Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 8.1: Trojaner - Hinweis durch Online-Banking

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 03.06.2014, 18:00   #1
VplusS
 
Windows 8.1: Trojaner - Hinweis durch Online-Banking - Standard

Windows 8.1: Trojaner - Hinweis durch Online-Banking



Hallo!
Nachdem ich nach der Anmeldung beim Online-Banking auf eine Seite weitergeleitet wurde, auf der nach einer PIN/TAN gefragt wurde (ich habe die Seite daraufhin geschlossen), habe ich mich mit der Bank in der Verbindung gesetzt, die mir mitteilte, dass ihnen diese Betrügermasche bereits bekannt und mein Laptop wohl durch Trojaner infiziert wäre.
Avira hat mir nichts gemeldet, aber dennoch hab ich in meiner Panik, da ich blöderweise keine Recovery-CD besitze, das Notebook (Samsung Modell NP350V5C-S0CDE) auf Werkseinstellungen zurückgesetzt. Mittlerweile ist mir klar, dass das Problem wohl dadurch nicht behoben wurde und daher wende ich mich nun an euch. Vielen Dank im Voraus!


Code:
ATTFilter
Search results from Spybot - Search & Destroy

03.06.2014 17:05:05
Scan took 00:18:31.
37 items found.

Macromedia.FlashPlayer.Cookies: [SBI $6AA61750]  Text file (File, nothing done)
  C:\Users\Verena\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\G39T8C6N\cf.prod.hlpstr.de\analytics.sol
  Properties.size=257
  Properties.md5=BA946E36C2C3BF420A1E0777C0D608C5
  Properties.filedate=1401720456
  Properties.filedatetext=2014-06-02 16:47:36

Macromedia.FlashPlayer.Cookies: [SBI $5555F3D7]  Text file (File, nothing done)
  C:\Users\Verena\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\G39T8C6N\cf.prod.hlpstr.de\swf\flowplayer.commercial-3.2.7.swf\org.flowplayer.sol
  Properties.size=67
  Properties.md5=8FF6ABB3420E073F59AAF6A4149E77FA
  Properties.filedate=1401692372
  Properties.filedatetext=2014-06-02 08:59:32

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

Tradedoubler: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

CasaleMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

BurstMedia: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

DoubleClick: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

MediaPlex: [SBI $4E2AF2AC] Tracking cookie (Google Chrome: Default) (Browser: Cookie, nothing done)
  

Internet Explorer: [SBI $1E8157BE] Typed URL list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Internet Explorer\TypedURLs

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

Internet Explorer: [SBI $0BC7B918] User agent (Registry Change, nothing done)
  HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent

MS Media Player: [SBI $5C51E349] Client ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\MediaPlayer\Player\Settings\Client ID

MS Paint: [SBI $07867C39] Recent file list (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows\CurrentVersion\Applets\Paint\Recent File List

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Media SDK: [SBI $37AAEDE6] Computer name (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows Media\WMSDK\General\ComputerName

Windows Media SDK: [SBI $CAA58B6E] Unique ID (Registry Change, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows Media\WMSDK\General\UniqueID

Windows Media SDK: [SBI $BACCD0DA] Volume serial number (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-2678595623-4148133582-4009595467-1001\Software\Microsoft\Windows Media\WMSDK\General\VolumeSerialNumber

Cookie: [SBI $49804B54] Browser: Cookie (1) (Browser: Cookie, nothing done)
  

Cache: [SBI $49804B54] Browser: Cache (49) (Browser: Cache, nothing done)
  

Verlauf: [SBI $49804B54] Browser: History (56) (Browser: History, nothing done)
  

Cookie: [SBI $49804B54] Browser: Cookie (690) (Browser: Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 2.3.39.131  DLL (build: 20140425) ---

