:51 - 00003112 _____ C:\Windows\System32\Tasks\ASUS Live Update
2013-11-16 15:51 - 2013-11-16 15:51 - 00003054 _____ C:\Windows\System32\Tasks\ASUS P4G
2013-11-16 15:51 - 2013-11-16 15:51 - 00003026 _____ C:\Windows\System32\Tasks\ASUS USB Charger Plus
2013-11-16 15:51 - 2013-11-16 15:51 - 00000000 ____D C:\ProgramData\P4G
2013-11-16 15:48 - 2013-12-13 16:35 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-11-16 15:48 - 2013-12-13 16:35 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-11-16 15:48 - 2013-12-13 16:35 - 00029480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-11-16 15:48 - 2013-11-16 15:48 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-11-16 15:45 - 2013-11-16 15:45 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-11-16 15:45 - 2012-06-13 11:23 - 09888912 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsBaStorIcon.dll
2013-11-16 15:45 - 2012-06-13 11:23 - 00294544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys
2013-11-16 15:43 - 2013-11-16 15:43 - 00004892 _____ C:\Windows\DPINST.LOG
2013-11-16 15:43 - 2013-11-16 15:43 - 00003540 _____ C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2013-11-16 15:43 - 2013-11-16 15:43 - 00000000 ____D C:\Program Files\DIFX
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Program Files\Realtek
2013-11-16 15:41 - 2013-11-16 15:45 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-11-16 15:41 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files\Intel
2013-11-16 15:41 - 2013-01-23 12:00 - 03308360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2013-11-16 15:41 - 2013-01-23 09:36 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2013-11-16 15:41 - 2013-01-23 07:50 - 01658440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2013-11-16 15:41 - 2013-01-23 07:22 - 15792640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2013-11-16 15:41 - 2013-01-22 07:58 - 03684936 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2013-11-16 15:41 - 2013-01-22 07:58 - 02746952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2013-11-16 15:41 - 2013-01-21 09:40 - 00129096 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2013-11-16 15:41 - 2013-01-21 09:29 - 00407889 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2013-11-16 15:41 - 2013-01-17 12:38 - 00908056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2013-11-16 15:41 - 2013-01-17 08:26 - 13367576 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2013-11-16 15:41 - 2013-01-17 08:26 - 01888536 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2013-11-16 15:41 - 2013-01-16 09:02 - 02079816 ____N (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-11-16 15:41 - 2013-01-15 10:21 - 03585776 _____ C:\Windows\system32\Drivers\rtvienna.dat
2013-11-16 15:41 - 2013-01-15 03:33 - 02722848 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2013-11-16 15:41 - 2013-01-09 09:01 - 02099480 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2013-11-16 15:41 - 2013-01-07 02:42 - 00854072 _____ (TOSHIBA Corporation) C:\Windows\system32\tostae64.dll
2013-11-16 15:41 - 2013-01-04 10:21 - 00988896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2013-11-16 15:41 - 2013-01-03 08:02 - 01276128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2013-11-16 15:41 - 2012-12-26 08:33 - 00853208 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2013-11-16 15:41 - 2012-12-25 07:39 - 00590904 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasm64.dll
2013-11-16 15:41 - 2012-12-17 10:49 - 02032584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2013-11-16 15:41 - 2012-12-12 04:17 - 00395208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2013-11-16 15:41 - 2012-12-10 07:23 - 00186360 _____ (TOSHIBA Corporation) C:\Windows\system32\tosoera64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2013-11-16 15:41 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2013-11-16 15:41 - 2012-07-30 17:04 - 00690832 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys
2013-11-16 15:41 - 2012-07-30 17:04 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2013-11-16 15:41 - 2012-07-15 14:13 - 00394616 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2013-11-16 15:41 - 2012-06-25 11:42 - 00015168 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2013-11-16 15:41 - 2012-06-20 10:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2013-11-16 15:41 - 2012-03-08 04:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2013-11-16 15:41 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2013-11-16 15:41 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2013-11-16 15:41 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2013-11-16 15:41 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2013-11-16 15:41 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2013-11-16 15:41 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2013-11-16 15:41 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2013-11-16 15:41 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-11-16 15:41 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-11-16 15:41 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2013-11-16 15:41 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-11-16 15:40 - 2012-07-02 16:16 - 00062784 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2013-11-16 15:38 - 2013-11-16 15:38 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\system32\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-16 15:38 - 2013-04-26 08:59 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-16 15:38 - 2013-04-26 00:16 - 00002098 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2013-11-16 15:38 - 2013-01-10 22:37 - 06382880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-16 15:38 - 2013-01-10 22:37 - 03460896 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 02934933 _____ C:\Windows\system32\nvcoproc.bin
2013-11-16 15:38 - 2013-01-10 22:36 - 02558240 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00997664 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00884512 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-16 15:38 - 2013-01-10 22:36 - 00118560 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00055584 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-16 15:37 - 2013-12-14 19:52 - 01921879 _____ C:\Windows\WindowsUpdate.log
2013-11-16 15:37 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-16 15:37 - 2013-11-16 15:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-16 15:37 - 2013-01-10 09:15 - 26931488 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 20450080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 18054672 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 15129448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 15052728 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 12641480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 11009312 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-16 15:37 - 2013-01-10 09:15 - 09390760 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 07932256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 07565088 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 06263632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02904352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02824504 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02720544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02504096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02344736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01985824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01814304 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01107440 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00958120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00420128 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00364832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00245872 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00201576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2013-11-16 15:37 - 2013-01-10 09:15 - 00017266 _____ C:\Windows\system32\nvinfo.pb
2013-11-16 15:36 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-16 15:36 - 2013-11-16 15:36 - 00016316 _____ C:\Windows\system32\results.xml
2013-11-16 15:34 - 2013-11-16 15:41 - 00000000 ____D C:\ProgramData\Intel
2013-11-16 15:34 - 2012-10-15 05:10 - 00056832 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2013-11-16 15:34 - 2012-10-15 05:10 - 00056320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2013-11-16 15:30 - 2013-12-13 17:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-16 15:30 - 2013-11-16 15:53 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ___HD C:\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Windows\Options
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Qualcomm Atheros
2013-11-16 15:30 - 2012-09-26 22:11 - 00080063 ____N C:\Windows\system32\athw8x.cat
2013-11-16 15:30 - 2012-09-19 01:15 - 03653632 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athw8x.sys
2013-11-16 15:30 - 2012-09-19 01:15 - 03653632 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athw8x.sys
2013-11-16 15:30 - 2012-07-04 03:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2013-11-16 15:29 - 2013-11-16 15:30 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
==================== One Month Modified Files and Folders =======
2013-12-14 23:12 - 2013-12-14 23:12 - 00013479 _____ C:\Users\Ralf\Desktop\FRST.txt
2013-12-14 23:12 - 2013-12-14 23:12 - 00000000 ____D C:\FRST
2013-12-14 23:10 - 2013-12-14 23:10 - 01927796 _____ (Farbar) C:\Users\Ralf\Desktop\FRST64.exe
2013-12-14 23:05 - 2013-12-13 09:30 - 00000062 _____ C:\Users\Ralf\AppData\Roaming\sp_data.sys
2013-12-14 23:05 - 2012-08-02 14:24 - 00120872 _____ C:\Windows\PFRO.log
2013-12-14 23:05 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-14 23:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-12-14 21:54 - 2013-12-14 21:54 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-14 21:49 - 2013-12-14 19:08 - 00000000 ____D C:\AdwCleaner
2013-12-14 21:46 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Mozilla
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\CDB
2013-12-14 21:36 - 2013-12-14 21:35 - 00000000 ____D C:\ProgramData\AntiToolbar
2013-12-14 21:36 - 2013-12-14 21:35 - 00000000 ____D C:\Program Files\AntiToolbar
2013-12-14 21:36 - 2013-12-14 21:30 - 00000000 ____D C:\ProgramData\MFAData
2013-12-14 21:35 - 2013-12-14 21:35 - 04464656 _____ (AVG Technologies) C:\TRANSLATE
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\Avg2013
2013-12-14 21:11 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2013-12-14 21:05 - 2012-07-26 10:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\en-GB
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\WinStore
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-14 21:05 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-12-14 21:05 - 2012-07-26 06:37 - 00000000 ____D C:\Windows\servicing
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\winrm
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\slmgr
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\Com
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\migwiz
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\Sysprep
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe
2013-12-14 21:03 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\en-GB
2013-12-14 21:01 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\WCN
2013-12-14 21:01 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\MUI
2013-12-14 21:01 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\Dism
2013-12-14 21:00 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-12-14 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2013-12-14 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\Com
2013-12-14 19:52 - 2013-11-16 15:37 - 01921879 _____ C:\Windows\WindowsUpdate.log
2013-12-14 19:43 - 2013-12-13 09:36 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4081666312-209533117-2721160021-1002
2013-12-14 19:11 - 2013-12-14 19:11 - 00421888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-14 18:46 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\HTMLFIX
2013-12-14 16:16 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\mresreg
2013-12-14 16:16 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\VirtualStore
2013-12-14 15:48 - 2013-12-13 14:27 - 00000000 ___RD C:\Users\Ralf\Desktop\Programme
2013-12-14 15:47 - 2013-12-14 15:46 - 00000427 _____ C:\Windows\pagebreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000044 _____ C:\Windows\formbreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\Documents\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:45 - 00000000 ____D C:\Program Files (x86)\PageBreeze
2013-12-14 15:45 - 2013-12-14 15:41 - 00000000 ____D C:\Program Files (x86)\phase5
2013-12-14 11:43 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2013-12-14 11:34 - 2013-12-14 11:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\Microsoft Help
2013-12-14 10:13 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-12-14 03:39 - 2013-12-14 03:39 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\ProgramData\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 03:37 - 2013-12-14 03:38 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 03:24 - 2013-04-26 00:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-12-14 03:23 - 2013-12-14 03:20 - 00000403 _____ C:\Windows\ODBC.INI
2013-12-14 03:23 - 2013-12-14 03:20 - 00000035 _____ C:\Windows\vbaddin.ini
2013-12-14 03:23 - 2013-12-13 09:30 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-14 03:23 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\System
2013-12-14 03:20 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help
2013-12-14 03:02 - 2013-12-14 03:02 - 00000000 ___SD C:\Users\Ralf\Documents\Meine Websites
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Expression
2013-12-14 02:45 - 2013-12-14 02:45 - 00000000 ____D C:\Users\Ralf\AppData\Local\DoNotTrackPlus
2013-12-14 02:43 - 2013-12-14 02:11 - 00000000 ____D C:\Program Files (x86)\MWSnap
2013-12-14 02:36 - 2013-12-14 02:36 - 00001134 _____ C:\Users\Ralf\Desktop\Snipping Tool.lnk
2013-12-14 02:11 - 2013-12-14 02:11 - 00000921 _____ C:\Users\UpdatusUser\Desktop\MWSnap 3.lnk
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\ProgramData\CheckPoint
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-12-14 01:45 - 2013-12-14 01:45 - 00000947 _____ C:\Users\Ralf\Desktop\V Limburg.lnk
2013-12-13 19:04 - 2013-12-13 19:04 - 00003540 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-13 19:04 - 2013-12-13 18:54 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-13 19:04 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\Packages
2013-12-13 19:04 - 2012-08-02 14:28 - 00000000 ____D C:\ProgramData\PRICache
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-13 18:51 - 2012-08-03 00:01 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-12-13 18:32 - 2013-12-13 18:32 - 00000000 ____D C:\sources
2013-12-13 17:21 - 2013-12-13 17:21 - 00001385 _____ C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Holland.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Ampuria.lnk
2013-12-13 17:19 - 2013-11-16 15:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-13 16:35 - 2013-11-16 15:48 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-12-13 16:35 - 2013-11-16 15:48 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-12-13 16:35 - 2013-11-16 15:48 - 00029480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WS_FTP
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Program Files\WS_FTP
2013-12-13 16:26 - 2012-07-26 06:26 - 00000273 _____ C:\Windows\win.ini
2013-12-13 14:58 - 2012-08-03 00:02 - 00759192 _____ C:\Windows\system32\perfh007.dat
2013-12-13 14:58 - 2012-08-03 00:02 - 00158376 _____ C:\Windows\system32\perfc007.dat
2013-12-13 14:58 - 2012-07-26 08:28 - 04568320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2013-12-13 14:13 - 2013-12-13 14:13 - 00000000 ____D C:\Users\Ralf\Documents\Benutzerdefinierte Office-Vorlagen
2013-12-13 13:25 - 2013-12-13 10:51 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-12-13 13:11 - 2013-12-13 13:11 - 00001349 _____ C:\Users\Ralf\Desktop\Absage ampuria.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2014-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2013-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:08 - 2013-12-13 13:08 - 00001108 _____ C:\Users\Ralf\Desktop\Calculator.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001732 _____ C:\Users\Ralf\Desktop\2013 ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001457 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001385 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001739 _____ C:\Users\Ralf\Desktop\2013 NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001263 _____ C:\Users\Ralf\Desktop\Absage NL.lnk
2013-12-13 13:03 - 2013-12-13 13:03 - 00001739 _____ C:\Users\Ralf\Desktop\2014 NL.xls.lnk
2013-12-13 13:02 - 2013-12-13 13:02 - 00001732 _____ C:\Users\Ralf\Desktop\2014 ampuia.lnk
2013-12-13 12:53 - 2013-12-13 12:53 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\Documents\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Local\Cyberlink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-13 12:34 - 2013-12-13 12:27 - 00000000 ____D C:\Users\Ralf\AppData\Local\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000057 _____ C:\ProgramData\Ament.ini
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\HpUpdate
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\Visan
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP
2013-12-13 11:29 - 2013-12-13 11:29 - 00002062 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk
2013-12-13 11:28 - 2013-12-13 09:30 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-13 11:24 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2013-12-13 11:24 - 2013-04-26 00:18 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-12-13 11:20 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ToastData
2013-12-13 11:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\restore
2013-12-13 10:30 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-12-13 10:14 - 2013-04-26 00:15 - 06576862 _____ C:\Windows\AsDebug.log
2013-12-13 10:14 - 2013-04-26 00:15 - 01732236 _____ C:\Windows\AsCDProc.log
2013-12-13 09:59 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2013-12-13 09:58 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Local\Adobe
2013-12-13 09:58 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Adobe
2013-12-13 09:53 - 2013-12-13 09:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-13 09:53 - 2012-07-26 08:21 - 00034923 _____ C:\Windows\setupact.log
2013-12-13 09:33 - 2013-11-16 15:53 - 00000000 ____D C:\Program Files\McAfeeEx
2013-12-13 09:31 - 2013-12-13 09:31 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Macromedia
2013-12-13 09:31 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-12-13 09:30 - 2013-12-13 09:30 - 00001440 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-13 09:30 - 2013-12-13 09:30 - 00000192 _____ C:\Windows\FixPatch.log
2013-12-13 09:30 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\ASUS WebStorage
2013-12-13 09:30 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\ASUS
2013-12-13 09:30 - 2013-12-13 09:28 - 00000000 ____D C:\Users\Ralf
2013-12-13 09:30 - 2012-08-02 14:33 - 00000000 ____D C:\Windows\Log
2013-12-13 09:28 - 2013-12-13 09:28 - 00000020 ___SH C:\Users\Ralf\ntuser.ini
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Vorlagen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Startmenü
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Netzwerkumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Lokale Einstellungen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Eigene Dateien
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Druckumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Musik
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Bilder
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Verlauf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Anwendungsdaten
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Anwendungsdaten