2014-04-25 blindman.exe (2.3.39.151)
2014-04-25 explorer.exe (2.3.39.181)
2014-04-25 SDBootCD.exe (2.3.39.109)
2014-04-25 SDCleaner.exe (2.3.39.110)
2014-04-25 SDDelFile.exe (2.3.39.94)
2013-06-18 SDDisableProxy.exe
2014-04-25 SDFiles.exe (2.3.39.135)
2013-03-20 SDFileScanHelper.exe (2.1.16.1)
2014-04-25 SDFSSvc.exe (2.3.39.217)
2014-04-25 SDHelp.exe (2.3.39.1)
2014-04-25 SDHookHelper.exe (2.3.39.2)
2014-04-25 SDHookInst32.exe (2.3.39.2)
2014-04-25 SDHookInst64.exe (2.3.39.2)
2014-04-25 SDImmunize.exe (2.3.39.130)
2014-04-25 SDLogReport.exe (2.3.39.107)
2014-04-25 SDOnAccess.exe (2.3.39.11)
2014-04-25 SDPESetup.exe (2.3.39.3)
2014-04-25 SDPEStart.exe (2.3.39.86)
2014-04-25 SDPhoneScan.exe (2.3.39.28)
2014-04-25 SDPRE.exe (2.3.39.22)
2014-04-25 SDPrepPos.exe (2.3.39.15)
2014-04-25 SDQuarantine.exe (2.3.39.103)
2014-04-25 SDRootAlyzer.exe (2.3.39.116)
2014-04-25 SDSBIEdit.exe (2.3.39.39)
2014-04-25 SDScan.exe (2.3.39.181)
2014-04-25 SDScript.exe (2.3.39.54)
2014-04-25 SDSettings.exe (2.3.39.139)
2014-04-25 SDShell.exe (2.3.39.2)
2014-04-25 SDShred.exe (2.3.39.108)
2014-04-25 SDSysRepair.exe (2.3.39.102)
2014-04-25 SDTools.exe (2.3.39.157)
2014-04-25 SDTray.exe (2.3.39.129)
2014-04-25 SDUpdate.exe (2.3.39.94)
2014-04-25 SDUpdSvc.exe (2.3.39.77)
2014-04-25 SDWelcome.exe (2.3.39.130)
2014-04-25 SDWSCSvc.exe (2.3.39.2)
2014-05-20 spybotsd2-install-bdcore-update.exe (2.3.39.0)
2013-06-19 spybotsd2-translation-frx.exe
2014-06-02 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2014-04-25 NotificationSpreader.dll
2014-04-25 SDAdvancedCheckLibrary.dll (2.3.39.98)
2014-04-25 SDAV.dll
2014-04-25 SDECon32.dll (2.3.39.114)
2014-04-25 SDECon64.dll (2.3.39.113)
2014-04-25 SDEvents.dll (2.3.39.2)
2014-04-25 SDFileScanLibrary.dll (2.3.39.14)
2014-04-25 SDHook32.dll (2.3.39.2)
2014-04-25 SDHook64.dll (2.3.39.2)
2014-04-25 SDImmunizeLibrary.dll (2.3.39.2)
2014-04-25 SDLicense.dll (2.3.39.0)
2014-04-25 SDLists.dll (2.3.39.4)
2014-04-25 SDResources.dll (2.3.39.7)
2014-04-25 SDScanLibrary.dll (2.3.39.131)
2014-04-25 SDTasks.dll (2.3.39.15)
2013-12-19 SDWinLogon.dll (2.3.37.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2014-04-25 Tools.dll (2.3.39.36)
2014-03-05 Includes\Adware-000.sbi (*)
2014-01-08 Includes\Adware-001.sbi (*)
2014-05-27 Includes\Adware-C.sbi (*)
2014-01-13 Includes\Adware.sbi (*)
2014-01-13 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2014-01-08 Includes\Dialer-000.sbi (*)
2014-01-08 Includes\Dialer-001.sbi (*)
2014-01-08 Includes\Dialer-C.sbi (*)
2014-01-13 Includes\Dialer.sbi (*)
2014-01-13 Includes\DialerC.sbi (*)
2014-01-09 Includes\Fraud-000.sbi (*)
2014-01-09 Includes\Fraud-001.sbi (*)
2014-03-31 Includes\Fraud-002.sbi (*)
2014-01-09 Includes\Fraud-003.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2014-01-08 Includes\Hijackers-000.sbi (*)
2014-01-08 Includes\Hijackers-001.sbi (*)
2014-01-08 Includes\Hijackers-C.sbi (*)
2014-01-13 Includes\Hijackers.sbi (*)
2014-01-13 Includes\HijackersC.sbi (*)
2014-01-08 Includes\iPhone-000.sbi (*)
2014-01-08 Includes\iPhone.sbi (*)
2014-01-08 Includes\Keyloggers-000.sbi (*)
2014-03-19 Includes\Keyloggers-C.sbi (*)
2014-01-13 Includes\Keyloggers.sbi (*)
2014-01-13 Includes\KeyloggersC.sbi (*)
2014-01-09 Includes\Malware-001.sbi (*)
2014-01-09 Includes\Malware-002.sbi (*)
2014-02-05 Includes\Malware-003.sbi (*)
2014-01-28 Includes\Malware-004.sbi (*)
2014-04-15 Includes\Malware-005.sbi (*)
2014-02-26 Includes\Malware-006.sbi (*)
2014-01-09 Includes\Malware-007.sbi (*)
2014-04-30 Includes\Malware-C.sbi (*)
2014-01-13 Includes\Malware.sbi (*)
2013-12-23 Includes\MalwareC.sbi (*)
2014-01-15 Includes\PUPS-000.sbi (*)
2014-01-15 Includes\PUPS-001.sbi (*)
2014-01-15 Includes\PUPS-002.sbi (*)
2014-05-27 Includes\PUPS-C.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2014-01-07 Includes\PUPSC.sbi (*)
2014-01-08 Includes\Security-000.sbi (*)
2014-01-08 Includes\Security-C.sbi (*)
2014-01-21 Includes\Security.sbi (*)
2014-01-21 Includes\SecurityC.sbi (*)
2014-01-08 Includes\Spyware-000.sbi (*)
2014-01-08 Includes\Spyware-001.sbi (*)
2014-01-08 Includes\Spyware-C.sbi (*)
2014-01-21 Includes\Spyware.sbi (*)
2014-01-21 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2014-01-15 Includes\Trojans-000.sbi (*)
2014-01-15 Includes\Trojans-001.sbi (*)
2014-01-15 Includes\Trojans-002.sbi (*)
2014-01-15 Includes\Trojans-003.sbi (*)
2014-01-15 Includes\Trojans-004.sbi (*)
2014-03-19 Includes\Trojans-005.sbi (*)
2014-01-15 Includes\Trojans-006.sbi (*)
2014-01-15 Includes\Trojans-007.sbi (*)
2014-01-15 Includes\Trojans-008.sbi (*)
2014-01-15 Includes\Trojans-009.sbi (*)
2014-05-27 Includes\Trojans-C.sbi (*)
2014-01-15 Includes\Trojans-OG-000.sbi (*)
2014-01-15 Includes\Trojans-TD-000.sbi (*)
2014-01-15 Includes\Trojans-VM-000.sbi (*)
2014-01-15 Includes\Trojans-VM-001.sbi (*)
2014-01-15 Includes\Trojans-VM-002.sbi (*)
2014-01-15 Includes\Trojans-VM-003.sbi (*)
2014-01-15 Includes\Trojans-VM-004.sbi (*)
2014-01-15 Includes\Trojans-VM-005.sbi (*)
2014-01-15 Includes\Trojans-VM-006.sbi (*)
2014-01-15 Includes\Trojans-VM-007.sbi (*)
2014-01-15 Includes\Trojans-VM-008.sbi (*)
2014-01-15 Includes\Trojans-VM-009.sbi (*)
2014-01-15 Includes\Trojans-VM-010.sbi (*)
2014-01-15 Includes\Trojans-VM-011.sbi (*)
2014-01-15 Includes\Trojans-VM-012.sbi (*)
2014-01-15 Includes\Trojans-VM-013.sbi (*)
2014-01-15 Includes\Trojans-VM-014.sbi (*)
2014-01-15 Includes\Trojans-VM-015.sbi (*)
2014-01-15 Includes\Trojans-VM-016.sbi (*)
2014-01-15 Includes\Trojans-VM-017.sbi (*)
2014-01-15 Includes\Trojans-VM-018.sbi (*)
2014-01-15 Includes\Trojans-VM-019.sbi (*)
2014-01-15 Includes\Trojans-VM-020.sbi (*)
2014-01-15 Includes\Trojans-VM-021.sbi (*)
2014-01-15 Includes\Trojans-VM-022.sbi (*)
2014-01-15 Includes\Trojans-VM-023.sbi (*)
2014-01-15 Includes\Trojans-VM-024.sbi (*)
2014-01-15 Includes\Trojans-ZB-000.sbi (*)
2014-01-15 Includes\Trojans-ZL-000.sbi (*)
2014-01-09 Includes\Trojans.sbi (*)
2014-01-16 Includes\TrojansC-01.sbi (*)
2014-01-16 Includes\TrojansC-02.sbi (*)
2014-01-16 Includes\TrojansC-03.sbi (*)
2014-01-16 Includes\TrojansC-04.sbi (*)
2014-01-16 Includes\TrojansC-05.sbi (*)
2014-01-09 Includes\TrojansC.sbi (*)
         
Miniaturansicht angehängter Grafiken
Windows 8.1: Trojaner - Hinweis durch Online-Banking-gmer2.jpg   Windows 8.1: Trojaner - Hinweis durch Online-Banking-gmer1.jpg  

Alt 03.06.2014, 18:02   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8.1: Trojaner - Hinweis durch Online-Banking - Standard

Windows 8.1: Trojaner - Hinweis durch Online-Banking



hi,

warum sollte das Problem durch Zurücksetzen nicht erledigt sein (wenn denn jemals was auf dem Gerät war)??

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 03.06.2014, 18:06   #3
VplusS
 
Windows 8.1: Trojaner - Hinweis durch Online-Banking - Standard

Windows 8.1: Trojaner - Hinweis durch Online-Banking



Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 11:24 on 03/06/2014 (Verena)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Verena (administrator) on VERENA on 03-06-2014 11:27:18
Running from C:\Users\Verena\Downloads
Platform: Windows 8 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
() C:\Users\Verena\Downloads\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101584 2014-04-25] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [133760 2014-01-07] ( (Atheros Communications))

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = 
SearchScopes: HKCU - {4C6B4EEC-05FF-4DA8-9174-CB11AA2F4B6C} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-02]
CHR Extension: (Google Drive) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-02]
CHR Extension: (YouTube) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-02]
CHR Extension: (Google-Suche) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-02]
CHR Extension: (Google Wallet) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-02]
CHR Extension: (Google Mail) - C:\Users\Verena\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-02]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
S2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593152 2014-01-29] (Samsung Electronics CO., LTD.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738200 2014-04-25] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2081752 2014-04-25] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [35496 2012-07-09] (Advanced Micro Devices, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-03 11:27 - 2014-06-03 11:27 - 00009787 _____ () C:\Users\Verena\Downloads\FRST.txt
2014-06-03 11:27 - 2014-06-03 11:27 - 00000000 ____D () C:\FRST
2014-06-03 11:26 - 2014-06-03 11:26 - 02068992 _____ (Farbar) C:\Users\Verena\Downloads\FRST64.exe
2014-06-03 11:24 - 2014-06-03 11:24 - 00050477 _____ () C:\Users\Verena\Downloads\Defogger.exe
2014-06-03 11:24 - 2014-06-03 11:24 - 00000474 _____ () C:\Users\Verena\Desktop\defogger_disable.log
2014-06-03 11:24 - 2014-06-03 11:24 - 00000000 _____ () C:\Users\Verena\defogger_reenable
2014-06-03 11:07 - 2014-06-03 11:07 - 00018944 ___SH () C:\Users\Verena\Desktop\Thumbs.db
2014-06-03 10:53 - 2014-06-03 10:53 - 00001206 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\ATI
2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Local\ATI
2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\ProgramData\ATI
2014-06-03 10:51 - 2014-06-03 10:51 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Intel Corporation
2014-06-03 10:50 - 2014-06-03 10:50 - 01774862 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Synaptics
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Atheros
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Synaptics
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Intel
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-03 10:46 - 2014-06-03 10:46 - 00281248 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-03 10:45 - 2014-06-03 10:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Samsung
2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-06-03 10:36 - 2014-06-03 10:36 - 00003434 _____ () C:\WINDOWS\System32\Tasks\Settings
2014-06-03 10:36 - 2014-06-03 10:36 - 00002038 _____ () C:\Users\Public\Desktop\Settings.lnk
2014-06-03 10:32 - 2014-06-03 10:32 - 00002050 _____ () C:\Users\Public\Desktop\Support Center.lnk
2014-06-03 10:23 - 2014-06-03 11:15 - 00000000 ____D () C:\ProgramData\Norton
2014-06-03 10:19 - 2014-06-03 10:19 - 00000000 ____D () C:\ProgramData\ColorMode
2014-06-03 10:18 - 2014-06-03 11:20 - 00000000 ____D () C:\ProgramData\WinClon
2014-06-03 10:18 - 2014-06-03 10:18 - 00003126 _____ () C:\WINDOWS\System32\Tasks\advRecovery
2014-06-03 10:18 - 2014-06-03 10:18 - 00001513 _____ () C:\Users\Public\Desktop\Recovery.lnk
2014-06-03 10:18 - 2012-08-02 16:41 - 00008072 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\wmof64.dll
2014-06-03 10:18 - 2012-08-02 16:36 - 00024968 _____ (Samsung Electronics Co. Ltd.) C:\WINDOWS\SysWOW64\wsabi.dll
2014-06-03 10:16 - 2014-06-03 10:16 - 00005552 _____ () C:\WINDOWS\DPINST.LOG
2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____D () C:\Program Files\Synaptics
2014-06-03 10:15 - 2014-06-03 10:16 - 00001478 _____ () C:\WINDOWS\Synaptics.log
2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\InstallShield
2014-06-03 10:15 - 2012-09-01 18:01 - 00647736 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorA.sys
2014-06-03 10:15 - 2012-06-15 07:50 - 09888912 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RtsUVStoricon.dll
2014-06-03 10:15 - 2012-06-15 07:50 - 00315536 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtsUVStor.sys
2014-06-03 10:14 - 2014-06-03 10:15 - 00000203 _____ () C:\setup.log
2014-06-03 10:14 - 2012-09-21 18:29 - 00080062 ____N () C:\WINDOWS\system32\athw8x.cat
2014-06-03 10:14 - 2012-09-19 00:15 - 03653632 ____N (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\athw8x.sys
2014-06-03 10:14 - 2012-09-19 00:15 - 03653632 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athw8x.sys
2014-06-03 10:14 - 2012-07-31 00:04 - 00690832 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2014-06-03 10:14 - 2012-07-31 00:04 - 00074344 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2014-06-03 10:13 - 2014-06-03 10:15 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\Program Files\Realtek
2014-06-03 10:13 - 2012-08-10 12:06 - 04102928 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2014-06-03 10:13 - 2012-08-10 10:43 - 00330541 _____ () C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2014-06-03 10:13 - 2012-08-10 05:58 - 05892608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2014-06-03 10:13 - 2012-08-06 09:44 - 01561744 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2014-06-03 10:13 - 2012-08-06 05:49 - 02743440 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2014-06-03 10:13 - 2012-08-03 12:18 - 01706640 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2014-06-03 10:13 - 2012-08-01 12:29 - 00109200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2014-06-03 10:13 - 2012-07-24 11:30 - 00606336 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2014-06-03 10:13 - 2012-07-20 08:41 - 00880784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2014-06-03 10:13 - 2012-07-19 10:52 - 07598456 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2014-06-03 10:13 - 2012-07-19 10:52 - 02028920 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2014-06-03 10:13 - 2012-07-19 10:51 - 02080120 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2014-06-03 10:13 - 2012-07-19 10:51 - 00834936 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2014-06-03 10:13 - 2012-07-16 08:16 - 03643024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
2014-06-03 10:13 - 2012-07-15 15:13 - 00394616 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2014-06-03 10:13 - 2012-07-15 15:13 - 00394616 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2014-06-03 10:13 - 2012-07-02 09:39 - 01264272 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2014-06-03 10:13 - 2012-06-20 11:26 - 00110592 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2014-06-03 10:13 - 2012-06-15 05:20 - 07163784 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2014-06-03 10:13 - 2012-06-15 05:20 - 00433544 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2014-06-03 10:13 - 2012-06-15 05:20 - 00141192 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2014-06-03 10:13 - 2012-06-15 05:20 - 00123784 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2014-06-03 10:13 - 2012-06-15 05:20 - 00074632 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2014-06-03 10:13 - 2012-04-10 08:40 - 02533952 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2014-06-03 10:13 - 2012-03-08 05:47 - 00202336 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2014-06-03 10:13 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2014-06-03 10:13 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2014-06-03 10:13 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2014-06-03 10:13 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2014-06-03 10:13 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2014-06-03 10:13 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2014-06-03 10:13 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2014-06-03 10:13 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2014-06-03 10:13 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2014-06-03 10:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2014-06-03 10:13 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2014-06-03 10:13 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2014-06-03 10:13 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2014-06-03 10:13 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2014-06-03 10:13 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2014-06-03 10:13 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2014-06-03 10:13 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2014-06-03 10:13 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2014-06-03 10:13 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2014-06-03 10:13 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2014-06-03 10:13 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2014-06-03 10:12 - 2011-09-12 18:05 - 00003917 _____ () C:\WINDOWS\SysWOW64\atipblup.dat
2014-06-03 10:12 - 2011-09-12 18:05 - 00003917 _____ () C:\WINDOWS\system32\atipblup.dat
2014-06-03 10:10 - 2014-06-03 10:10 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-03 10:09 - 2014-06-03 10:12 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-06-03 10:09 - 2014-06-03 10:09 - 00000000 ____D () C:\Program Files\ATI
2014-06-03 10:08 - 2012-09-17 16:24 - 27664896 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 27643904 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 27435520 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 12604928 _____ (Intel Corporation) C:\WINDOWS\system32\igdumd64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 11040256 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumd32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 09007616 _____ (Intel Corporation) C:\WINDOWS\system32\igfxress.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 05338848 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdpmd64.sys
2014-06-03 10:08 - 2012-09-17 16:24 - 05338848 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys
2014-06-03 10:08 - 2012-09-17 16:24 - 04571136 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 03776512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 01981696 _____ () C:\WINDOWS\system32\iglhxa64.cpa
2014-06-03 10:08 - 2012-09-17 16:24 - 00604160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00598780 _____ () C:\WINDOWS\SysWOW64\igvpkrng700.bin
2014-06-03 10:08 - 2012-09-17 16:24 - 00598780 _____ () C:\WINDOWS\system32\igvpkrng700.bin
2014-06-03 10:08 - 2012-09-17 16:24 - 00524800 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00519680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00509984 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