2013-12-04 01:53 - 2013-12-13 19:00 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-04 01:53 - 2013-12-13 19:00 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-23 07:43 - 2013-12-13 09:49 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-23 06:05 - 2013-12-13 09:49 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-17 00:23 - 2012-08-02 14:33 - 00000000 ____D C:\Windows\ASUS
2013-11-17 00:21 - 2012-07-26 09:13 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2013-11-16 16:02 - 2012-08-02 23:24 - 00000000 ____D C:\Windows\Panther
2013-11-16 16:02 - 2012-07-26 09:13 - 00003843 _____ C:\Windows\DtcInstall.log
2013-11-16 16:01 - 2013-11-16 16:01 - 00039480 _____ C:\Windows\AsChkDev.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00000000 _____ C:\Windows\SysWOW64\Drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK
2013-11-16 16:00 - 2013-11-16 16:00 - 00000000 ____D C:\ProgramData\USBChargerPlus
2013-11-16 15:54 - 2013-11-16 15:54 - 00003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2013-11-16 15:54 - 2013-11-16 15:54 - 00002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2013-11-16 15:54 - 2013-11-16 15:51 - 00000000 ____D C:\Program Files\ASUS
2013-11-16 15:54 - 2013-04-26 00:16 - 00000000 ____D C:\Program Files (x86)\ASUS
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-16 15:51 - 2013-11-16 15:51 - 00003112 _____ C:\Windows\System32\Tasks\ASUS Live Update
2013-11-16 15:51 - 2013-11-16 15:51 - 00003054 _____ C:\Windows\System32\Tasks\ASUS P4G
2013-11-16 15:51 - 2013-11-16 15:51 - 00003026 _____ C:\Windows\System32\Tasks\ASUS USB Charger Plus
2013-11-16 15:51 - 2013-11-16 15:51 - 00000000 ____D C:\ProgramData\P4G
2013-11-16 15:49 - 2013-11-17 00:23 - 00000000 ____D C:\eSupport
2013-11-16 15:48 - 2013-11-16 15:48 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-11-16 15:45 - 2013-11-16 15:45 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-11-16 15:45 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-11-16 15:43 - 2013-11-16 15:43 - 00004892 _____ C:\Windows\DPINST.LOG
2013-11-16 15:43 - 2013-11-16 15:43 - 00003540 _____ C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2013-11-16 15:43 - 2013-11-16 15:43 - 00000000 ____D C:\Program Files\DIFX
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Program Files\Realtek
2013-11-16 15:41 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files\Intel
2013-11-16 15:41 - 2013-11-16 15:34 - 00000000 ____D C:\ProgramData\Intel
2013-11-16 15:38 - 2013-11-16 15:38 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\system32\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-16 15:38 - 2013-11-16 15:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-16 15:38 - 2013-11-16 15:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-16 15:37 - 2013-11-16 15:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-16 15:36 - 2013-11-16 15:36 - 00016316 _____ C:\Windows\system32\results.xml
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ___HD C:\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Windows\Options
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Qualcomm Atheros
2013-11-16 15:30 - 2013-11-16 15:29 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
Some content of TEMP:
====================
C:\Users\Ralf\AppData\Local\Temp\AntiToolbarPackage.exe
C:\Users\Ralf\AppData\Local\Temp\avgnt.exe
C:\Users\Ralf\AppData\Local\Temp\AVG_AV_Setup.exe
C:\Users\Ralf\AppData\Local\Temp\COMAP.EXE
C:\Users\Ralf\AppData\Local\Temp\gert0.dll
C:\Users\Ralf\AppData\Local\Temp\gert0.exe
C:\Users\Ralf\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Ralf\AppData\Local\Temp\ProtectorPackage.exe
C:\Users\Ralf\AppData\Local\Temp\v-bates.exe
C:\Users\Ralf\AppData\Local\Temp\zatbSetup_110_000_064.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2012-08-02 14:24
==================== End Of Log ============================
--- --- --- und hier Addition-Text: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2013 01
Ran by Ralf at 2013-12-14 23:12:56
Running from C:\Users\Ralf\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8)
AntiToolbar (Version: 1.0.0.6)
ASUS InstantOn (x32 Version: 3.0.5)
ASUS LifeFrame3 (x32 Version: 3.1.13)
ASUS Live Update (x32 Version: 3.1.9)
ASUS Power4Gear Hybrid (Version: 2.0.4)
ASUS Screen Saver (Version: 1.0.1)
ASUS Smart Gesture (x32 Version: 1.1.3)
ASUS Splendid Video Enhancement Technology (x32 Version: 2.01.0002)
ASUS USB Charger Plus (x32 Version: 2.1.5)
ASUS WebStorage Sync Agent (x32 Version: 1.1.18.159)
ASUSDVD (x32 Version: 10.0.5022.52)
ATK Package (x32 Version: 1.0.0027)
Avira Antivirus Suite (x32 Version: 14.0.1.759)
Azteca (x32 Version: 2.2.0.97)
Bejeweled 3 (x32 Version: 2.2.0.97)
CDBurnerXP (x32 Version: 4.5.2.4291)
Cut the Rope (x32 Version: 3.0.2.38)
D3DX10 (x32 Version: 15.4.2368.0902)
Fotogalerie (x32 Version: 16.4.3505.0912)
Galerie de photos (x32 Version: 16.4.3505.0912)
HP Deskjet 3520 series - Grundlegende Software für das Gerät (Version: 28.0.1315.0)
HP Deskjet 3520 series Hilfe (x32 Version: 27.0.0)
HP Deskjet 3520 series Setup Guide (x32 Version: 27.0.0)
HP Photo Creations (x32 Version: 1.0.0.7702)
HP Update (x32 Version: 5.003.003.001)
Intel AT Service (Version: 1.0)
Intel(R) Dynamic Platform and Thermal Framework (x32 Version: 6.0.7.1084)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2867)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Expression Web 4 (x32 Version: 4.0.1460.0)
Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1011)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MyBitCast 2.0 (x32 Version: 2.0)
NVIDIA Control Panel 311.00 (Version: 311.00)
NVIDIA Graphics Driver 311.00 (Version: 311.00)
NVIDIA HD Audio Driver 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA Optimus 1.11.3 (Version: 1.11.3)
NVIDIA PhysX (x32 Version: 9.12.1031)
NVIDIA PhysX System Software 9.12.1031 (Version: 9.12.1031)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4551.1011)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1011)
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4551.1011)
PageBreeze Free HTML Editor (x32)
Peggle (x32 Version: 2.2.0.95)
Penguins! (x32 Version: 2.2.0.98)
Photo Common (x32 Version: 16.4.3505.0912)
Photo Gallery (x32 Version: 16.4.3505.0912)
Qualcomm Atheros Client Installation Program (x32 Version: 10.0)
Raccolta foto (x32 Version: 16.4.3505.0912)
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6829)
Realtek PCIE Card Reader (x32 Version: 6.1.8400.27023)
Shared C Run-time for x64 (Version: 10.0.0)
Tales of Lagoona (x32 Version: 2.2.0.110)
Update Installer for WildTangent Games App (x32)
WildTangent Games (x32 Version: 1.0.0.0)
WildTangent Games App (x32 Version: 4.0.10.5)
Windows Driver Package - ASUS (ATP) Mouse (01/10/2013 1.0.0.170) (Version: 01/10/2013 1.0.0.170)
Windows Live (x32 Version: 16.4.3505.0912)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
WinFlash (x32 Version: 2.41.1)
==================== Restore Points =========================
13-12-2013 10:02:36 Windows Update
14-12-2013 14:40:13 Phase 5 HTML-Editor wird installiert
==================== Hosts content: ==========================
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {084ACEF9-838E-4A6C-9161-F681A0B0AF72} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {2A7DD1FD-C870-4BAB-8DDC-726E3F0C2822} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-29] (ASUS)
Task: {2EBE5AE6-9480-4745-8F50-CE18EF18B17B} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\System32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {860B7C44-3C67-45F6-A065-CC4C2C8B8A95} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2012-11-29] ()
Task: {9E6F6FB3-FDE0-456D-B6B3-440C0C0BF535} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {C11EF59C-A323-4D32-92DE-81CE2D0CBEBF} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2012-08-22] (ASUSTeK Computer Inc.)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CE27194A-E642-485B-8BEF-15D0E1D8962F} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-01-16] (AsusTek)
Task: {D5CAA838-F4B4-423A-8C8F-D06BDA036F53} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\office15\msoia.exe [2013-12-13] (Microsoft Corporation)
Task: {D61C8F57-F735-47D9-97F1-DEF8E937F736} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\office15\msoia.exe [2013-12-13] (Microsoft Corporation)
Task: {E46804A1-793C-4A26-95EB-76380B12A496} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2012-10-24] (ASUS)
Task: {E558BD36-58F6-4C0A-BC34-6C32F2386BB6} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-11-02] (Microsoft Corporation)
==================== Loaded Modules (whitelisted) =============
2012-08-24 18:26 - 2012-08-24 18:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2013-04-24 14:30 - 2012-10-15 05:09 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2013-12-14 03:38 - 2013-12-14 03:36 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-11-16 15:41 - 2012-06-25 11:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/14/2013 03:39:47 AM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16537 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: f34
Startzeit: 01cef875b3c9604b
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID: fb7c866d-6468-11e3-be7a-bcee7b112d1d
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (12/14/2013 03:39:41 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: ASUS)
Description: Die App „DefaultBrowser_NOPUBLISHERID!Microsoft.InternetExplorer.Default“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
Error: (12/14/2013 03:24:00 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: FoxPro Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei FoxPro Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.
Error: (12/14/2013 03:23:59 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: dBase Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei dBase Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.
Error: (12/14/2013 03:23:59 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Tabellen, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Tabellen vorhanden ist und ob Sie darauf Zugriff haben.
Error: (12/14/2013 03:23:58 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Datenbank, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Datenbank vorhanden ist und ob Sie darauf Zugriff haben.
Error: (12/14/2013 03:23:57 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Datenbank, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Datenbank vorhanden ist und ob Sie darauf Zugriff haben.
Error: (12/14/2013 03:23:57 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Datenbank, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Datenbank vorhanden ist und ob Sie darauf Zugriff haben.
Error: (12/14/2013 03:21:35 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: FoxPro Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei FoxPro Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.
Error: (12/14/2013 03:21:33 AM) (Source: MsiInstaller) (User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: dBase Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei dBase Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.
System errors:
=============
Error: (12/14/2013 06:53:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Software Protection" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (12/14/2013 06:53:05 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Software Protection erreicht.
Error: (12/14/2013 00:44:44 PM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalAktivierung{B77C4C36-0154-4C52-AB49-FAA03837E47F}{EA022610-0748-4C24-B229-6C507EBDFDBB}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/14/2013 10:44:56 AM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalAktivierung{B77C4C36-0154-4C52-AB49-FAA03837E47F}{EA022610-0748-4C24-B229-6C507EBDFDBB}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/14/2013 10:44:23 AM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalAktivierung{B77C4C36-0154-4C52-AB49-FAA03837E47F}{EA022610-0748-4C24-B229-6C507EBDFDBB}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/14/2013 03:32:57 AM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/14/2013 03:32:57 AM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/14/2013 03:32:57 AM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/14/2013 03:32:57 AM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/14/2013 03:32:56 AM) (Source: DCOM) (User: ASUS)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}AsusRalfS-1-5-21-4081666312-209533117-2721160021-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Microsoft Office Sessions:
=========================
Error: (12/14/2013 03:39:47 AM) (Source: Application Hang)(User: )
Description: iexplore.exe10.0.9200.16537f3401cef875b3c9604b4294967295C:\Program Files\Internet Explorer\iexplore.exefb7c866d-6468-11e3-be7a-bcee7b112d1d
Error: (12/14/2013 03:39:41 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: ASUS)
Description: DefaultBrowser_NOPUBLISHERID!Microsoft.InternetExplorer.Default
Error: (12/14/2013 03:24:00 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: FoxPro Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei FoxPro Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/14/2013 03:23:59 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: dBase Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei dBase Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/14/2013 03:23:59 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Tabellen, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Tabellen vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/14/2013 03:23:58 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Datenbank, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Datenbank vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/14/2013 03:23:57 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Datenbank, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Datenbank vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/14/2013 03:23:57 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: Visual FoxPro-Datenbank, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei Visual FoxPro-Datenbank vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/14/2013 03:21:35 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: FoxPro Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei FoxPro Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (12/14/2013 03:21:33 AM) (Source: MsiInstaller)(User: ASUS)
Description: Produkt: Microsoft FrontPage 2000 -- Fehler 1919. Fehler beim Konfigurieren der ODBC-Datenquelle: dBase Dateien - Word, ODBC-Fehler 6: Komponente wurde in der Registrierung nicht gefunden. Überprüfen Sie, ob die Datei dBase Dateien - Word vorhanden ist und ob Sie darauf Zugriff haben.(NULL)(NULL)(NULL)(NULL)(NULL)
==================== Memory info ===========================
Percentage of memory in use: 21%
Total physical RAM: 8077.54 MB
Available physical RAM: 6324.48 MB
Total Pagefile: 12685.54 MB
Available Pagefile: 10736.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.74 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:318.33 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:537.8 GB) (Free:523.21 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 568814A2)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
15.12.2013, 08:19
| #4 |
| /// the machine /// TB-Ausbilder | search protect by conduit Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.12.2013, 18:38
| #5 |
| | search protect by conduit Hallo, Malwarebyte hatte heute nacht in 2 Scans jeweils noch Malware gefunden (Qiuckscan 7 Funde, vollständiger Scan 4 Funde). Hier jetzt das Ergebnis eines 3. Scans (vollständig): Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.14.05 Windows 8 x64 NTFS Internet Explorer 10.0.9200.16750 Ralf :: ASUS [Administrator] Schutz: Aktiviert 14.12.2013 23:23:34 mbam-log-2013-12-14 (23-23-34).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 473567 Laufzeit: 51 Minute(n), 25 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Adwarescan: Die gefundene Einstellung müsste meine Startseite beim IE 10 sein. Code:
ATTFilter # AdwCleaner v3.015 - Bericht erstellt am 15/12/2013 um 10:09:38
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : Ralf - ASUS
# Gestartet von : C:\Users\Ralf\Desktop\adwcleaner.exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16537
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://mail.google.com/mail/u/0/?hl=de#inbox
*************************
AdwCleaner[R0].txt - [2413 octets] - [14/12/2013 19:09:03]
AdwCleaner[R1].txt - [822 octets] - [14/12/2013 19:16:17]
AdwCleaner[R2].txt - [1229 octets] - [14/12/2013 21:44:56]
AdwCleaner[R3].txt - [1111 octets] - [14/12/2013 21:49:07]
AdwCleaner[R4].txt - [1182 octets] - [15/12/2013 09:49:51]
AdwCleaner[R5].txt - [924 octets] - [15/12/2013 10:09:38]
AdwCleaner[S0].txt - [2169 octets] - [14/12/2013 19:10:06]
AdwCleaner[S1].txt - [882 octets] - [14/12/2013 19:16:58]
AdwCleaner[S2].txt - [1128 octets] - [14/12/2013 21:46:15]
########## EOF - C:\AdwCleaner\AdwCleaner[R5].txt - [1162 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 8 x64
Ran by Ralf on 15.12.2013 at 9:56:21,92
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.12.2013 at 9:59:42,44
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2013 01
Ran by Ralf (administrator) on ASUS on 15-12-2013 10:00:52
Running from C:\Users\Ralf\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Reimage®) C:\Program Files\AntiToolbar\ReiGuard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
() C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-23] (Realtek Semiconductor)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\aprp.exe [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [ATLauncher] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [ATUninstallIcon] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [644656 2013-08-17] (McAfee, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-12-14] (Avira Operations GmbH & Co. KG)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-01-10] (NVIDIA Corporation)
Startup: C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mail.google.com/mail/u/0/?hl=de#inbox
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 AntiToolbarProtector; C:\Program Files\AntiToolbar\ReiGuard.exe [4389224 2013-09-15] (Reimage®)
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [972872 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] ()
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [31632 2013-01-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [33168 2013-01-18] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
R2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-11-02] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-01-16] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132600 2013-12-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83160 2013-12-14] (Avira Operations GmbH & Co. KG)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107920 2013-01-18] (Intel Corporation)
R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [43408 2013-01-18] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [65424 2013-01-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229776 2013-01-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363920 2013-01-18] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U0 msahci;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-15 10:00 - 2013-12-15 10:00 - 00013364 _____ C:\Users\Ralf\Desktop\FRST.txt
2013-12-15 09:59 - 2013-12-15 09:59 - 00000611 _____ C:\Users\Ralf\Desktop\JRT.txt
2013-12-15 09:52 - 2013-12-15 09:52 - 01034531 _____ (Thisisu) C:\Users\Ralf\Desktop\JRT.exe
2013-12-15 09:52 - 2013-12-15 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-12-15 09:49 - 2013-12-15 09:49 - 01226802 _____ C:\Users\Ralf\Desktop\adwcleaner.exe
2013-12-15 00:47 - 2013-12-15 00:47 - 00021504 ___SH C:\Users\Ralf\Desktop\Thumbs.db
2013-12-14 23:12 - 2013-12-14 23:12 - 00000000 ____D C:\FRST
2013-12-14 23:10 - 2013-12-14 23:10 - 01927796 _____ (Farbar) C:\Users\Ralf\Desktop\FRST64.exe
2013-12-14 21:54 - 2013-12-14 21:54 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-14 21:54 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Mozilla
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\CDB
2013-12-14 21:35 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\AntiToolbar
2013-12-14 21:35 - 2013-12-14 21:36 - 00000000 ____D C:\Program Files\AntiToolbar
2013-12-14 21:35 - 2013-12-14 21:35 - 04464656 _____ (AVG Technologies) C:\TRANSLATE