2014-06-03 10:08 - 2012-09-17 16:24 - 00501760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00482304 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00448512 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00441888 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
2014-06-03 10:08 - 2012-09-17 16:24 - 00441856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdev.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00440320 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrell.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00439808 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfra.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00439808 _____ (Intel Corporation) C:\WINDOWS\system32\igfxresn.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00439296 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrrus.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00439296 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrrom.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsky.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptg.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrplk.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnld.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrita.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrhrv.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438784 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdeu.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrhun.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfin.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00438272 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcsy.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtrk.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsve.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrslv.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptb.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00437760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnor.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00437248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtha.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00437248 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdan.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00435712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrheb.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00435712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrara.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00432128 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrjpn.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00431104 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrkor.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00429056 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcht.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00428544 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrchs.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00410624 _____ (Intel Corporation) C:\WINDOWS\system32\igfxTMM.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00386048 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpph.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00330240 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxdv32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00286208 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrenu.lrc
2014-06-03 10:08 - 2012-09-17 16:24 - 00277024 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe
2014-06-03 10:08 - 2012-09-17 16:24 - 00252448 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2014-06-03 10:08 - 2012-09-17 16:24 - 00241664 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00216064 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00195584 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00180224 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00171040 _____ (Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
2014-06-03 10:08 - 2012-09-17 16:24 - 00142336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdo.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00126976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcpl.cpl
2014-06-03 10:08 - 2012-09-17 16:24 - 00063488 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00059425 _____ () C:\WINDOWS\system32\iglhxo64.vp
2014-06-03 10:08 - 2012-09-17 16:24 - 00059398 _____ () C:\WINDOWS\system32\iglhxg64.vp
2014-06-03 10:08 - 2012-09-17 16:24 - 00059230 _____ () C:\WINDOWS\system32\iglhxc64.vp
2014-06-03 10:08 - 2012-09-17 16:24 - 00059104 _____ () C:\WINDOWS\system32\iglhxc64_dev.vp
2014-06-03 10:08 - 2012-09-17 16:24 - 00058796 _____ () C:\WINDOWS\system32\iglhxg64_dev.vp
2014-06-03 10:08 - 2012-09-17 16:24 - 00058109 _____ () C:\WINDOWS\system32\iglhxo64_dev.vp
2014-06-03 10:08 - 2012-09-17 16:24 - 00056832 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00056320 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00028672 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00025088 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00017014 _____ () C:\WINDOWS\system32\iglhxs64.vp
2014-06-03 10:08 - 2012-09-17 16:24 - 00009728 _____ ( ) C:\WINDOWS\system32\IGFXDEVLib.dll
2014-06-03 10:08 - 2012-09-17 16:24 - 00001074 _____ () C:\WINDOWS\system32\iglhxa64.vp
2014-06-03 10:08 - 2012-09-17 16:23 - 21816320 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 12836864 _____ (Intel Corporation) C:\WINDOWS\system32\igd10umd64.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 11593728 _____ (Intel Corporation) C:\WINDOWS\system32\ig7icd64.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 11158528 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10umd32.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 08577536 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig7icd32.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 05903392 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUI.exe
2014-06-03 10:08 - 2012-09-17 16:23 - 03582976 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 02899968 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 00755048 _____ () C:\WINDOWS\SysWOW64\igcodeckrng700.bin
2014-06-03 10:08 - 2012-09-17 16:23 - 00755048 _____ () C:\WINDOWS\system32\igcodeckrng700.bin
2014-06-03 10:08 - 2012-09-17 16:23 - 00399392 _____ (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
2014-06-03 10:08 - 2012-09-17 16:23 - 00223233 _____ () C:\WINDOWS\system32\Gfxres.th-TH.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00209727 _____ () C:\WINDOWS\system32\Gfxres.el-GR.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00193862 _____ () C:\WINDOWS\system32\Gfxres.ru-RU.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00185376 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe
2014-06-03 10:08 - 2012-09-17 16:23 - 00173568 _____ (Intel Corporation) C:\WINDOWS\system32\gfxSrvc.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 00165865 _____ () C:\WINDOWS\system32\Gfxres.ar-SA.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00163120 _____ () C:\WINDOWS\system32\Gfxres.ja-JP.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00158727 _____ () C:\WINDOWS\system32\Gfxres.he-IL.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00149390 _____ () C:\WINDOWS\system32\Gfxres.it-IT.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00147759 _____ () C:\WINDOWS\system32\Gfxres.ko-KR.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00147101 _____ () C:\WINDOWS\system32\Gfxres.de-DE.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00147010 _____ () C:\WINDOWS\system32\Gfxres.es-ES.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00145715 _____ () C:\WINDOWS\system32\Gfxres.ro-RO.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00145211 _____ () C:\WINDOWS\system32\Gfxres.fr-FR.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00144378 _____ () C:\WINDOWS\system32\Gfxres.tr-TR.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00143976 _____ () C:\WINDOWS\system32\Gfxres.pt-BR.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00143730 _____ () C:\WINDOWS\system32\Gfxres.nl-NL.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00143657 _____ () C:\WINDOWS\system32\Gfxres.hu-HU.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00142990 _____ () C:\WINDOWS\system32\Gfxres.pt-PT.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00142617 _____ () C:\WINDOWS\system32\Gfxres.sv-SE.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00142423 _____ () C:\WINDOWS\system32\Gfxres.pl-PL.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00142008 _____ () C:\WINDOWS\system32\Gfxres.cs-CZ.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00141739 _____ () C:\WINDOWS\system32\Gfxres.fi-FI.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00141574 _____ () C:\WINDOWS\system32\Gfxres.sk-SK.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00140779 _____ () C:\WINDOWS\system32\Gfxres.hr-HR.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00137621 _____ () C:\WINDOWS\system32\Gfxres.sl-SI.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00137534 _____ () C:\WINDOWS\system32\Gfxres.nb-NO.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00136873 _____ () C:\WINDOWS\system32\Gfxres.da-DK.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00132360 _____ () C:\WINDOWS\system32\Gfxres.en-US.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00126035 _____ () C:\WINDOWS\system32\Gfxres.zh-TW.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00124403 _____ () C:\WINDOWS\system32\Gfxres.zh-CN.resources
2014-06-03 10:08 - 2012-09-17 16:23 - 00110592 _____ (Intel Corporation) C:\WINDOWS\system32\hccutils.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 00080384 _____ () C:\WINDOWS\system32\igdde64.dll
2014-06-03 10:08 - 2012-09-17 16:23 - 00064512 _____ () C:\WINDOWS\SysWOW64\igdde32.dll
2014-06-03 10:08 - 2012-08-02 03:00 - 05538984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2014-06-03 10:08 - 2012-08-02 02:54 - 10280960 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2014-06-03 10:08 - 2012-08-02 02:46 - 24934912 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2014-06-03 10:08 - 2012-08-02 02:17 - 20546560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2014-06-03 10:08 - 2012-08-02 01:13 - 00268728 _____ () C:\WINDOWS\SysWOW64\atiapfxx.blb
2014-06-03 10:08 - 2012-08-02 01:13 - 00268728 _____ () C:\WINDOWS\system32\atiapfxx.blb