2013-12-14 21:30 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\Avg2013
2013-12-14 19:11 - 2013-12-14 19:11 - 00421888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-14 19:08 - 2013-12-15 09:50 - 00000000 ____D C:\AdwCleaner
2013-12-14 16:16 - 2013-12-14 18:46 - 00000000 ____D C:\Program Files (x86)\HTMLFIX
2013-12-14 16:16 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\mresreg
2013-12-14 15:46 - 2013-12-14 15:47 - 00000427 _____ C:\Windows\pagebreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000044 _____ C:\Windows\formbreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\Documents\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PageBreeze
2013-12-14 15:46 - 1999-05-15 00:24 - 00097280 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\vspell32.ocx
2013-12-14 15:46 - 1998-11-22 14:23 - 00084992 _____ (AY Software Corporation) C:\Windows\SysWOW64\Ledit32.dll
2013-12-14 15:46 - 1998-11-18 11:40 - 00089600 _____ (AY Software Corporation) C:\Windows\SysWOW64\Leocx32.ocx
2013-12-14 15:46 - 1998-06-26 00:00 - 00644400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomct2.ocx
2013-12-14 15:46 - 1998-06-24 00:00 - 00369696 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\Comct332.ocx
2013-12-14 15:46 - 1998-06-24 00:00 - 00203576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RICHTX32.OCX
2013-12-14 15:46 - 1998-06-24 00:00 - 00140096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2013-12-14 15:46 - 1998-06-18 00:00 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vb6stkit.dll
2013-12-14 15:46 - 1997-02-24 17:44 - 00070656 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\vspell32.dll
2013-12-14 15:45 - 2013-12-14 15:46 - 00000000 ____D C:\Program Files (x86)\PageBreeze
2013-12-14 15:45 - 2012-12-12 18:30 - 00659456 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ckstring.dll
2013-12-14 15:45 - 2012-12-12 18:27 - 01847296 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ChilkatFtp2.dll
2013-12-14 15:45 - 2012-12-12 18:26 - 01531904 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ChilkatCert.dll
2013-12-14 15:41 - 2013-12-14 15:45 - 00000000 ____D C:\Program Files (x86)\phase5
2013-12-14 11:34 - 2013-12-14 11:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\Microsoft Help
2013-12-14 10:19 - 2013-10-09 02:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-12-14 10:19 - 2013-10-08 23:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-12-14 10:19 - 2013-10-08 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-12-14 10:19 - 2013-10-08 23:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-12-14 10:19 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2013-12-14 10:19 - 2013-10-03 23:09 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml
2013-12-14 10:19 - 2013-10-02 03:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-12-14 10:19 - 2013-09-28 06:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-12-14 10:19 - 2013-09-28 04:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-12-14 10:19 - 2013-09-19 08:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-12-14 10:19 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-12-14 10:19 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2013-12-14 10:19 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2013-12-14 10:19 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2013-12-14 10:19 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2013-12-14 10:19 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2013-12-14 10:19 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2013-12-14 10:19 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2013-12-14 10:19 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2013-12-14 10:19 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-12-14 10:19 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2013-12-14 10:19 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-12-14 10:19 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-12-14 10:19 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-12-14 10:19 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2013-12-14 10:19 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2013-12-14 10:19 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2013-12-14 10:18 - 2013-07-09 09:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2013-12-14 10:18 - 2013-07-09 07:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2013-12-14 10:18 - 2013-07-09 05:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2013-12-14 10:18 - 2013-07-09 04:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll
2013-12-14 10:18 - 2013-07-08 23:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2013-12-14 10:18 - 2013-07-06 01:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-12-14 10:18 - 2013-07-03 01:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-12-14 10:18 - 2013-07-03 01:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2013-12-14 10:18 - 2013-07-03 01:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-12-14 10:18 - 2013-07-03 01:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-12-14 10:18 - 2013-06-30 23:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2013-12-14 10:18 - 2013-06-30 23:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2013-12-14 10:18 - 2013-06-29 07:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2013-12-14 10:18 - 2013-06-29 07:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2013-12-14 10:18 - 2013-06-29 06:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2013-12-14 10:18 - 2013-06-26 04:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2013-12-14 10:18 - 2013-06-26 03:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2013-12-14 10:18 - 2013-06-24 23:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-12-14 10:18 - 2013-06-24 23:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2013-12-14 10:18 - 2013-06-24 23:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2013-12-14 10:18 - 2013-06-19 06:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2013-12-14 10:18 - 2013-06-19 06:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2013-12-14 10:18 - 2013-06-18 23:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2013-12-14 10:18 - 2013-06-18 23:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2013-12-14 10:18 - 2013-06-12 00:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2013-12-14 10:18 - 2013-06-12 00:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2013-12-14 10:18 - 2013-06-06 09:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-12-14 03:39 - 2013-12-14 03:39 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\ProgramData\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 03:38 - 2013-12-14 03:37 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 03:20 - 2013-12-14 03:23 - 00000403 _____ C:\Windows\ODBC.INI
2013-12-14 03:20 - 2013-12-14 03:23 - 00000035 _____ C:\Windows\vbaddin.ini
2013-12-14 03:02 - 2013-12-14 03:02 - 00000000 ___SD C:\Users\Ralf\Documents\Meine Websites
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Expression
2013-12-14 03:01 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-14 02:45 - 2013-12-14 02:45 - 00000000 ____D C:\Users\Ralf\AppData\Local\DoNotTrackPlus
2013-12-14 02:36 - 2013-12-14 02:36 - 00001134 _____ C:\Users\Ralf\Desktop\Snipping Tool.lnk
2013-12-14 02:11 - 2013-12-14 02:43 - 00000000 ____D C:\Program Files (x86)\MWSnap
2013-12-14 02:11 - 2013-12-14 02:11 - 00000921 _____ C:\Users\UpdatusUser\Desktop\MWSnap 3.lnk
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\ProgramData\CheckPoint
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-12-14 01:45 - 2013-12-14 01:45 - 00000947 _____ C:\Users\Ralf\Desktop\V Limburg.lnk
2013-12-13 19:04 - 2013-12-13 19:04 - 00003540 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-13 19:00 - 2013-12-04 01:53 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 19:00 - 2013-12-04 01:53 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-13 18:54 - 2013-12-13 19:04 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-13 18:32 - 2013-12-13 18:32 - 00000000 ____D C:\sources
2013-12-13 17:21 - 2013-12-13 17:21 - 00001385 _____ C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Holland.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Ampuria.lnk
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WS_FTP
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Program Files\WS_FTP
2013-12-13 14:27 - 2013-12-14 15:48 - 00000000 ___RD C:\Users\Ralf\Desktop\Programme
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2013-12-13 14:13 - 2013-12-13 14:13 - 00000000 ____D C:\Users\Ralf\Documents\Benutzerdefinierte Office-Vorlagen
2013-12-13 13:11 - 2013-12-13 13:11 - 00001349 _____ C:\Users\Ralf\Desktop\Absage ampuria.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2014-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2013-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:08 - 2013-12-13 13:08 - 00001108 _____ C:\Users\Ralf\Desktop\Rechner.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001732 _____ C:\Users\Ralf\Desktop\2013 ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001457 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001385 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001739 _____ C:\Users\Ralf\Desktop\2013 NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001263 _____ C:\Users\Ralf\Desktop\Absage NL.lnk
2013-12-13 13:03 - 2013-12-13 13:03 - 00001739 _____ C:\Users\Ralf\Desktop\2014 NL.xls.lnk
2013-12-13 13:02 - 2013-12-13 13:02 - 00001732 _____ C:\Users\Ralf\Desktop\2014 ampuia.lnk
2013-12-13 12:53 - 2013-12-13 12:53 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\Documents\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Local\Cyberlink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-13 12:32 - 2013-12-13 12:32 - 00000057 _____ C:\ProgramData\Ament.ini
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\HpUpdate
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\Visan
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP
2013-12-13 12:32 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMB011.dll
2013-12-13 12:27 - 2013-12-13 12:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\HP
2013-12-13 11:29 - 2013-12-13 11:29 - 00002062 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk
2013-12-13 10:51 - 2013-12-13 13:25 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-12-13 10:18 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 10:18 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 10:18 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 10:18 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 10:18 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 10:18 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-13 10:18 - 2013-05-15 23:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-12-13 10:18 - 2013-05-15 23:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-12-13 10:18 - 2013-05-14 14:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 10:18 - 2013-05-14 10:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 10:18 - 2013-02-21 11:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-13 10:18 - 2013-02-21 11:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 10:18 - 2013-02-21 11:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 10:18 - 2013-02-19 10:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-12-13 10:17 - 2013-07-02 01:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-12-13 10:17 - 2013-07-01 23:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-12-13 10:16 - 2013-10-10 12:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2013-12-13 10:16 - 2013-10-10 10:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-13 10:16 - 2013-10-10 10:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-12-13 10:16 - 2013-06-10 20:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-13 10:16 - 2013-06-10 20:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-13 10:16 - 2013-06-10 20:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-12-13 10:16 - 2013-06-10 20:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-12-13 10:14 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-12-13 10:14 - 2013-08-16 06:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2013-12-13 10:14 - 2013-08-16 06:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2013-12-13 10:14 - 2013-08-16 06:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2013-12-13 10:14 - 2013-08-16 06:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2013-12-13 10:14 - 2013-08-16 06:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-12-13 10:14 - 2013-08-16 06:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-12-13 10:14 - 2013-08-15 23:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2013-12-13 10:14 - 2013-08-15 23:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2013-12-13 10:14 - 2013-03-02 03:45 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-12-13 10:14 - 2013-03-02 03:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2013-12-13 10:10 - 2013-10-19 06:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-13 10:10 - 2013-10-19 05:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-13 10:10 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-12-13 10:10 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-12-13 10:07 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-13 10:07 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-13 10:07 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-12-13 10:07 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-12-13 10:06 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-12-13 10:06 - 2013-07-05 23:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-12-13 10:06 - 2013-05-24 00:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-12-13 10:06 - 2013-05-23 23:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-12-13 10:05 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-12-13 10:05 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-13 10:05 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-12-13 10:05 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-12-13 10:05 - 2013-06-29 04:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-12-13 10:05 - 2013-05-04 05:48 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2013-12-13 09:58 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Local\Adobe
2013-12-13 09:58 - 2013-07-09 07:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-13 09:58 - 2013-04-24 00:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-12-13 09:58 - 2013-04-24 00:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-12-13 09:58 - 2013-04-23 23:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-12-13 09:58 - 2013-04-23 23:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-12-13 09:58 - 2013-03-02 10:59 - 00411880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-12-13 09:56 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-13 09:56 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-12-13 09:56 - 2013-06-01 10:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-12-13 09:56 - 2013-06-01 10:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-12-13 09:55 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-12-13 09:55 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-12-13 09:55 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-12-13 09:55 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-12-13 09:55 - 2013-04-11 23:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-12-13 09:55 - 2013-04-11 23:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-12-13 09:55 - 2013-03-02 09:23 - 00375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2013-12-13 09:55 - 2013-03-02 09:22 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2013-12-13 09:55 - 2013-03-02 03:44 - 01011200 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2013-12-13 09:55 - 2013-03-02 03:44 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2013-12-13 09:55 - 2013-02-05 23:31 - 00622080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-12-13 09:55 - 2013-02-05 23:29 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-12-13 09:55 - 2013-02-05 23:28 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-12-13 09:55 - 2013-02-05 23:28 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-12-13 09:55 - 2012-10-24 04:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2013-12-13 09:55 - 2012-10-24 03:48 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2013-12-13 09:53 - 2013-12-13 09:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-13 09:53 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-13 09:53 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-12-13 09:53 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-12-13 09:52 - 2013-03-06 08:10 - 00112872 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-12-13 09:52 - 2013-03-06 07:31 - 19758592 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-12-13 09:52 - 2013-03-06 07:31 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-12-13 09:52 - 2013-03-06 07:29 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-12-13 09:52 - 2013-03-06 06:03 - 17561600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-12-13 09:52 - 2013-03-06 06:03 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-12-13 09:51 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-13 09:51 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-13 09:51 - 2013-05-04 07:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-12-13 09:51 - 2013-05-04 05:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-12-13 09:51 - 2013-04-27 06:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-12-13 09:50 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-13 09:50 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2013-12-13 09:50 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-13 09:50 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-13 09:50 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-13 09:50 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2013-12-13 09:50 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-13 09:50 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-13 09:50 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-13 09:50 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-12-13 09:50 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-12-13 09:50 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-12-13 09:50 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-12-13 09:50 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-12-13 09:50 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-12-13 09:50 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-12-13 09:50 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-12-13 09:50 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-12-13 09:50 - 2013-03-15 01:17 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2013-12-13 09:49 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-13 09:49 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-13 09:49 - 2013-11-07 00:18 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-13 09:49 - 2013-04-03 00:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-12-13 09:49 - 2013-04-03 00:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-12-13 09:49 - 2013-03-22 04:49 - 02382336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-12-13 09:49 - 2013-03-21 23:47 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-12-13 09:48 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-13 09:48 - 2013-08-07 06:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-12-13 09:48 - 2013-04-11 07:40 - 06987528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-13 09:48 - 2012-11-10 05:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-12-13 09:48 - 2012-11-10 05:23 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-12-13 09:48 - 2012-11-10 05:22 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\RDWebAI.dll
2013-12-13 09:48 - 2012-11-10 05:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VmHostAI.dll
2013-12-13 09:48 - 2012-11-10 05:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\appserverai.dll
2013-12-13 09:47 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-13 09:47 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-13 09:47 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-12-13 09:47 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-13 09:47 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-12-13 09:47 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-12-13 09:47 - 2013-03-02 11:39 - 00069864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2013-12-13 09:47 - 2013-03-02 03:43 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2013-12-13 09:36 - 2013-12-14 19:43 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4081666312-209533117-2721160021-1002
2013-12-13 09:31 - 2013-12-13 09:31 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Macromedia
2013-12-13 09:30 - 2013-12-15 09:38 - 00000062 _____ C:\Users\Ralf\AppData\Roaming\sp_data.sys
2013-12-13 09:30 - 2013-12-14 03:23 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-13 09:30 - 2013-12-13 11:28 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-13 09:30 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Adobe
2013-12-13 09:30 - 2013-12-13 09:30 - 00001440 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-13 09:30 - 2013-12-13 09:30 - 00000192 _____ C:\Windows\FixPatch.log
2013-12-13 09:30 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\ASUS WebStorage
2013-12-13 09:29 - 2013-12-14 16:16 - 00000000 ____D C:\Users\Ralf\AppData\Local\VirtualStore
2013-12-13 09:29 - 2013-12-13 19:04 - 00000000 ____D C:\Users\Ralf\AppData\Local\Packages
2013-12-13 09:29 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\ASUS
2013-12-13 09:28 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000020 ___SH C:\Users\Ralf\ntuser.ini
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Vorlagen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Startmenü
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Netzwerkumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Lokale Einstellungen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Eigene Dateien
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Druckumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Musik
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Bilder
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Verlauf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Anwendungsdaten
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Anwendungsdaten
2013-12-13 09:28 - 2013-04-26 08:59 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 09:28 - 2013-04-26 00:16 - 00002098 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-17 00:23 - 2013-11-16 15:49 - 00000000 ____D C:\eSupport
2013-11-17 00:20 - 2013-08-15 11:54 - 00000044 _____ C:\Windows\AsToolCDVer.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00039480 _____ C:\Windows\AsChkDev.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00000000 _____ C:\Windows\SysWOW64\Drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK
2013-11-16 16:00 - 2013-11-16 16:00 - 00000000 ____D C:\ProgramData\USBChargerPlus
2013-11-16 15:54 - 2013-11-16 15:54 - 00003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2013-11-16 15:54 - 2013-11-16 15:54 - 00002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2013-11-16 15:54 - 2013-01-10 15:20 - 00022016 _____ C:\Windows\SysWOW64\ASUS.scr
2013-11-16 15:53 - 2013-12-13 09:33 - 00000000 ____D C:\Program Files\McAfeeEx
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf
2013-11-16 15:51 - 2013-11-16 15:54 - 00000000 ____D C:\Program Files\ASUS
2013-11-16 15:51 - 2013-11-16 15:51 - 00003112 _____ C:\Windows\System32\Tasks\ASUS Live Update
2013-11-16 15:51 - 2013-11-16 15:51 - 00003054 _____ C:\Windows\System32\Tasks\ASUS P4G
2013-11-16 15:51 - 2013-11-16 15:51 - 00003026 _____ C:\Windows\System32\Tasks\ASUS USB Charger Plus
2013-11-16 15:51 - 2013-11-16 15:51 - 00000000 ____D C:\ProgramData\P4G
2013-11-16 15:48 - 2013-12-13 16:35 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-11-16 15:48 - 2013-12-13 16:35 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-11-16 15:48 - 2013-12-13 16:35 - 00029480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-11-16 15:48 - 2013-11-16 15:48 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-11-16 15:45 - 2013-11-16 15:45 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-11-16 15:45 - 2012-06-13 11:23 - 09888912 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsBaStorIcon.dll
2013-11-16 15:45 - 2012-06-13 11:23 - 00294544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys
2013-11-16 15:43 - 2013-11-16 15:43 - 00004892 _____ C:\Windows\DPINST.LOG
2013-11-16 15:43 - 2013-11-16 15:43 - 00003540 _____ C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2013-11-16 15:43 - 2013-11-16 15:43 - 00000000 ____D C:\Program Files\DIFX
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Program Files\Realtek
2013-11-16 15:41 - 2013-11-16 15:45 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-11-16 15:41 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files\Intel
2013-11-16 15:41 - 2013-01-23 12:00 - 03308360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2013-11-16 15:41 - 2013-01-23 09:36 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2013-11-16 15:41 - 2013-01-23 07:50 - 01658440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2013-11-16 15:41 - 2013-01-23 07:22 - 15792640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2013-11-16 15:41 - 2013-01-22 07:58 - 03684936 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2013-11-16 15:41 - 2013-01-22 07:58 - 02746952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2013-11-16 15:41 - 2013-01-21 09:40 - 00129096 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2013-11-16 15:41 - 2013-01-21 09:29 - 00407889 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2013-11-16 15:41 - 2013-01-17 12:38 - 00908056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2013-11-16 15:41 - 2013-01-17 08:26 - 13367576 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2013-11-16 15:41 - 2013-01-17 08:26 - 01888536 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2013-11-16 15:41 - 2013-01-16 09:02 - 02079816 ____N (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-11-16 15:41 - 2013-01-15 10:21 - 03585776 _____ C:\Windows\system32\Drivers\rtvienna.dat
2013-11-16 15:41 - 2013-01-15 03:33 - 02722848 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2013-11-16 15:41 - 2013-01-09 09:01 - 02099480 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2013-11-16 15:41 - 2013-01-07 02:42 - 00854072 _____ (TOSHIBA Corporation) C:\Windows\system32\tostae64.dll
2013-11-16 15:41 - 2013-01-04 10:21 - 00988896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2013-11-16 15:41 - 2013-01-03 08:02 - 01276128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2013-11-16 15:41 - 2012-12-26 08:33 - 00853208 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2013-11-16 15:41 - 2012-12-25 07:39 - 00590904 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasm64.dll
2013-11-16 15:41 - 2012-12-17 10:49 - 02032584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2013-11-16 15:41 - 2012-12-12 04:17 - 00395208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2013-11-16 15:41 - 2012-12-10 07:23 - 00186360 _____ (TOSHIBA Corporation) C:\Windows\system32\tosoera64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2013-11-16 15:41 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2013-11-16 15:41 - 2012-07-30 17:04 - 00690832 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys
2013-11-16 15:41 - 2012-07-30 17:04 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2013-11-16 15:41 - 2012-07-15 14:13 - 00394616 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2013-11-16 15:41 - 2012-06-25 11:42 - 00015168 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2013-11-16 15:41 - 2012-06-20 10:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2013-11-16 15:41 - 2012-03-08 04:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2013-11-16 15:41 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2013-11-16 15:41 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2013-11-16 15:41 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2013-11-16 15:41 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2013-11-16 15:41 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2013-11-16 15:41 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2013-11-16 15:41 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2013-11-16 15:41 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-11-16 15:41 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-11-16 15:41 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2013-11-16 15:41 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-11-16 15:40 - 2012-07-02 16:16 - 00062784 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2013-11-16 15:38 - 2013-11-16 15:38 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\system32\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-16 15:38 - 2013-04-26 08:59 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-16 15:38 - 2013-04-26 00:16 - 00002098 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2013-11-16 15:38 - 2013-01-10 22:37 - 06382880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-16 15:38 - 2013-01-10 22:37 - 03460896 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 02934933 _____ C:\Windows\system32\nvcoproc.bin
2013-11-16 15:38 - 2013-01-10 22:36 - 02558240 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00997664 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00884512 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-16 15:38 - 2013-01-10 22:36 - 00118560 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00055584 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-16 15:37 - 2013-12-15 09:51 - 01948188 _____ C:\Windows\WindowsUpdate.log
2013-11-16 15:37 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-16 15:37 - 2013-11-16 15:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-16 15:37 - 2013-01-10 09:15 - 26931488 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 20450080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 18054672 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 15129448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 15052728 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 12641480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 11009312 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-16 15:37 - 2013-01-10 09:15 - 09390760 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 07932256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 07565088 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 06263632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02904352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02824504 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02720544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02504096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02344736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01985824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01814304 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01107440 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00958120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00420128 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00364832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00245872 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00201576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2013-11-16 15:37 - 2013-01-10 09:15 - 00017266 _____ C:\Windows\system32\nvinfo.pb
2013-11-16 15:36 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-16 15:36 - 2013-11-16 15:36 - 00016316 _____ C:\Windows\system32\results.xml
2013-11-16 15:34 - 2013-11-16 15:41 - 00000000 ____D C:\ProgramData\Intel
2013-11-16 15:34 - 2012-10-15 05:10 - 00056832 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2013-11-16 15:34 - 2012-10-15 05:10 - 00056320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2013-11-16 15:30 - 2013-12-13 17:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-16 15:30 - 2013-11-16 15:53 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ___HD C:\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Windows\Options
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Qualcomm Atheros
2013-11-16 15:30 - 2012-09-26 22:11 - 00080063 ____N C:\Windows\system32\athw8x.cat
2013-11-16 15:30 - 2012-09-19 01:15 - 03653632 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athw8x.sys
2013-11-16 15:30 - 2012-09-19 01:15 - 03653632 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athw8x.sys
2013-11-16 15:30 - 2012-07-04 03:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2013-11-16 15:29 - 2013-11-16 15:30 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
==================== One Month Modified Files and Folders =======
2013-12-15 10:00 - 2013-12-15 10:00 - 00013364 _____ C:\Users\Ralf\Desktop\FRST.txt
2013-12-15 10:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-12-15 09:59 - 2013-12-15 09:59 - 00000611 _____ C:\Users\Ralf\Desktop\JRT.txt
2013-12-15 09:52 - 2013-12-15 09:52 - 01034531 _____ (Thisisu) C:\Users\Ralf\Desktop\JRT.exe
2013-12-15 09:52 - 2013-12-15 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-12-15 09:51 - 2013-11-16 15:37 - 01948188 _____ C:\Windows\WindowsUpdate.log
2013-12-15 09:50 - 2013-12-14 19:08 - 00000000 ____D C:\AdwCleaner
2013-12-15 09:49 - 2013-12-15 09:49 - 01226802 _____ C:\Users\Ralf\Desktop\adwcleaner.exe
2013-12-15 09:38 - 2013-12-13 09:30 - 00000062 _____ C:\Users\Ralf\AppData\Roaming\sp_data.sys
2013-12-15 00:47 - 2013-12-15 00:47 - 00021504 ___SH C:\Users\Ralf\Desktop\Thumbs.db
2013-12-15 00:29 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-15 00:29 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-12-14 23:12 - 2013-12-14 23:12 - 00000000 ____D C:\FRST
2013-12-14 23:10 - 2013-12-14 23:10 - 01927796 _____ (Farbar) C:\Users\Ralf\Desktop\FRST64.exe
2013-12-14 23:05 - 2012-08-02 14:24 - 00120872 _____ C:\Windows\PFRO.log
2013-12-14 21:54 - 2013-12-14 21:54 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Mozilla
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\CDB
2013-12-14 21:36 - 2013-12-14 21:35 - 00000000 ____D C:\ProgramData\AntiToolbar
2013-12-14 21:36 - 2013-12-14 21:35 - 00000000 ____D C:\Program Files\AntiToolbar
2013-12-14 21:36 - 2013-12-14 21:30 - 00000000 ____D C:\ProgramData\MFAData
2013-12-14 21:35 - 2013-12-14 21:35 - 04464656 _____ (AVG Technologies) C:\TRANSLATE
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\Avg2013
2013-12-14 21:11 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2013-12-14 21:05 - 2012-07-26 10:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\en-GB
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\WinStore
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-14 21:05 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-12-14 21:05 - 2012-07-26 06:37 - 00000000 ____D C:\Windows\servicing
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\winrm
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\slmgr
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\Com
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\migwiz
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\Sysprep
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe
2013-12-14 21:03 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\en-GB
2013-12-14 21:01 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\WCN
2013-12-14 21:01 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\MUI
2013-12-14 21:01 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\Dism
2013-12-14 21:00 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-12-14 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2013-12-14 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\Com
2013-12-14 19:43 - 2013-12-13 09:36 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4081666312-209533117-2721160021-1002
2013-12-14 19:11 - 2013-12-14 19:11 - 00421888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-14 18:46 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\HTMLFIX
2013-12-14 16:16 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\mresreg
2013-12-14 16:16 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\VirtualStore
2013-12-14 15:48 - 2013-12-13 14:27 - 00000000 ___RD C:\Users\Ralf\Desktop\Programme
2013-12-14 15:47 - 2013-12-14 15:46 - 00000427 _____ C:\Windows\pagebreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000044 _____ C:\Windows\formbreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\Documents\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:45 - 00000000 ____D C:\Program Files (x86)\PageBreeze
2013-12-14 15:45 - 2013-12-14 15:41 - 00000000 ____D C:\Program Files (x86)\phase5
2013-12-14 11:43 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2013-12-14 11:34 - 2013-12-14 11:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\Microsoft Help
2013-12-14 10:13 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-12-14 03:39 - 2013-12-14 03:39 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\ProgramData\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 03:37 - 2013-12-14 03:38 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 03:24 - 2013-04-26 00:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-12-14 03:23 - 2013-12-14 03:20 - 00000403 _____ C:\Windows\ODBC.INI
2013-12-14 03:23 - 2013-12-14 03:20 - 00000035 _____ C:\Windows\vbaddin.ini
2013-12-14 03:23 - 2013-12-13 09:30 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-14 03:23 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\System
2013-12-14 03:20 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help
2013-12-14 03:02 - 2013-12-14 03:02 - 00000000 ___SD C:\Users\Ralf\Documents\Meine Websites
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Expression
2013-12-14 02:45 - 2013-12-14 02:45 - 00000000 ____D C:\Users\Ralf\AppData\Local\DoNotTrackPlus
2013-12-14 02:43 - 2013-12-14 02:11 - 00000000 ____D C:\Program Files (x86)\MWSnap
2013-12-14 02:36 - 2013-12-14 02:36 - 00001134 _____ C:\Users\Ralf\Desktop\Snipping Tool.lnk
2013-12-14 02:11 - 2013-12-14 02:11 - 00000921 _____ C:\Users\UpdatusUser\Desktop\MWSnap 3.lnk
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\ProgramData\CheckPoint
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-12-14 01:45 - 2013-12-14 01:45 - 00000947 _____ C:\Users\Ralf\Desktop\V Limburg.lnk
2013-12-13 19:04 - 2013-12-13 19:04 - 00003540 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-13 19:04 - 2013-12-13 18:54 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-13 19:04 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\Packages
2013-12-13 19:04 - 2012-08-02 14:28 - 00000000 ____D C:\ProgramData\PRICache
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-13 18:51 - 2012-08-03 00:01 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-12-13 18:32 - 2013-12-13 18:32 - 00000000 ____D C:\sources
2013-12-13 17:21 - 2013-12-13 17:21 - 00001385 _____ C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Holland.lnk
2013-12-13 17:21 - 2013-12-13 17:21 - 00000756 _____ C:\Users\Ralf\Desktop\Ampuria.lnk
2013-12-13 17:19 - 2013-11-16 15:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-13 16:35 - 2013-11-16 15:48 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-12-13 16:35 - 2013-11-16 15:48 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-12-13 16:35 - 2013-11-16 15:48 - 00029480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WS_FTP
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Program Files\WS_FTP
2013-12-13 16:26 - 2012-07-26 06:26 - 00000273 _____ C:\Windows\win.ini
2013-12-13 14:58 - 2012-08-03 00:02 - 00759192 _____ C:\Windows\system32\perfh007.dat
2013-12-13 14:58 - 2012-08-03 00:02 - 00158376 _____ C:\Windows\system32\perfc007.dat
2013-12-13 14:58 - 2012-07-26 08:28 - 04568320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2013-12-13 14:13 - 2013-12-13 14:13 - 00000000 ____D C:\Users\Ralf\Documents\Benutzerdefinierte Office-Vorlagen
2013-12-13 13:25 - 2013-12-13 10:51 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-12-13 13:11 - 2013-12-13 13:11 - 00001349 _____ C:\Users\Ralf\Desktop\Absage ampuria.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2014-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:09 - 2013-12-13 13:09 - 00000966 _____ C:\Users\Ralf\Desktop\2013-NRW.pdf - Verknüpfung.lnk
2013-12-13 13:08 - 2013-12-13 13:08 - 00001108 _____ C:\Users\Ralf\Desktop\Rechner.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001732 _____ C:\Users\Ralf\Desktop\2013 ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001457 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr ampuria.lnk