2014-06-03 10:08 - 2012-08-02 01:12 - 00163840 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2014-06-03 10:08 - 2012-08-02 01:11 - 00927232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2014-06-03 10:08 - 2012-08-02 01:10 - 01111040 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2014-06-03 10:08 - 2012-08-02 01:06 - 00534528 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2014-06-03 10:08 - 2012-08-02 01:06 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2014-06-03 10:08 - 2012-08-02 01:06 - 00239616 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2014-06-03 10:08 - 2012-08-02 01:04 - 00120320 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2014-06-03 10:08 - 2012-08-02 01:04 - 00059392 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\atiedu64.dll
2014-06-03 10:08 - 2012-08-02 01:04 - 00043520 _____ (ATI Technologies, Inc.) C:\WINDOWS\SysWOW64\ati2edxx.dll
2014-06-03 10:08 - 2012-08-02 01:04 - 00021504 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2014-06-03 10:08 - 2012-08-02 01:03 - 06430208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2014-06-03 10:08 - 2012-08-02 00:55 - 04266496 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2014-06-03 10:08 - 2012-08-02 00:53 - 03150560 _____ () C:\WINDOWS\system32\atiumd6a.cap
2014-06-03 10:08 - 2012-08-02 00:53 - 00204952 _____ () C:\WINDOWS\SysWOW64\ativvsvl.dat
2014-06-03 10:08 - 2012-08-02 00:53 - 00204952 _____ () C:\WINDOWS\system32\ativvsvl.dat
2014-06-03 10:08 - 2012-08-02 00:53 - 00157144 _____ () C:\WINDOWS\SysWOW64\ativvsva.dat
2014-06-03 10:08 - 2012-08-02 00:53 - 00157144 _____ () C:\WINDOWS\system32\ativvsva.dat
2014-06-03 10:08 - 2012-08-02 00:47 - 07052288 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2014-06-03 10:08 - 2012-08-02 00:47 - 04751872 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2014-06-03 10:08 - 2012-08-02 00:46 - 03187136 _____ () C:\WINDOWS\SysWOW64\atiumdva.cap
2014-06-03 10:08 - 2012-08-02 00:28 - 00056832 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2014-06-03 10:08 - 2012-08-02 00:28 - 00056832 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2014-06-03 10:08 - 2012-08-02 00:28 - 00056320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2014-06-03 10:08 - 2012-08-02 00:28 - 00056320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2014-06-03 10:08 - 2012-08-02 00:20 - 06676480 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2014-06-03 10:08 - 2012-08-02 00:17 - 00070144 _____ (AMD) C:\WINDOWS\system32\coinst_8.982.6.dll
2014-06-03 10:08 - 2012-08-02 00:10 - 00540160 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2014-06-03 10:08 - 2012-08-02 00:10 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2014-06-03 10:08 - 2012-08-02 00:09 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2014-06-03 10:08 - 2012-08-02 00:09 - 00041984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2014-06-03 10:08 - 2012-08-02 00:09 - 00033280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2014-06-03 10:08 - 2012-08-02 00:09 - 00017920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2014-06-03 10:08 - 2012-08-02 00:09 - 00014848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2014-06-03 10:08 - 2012-08-02 00:08 - 00129536 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2014-06-03 10:08 - 2012-08-02 00:08 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2014-06-03 10:08 - 2012-08-02 00:08 - 00103936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2014-06-03 10:08 - 2012-08-02 00:08 - 00083456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2014-06-03 10:08 - 2012-08-02 00:07 - 00053248 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2014-06-03 10:08 - 2012-08-01 23:22 - 16034304 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2014-06-03 10:08 - 2012-08-01 23:22 - 00051200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2014-06-03 10:08 - 2012-08-01 23:22 - 00046080 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2014-06-03 10:08 - 2012-08-01 23:22 - 00044544 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2014-06-03 10:08 - 2012-08-01 23:22 - 00044032 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2014-06-03 10:08 - 2012-08-01 23:18 - 13605888 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2014-06-03 10:08 - 2012-07-16 05:33 - 00038557 _____ () C:\WINDOWS\atiogl.xml
2014-06-03 10:08 - 2012-07-09 20:19 - 00035496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\amdkmpfd.sys
2014-06-03 10:08 - 2012-04-12 15:30 - 00637743 _____ () C:\WINDOWS\system32\atiicdxx.dat
2014-06-03 10:08 - 2011-09-12 18:06 - 00003917 _____ () C:\WINDOWS\SysWOW64\atipblag.dat
2014-06-03 10:08 - 2011-09-12 18:06 - 00003917 _____ () C:\WINDOWS\system32\atipblag.dat
2014-06-03 10:08 - 2009-05-11 17:35 - 00118784 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atibtmon.exe
2014-06-03 10:01 - 2012-07-04 04:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2014-06-03 10:00 - 2014-06-03 10:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\CrashDumps
2014-06-03 10:00 - 2013-02-21 16:59 - 02063240 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe
2014-06-03 10:00 - 2013-01-12 23:51 - 00003004 _____ () C:\ProgramData\MakeMarkerFile.xml
2014-06-03 09:59 - 2014-06-03 11:08 - 00007986 _____ () C:\Users\Verena\Downloads\hijackthis.log
2014-06-03 09:55 - 2014-06-03 09:55 - 00001956 _____ () C:\Users\Public\Desktop\SW Update.lnk
2014-06-03 09:54 - 2014-06-03 10:32 - 00000000 ____D () C:\ProgramData\Samsung
2014-06-03 09:33 - 2014-06-03 09:33 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2014-06-03 00:53 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2014-06-03 00:53 - 2014-04-19 10:45 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-06-03 00:53 - 2014-04-19 10:45 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-03 00:53 - 2014-04-19 08:57 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-06-03 00:53 - 2014-04-19 08:57 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-03 00:47 - 2014-05-01 22:37 - 00694240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-06-03 00:47 - 2014-05-01 22:37 - 00078296 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-03 00:40 - 2014-06-03 09:30 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-06-02 22:43 - 2014-06-02 22:43 - 00002263 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-02 22:43 - 2014-06-02 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-02 22:42 - 2014-06-03 11:17 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-02 22:42 - 2014-06-03 09:47 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-02 22:42 - 2014-06-02 22:43 - 00000000 ____D () C:\Users\Verena\AppData\Local\Google
2014-06-02 22:42 - 2014-06-02 22:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-02 22:42 - 2014-06-02 22:42 - 00004096 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-02 22:42 - 2014-06-02 22:42 - 00003860 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-02 22:41 - 2014-06-02 22:42 - 00000000 ____D () C:\Users\Verena\AppData\Local\Deployment
2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\Apps\2.0
2014-06-02 22:31 - 2014-06-02 22:31 - 00000117 _____ () C:\WINDOWS\system32\netcfg-46234.txt
2014-06-02 22:29 - 2014-06-02 22:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-201890.txt
2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9373062.txt
2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9372734.txt
2014-06-02 20:53 - 2014-06-03 01:11 - 00000000 ____D () C:\WINDOWS\rescache
2014-06-02 20:23 - 2014-02-04 01:56 - 00332632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-06-02 20:23 - 2014-02-04 01:56 - 00278872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-06-02 20:23 - 2014-01-31 02:48 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2014-06-02 20:23 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2014-06-02 20:23 - 2014-01-31 02:06 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2014-06-02 20:23 - 2014-01-27 05:42 - 02232664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-06-02 20:23 - 2014-01-27 05:39 - 01939288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-06-02 20:23 - 2014-01-27 01:17 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-06-02 20:23 - 2014-01-16 01:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-06-02 20:23 - 2014-01-11 08:48 - 05979648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-06-02 20:23 - 2014-01-11 07:06 - 05092352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-06-02 20:23 - 2014-01-03 01:35 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-06-02 20:23 - 2014-01-03 01:32 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-06-02 20:23 - 2013-06-17 00:41 - 00997632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-06-02 20:23 - 2013-06-01 13:34 - 02391280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-06-02 20:23 - 2013-06-01 13:26 - 00327936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-06-02 20:23 - 2013-06-01 12:24 - 02106176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-06-02 20:23 - 2013-06-01 11:25 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2014-06-02 20:23 - 2013-06-01 11:24 - 01453568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-06-02 20:23 - 2013-06-01 11:24 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2014-06-02 20:23 - 2013-06-01 11:24 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2014-06-02 20:23 - 2013-06-01 11:23 - 01842176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-06-02 20:23 - 2013-06-01 11:23 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-06-02 20:23 - 2013-06-01 11:22 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-06-02 20:23 - 2013-06-01 11:22 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe
2014-06-02 20:23 - 2013-06-01 11:21 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2014-06-02 20:23 - 2013-06-01 11:21 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2014-06-02 20:23 - 2013-06-01 11:20 - 02219520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-06-02 20:23 - 2013-06-01 11:20 - 01527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-06-02 20:23 - 2013-06-01 11:20 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2014-06-02 20:23 - 2013-06-01 11:20 - 00583168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2014-06-02 20:23 - 2013-06-01 11:19 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-06-02 20:23 - 2013-06-01 11:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2014-06-02 20:23 - 2013-06-01 05:08 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2014-06-02 20:23 - 2013-05-25 00:09 - 01403296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-06-02 20:23 - 2013-05-25 00:09 - 01271584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-06-02 20:23 - 2013-05-25 00:09 - 01217352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-06-02 20:23 - 2013-05-25 00:09 - 01093904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-06-02 20:19 - 2012-09-20 11:08 - 00027280 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2014-06-02 20:19 - 2012-09-20 10:40 - 00389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2014-06-02 20:19 - 2012-09-20 10:31 - 00425192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2014-06-02 20:19 - 2012-09-20 09:55 - 03265256 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2014-06-02 20:19 - 2012-09-20 09:55 - 00533224 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2014-06-02 20:19 - 2012-09-20 08:47 - 00307192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 03964416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 01513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 01342464 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 01304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2014-06-02 20:19 - 2012-09-20 08:33 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2014-06-02 20:19 - 2012-09-20 08:33 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2014-06-02 20:19 - 2012-09-20 08:32 - 01739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 01400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2014-06-02 20:19 - 2012-09-20 08:32 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2014-06-02 20:19 - 2012-09-20 08:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-06-02 20:19 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll
2014-06-02 20:19 - 2012-09-20 08:30 - 02016256 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2014-06-02 20:19 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-06-02 20:19 - 2012-09-20 08:30 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2014-06-02 20:19 - 2012-09-20 08:30 - 00634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2014-06-02 20:19 - 2012-09-20 08:30 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2014-06-02 20:19 - 2012-09-20 08:30 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll
2014-06-02 20:19 - 2012-09-20 08:30 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2014-06-02 20:19 - 2012-09-20 08:13 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-06-02 20:19 - 2012-09-20 08:13 - 00023656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll
2014-06-02 20:19 - 2012-09-20 08:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2014-06-02 20:19 - 2012-09-20 07:55 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-06-02 20:19 - 2012-09-20 07:55 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2014-06-02 20:19 - 2012-09-20 07:55 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2014-06-02 20:19 - 2012-09-20 07:55 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2014-06-02 20:19 - 2012-09-20 07:55 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2014-06-02 20:19 - 2012-09-20 07:55 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2014-06-02 20:19 - 2012-09-20 07:55 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2014-06-02 20:19 - 2012-09-20 07:55 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-06-02 20:19 - 2012-09-20 07:55 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-06-02 20:19 - 2012-09-20 07:55 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
2014-06-02 20:19 - 2012-09-20 07:55 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2014-06-02 20:19 - 2012-09-20 07:54 - 01369600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 01196032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00709632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2014-06-02 20:19 - 2012-09-20 07:54 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2014-06-02 20:19 - 2012-09-20 07:53 - 02007040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2014-06-02 20:19 - 2012-09-20 07:53 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-06-02 20:19 - 2012-09-20 07:53 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2014-06-02 20:19 - 2012-09-20 07:53 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2014-06-02 20:19 - 2012-09-20 07:53 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-06-02 20:19 - 2012-09-20 07:53 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-06-02 20:19 - 2012-09-20 07:53 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2014-06-02 20:18 - 2012-09-27 09:17 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe
2014-06-02 20:18 - 2012-09-27 09:17 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
2014-06-02 20:18 - 2012-09-27 09:15 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2014-06-02 20:18 - 2012-09-27 08:35 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
2014-06-02 20:18 - 2012-09-27 08:35 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
2014-06-02 20:18 - 2012-09-27 08:34 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2014-06-02 20:18 - 2012-09-20 08:32 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2014-06-02 20:18 - 2012-09-20 08:32 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2014-06-02 20:18 - 2012-09-20 08:31 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2014-06-02 20:18 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2014-06-02 20:18 - 2012-09-20 08:31 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-06-02 20:18 - 2012-09-20 08:08 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-06-02 20:18 - 2012-09-20 07:54 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2014-06-02 20:18 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2014-06-02 20:18 - 2012-09-20 06:10 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-06-02 20:13 - 2013-10-09 03:33 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-06-02 20:13 - 2013-10-09 00:30 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-06-02 20:13 - 2013-10-09 00:30 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-06-02 20:13 - 2013-10-09 00:30 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-06-02 20:13 - 2013-10-09 00:30 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-06-02 20:13 - 2013-10-09 00:28 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-06-02 20:13 - 2013-10-09 00:27 - 03279872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-06-02 20:13 - 2013-10-09 00:27 - 01622016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-06-02 20:13 - 2013-10-09 00:27 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-06-02 20:13 - 2013-10-09 00:27 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-06-02 20:13 - 2013-10-09 00:27 - 00175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-06-02 20:13 - 2013-10-09 00:27 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-06-02 20:13 - 2013-10-09 00:27 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-06-02 20:13 - 2013-10-05 08:10 - 00285016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-06-02 20:13 - 2013-10-02 04:50 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-06-02 20:13 - 2013-09-28 07:48 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-06-02 20:13 - 2013-09-28 05:58 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-06-02 20:13 - 2013-09-19 09:32 - 01455448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-06-02 20:13 - 2013-08-30 07:19 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-06-02 20:13 - 2013-08-30 07:18 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-06-02 20:13 - 2013-08-30 01:48 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-06-02 20:13 - 2013-08-30 01:47 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-06-02 20:11 - 2013-09-14 00:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2014-06-02 20:11 - 2013-09-14 00:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-06-02 20:11 - 2013-08-30 07:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2014-06-02 20:11 - 2013-08-30 07:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2014-06-02 20:11 - 2013-08-30 01:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2014-06-02 20:11 - 2013-08-21 08:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-06-02 20:11 - 2013-08-10 08:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2014-06-02 20:11 - 2013-07-25 01:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-06-02 20:11 - 2013-07-25 01:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-06-02 20:11 - 2012-09-20 08:48 - 00062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2014-06-02 20:10 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-06-02 20:10 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-06-02 20:10 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-06-02 20:10 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-06-02 20:10 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-06-02 20:10 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-06-02 20:10 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanadvui.dll
2014-06-02 20:10 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-06-02 20:10 - 2013-07-06 02:16 - 01025024 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-06-02 20:10 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2014-06-02 20:10 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-06-02 20:10 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-06-02 20:10 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-06-02 20:10 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe
2014-06-02 20:10 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe
2014-06-02 20:10 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-06-02 20:10 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-06-02 20:10 - 2013-06-29 07:43 - 00327512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-06-02 20:10 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2014-06-02 20:10 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2014-06-02 20:10 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2014-06-02 20:10 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-06-02 20:10 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-06-02 20:10 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2014-06-02 20:10 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2014-06-02 20:10 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2014-06-02 20:10 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2014-06-02 20:10 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2014-06-02 20:10 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2014-06-02 20:10 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-06-02 20:09 - 2012-10-02 09:34 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2014-06-02 20:03 - 2012-10-24 06:54 - 00396008 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-06-02 20:03 - 2012-10-17 06:32 - 01172992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2014-06-02 20:03 - 2012-10-17 06:32 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2014-06-02 20:03 - 2012-10-17 06:32 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-06-02 20:03 - 2012-10-17 05:57 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2014-06-02 20:03 - 2012-10-17 05:57 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2014-06-02 20:03 - 2012-10-17 05:57 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-06-02 20:03 - 2012-10-12 08:13 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll
2014-06-02 20:03 - 2012-10-12 07:39 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll
2014-06-02 20:03 - 2012-10-11 09:47 - 00793200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-06-02 20:03 - 2012-10-11 09:23 - 00441576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-06-02 20:03 - 2012-10-11 07:46 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-06-02 20:03 - 2012-10-11 07:46 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2014-06-02 20:03 - 2012-10-11 07:45 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2014-06-02 20:03 - 2012-10-11 07:43 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-06-02 20:03 - 2012-10-11 07:43 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-06-02 20:03 - 2012-10-11 07:42 - 00612416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-06-02 20:03 - 2012-10-11 07:07 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2014-06-02 20:03 - 2012-10-11 07:07 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2014-06-02 20:03 - 2012-10-11 02:45 - 00478424 _____ () C:\WINDOWS\SysWOW64\locale.nls
2014-06-02 20:03 - 2012-10-11 02:44 - 00478424 _____ () C:\WINDOWS\system32\locale.nls
2014-06-02 20:02 - 2012-10-11 09:25 - 00056552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2014-06-02 20:02 - 2012-10-11 09:13 - 00033512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys
2014-06-02 20:02 - 2012-10-11 07:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2014-06-02 20:02 - 2012-10-11 07:45 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2014-06-02 20:02 - 2012-10-11 07:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2014-06-02 20:02 - 2012-10-11 07:44 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2014-06-02 20:02 - 2012-10-11 07:44 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2014-06-02 20:02 - 2012-10-11 07:44 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2014-06-02 20:02 - 2012-10-11 07:43 - 01280000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-06-02 20:02 - 2012-10-11 07:43 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-06-02 20:02 - 2012-10-11 07:43 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2014-06-02 20:02 - 2012-10-11 07:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-06-02 20:02 - 2012-10-11 07:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-06-02 20:02 - 2012-10-11 07:23 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll
2014-06-02 20:02 - 2012-10-11 07:23 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll
2014-06-02 20:02 - 2012-10-11 07:07 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2014-06-02 20:02 - 2012-10-11 07:07 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2014-06-02 20:02 - 2012-10-11 07:06 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2014-06-02 20:02 - 2012-10-11 07:06 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-06-02 20:02 - 2012-10-11 07:06 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2014-06-02 20:02 - 2012-10-11 07:06 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-06-02 20:02 - 2012-10-11 07:06 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-06-02 20:02 - 2012-10-11 07:06 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-06-02 20:02 - 2012-10-11 07:05 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2014-06-02 20:02 - 2012-10-11 06:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll
2014-06-02 19:56 - 2013-10-31 07:56 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2014-06-02 19:56 - 2013-10-31 07:56 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2014-06-02 19:56 - 2013-10-31 06:01 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2014-06-02 19:56 - 2013-10-31 05:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2014-06-02 19:56 - 2013-10-13 22:49 - 00100696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2014-06-02 19:56 - 2013-08-27 07:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-06-02 19:56 - 2013-08-27 07:19 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-06-02 19:56 - 2013-08-27 00:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-06-02 19:56 - 2013-08-27 00:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-06-02 19:56 - 2012-10-11 07:46 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2014-06-02 19:56 - 2012-10-11 07:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2014-06-02 19:56 - 2012-10-11 07:07 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2014-06-02 19:52 - 2012-11-27 08:39 - 01122768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2014-06-02 19:52 - 2012-11-27 06:49 - 01027152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2014-06-02 19:52 - 2012-11-27 06:20 - 01217536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2014-06-02 19:52 - 2012-11-27 06:20 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2014-06-02 19:52 - 2012-11-27 06:20 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2014-06-02 19:52 - 2012-11-27 06:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2014-06-02 19:52 - 2012-11-27 06:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2014-06-02 19:52 - 2012-11-27 06:20 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2014-06-02 19:52 - 2012-11-27 06:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll
2014-06-02 19:52 - 2012-11-27 06:19 - 03245568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-06-02 19:52 - 2012-11-27 06:19 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-06-02 19:52 - 2012-11-27 06:19 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2014-06-02 19:52 - 2012-11-27 06:19 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-06-02 19:52 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2014-06-02 19:52 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-06-02 19:52 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-06-02 19:52 - 2012-10-12 07:50 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-06-02 19:52 - 2012-09-11 07:28 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2014-06-02 19:52 - 2012-09-11 07:27 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2014-06-02 19:48 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-06-02 19:48 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2014-06-02 19:48 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2014-06-02 19:48 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2014-06-02 19:48 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2014-06-02 19:48 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2014-06-02 19:48 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2014-06-02 19:48 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2014-06-02 19:48 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2014-06-02 19:48 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2014-06-02 19:48 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2014-06-02 19:48 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2014-06-02 19:48 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2014-06-02 19:48 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-06-02 19:48 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2014-06-02 19:48 - 2012-11-20 07:24 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-06-02 19:48 - 2012-11-20 07:17 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-06-02 19:48 - 2012-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL
2014-06-02 19:48 - 2012-11-20 06:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL
2014-06-02 19:48 - 2012-11-06 09:33 - 01566432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-06-02 19:48 - 2012-11-06 06:48 - 01150160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-06-02 19:48 - 2012-11-06 06:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2014-06-02 19:48 - 2012-11-06 06:20 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2014-06-02 19:48 - 2012-11-06 06:20 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-06-02 19:48 - 2012-11-06 06:20 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2014-06-02 19:48 - 2012-11-06 06:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2014-06-02 19:48 - 2012-11-06 06:20 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-06-02 19:48 - 2012-11-06 06:20 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2014-06-02 19:48 - 2012-11-06 06:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 08552448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll
2014-06-02 19:48 - 2012-11-06 06:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll
2014-06-02 19:48 - 2012-11-06 06:18 - 11459584 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2014-06-02 19:48 - 2012-11-06 06:18 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2014-06-02 19:48 - 2012-11-06 06:18 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-06-02 19:48 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2014-06-02 19:48 - 2012-11-06 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2014-06-02 19:48 - 2012-11-06 06:17 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2014-06-02 19:48 - 2012-11-06 06:17 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2014-06-02 19:47 - 2012-11-06 06:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2014-06-02 19:47 - 2012-11-06 05:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-06-02 19:47 - 2012-11-06 05:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-06-02 19:47 - 2012-11-06 05:55 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2014-06-02 19:47 - 2012-11-06 05:55 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2014-06-02 19:47 - 2012-11-06 05:55 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2014-06-02 19:47 - 2012-11-06 05:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2014-06-02 19:47 - 2012-11-06 05:55 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fxppm.sys
2014-06-02 19:42 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-06-02 19:42 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2014-06-02 19:42 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2014-06-02 19:42 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-06-02 19:42 - 2014-02-27 01:18 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-06-02 19:42 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-06-02 19:42 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-06-02 19:42 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-06-02 19:42 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-06-02 19:42 - 2013-11-26 01:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
         