2013-12-13 13:05 - 2013-12-13 13:05 - 00001385 _____ C:\Users\Ralf\Desktop\Angebot für Folgejahr NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001739 _____ C:\Users\Ralf\Desktop\2013 NL.lnk
2013-12-13 13:04 - 2013-12-13 13:04 - 00001263 _____ C:\Users\Ralf\Desktop\Absage NL.lnk
2013-12-13 13:03 - 2013-12-13 13:03 - 00001739 _____ C:\Users\Ralf\Desktop\2014 NL.xls.lnk
2013-12-13 13:02 - 2013-12-13 13:02 - 00001732 _____ C:\Users\Ralf\Desktop\2014 ampuia.lnk
2013-12-13 12:53 - 2013-12-13 12:53 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\Documents\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Local\Cyberlink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-13 12:34 - 2013-12-13 12:27 - 00000000 ____D C:\Users\Ralf\AppData\Local\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000057 _____ C:\ProgramData\Ament.ini
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\HpUpdate
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\Visan
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP
2013-12-13 11:29 - 2013-12-13 11:29 - 00002062 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk
2013-12-13 11:28 - 2013-12-13 09:30 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-13 11:24 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2013-12-13 11:24 - 2013-04-26 00:18 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-12-13 11:20 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ToastData
2013-12-13 11:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\restore
2013-12-13 10:30 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-12-13 10:14 - 2013-04-26 00:15 - 06576862 _____ C:\Windows\AsDebug.log
2013-12-13 10:14 - 2013-04-26 00:15 - 01732236 _____ C:\Windows\AsCDProc.log
2013-12-13 09:59 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2013-12-13 09:58 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Local\Adobe
2013-12-13 09:58 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Adobe
2013-12-13 09:53 - 2013-12-13 09:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-13 09:53 - 2012-07-26 08:21 - 00034923 _____ C:\Windows\setupact.log
2013-12-13 09:33 - 2013-11-16 15:53 - 00000000 ____D C:\Program Files\McAfeeEx
2013-12-13 09:31 - 2013-12-13 09:31 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Macromedia
2013-12-13 09:31 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-12-13 09:30 - 2013-12-13 09:30 - 00001440 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-13 09:30 - 2013-12-13 09:30 - 00000192 _____ C:\Windows\FixPatch.log
2013-12-13 09:30 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\ASUS WebStorage
2013-12-13 09:30 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\ASUS
2013-12-13 09:30 - 2013-12-13 09:28 - 00000000 ____D C:\Users\Ralf
2013-12-13 09:30 - 2012-08-02 14:33 - 00000000 ____D C:\Windows\Log
2013-12-13 09:28 - 2013-12-13 09:28 - 00000020 ___SH C:\Users\Ralf\ntuser.ini
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Vorlagen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Startmenü
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Netzwerkumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Lokale Einstellungen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Eigene Dateien
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Druckumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Musik
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Bilder
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Verlauf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Anwendungsdaten
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Anwendungsdaten
2013-12-04 01:53 - 2013-12-13 19:00 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-04 01:53 - 2013-12-13 19:00 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-23 07:43 - 2013-12-13 09:49 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-23 06:05 - 2013-12-13 09:49 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-17 00:23 - 2012-08-02 14:33 - 00000000 ____D C:\Windows\ASUS
2013-11-17 00:21 - 2012-07-26 09:13 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2013-11-16 16:02 - 2012-08-02 23:24 - 00000000 ____D C:\Windows\Panther
2013-11-16 16:02 - 2012-07-26 09:13 - 00003843 _____ C:\Windows\DtcInstall.log
2013-11-16 16:01 - 2013-11-16 16:01 - 00039480 _____ C:\Windows\AsChkDev.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00000000 _____ C:\Windows\SysWOW64\Drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK
2013-11-16 16:00 - 2013-11-16 16:00 - 00000000 ____D C:\ProgramData\USBChargerPlus
2013-11-16 15:54 - 2013-11-16 15:54 - 00003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2013-11-16 15:54 - 2013-11-16 15:54 - 00002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2013-11-16 15:54 - 2013-11-16 15:51 - 00000000 ____D C:\Program Files\ASUS
2013-11-16 15:54 - 2013-04-26 00:16 - 00000000 ____D C:\Program Files (x86)\ASUS
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-16 15:51 - 2013-11-16 15:51 - 00003112 _____ C:\Windows\System32\Tasks\ASUS Live Update
2013-11-16 15:51 - 2013-11-16 15:51 - 00003054 _____ C:\Windows\System32\Tasks\ASUS P4G
2013-11-16 15:51 - 2013-11-16 15:51 - 00003026 _____ C:\Windows\System32\Tasks\ASUS USB Charger Plus
2013-11-16 15:51 - 2013-11-16 15:51 - 00000000 ____D C:\ProgramData\P4G
2013-11-16 15:49 - 2013-11-17 00:23 - 00000000 ____D C:\eSupport
2013-11-16 15:48 - 2013-11-16 15:48 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-11-16 15:45 - 2013-11-16 15:45 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-11-16 15:45 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-11-16 15:43 - 2013-11-16 15:43 - 00004892 _____ C:\Windows\DPINST.LOG
2013-11-16 15:43 - 2013-11-16 15:43 - 00003540 _____ C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2013-11-16 15:43 - 2013-11-16 15:43 - 00000000 ____D C:\Program Files\DIFX
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Program Files\Realtek
2013-11-16 15:41 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files\Intel
2013-11-16 15:41 - 2013-11-16 15:34 - 00000000 ____D C:\ProgramData\Intel
2013-11-16 15:38 - 2013-11-16 15:38 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\system32\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-16 15:38 - 2013-11-16 15:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-16 15:38 - 2013-11-16 15:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-16 15:37 - 2013-11-16 15:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-16 15:36 - 2013-11-16 15:36 - 00016316 _____ C:\Windows\system32\results.xml
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ___HD C:\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Windows\Options
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Qualcomm Atheros
2013-11-16 15:30 - 2013-11-16 15:29 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
Some content of TEMP:
====================
C:\Users\Ralf\AppData\Local\Temp\AntiToolbarPackage.exe
C:\Users\Ralf\AppData\Local\Temp\avgnt.exe
C:\Users\Ralf\AppData\Local\Temp\AVG_AV_Setup.exe
C:\Users\Ralf\AppData\Local\Temp\COMAP.EXE
C:\Users\Ralf\AppData\Local\Temp\gert0.dll
C:\Users\Ralf\AppData\Local\Temp\gert0.exe
C:\Users\Ralf\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Ralf\AppData\Local\Temp\ProtectorPackage.exe
C:\Users\Ralf\AppData\Local\Temp\v-bates.exe
C:\Users\Ralf\AppData\Local\Temp\zatbSetup_110_000_064.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2012-08-02 14:24
==================== End Of Log ============================
--- --- --- Hallo Schrauber, muss ich noch etwas tun? Wie bewertest Du die Scans? Herzliche Grüße ampuriabrava |
|
16.12.2013, 11:35
| #6 |
| /// the machine /// TB-Ausbilder | search protect by conduit Ich werte die manuell aus  Kontrollscans, dann sind wir fertig ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> search protect by conduit |
|
16.12.2013, 13:08
| #7 |
| | search protect by conduit So, dann kann's losgehen: ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=23be4faeb6ad234b93ab5de0d199d2fd
# engine=16283
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-16 11:51:09
# local_time=2013-12-16 12:51:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT
# compatibility_mode=5893 16776574 100 94 146753 20231174 0 0
# scanned=258169
# found=0
# cleaned=0
# scan_time=3989
Code:
ATTFilter Results of screen317's Security Check version 0.99.77 x64 (UAC is enabled) Internet Explorer 10 Out of date! ``````````````Antivirus/Firewall Check:`````````````` Windows Defender Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Reader XI ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-12-2013 02
Ran by Ralf (administrator) on ASUS on 16-12-2013 13:01:42
Running from C:\Users\Ralf\Desktop
Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
() C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicator.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\SnippingTool.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-23] (Realtek Semiconductor)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKCU\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\aprp.exe [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [ATLauncher] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [ATUninstallIcon] - C:\Program Files\McAfeeEx\McAfeeAntiTheft\ATLauncher.exe [511232 2013-07-23] (McAfee, Inc.)
HKLM-x32\...\Run: [mcpltui_exe] - C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [644656 2013-08-17] (McAfee, Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-12-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-01-10] (NVIDIA Corporation)
Startup: C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mail.google.com/mail/u/0/?hl=de&shva=1#inbox
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASU2JS
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
==================== Services (Whitelisted) =================
R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [972872 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] ()
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [31632 2013-01-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [33168 2013-01-18] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-24] (McAfee, Inc.)
R2 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McSchedulerSvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-11-02] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
S3 ASUSProcObsrv; C:\eSupport\eDriver\I386\AsPrOb64.sys [12416 2010-05-26] ()
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-01-16] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132600 2013-12-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-14] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83160 2013-12-14] (Avira Operations GmbH & Co. KG)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [107920 2013-01-18] (Intel Corporation)
R3 DptfDevFan; C:\Windows\system32\DRIVERS\DptfDevFan.sys [43408 2013-01-18] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [65424 2013-01-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [229776 2013-01-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [363920 2013-01-18] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
U0 msahci;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-16 13:01 - 2013-12-16 13:01 - 00000000 ____D C:\Users\Ralf\Desktop\FRST-OlderVersion
2013-12-16 12:59 - 2013-12-16 12:59 - 00000906 _____ C:\Users\Ralf\Desktop\checkup.txt
2013-12-16 12:56 - 2013-12-16 12:56 - 00891200 _____ C:\Users\Ralf\Desktop\SecurityCheck.exe
2013-12-16 10:57 - 2013-12-16 10:57 - 00001058 _____ C:\Windows\PFRO.log
2013-12-16 10:49 - 2013-12-16 10:53 - 00039168 _____ C:\Windows\WindowsUpdate.log
2013-12-15 20:07 - 2013-12-15 20:07 - 01544704 _____ C:\Windows\isRS-000.tmp
2013-12-15 14:13 - 2013-12-15 19:09 - 00000000 ____D C:\Users\Ralf\Desktop\NL
2013-12-15 14:13 - 2013-12-15 19:07 - 00000000 ____D C:\Users\Ralf\Desktop\Ampuria
2013-12-15 14:02 - 2013-12-15 14:02 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-15 13:57 - 2013-12-15 13:57 - 00002001 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update Checker.lnk
2013-12-15 13:57 - 2013-12-15 13:57 - 00000000 ____D C:\Program Files (x86)\FileHippo.com
2013-12-15 13:34 - 2013-12-15 13:34 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-12-15 13:12 - 2013-12-15 13:12 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-15 13:12 - 2013-12-15 13:12 - 00000000 ____D C:\Program Files\CCleaner
2013-12-15 12:15 - 2013-12-15 12:16 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 12:15 - 2013-12-01 14:42 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-15 11:20 - 2013-12-15 11:20 - 00000000 ____D C:\Users\Ralf\Documents\ASUS
2013-12-15 11:20 - 2013-12-15 11:20 - 00000000 ____D C:\ProgramData\ASUS
2013-12-15 10:00 - 2013-12-16 13:01 - 00013412 _____ C:\Users\Ralf\Desktop\FRST.txt
2013-12-15 09:59 - 2013-12-15 09:59 - 00000611 _____ C:\Users\Ralf\Desktop\JRT.txt
2013-12-15 09:52 - 2013-12-15 09:52 - 01034531 _____ (Thisisu) C:\Users\Ralf\Desktop\JRT.exe
2013-12-15 09:52 - 2013-12-15 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-12-15 00:47 - 2013-12-15 19:04 - 00192000 ___SH C:\Users\Ralf\Desktop\Thumbs.db
2013-12-14 23:12 - 2013-12-16 13:01 - 00000000 ____D C:\FRST
2013-12-14 23:10 - 2013-12-16 13:01 - 01927940 _____ (Farbar) C:\Users\Ralf\Desktop\FRST64.exe
2013-12-14 21:54 - 2013-12-14 21:54 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-14 21:54 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Mozilla
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\CDB
2013-12-14 21:35 - 2013-12-14 21:35 - 04464656 _____ (AVG Technologies) C:\TRANSLATE
2013-12-14 21:30 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\Avg2013
2013-12-14 19:11 - 2013-12-14 19:11 - 00421888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-14 18:20 - 2013-08-02 07:28 - 19758080 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-12-14 18:19 - 2013-08-10 06:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2013-12-14 18:19 - 2013-08-10 06:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll
2013-12-14 18:19 - 2013-08-10 04:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2013-12-14 18:19 - 2013-08-03 07:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-12-14 18:19 - 2013-08-03 07:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-12-14 18:19 - 2013-08-03 07:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-12-14 18:19 - 2013-08-03 06:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx
2013-12-14 18:19 - 2013-08-03 06:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll
2013-12-14 18:19 - 2013-08-03 06:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll
2013-12-14 18:19 - 2013-08-02 07:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-12-14 18:19 - 2013-08-02 06:08 - 17561088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-12-14 18:19 - 2013-08-02 06:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-12-14 18:19 - 2013-08-01 11:41 - 02233688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-14 18:19 - 2013-07-25 00:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2013-12-14 18:19 - 2013-07-25 00:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll
2013-12-14 18:19 - 2013-06-16 23:41 - 00997632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-12-14 18:19 - 2013-06-01 12:34 - 02391280 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-12-14 18:19 - 2013-06-01 12:26 - 06987008 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-14 18:19 - 2013-06-01 12:26 - 00327936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2013-12-14 18:19 - 2013-06-01 11:24 - 02106176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-12-14 18:19 - 2013-06-01 10:25 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-12-14 18:19 - 2013-06-01 10:25 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2013-12-14 18:19 - 2013-06-01 10:24 - 01453568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2013-12-14 18:19 - 2013-06-01 10:24 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2013-12-14 18:19 - 2013-06-01 10:24 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscms.dll
2013-12-14 18:19 - 2013-06-01 10:23 - 01842176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2013-12-14 18:19 - 2013-06-01 10:23 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2013-12-14 18:19 - 2013-06-01 10:22 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-12-14 18:19 - 2013-06-01 10:22 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2013-12-14 18:19 - 2013-06-01 10:22 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\MbaeParserTask.exe
2013-12-14 18:19 - 2013-06-01 10:21 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2013-12-14 18:19 - 2013-06-01 10:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2013-12-14 18:19 - 2013-06-01 10:20 - 02219520 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2013-12-14 18:19 - 2013-06-01 10:20 - 01527808 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2013-12-14 18:19 - 2013-06-01 10:20 - 01048576 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2013-12-14 18:19 - 2013-06-01 10:20 - 00583168 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2013-12-14 18:19 - 2013-06-01 10:19 - 00785408 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2013-12-14 18:19 - 2013-06-01 10:19 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupManager.dll
2013-12-14 18:19 - 2013-06-01 04:08 - 00037632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BthAvrcpTg.sys
2013-12-14 18:19 - 2013-05-24 23:09 - 01403296 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2013-12-14 18:19 - 2013-05-24 23:09 - 01271584 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-12-14 18:19 - 2013-05-24 23:09 - 01217352 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2013-12-14 18:19 - 2013-05-24 23:09 - 01093904 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-12-14 18:19 - 2013-04-10 00:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2013-12-14 18:19 - 2013-04-09 23:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2013-12-14 18:19 - 2013-03-02 09:23 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncInfo.dll
2013-12-14 18:18 - 2013-03-02 11:57 - 00332520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2013-12-14 18:18 - 2013-03-02 11:57 - 00077544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storahci.sys
2013-12-14 18:18 - 2013-03-02 11:39 - 00495336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2013-12-14 18:18 - 2013-03-02 09:23 - 01338880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-12-14 18:18 - 2013-03-02 09:23 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2013-12-14 18:18 - 2013-03-02 09:23 - 00601088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2013-12-14 18:18 - 2013-03-02 09:23 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2013-12-14 18:18 - 2013-03-02 09:22 - 05091840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-12-14 18:18 - 2013-03-02 09:22 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2013-12-14 18:18 - 2013-03-02 09:21 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll
2013-12-14 18:18 - 2013-03-02 09:21 - 00145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2013-12-14 18:18 - 2013-03-02 09:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevDispItemProvider.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 01627648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 01149952 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 01101824 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 00951808 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 00240640 _____ (Microsoft Corporation) C:\Windows\system32\fsquirt.exe
2013-12-14 18:18 - 2013-03-02 03:45 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\TimeBrokerServer.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2013-12-14 18:18 - 2013-03-02 03:45 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\WSDPrintProxy.DLL
2013-12-14 18:18 - 2013-03-02 03:44 - 05978624 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-12-14 18:18 - 2013-03-02 03:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2013-12-14 18:18 - 2013-03-02 03:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2013-12-14 18:18 - 2013-03-02 03:44 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\discan.dll
2013-12-14 18:18 - 2013-03-02 03:44 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\NdisImPlatform.dll
2013-12-14 18:18 - 2013-03-02 03:44 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\DevDispItemProvider.dll
2013-12-14 18:18 - 2013-03-02 03:43 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2013-12-14 18:18 - 2013-03-02 03:15 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2013-12-14 18:18 - 2013-03-01 05:56 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2013-12-14 18:18 - 2013-03-01 05:56 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\monitor.sys
2013-12-14 18:18 - 2013-03-01 05:55 - 01175040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-12-14 18:17 - 2013-05-04 08:58 - 00120736 _____ (Microsoft Corporation) C:\Windows\system32\AuthHost.exe
2013-12-14 18:17 - 2013-05-04 07:59 - 01483776 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2013-12-14 18:17 - 2013-05-04 07:59 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe
2013-12-14 18:17 - 2013-05-04 07:58 - 01332736 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2013-12-14 18:17 - 2013-05-04 07:58 - 00470528 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2013-12-14 18:17 - 2013-05-04 07:58 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2013-12-14 18:17 - 2013-05-04 07:58 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2013-12-14 18:17 - 2013-05-04 07:58 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2013-12-14 18:17 - 2013-05-04 07:58 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 01131520 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 00501760 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 00389120 _____ (Microsoft Corporation) C:\Windows\system32\BCP47Langs.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\biwinrt.dll
2013-12-14 18:17 - 2013-05-04 07:57 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2013-12-14 18:17 - 2013-05-04 07:56 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2013-12-14 18:17 - 2013-05-04 05:58 - 00758784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Magnify.exe
2013-12-14 18:17 - 2013-05-04 05:57 - 00303616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2013-12-14 18:17 - 2013-05-04 05:57 - 00151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netplwiz.dll
2013-12-14 18:17 - 2013-05-04 05:57 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netprofm.dll
2013-12-14 18:17 - 2013-05-04 05:57 - 00018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2013-12-14 18:17 - 2013-05-04 05:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\muifontsetup.dll
2013-12-14 18:17 - 2013-05-04 05:56 - 00449536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2013-12-14 18:17 - 2013-05-04 05:56 - 00411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2013-12-14 18:17 - 2013-05-04 05:56 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BCP47Langs.dll
2013-12-14 18:17 - 2013-05-04 05:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\biwinrt.dll
2013-12-14 18:17 - 2013-05-04 05:55 - 00389632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl
2013-12-14 18:17 - 2013-05-04 05:51 - 00014848 _____ (Microsoft) C:\Windows\system32\rars.rs
2013-12-14 18:17 - 2013-05-04 05:47 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2013-12-14 18:17 - 2013-05-04 05:10 - 00014848 _____ (Microsoft) C:\Windows\SysWOW64\rars.rs
2013-12-14 18:16 - 2013-05-31 00:24 - 01257472 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-12-14 18:16 - 2013-05-31 00:08 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-12-14 18:16 - 2013-05-15 03:25 - 00888320 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2013-12-14 18:16 - 2013-05-15 03:25 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2013-12-14 18:16 - 2013-05-15 03:24 - 00793088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2013-12-14 18:16 - 2013-05-15 03:24 - 00482816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2013-12-14 18:16 - 2013-04-09 06:33 - 00489576 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2013-12-14 18:16 - 2013-04-09 06:33 - 00446792 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2013-12-14 18:16 - 2013-04-09 06:33 - 00253544 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2013-12-14 18:16 - 2013-04-09 06:20 - 00306952 _____ (Microsoft Corporation) C:\Windows\system32\kd_02_10ec.dll
2013-12-14 18:16 - 2013-04-09 06:20 - 00086280 _____ (Microsoft Corporation) C:\Windows\system32\kdnet.dll
2013-12-14 18:16 - 2013-04-09 06:18 - 00077960 _____ (Microsoft Corporation) C:\Windows\system32\kdvm.dll
2013-12-14 18:16 - 2013-04-09 06:17 - 01829408 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-12-14 18:16 - 2013-04-09 05:52 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-12-14 18:16 - 2013-04-09 05:52 - 00804352 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2013-12-14 18:16 - 2013-04-09 05:52 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-12-14 18:16 - 2013-04-09 05:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-12-14 18:16 - 2013-04-09 05:52 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe
2013-12-14 18:16 - 2013-04-09 05:51 - 14267904 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-14 18:16 - 2013-04-09 05:51 - 03552768 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-12-14 18:16 - 2013-04-09 05:51 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2013-12-14 18:16 - 2013-04-09 05:51 - 00456704 _____ (Microsoft Corporation) C:\Windows\system32\wpncore.dll
2013-12-14 18:16 - 2013-04-09 05:51 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-12-14 18:16 - 2013-04-09 05:51 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 02107904 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 01285632 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 00745984 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 00435200 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\GenuineCenter.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-12-14 18:16 - 2013-04-09 05:50 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 01444864 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\fhengine.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\iuilp.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2013-12-14 18:16 - 2013-04-09 05:49 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\fmifs.dll
2013-12-14 18:16 - 2013-04-09 05:48 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2013-12-14 18:16 - 2013-04-09 03:34 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2013-12-14 18:16 - 2013-04-09 03:33 - 00623104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-12-14 18:16 - 2013-04-09 03:33 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2013-12-14 18:16 - 2013-04-09 03:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2013-12-14 18:16 - 2013-04-09 03:31 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-12-14 18:16 - 2013-04-09 03:31 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2013-12-14 18:16 - 2013-04-09 00:44 - 00123880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2013-12-14 18:16 - 2013-04-09 00:39 - 01408896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-12-14 18:16 - 2013-04-09 00:37 - 00426024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2013-12-14 18:16 - 2013-04-09 00:37 - 00324368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2013-12-14 18:16 - 2013-04-08 22:52 - 11878912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-14 18:16 - 2013-04-08 22:52 - 00670208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-12-14 18:16 - 2013-04-08 22:52 - 00302592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-12-14 18:16 - 2013-04-08 22:52 - 00171008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-12-14 18:16 - 2013-04-08 22:52 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe
2013-12-14 18:16 - 2013-04-08 22:51 - 02767360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 01113600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00659456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00411136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00403968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00214528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00155648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fmifs.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2013-12-14 18:16 - 2013-04-08 22:51 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2013-12-14 18:16 - 2013-04-05 00:30 - 00503080 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2013-12-14 18:16 - 2013-03-15 23:05 - 00298456 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2013-12-14 18:16 - 2013-03-15 23:05 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2013-12-14 16:16 - 2013-12-14 18:46 - 00000000 ____D C:\Program Files (x86)\HTMLFIX
2013-12-14 16:16 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\mresreg
2013-12-14 15:46 - 2013-12-14 15:47 - 00000427 _____ C:\Windows\pagebreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000044 _____ C:\Windows\formbreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\Documents\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PageBreeze
2013-12-14 15:46 - 1999-05-15 00:24 - 00097280 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\vspell32.ocx
2013-12-14 15:46 - 1998-11-22 14:23 - 00084992 _____ (AY Software Corporation) C:\Windows\SysWOW64\Ledit32.dll
2013-12-14 15:46 - 1998-11-18 11:40 - 00089600 _____ (AY Software Corporation) C:\Windows\SysWOW64\Leocx32.ocx
2013-12-14 15:46 - 1998-06-26 00:00 - 00644400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscomct2.ocx
2013-12-14 15:46 - 1998-06-24 00:00 - 00369696 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\Comct332.ocx
2013-12-14 15:46 - 1998-06-24 00:00 - 00203576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RICHTX32.OCX
2013-12-14 15:46 - 1998-06-24 00:00 - 00140096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Comdlg32.ocx
2013-12-14 15:46 - 1998-06-18 00:00 - 00102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Vb6stkit.dll
2013-12-14 15:46 - 1997-02-24 17:44 - 00070656 _____ (Visual Components, Inc.) C:\Windows\SysWOW64\vspell32.dll
2013-12-14 15:45 - 2013-12-14 15:46 - 00000000 ____D C:\Program Files (x86)\PageBreeze
2013-12-14 15:45 - 2012-12-12 18:30 - 00659456 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ckstring.dll
2013-12-14 15:45 - 2012-12-12 18:27 - 01847296 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ChilkatFtp2.dll
2013-12-14 15:45 - 2012-12-12 18:26 - 01531904 _____ (Chilkat Software, Inc.) C:\Windows\SysWOW64\ChilkatCert.dll
2013-12-14 15:41 - 2013-12-14 15:45 - 00000000 ____D C:\Program Files (x86)\phase5
2013-12-14 11:34 - 2013-12-14 11:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\Microsoft Help
2013-12-14 10:19 - 2013-10-09 02:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-12-14 10:19 - 2013-10-08 23:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2013-12-14 10:19 - 2013-10-08 23:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2013-12-14 10:19 - 2013-10-08 23:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-12-14 10:19 - 2013-10-08 23:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-12-14 10:19 - 2013-10-08 23:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-12-14 10:19 - 2013-10-05 07:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2013-12-14 10:19 - 2013-10-03 23:09 - 00385528 _____ C:\Windows\system32\ApnDatabase.xml
2013-12-14 10:19 - 2013-10-02 03:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2013-12-14 10:19 - 2013-09-28 06:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-12-14 10:19 - 2013-09-28 04:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-12-14 10:19 - 2013-09-19 08:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-12-14 10:19 - 2013-09-13 23:36 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2013-12-14 10:19 - 2013-09-13 23:33 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2013-12-14 10:19 - 2013-08-30 06:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2013-12-14 10:19 - 2013-08-30 06:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2013-12-14 10:19 - 2013-08-30 06:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2013-12-14 10:19 - 2013-08-30 06:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2013-12-14 10:19 - 2013-08-30 00:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2013-12-14 10:19 - 2013-08-30 00:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2013-12-14 10:19 - 2013-08-30 00:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2013-12-14 10:19 - 2013-08-21 07:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-12-14 10:19 - 2013-08-10 07:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys
2013-12-14 10:19 - 2013-08-10 06:21 - 00817152 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-12-14 10:19 - 2013-08-10 04:58 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-12-14 10:19 - 2013-07-25 00:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2013-12-14 10:19 - 2013-07-25 00:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2013-12-14 10:19 - 2013-07-12 02:38 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2013-12-14 10:19 - 2013-07-12 02:30 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll
2013-12-14 10:18 - 2013-07-09 09:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2013-12-14 10:18 - 2013-07-09 07:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2013-12-14 10:18 - 2013-07-09 05:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2013-12-14 10:18 - 2013-07-09 04:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2013-12-14 10:18 - 2013-07-08 23:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll
2013-12-14 10:18 - 2013-07-08 23:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2013-12-14 10:18 - 2013-07-06 01:16 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-12-14 10:18 - 2013-07-03 01:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2013-12-14 10:18 - 2013-07-03 01:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2013-12-14 10:18 - 2013-07-03 01:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-12-14 10:18 - 2013-07-03 01:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2013-12-14 10:18 - 2013-06-30 23:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe
2013-12-14 10:18 - 2013-06-30 23:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2013-12-14 10:18 - 2013-06-29 07:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2013-12-14 10:18 - 2013-06-29 07:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2013-12-14 10:18 - 2013-06-29 06:43 - 00327512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2013-12-14 10:18 - 2013-06-26 04:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2013-12-14 10:18 - 2013-06-26 03:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2013-12-14 10:18 - 2013-06-24 23:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-12-14 10:18 - 2013-06-24 23:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2013-12-14 10:18 - 2013-06-24 23:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2013-12-14 10:18 - 2013-06-19 06:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2013-12-14 10:18 - 2013-06-19 06:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2013-12-14 10:18 - 2013-06-18 23:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2013-12-14 10:18 - 2013-06-18 23:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2013-12-14 10:18 - 2013-06-12 00:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2013-12-14 10:18 - 2013-06-12 00:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2013-12-14 10:18 - 2013-06-06 09:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-12-14 03:39 - 2013-12-14 03:39 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\ProgramData\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 03:38 - 2013-12-14 03:37 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-14 03:38 - 2013-12-14 03:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 03:20 - 2013-12-14 03:23 - 00000403 _____ C:\Windows\ODBC.INI
2013-12-14 03:20 - 2013-12-14 03:23 - 00000035 _____ C:\Windows\vbaddin.ini
2013-12-14 03:02 - 2013-12-14 03:02 - 00000000 ___SD C:\Users\Ralf\Documents\Meine Websites
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Expression
2013-12-14 03:01 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-14 02:45 - 2013-12-14 02:45 - 00000000 ____D C:\Users\Ralf\AppData\Local\DoNotTrackPlus
2013-12-14 02:36 - 2013-12-14 02:36 - 00001134 _____ C:\Users\Ralf\Desktop\Snipping Tool.lnk
2013-12-14 02:11 - 2013-12-14 02:43 - 00000000 ____D C:\Program Files (x86)\MWSnap
2013-12-14 02:11 - 2013-12-14 02:11 - 00000921 _____ C:\Users\UpdatusUser\Desktop\MWSnap 3.lnk
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\ProgramData\CheckPoint
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-12-14 01:45 - 2013-12-14 01:45 - 00000947 _____ C:\Users\Ralf\Desktop\V Limburg.lnk
2013-12-13 19:04 - 2013-12-13 19:04 - 00003540 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-13 19:00 - 2013-12-04 01:53 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 19:00 - 2013-12-04 01:53 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-13 18:54 - 2013-12-13 19:04 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-13 18:32 - 2013-12-13 18:32 - 00000000 ____D C:\sources
2013-12-13 17:21 - 2013-12-13 17:21 - 00001385 _____ C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WS_FTP
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Program Files\WS_FTP
2013-12-13 14:27 - 2013-12-15 14:02 - 00000000 ___RD C:\Users\Ralf\Desktop\Programme
2013-12-13 14:26 - 2013-12-16 10:57 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-13 14:13 - 2013-12-13 14:13 - 00000000 ____D C:\Users\Ralf\Documents\Benutzerdefinierte Office-Vorlagen
2013-12-13 13:08 - 2013-12-13 13:08 - 00001108 _____ C:\Users\Ralf\Desktop\Rechner.lnk
2013-12-13 12:53 - 2013-12-13 12:53 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\Documents\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Local\Cyberlink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-13 12:32 - 2013-12-13 12:32 - 00000057 _____ C:\ProgramData\Ament.ini
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\HpUpdate
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\Visan
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP
2013-12-13 12:32 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMB011.dll
2013-12-13 12:27 - 2013-12-13 12:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\HP
2013-12-13 11:29 - 2013-12-13 11:29 - 00002062 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk
2013-12-13 10:51 - 2013-12-13 13:25 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-12-13 10:18 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-12-13 10:18 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 10:18 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 10:18 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 10:18 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 10:18 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 10:18 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 10:18 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-13 10:18 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-13 10:18 - 2013-05-15 23:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-12-13 10:18 - 2013-05-15 23:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-12-13 10:18 - 2013-05-14 14:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 10:18 - 2013-05-14 10:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 10:18 - 2013-02-21 11:29 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 10:18 - 2013-02-21 11:29 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-13 10:18 - 2013-02-21 11:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 10:18 - 2013-02-21 11:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 10:18 - 2013-02-19 10:53 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-12-13 10:17 - 2013-07-02 01:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-12-13 10:17 - 2013-07-01 23:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-12-13 10:16 - 2013-10-10 12:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2013-12-13 10:16 - 2013-10-10 10:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-13 10:16 - 2013-10-10 10:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-12-13 10:16 - 2013-06-10 20:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-13 10:16 - 2013-06-10 20:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-13 10:16 - 2013-06-10 20:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-12-13 10:16 - 2013-06-10 20:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-12-13 10:14 - 2013-09-04 04:11 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-12-13 10:14 - 2013-08-16 06:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2013-12-13 10:14 - 2013-08-16 06:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2013-12-13 10:14 - 2013-08-16 06:32 - 00209200 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe
2013-12-13 10:14 - 2013-08-16 06:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2013-12-13 10:14 - 2013-08-16 06:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-12-13 10:14 - 2013-08-16 06:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-12-13 10:14 - 2013-08-16 06:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00562688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00083968 _____ C:\Windows\SysWOW64\OEMLicense.dll
2013-12-13 10:14 - 2013-08-15 23:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2013-12-13 10:14 - 2013-08-15 23:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll
2013-12-13 10:14 - 2013-08-15 23:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll
2013-12-13 10:14 - 2013-03-02 03:45 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-12-13 10:14 - 2013-03-02 03:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\taskhostex.exe
2013-12-13 10:10 - 2013-10-19 06:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-13 10:10 - 2013-10-19 05:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-13 10:10 - 2013-07-06 01:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-12-13 10:10 - 2013-07-04 03:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-12-13 10:07 - 2013-10-03 00:25 - 01300992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-13 10:07 - 2013-10-01 23:22 - 01022976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-13 10:07 - 2013-06-22 06:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-12-13 10:07 - 2013-06-22 06:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-12-13 10:06 - 2013-07-05 23:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-12-13 10:06 - 2013-07-05 23:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-12-13 10:06 - 2013-05-24 00:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-12-13 10:06 - 2013-05-23 23:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-12-13 10:05 - 2013-10-02 00:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-12-13 10:05 - 2013-10-02 00:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-13 10:05 - 2013-07-01 23:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2013-12-13 10:05 - 2013-06-29 04:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-12-13 10:05 - 2013-06-29 04:07 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-12-13 10:05 - 2013-05-04 05:48 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2013-12-13 09:58 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Local\Adobe
2013-12-13 09:58 - 2013-04-24 00:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-12-13 09:58 - 2013-04-24 00:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-12-13 09:58 - 2013-04-23 23:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-12-13 09:58 - 2013-04-23 23:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-12-13 09:58 - 2013-03-02 10:59 - 00411880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-12-13 09:56 - 2013-09-23 23:30 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-13 09:56 - 2013-09-23 23:30 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-12-13 09:56 - 2013-06-01 10:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-12-13 09:56 - 2013-06-01 10:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-12-13 09:55 - 2013-05-27 00:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-12-13 09:55 - 2013-05-26 23:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-12-13 09:55 - 2013-05-25 04:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-12-13 09:55 - 2013-05-25 03:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-12-13 09:55 - 2013-04-11 23:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-12-13 09:55 - 2013-04-11 23:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-12-13 09:55 - 2013-03-02 09:23 - 00375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll
2013-12-13 09:55 - 2013-03-02 03:44 - 01011200 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2013-12-13 09:55 - 2013-02-05 23:29 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-12-13 09:55 - 2013-02-05 23:28 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-12-13 09:55 - 2012-10-24 04:25 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2013-12-13 09:55 - 2012-10-24 03:48 - 00024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgentc.exe
2013-12-13 09:53 - 2013-12-13 09:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-13 09:53 - 2013-07-01 02:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-12-13 09:53 - 2013-07-01 02:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-13 09:53 - 2013-06-29 04:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-12-13 09:53 - 2013-06-29 04:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-12-13 09:52 - 2013-03-06 08:10 - 00112872 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-12-13 09:52 - 2013-03-06 07:29 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-12-13 09:51 - 2013-07-19 23:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-13 09:51 - 2013-07-19 23:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-13 09:51 - 2013-05-04 07:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-12-13 09:51 - 2013-05-04 05:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-12-13 09:51 - 2013-04-27 06:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-12-13 09:50 - 2013-10-10 10:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-13 09:50 - 2013-10-10 10:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll
2013-12-13 09:50 - 2013-10-10 10:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-13 09:50 - 2013-10-10 10:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-13 09:50 - 2013-10-10 10:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-13 09:50 - 2013-10-10 10:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2013-12-13 09:50 - 2013-10-10 10:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-13 09:50 - 2013-08-23 08:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-13 09:50 - 2013-08-23 02:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-13 09:50 - 2013-07-13 07:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-12-13 09:50 - 2013-07-13 07:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-12-13 09:50 - 2013-07-13 07:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-12-13 09:50 - 2013-07-13 07:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-12-13 09:50 - 2013-07-13 05:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-12-13 09:50 - 2013-07-13 05:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-12-13 09:50 - 2013-07-13 05:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-12-13 09:50 - 2013-07-02 02:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2013-12-13 09:50 - 2013-07-02 02:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS
2013-12-13 09:50 - 2013-03-15 01:17 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2013-12-13 09:49 - 2013-11-23 07:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-13 09:49 - 2013-11-23 06:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-13 09:49 - 2013-11-07 00:18 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-13 09:49 - 2013-04-03 00:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-12-13 09:49 - 2013-04-03 00:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-12-13 09:49 - 2013-03-22 04:49 - 02382336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2013-12-13 09:49 - 2013-03-21 23:47 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-12-13 09:48 - 2013-09-28 04:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-13 09:48 - 2013-08-07 06:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-12-13 09:48 - 2012-11-10 05:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-12-13 09:48 - 2012-11-10 05:23 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-12-13 09:48 - 2012-11-10 05:22 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\RDWebAI.dll
2013-12-13 09:48 - 2012-11-10 05:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VmHostAI.dll
2013-12-13 09:48 - 2012-11-10 05:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\appserverai.dll
2013-12-13 09:47 - 2013-11-01 06:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-13 09:47 - 2013-11-01 04:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-13 09:47 - 2013-10-02 00:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-12-13 09:47 - 2013-10-02 00:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-13 09:47 - 2013-08-02 07:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2013-12-13 09:47 - 2013-08-02 06:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2013-12-13 09:47 - 2013-03-02 11:39 - 00069864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2013-12-13 09:47 - 2013-03-02 03:43 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2013-12-13 09:36 - 2013-12-14 19:43 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4081666312-209533117-2721160021-1002
2013-12-13 09:31 - 2013-12-13 09:31 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Macromedia
2013-12-13 09:30 - 2013-12-16 11:00 - 00000062 _____ C:\Users\Ralf\AppData\Roaming\sp_data.sys
2013-12-13 09:30 - 2013-12-16 11:00 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-13 09:30 - 2013-12-16 11:00 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-13 09:30 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Adobe
2013-12-13 09:30 - 2013-12-13 09:30 - 00001440 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-13 09:30 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\ASUS WebStorage
2013-12-13 09:29 - 2013-12-15 11:20 - 00000000 ____D C:\Users\Ralf\AppData\Local\VirtualStore
2013-12-13 09:29 - 2013-12-15 11:20 - 00000000 ____D C:\Users\Ralf\AppData\Local\ASUS
2013-12-13 09:29 - 2013-12-13 19:04 - 00000000 ____D C:\Users\Ralf\AppData\Local\Packages
2013-12-13 09:28 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000020 ___SH C:\Users\Ralf\ntuser.ini
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Vorlagen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Startmenü
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Netzwerkumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Lokale Einstellungen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Eigene Dateien
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Druckumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Musik
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Bilder
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Verlauf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Anwendungsdaten
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Anwendungsdaten
2013-12-13 09:28 - 2013-04-26 08:59 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 09:28 - 2013-04-26 00:16 - 00002098 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-13 09:28 - 2012-07-26 09:13 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-17 00:23 - 2013-11-16 15:49 - 00000000 ____D C:\eSupport
2013-11-17 00:20 - 2013-08-15 11:54 - 00000044 _____ C:\Windows\AsToolCDVer.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00039480 _____ C:\Windows\AsChkDev.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00000000 _____ C:\Windows\SysWOW64\Drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK
2013-11-16 16:00 - 2013-11-16 16:00 - 00000000 ____D C:\ProgramData\USBChargerPlus
2013-11-16 15:54 - 2013-11-16 15:54 - 00003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2013-11-16 15:54 - 2013-11-16 15:54 - 00002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2013-11-16 15:54 - 2013-01-10 15:20 - 00022016 _____ C:\Windows\SysWOW64\ASUS.scr
2013-11-16 15:53 - 2013-12-13 09:33 - 00000000 ____D C:\Program Files\McAfeeEx
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf
2013-11-16 15:51 - 2013-11-16 15:54 - 00000000 ____D C:\Program Files\ASUS
2013-11-16 15:51 - 2013-11-16 15:51 - 00003112 _____ C:\Windows\System32\Tasks\ASUS Live Update
2013-11-16 15:51 - 2013-11-16 15:51 - 00003054 _____ C:\Windows\System32\Tasks\ASUS P4G
2013-11-16 15:51 - 2013-11-16 15:51 - 00003026 _____ C:\Windows\System32\Tasks\ASUS USB Charger Plus
2013-11-16 15:51 - 2013-11-16 15:51 - 00000000 ____D C:\ProgramData\P4G
2013-11-16 15:48 - 2013-12-13 16:35 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-11-16 15:48 - 2013-12-13 16:35 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-11-16 15:48 - 2013-12-13 16:35 - 00029480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-11-16 15:48 - 2013-11-16 15:48 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-11-16 15:45 - 2013-11-16 15:45 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-11-16 15:45 - 2012-06-13 11:23 - 09888912 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsBaStorIcon.dll
2013-11-16 15:45 - 2012-06-13 11:23 - 00294544 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys
2013-11-16 15:43 - 2013-11-16 15:43 - 00003540 _____ C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2013-11-16 15:43 - 2013-11-16 15:43 - 00000000 ____D C:\Program Files\DIFX
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Program Files\Realtek
2013-11-16 15:41 - 2013-11-16 15:45 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-11-16 15:41 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files\Intel
2013-11-16 15:41 - 2013-01-23 12:00 - 03308360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2013-11-16 15:41 - 2013-01-23 09:36 - 00613448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2013-11-16 15:41 - 2013-01-23 07:50 - 01658440 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2013-11-16 15:41 - 2013-01-23 07:22 - 15792640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2013-11-16 15:41 - 2013-01-22 07:58 - 03684936 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2013-11-16 15:41 - 2013-01-22 07:58 - 02746952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2013-11-16 15:41 - 2013-01-21 09:40 - 00129096 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2013-11-16 15:41 - 2013-01-21 09:29 - 00407889 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2013-11-16 15:41 - 2013-01-17 12:38 - 00908056 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2013-11-16 15:41 - 2013-01-17 08:26 - 13367576 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2013-11-16 15:41 - 2013-01-17 08:26 - 01888536 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2013-11-16 15:41 - 2013-01-16 09:02 - 02079816 ____N (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-11-16 15:41 - 2013-01-15 10:21 - 03585776 _____ C:\Windows\system32\Drivers\rtvienna.dat
2013-11-16 15:41 - 2013-01-15 03:33 - 02722848 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2013-11-16 15:41 - 2013-01-09 09:01 - 02099480 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2013-11-16 15:41 - 2013-01-07 02:42 - 00854072 _____ (TOSHIBA Corporation) C:\Windows\system32\tostae64.dll
2013-11-16 15:41 - 2013-01-04 10:21 - 00988896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2013-11-16 15:41 - 2013-01-03 08:02 - 01276128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2013-11-16 15:41 - 2012-12-26 08:33 - 00853208 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2013-11-16 15:41 - 2012-12-25 07:39 - 00590904 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasm64.dll
2013-11-16 15:41 - 2012-12-17 10:49 - 02032584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2013-11-16 15:41 - 2012-12-12 04:17 - 00395208 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2013-11-16 15:41 - 2012-12-10 07:23 - 00186360 _____ (TOSHIBA Corporation) C:\Windows\system32\tosoera64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00501192 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00487368 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2013-11-16 15:41 - 2012-10-02 07:41 - 00415688 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2013-11-16 15:41 - 2012-08-31 12:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2013-11-16 15:41 - 2012-08-31 12:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2013-11-16 15:41 - 2012-07-30 17:04 - 00690832 _____ (Realtek ) C:\Windows\system32\Drivers\Rt630x64.sys
2013-11-16 15:41 - 2012-07-30 17:04 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2013-11-16 15:41 - 2012-07-15 14:13 - 00394616 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2013-11-16 15:41 - 2012-06-25 11:42 - 00015168 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2013-11-16 15:41 - 2012-06-20 10:26 - 00110592 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2013-11-16 15:41 - 2012-03-08 04:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2013-11-16 15:41 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2013-11-16 15:41 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2013-11-16 15:41 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2013-11-16 15:41 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2013-11-16 15:41 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2013-11-16 15:41 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2013-11-16 15:41 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2013-11-16 15:41 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2013-11-16 15:41 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2013-11-16 15:41 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-11-16 15:41 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-11-16 15:41 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-11-16 15:41 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2013-11-16 15:41 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-11-16 15:41 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-11-16 15:40 - 2012-07-02 16:16 - 00062784 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2013-11-16 15:38 - 2013-11-16 15:38 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\system32\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-16 15:38 - 2013-04-26 08:59 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-16 15:38 - 2013-04-26 00:16 - 00002098 _____ C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SkyDrive.lnk
2013-11-16 15:38 - 2013-01-10 22:37 - 06382880 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-11-16 15:38 - 2013-01-10 22:37 - 03460896 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 02934933 _____ C:\Windows\system32\nvcoproc.bin
2013-11-16 15:38 - 2013-01-10 22:36 - 02558240 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00997664 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00884512 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-11-16 15:38 - 2013-01-10 22:36 - 00118560 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-11-16 15:38 - 2013-01-10 22:36 - 00055584 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-16 15:38 - 2012-07-26 09:13 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-16 15:37 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-16 15:37 - 2013-11-16 15:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-16 15:37 - 2013-01-10 09:15 - 26931488 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 20450080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 18054672 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 15129448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 15052728 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 12641480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 11009312 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-11-16 15:37 - 2013-01-10 09:15 - 09390760 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 07932256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 07565088 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 06263632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02904352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02824504 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02720544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02504096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 02344736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01985824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01814304 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 01107440 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00958120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00420128 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00364832 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00245872 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00201576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-11-16 15:37 - 2013-01-10 09:15 - 00030496 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2013-11-16 15:37 - 2013-01-10 09:15 - 00017266 _____ C:\Windows\system32\nvinfo.pb
2013-11-16 15:36 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-16 15:36 - 2013-11-16 15:36 - 00016316 _____ C:\Windows\system32\results.xml
2013-11-16 15:34 - 2013-11-16 15:41 - 00000000 ____D C:\ProgramData\Intel
2013-11-16 15:34 - 2012-10-15 05:10 - 00056832 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2013-11-16 15:34 - 2012-10-15 05:10 - 00056320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2013-11-16 15:30 - 2013-12-13 17:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-16 15:30 - 2013-11-16 15:53 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ___HD C:\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Windows\Options
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Qualcomm Atheros
2013-11-16 15:30 - 2012-09-26 22:11 - 00080063 ____N C:\Windows\system32\athw8x.cat
2013-11-16 15:30 - 2012-09-19 01:15 - 03653632 ____N (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\athw8x.sys
2013-11-16 15:30 - 2012-09-19 01:15 - 03653632 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athw8x.sys
2013-11-16 15:30 - 2012-07-04 03:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2013-11-16 15:29 - 2013-11-16 15:30 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
==================== One Month Modified Files and Folders =======
2013-12-16 13:01 - 2013-12-16 13:01 - 00000000 ____D C:\Users\Ralf\Desktop\FRST-OlderVersion
2013-12-16 13:01 - 2013-12-15 10:00 - 00013412 _____ C:\Users\Ralf\Desktop\FRST.txt
2013-12-16 13:01 - 2013-12-14 23:12 - 00000000 ____D C:\FRST
2013-12-16 13:01 - 2013-12-14 23:10 - 01927940 _____ (Farbar) C:\Users\Ralf\Desktop\FRST64.exe
2013-12-16 13:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\sru
2013-12-16 12:59 - 2013-12-16 12:59 - 00000906 _____ C:\Users\Ralf\Desktop\checkup.txt
2013-12-16 12:56 - 2013-12-16 12:56 - 00891200 _____ C:\Users\Ralf\Desktop\SecurityCheck.exe
2013-12-16 11:02 - 2012-08-03 00:02 - 00759192 _____ C:\Windows\system32\perfh007.dat
2013-12-16 11:02 - 2012-08-03 00:02 - 00158376 _____ C:\Windows\system32\perfc007.dat
2013-12-16 11:02 - 2012-07-26 08:28 - 01745416 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-16 11:00 - 2013-12-13 09:30 - 00000062 _____ C:\Users\Ralf\AppData\Roaming\sp_data.sys
2013-12-16 11:00 - 2013-12-13 09:30 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-16 11:00 - 2013-12-13 09:30 - 00000000 ___RD C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-16 10:58 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-16 10:57 - 2013-12-16 10:57 - 00001058 _____ C:\Windows\PFRO.log
2013-12-16 10:57 - 2013-12-13 14:26 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2013-12-16 10:56 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-12-16 10:54 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-16 10:54 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-16 10:54 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-12-16 10:54 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-12-16 10:54 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-12-16 10:54 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\Dism
2013-12-16 10:53 - 2013-12-16 10:49 - 00039168 _____ C:\Windows\WindowsUpdate.log
2013-12-16 10:53 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ToastData
2013-12-15 20:07 - 2013-12-15 20:07 - 01544704 _____ C:\Windows\isRS-000.tmp
2013-12-15 19:09 - 2013-12-15 14:13 - 00000000 ____D C:\Users\Ralf\Desktop\NL
2013-12-15 19:07 - 2013-12-15 14:13 - 00000000 ____D C:\Users\Ralf\Desktop\Ampuria
2013-12-15 19:04 - 2013-12-15 00:47 - 00192000 ___SH C:\Users\Ralf\Desktop\Thumbs.db
2013-12-15 18:13 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\NDF
2013-12-15 14:02 - 2013-12-15 14:02 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-15 14:02 - 2013-12-13 14:27 - 00000000 ___RD C:\Users\Ralf\Desktop\Programme
2013-12-15 14:02 - 2013-04-26 00:15 - 00000000 ____D C:\ProgramData\Adobe
2013-12-15 13:57 - 2013-12-15 13:57 - 00002001 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Update Checker.lnk
2013-12-15 13:57 - 2013-12-15 13:57 - 00000000 ____D C:\Program Files (x86)\FileHippo.com
2013-12-15 13:34 - 2013-12-15 13:34 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-12-15 13:16 - 2012-08-02 23:24 - 00000000 ____D C:\Windows\Panther
2013-12-15 13:12 - 2013-12-15 13:12 - 00002770 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-12-15 13:12 - 2013-12-15 13:12 - 00000000 ____D C:\Program Files\CCleaner
2013-12-15 12:16 - 2013-12-15 12:15 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 11:20 - 2013-12-15 11:20 - 00000000 ____D C:\Users\Ralf\Documents\ASUS
2013-12-15 11:20 - 2013-12-15 11:20 - 00000000 ____D C:\ProgramData\ASUS
2013-12-15 11:20 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\VirtualStore
2013-12-15 11:20 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\ASUS
2013-12-15 09:59 - 2013-12-15 09:59 - 00000611 _____ C:\Users\Ralf\Desktop\JRT.txt
2013-12-15 09:52 - 2013-12-15 09:52 - 01034531 _____ (Thisisu) C:\Users\Ralf\Desktop\JRT.exe
2013-12-15 09:52 - 2013-12-15 09:52 - 00000000 ____D C:\Windows\ERUNT
2013-12-14 21:54 - 2013-12-14 21:54 - 00001111 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-14 21:54 - 2013-12-14 21:54 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Mozilla
2013-12-14 21:36 - 2013-12-14 21:36 - 00000000 ____D C:\ProgramData\CDB
2013-12-14 21:36 - 2013-12-14 21:30 - 00000000 ____D C:\ProgramData\MFAData
2013-12-14 21:35 - 2013-12-14 21:35 - 04464656 _____ (AVG Technologies) C:\TRANSLATE
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\MFAData
2013-12-14 21:30 - 2013-12-14 21:30 - 00000000 ____D C:\Users\Ralf\AppData\Local\Avg2013
2013-12-14 21:11 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\rescache
2013-12-14 21:05 - 2012-07-26 10:45 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-12-14 21:05 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\en-GB
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\WinStore
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-14 21:05 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-14 21:05 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-12-14 21:05 - 2012-07-26 06:37 - 00000000 ____D C:\Windows\servicing
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\winrm
2013-12-14 21:04 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\slmgr
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\SysWOW64\Com
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\migwiz
2013-12-14 21:04 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\Sysprep
2013-12-14 21:04 - 2012-07-26 06:38 - 00000000 ____D C:\Windows\system32\oobe
2013-12-14 21:03 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\en-GB
2013-12-14 21:01 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\WCN
2013-12-14 21:01 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\MUI
2013-12-14 21:00 - 2012-07-26 10:43 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-12-14 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SystemResetPlatform
2013-12-14 21:00 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\Com
2013-12-14 19:43 - 2013-12-13 09:36 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4081666312-209533117-2721160021-1002
2013-12-14 19:11 - 2013-12-14 19:11 - 00421888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-14 18:46 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\HTMLFIX
2013-12-14 16:16 - 2013-12-14 16:16 - 00000000 ____D C:\Program Files (x86)\mresreg
2013-12-14 15:47 - 2013-12-14 15:46 - 00000427 _____ C:\Windows\pagebreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000044 _____ C:\Windows\formbreeze.ini
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\Documents\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:46 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PageBreeze
2013-12-14 15:46 - 2013-12-14 15:45 - 00000000 ____D C:\Program Files (x86)\PageBreeze
2013-12-14 15:45 - 2013-12-14 15:41 - 00000000 ____D C:\Program Files (x86)\phase5
2013-12-14 11:43 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2013-12-14 11:34 - 2013-12-14 11:34 - 00000000 ____D C:\Users\Ralf\AppData\Local\Microsoft Help
2013-12-14 10:13 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-12-14 03:39 - 2013-12-14 03:39 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\ProgramData\Avira
2013-12-14 03:38 - 2013-12-14 03:38 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-14 03:37 - 2013-12-14 03:38 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-14 03:37 - 2013-12-14 03:38 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-14 03:24 - 2013-04-26 00:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-12-14 03:23 - 2013-12-14 03:20 - 00000403 _____ C:\Windows\ODBC.INI
2013-12-14 03:23 - 2013-12-14 03:20 - 00000035 _____ C:\Windows\vbaddin.ini
2013-12-14 03:23 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\System
2013-12-14 03:20 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\Help
2013-12-14 03:02 - 2013-12-14 03:02 - 00000000 ___SD C:\Users\Ralf\Documents\Meine Websites
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-12-14 03:01 - 2013-12-14 03:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Expression
2013-12-14 02:45 - 2013-12-14 02:45 - 00000000 ____D C:\Users\Ralf\AppData\Local\DoNotTrackPlus
2013-12-14 02:43 - 2013-12-14 02:11 - 00000000 ____D C:\Program Files (x86)\MWSnap
2013-12-14 02:36 - 2013-12-14 02:36 - 00001134 _____ C:\Users\Ralf\Desktop\Snipping Tool.lnk
2013-12-14 02:11 - 2013-12-14 02:11 - 00000921 _____ C:\Users\UpdatusUser\Desktop\MWSnap 3.lnk
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\ProgramData\CheckPoint
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-14 02:04 - 2013-12-14 02:04 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-12-14 01:45 - 2013-12-14 01:45 - 00000947 _____ C:\Users\Ralf\Desktop\V Limburg.lnk
2013-12-13 19:04 - 2013-12-13 19:04 - 00003540 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-12-13 19:04 - 2013-12-13 18:54 - 00000000 ___RD C:\Windows\BrowserChoice
2013-12-13 19:04 - 2013-12-13 09:29 - 00000000 ____D C:\Users\Ralf\AppData\Local\Packages
2013-12-13 19:04 - 2012-08-02 14:28 - 00000000 ____D C:\ProgramData\PRICache
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-13 18:56 - 2012-07-26 09:12 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-13 18:51 - 2012-08-03 00:01 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-12-13 18:32 - 2013-12-13 18:32 - 00000000 ____D C:\sources
2013-12-13 17:21 - 2013-12-13 17:21 - 00001385 _____ C:\Users\Ralf\Desktop\Aussenstände NL und E.lnk
2013-12-13 17:19 - 2013-11-16 15:30 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-13 16:35 - 2013-11-16 15:48 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-12-13 16:35 - 2013-11-16 15:48 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-12-13 16:35 - 2013-11-16 15:48 - 00029480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WS_FTP
2013-12-13 16:26 - 2013-12-13 16:26 - 00000000 ____D C:\Program Files\WS_FTP
2013-12-13 16:26 - 2012-07-26 06:26 - 00000273 _____ C:\Windows\win.ini
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Canneverbe Limited
2013-12-13 14:26 - 2013-12-13 14:26 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-13 14:13 - 2013-12-13 14:13 - 00000000 ____D C:\Users\Ralf\Documents\Benutzerdefinierte Office-Vorlagen
2013-12-13 13:25 - 2013-12-13 10:51 - 00000000 ____D C:\Program Files\Microsoft Office 15
2013-12-13 13:08 - 2013-12-13 13:08 - 00001108 _____ C:\Users\Ralf\Desktop\Rechner.lnk
2013-12-13 12:53 - 2013-12-13 12:53 - 00000000 ____D C:\Users\Public\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\Documents\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\CyberLink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\Users\Ralf\AppData\Local\Cyberlink
2013-12-13 12:51 - 2013-12-13 12:51 - 00000000 ____D C:\ProgramData\CyberLink
2013-12-13 12:34 - 2013-12-13 12:27 - 00000000 ____D C:\Users\Ralf\AppData\Local\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000057 _____ C:\ProgramData\Ament.ini
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\HpUpdate
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\Visan
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\ProgramData\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files\HP
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP Photo Creations
2013-12-13 12:32 - 2013-12-13 12:32 - 00000000 ____D C:\Program Files (x86)\HP
2013-12-13 11:29 - 2013-12-13 11:29 - 00002062 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intel AT Service.lnk
2013-12-13 11:24 - 2013-04-26 00:18 - 00000000 ____D C:\ProgramData\McAfee
2013-12-13 11:24 - 2013-04-26 00:18 - 00000000 ____D C:\Program Files\Common Files\mcafee
2013-12-13 11:02 - 2012-07-26 09:12 - 00000000 ____D C:\Windows\system32\restore
2013-12-13 10:30 - 2012-07-26 09:12 - 00000000 ___HD C:\Windows\ELAMBKUP
2013-12-13 09:58 - 2013-12-13 09:58 - 00000000 ____D C:\Users\Ralf\AppData\Local\Adobe
2013-12-13 09:58 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Adobe
2013-12-13 09:53 - 2013-12-13 09:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-13 09:33 - 2013-11-16 15:53 - 00000000 ____D C:\Program Files\McAfeeEx
2013-12-13 09:31 - 2013-12-13 09:31 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\Macromedia
2013-12-13 09:31 - 2012-07-26 06:26 - 00262144 ___SH C:\Windows\system32\config\ELAM
2013-12-13 09:30 - 2013-12-13 09:30 - 00001440 _____ C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-13 09:30 - 2013-12-13 09:30 - 00000000 ____D C:\Users\Ralf\AppData\Roaming\ASUS WebStorage
2013-12-13 09:30 - 2013-12-13 09:28 - 00000000 ____D C:\Users\Ralf
2013-12-13 09:30 - 2012-08-02 14:33 - 00000000 ____D C:\Windows\Log
2013-12-13 09:28 - 2013-12-13 09:28 - 00000020 ___SH C:\Users\Ralf\ntuser.ini
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Vorlagen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Startmenü
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Netzwerkumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Lokale Einstellungen
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Eigene Dateien
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Druckumgebung
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Musik
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Documents\Eigene Bilder
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Verlauf
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\AppData\Local\Anwendungsdaten
2013-12-13 09:28 - 2013-12-13 09:28 - 00000000 _SHDL C:\Users\Ralf\Anwendungsdaten
2013-12-04 01:53 - 2013-12-13 19:00 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-04 01:53 - 2013-12-13 19:00 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-01 14:42 - 2013-12-15 12:15 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-23 07:43 - 2013-12-13 09:49 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-23 06:05 - 2013-12-13 09:49 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-17 00:23 - 2012-08-02 14:33 - 00000000 ____D C:\Windows\ASUS
2013-11-17 00:21 - 2012-07-26 09:13 - 00262144 _____ C:\Windows\system32\config\BCD-Template
2013-11-16 16:01 - 2013-11-16 16:01 - 00039480 _____ C:\Windows\AsChkDev.txt
2013-11-16 16:01 - 2013-11-16 16:01 - 00000000 _____ C:\Windows\SysWOW64\Drivers\1043_ASUSTEK_K56CB_V30_WIN8.MRK
2013-11-16 16:00 - 2013-11-16 16:00 - 00000000 ____D C:\ProgramData\USBChargerPlus
2013-11-16 15:54 - 2013-11-16 15:54 - 00003002 _____ C:\Windows\System32\Tasks\ASUS Splendid ColorU
2013-11-16 15:54 - 2013-11-16 15:54 - 00002986 _____ C:\Windows\System32\Tasks\ASUS Splendid ACMON
2013-11-16 15:54 - 2013-11-16 15:51 - 00000000 ____D C:\Program Files\ASUS
2013-11-16 15:54 - 2013-04-26 00:16 - 00000000 ____D C:\Program Files (x86)\ASUS
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfManager_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevProc_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevGen_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevFan_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:53 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_DptfDevDram_01009.Wdf
2013-11-16 15:53 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-16 15:51 - 2013-11-16 15:51 - 00003112 _____ C:\Windows\System32\Tasks\ASUS Live Update
2013-11-16 15:51 - 2013-11-16 15:51 - 00003054 _____ C:\Windows\System32\Tasks\ASUS P4G
2013-11-16 15:51 - 2013-11-16 15:51 - 00003026 _____ C:\Windows\System32\Tasks\ASUS USB Charger Plus
2013-11-16 15:51 - 2013-11-16 15:51 - 00000000 ____D C:\ProgramData\P4G
2013-11-16 15:49 - 2013-11-17 00:23 - 00000000 ____D C:\eSupport
2013-11-16 15:48 - 2013-11-16 15:48 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-11-16 15:45 - 2013-11-16 15:45 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-11-16 15:45 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-11-16 15:43 - 2013-11-16 15:43 - 00003540 _____ C:\Windows\System32\Tasks\ASUS Touchpad Launcher (x64)
2013-11-16 15:43 - 2013-11-16 15:43 - 00000000 ____D C:\Program Files\DIFX
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-11-16 15:42 - 2013-11-16 15:42 - 00000000 ____D C:\Program Files\Realtek
2013-11-16 15:41 - 2013-11-16 15:41 - 00000000 ____D C:\Program Files\Intel
2013-11-16 15:41 - 2013-11-16 15:34 - 00000000 ____D C:\ProgramData\Intel
2013-11-16 15:38 - 2013-11-16 15:38 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\SysWOW64\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Windows\system32\NV
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-16 15:38 - 2013-11-16 15:38 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-11-16 15:38 - 2013-11-16 15:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-16 15:38 - 2013-11-16 15:36 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-16 15:37 - 2013-11-16 15:37 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-16 15:36 - 2013-11-16 15:36 - 00016316 _____ C:\Windows\system32\results.xml
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ___HD C:\Intel
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Windows\Options
2013-11-16 15:30 - 2013-11-16 15:30 - 00000000 ____D C:\Program Files (x86)\Qualcomm Atheros
2013-11-16 15:30 - 2013-11-16 15:29 - 00000000 ____D C:\ProgramData\Qualcomm Atheros
Files to move or delete:
====================
C:\ProgramData\SetStretch.exe
Some content of TEMP:
====================
C:\Users\Ralf\AppData\Local\Temp\AntiToolbarPackage.exe
C:\Users\Ralf\AppData\Local\Temp\avgnt.exe
C:\Users\Ralf\AppData\Local\Temp\AVG_AV_Setup.exe
C:\Users\Ralf\AppData\Local\Temp\COMAP.EXE
C:\Users\Ralf\AppData\Local\Temp\ProtectorPackage.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2012-08-02 14:24
==================== End Of Log ============================
Schon mal vielen Dank!! |
|
17.12.2013, 09:32
| #8 |
| /// the machine /// TB-Ausbilder | search protect by conduit Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.12.2013, 09:49
| #9 |
| | search protect by conduit Super, vielen Dank! Zwei letzte Fragen bleiben:
|
|
18.12.2013, 09:15
| #10 | |
| /// the machine /// TB-Ausbilder | search protect by conduitZitat:
McAfee Kram kannste manuell löschen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.12.2013, 10:55
| #11 |
| | search protect by conduit Ganz herzlichen Dank. Der Thread ist damit von meiner Seite beendet.  |
|
19.12.2013, 09:53
| #12 |
| /// the machine /// TB-Ausbilder | search protect by conduit Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu search protect by conduit |
| adobe, antivir, asus, avira, bho, defender, desktop, down, excel, explorer, firefox, focus, format, ftp, helper, installation, logfile, nvidia, nvpciflt.sys, opera, realtek, registry, scan, search protect, security, software, wildtangent games, windows, windows xp |
Linear-Darstellung