__________________

Alt 04.06.2014, 08:17   #4
VplusS
 
Windows 8.1: Trojaner - Hinweis durch Online-Banking - Standard

Windows 8.1: Trojaner - Hinweis durch Online-Banking



zweite Teil:

Code:
ATTFilter
2014-06-02 19:38 - 2014-06-02 19:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-34812.txt
2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-78578.txt
2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-35906.txt
2014-06-02 19:34 - 2014-06-02 19:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1102546.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000136 _____ () C:\WINDOWS\system32\netcfg-108093.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000135 _____ () C:\WINDOWS\system32\netcfg-105359.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107953.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107734.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000129 _____ () C:\WINDOWS\system32\netcfg-104984.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-114890.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-105484.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000127 _____ () C:\WINDOWS\system32\netcfg-105718.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000126 _____ () C:\WINDOWS\system32\netcfg-105609.txt
2014-06-02 19:16 - 2014-06-02 19:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-36906.txt
2014-06-02 19:14 - 2014-06-02 19:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1131796.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000136 _____ () C:\WINDOWS\system32\netcfg-140296.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000135 _____ () C:\WINDOWS\system32\netcfg-137859.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-140171.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-139984.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000129 _____ () C:\WINDOWS\system32\netcfg-137687.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-146437.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-137968.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000127 _____ () C:\WINDOWS\system32\netcfg-138203.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000126 _____ () C:\WINDOWS\system32\netcfg-138078.txt
2014-06-02 18:56 - 2014-06-02 18:56 - 00000117 _____ () C:\WINDOWS\system32\netcfg-55468.txt
2014-06-02 18:54 - 2014-06-02 18:54 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2673609.txt
2014-06-02 17:10 - 2014-06-02 17:10 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-02 17:10 - 2014-05-04 17:12 - 93223848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-02 16:46 - 2013-04-09 07:20 - 00306952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll
2014-06-02 16:46 - 2013-04-09 07:17 - 01829408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-06-02 16:46 - 2013-04-09 06:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-06-02 16:46 - 2013-04-09 06:51 - 14267904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-06-02 16:46 - 2013-04-09 06:51 - 03552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-06-02 16:46 - 2013-04-09 06:50 - 02107904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-06-02 16:46 - 2013-04-09 06:49 - 01444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2014-06-02 16:46 - 2013-04-08 23:52 - 11878912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2014-06-02 16:46 - 2013-04-08 23:51 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2014-06-02 16:46 - 2013-04-08 23:51 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2014-06-02 16:46 - 2013-04-08 23:51 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2014-06-02 16:45 - 2013-04-09 07:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-06-02 16:45 - 2013-04-09 07:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-06-02 16:45 - 2013-04-09 07:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-06-02 16:45 - 2013-04-09 07:20 - 00086280 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2014-06-02 16:45 - 2013-04-09 07:18 - 00077960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdvm.dll
2014-06-02 16:45 - 2013-04-09 06:52 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-06-02 16:45 - 2013-04-09 06:52 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-06-02 16:45 - 2013-04-09 06:52 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-06-02 16:45 - 2013-04-09 06:52 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-06-02 16:45 - 2013-04-09 06:51 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2014-06-02 16:45 - 2013-04-09 06:51 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-06-02 16:45 - 2013-04-09 06:51 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-06-02 16:45 - 2013-04-09 06:51 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-06-02 16:45 - 2013-04-09 06:50 - 00745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-06-02 16:45 - 2013-04-09 06:50 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-06-02 16:45 - 2013-04-09 06:50 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenuineCenter.dll
2014-06-02 16:45 - 2013-04-09 06:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-06-02 16:45 - 2013-04-09 06:50 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2014-06-02 16:45 - 2013-04-09 06:50 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-06-02 16:45 - 2013-04-09 06:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-06-02 16:45 - 2013-04-09 06:49 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-06-02 16:45 - 2013-04-09 06:49 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-06-02 16:45 - 2013-04-09 06:49 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-06-02 16:45 - 2013-04-09 06:49 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-06-02 16:45 - 2013-04-09 06:49 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-06-02 16:45 - 2013-04-09 06:49 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
2014-06-02 16:45 - 2013-04-09 06:48 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-06-02 16:45 - 2013-04-09 04:34 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2014-06-02 16:45 - 2013-04-09 04:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2014-06-02 16:45 - 2013-04-09 04:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-06-02 16:45 - 2013-04-09 04:31 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2014-06-02 16:45 - 2013-04-09 01:44 - 00123880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2014-06-02 16:45 - 2013-04-09 01:39 - 01408896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-06-02 16:45 - 2013-04-09 01:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-06-02 16:45 - 2013-04-09 01:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-06-02 16:45 - 2013-04-08 23:52 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2014-06-02 16:45 - 2013-04-08 23:52 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2014-06-02 16:45 - 2013-04-08 23:52 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2014-06-02 16:45 - 2013-04-08 23:52 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-06-02 16:45 - 2013-04-08 23:51 - 00659456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2014-06-02 16:45 - 2013-04-08 23:51 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll
2014-06-02 16:45 - 2013-04-05 01:30 - 00503080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-06-02 16:45 - 2013-03-16 00:05 - 00298456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-06-02 16:45 - 2013-03-16 00:05 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-06-02 16:45 - 2013-02-02 10:40 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll
2014-06-02 16:45 - 2013-02-02 10:23 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll
2014-06-02 16:45 - 2013-01-10 03:40 - 00303848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-06-02 16:45 - 2012-11-06 09:33 - 00522640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-06-02 16:45 - 2012-11-06 07:00 - 00463768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-06-02 16:45 - 2012-11-06 06:18 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-06-02 16:45 - 2012-10-11 07:44 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2014-06-02 16:45 - 2012-10-11 07:44 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2014-06-02 16:45 - 2012-10-11 07:06 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2014-06-02 16:45 - 2012-10-11 07:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2014-06-02 16:45 - 2012-09-20 08:33 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhmanagew.exe
2014-06-02 16:45 - 2012-09-20 08:33 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndptsp.tsp
2014-06-02 16:45 - 2012-09-20 08:33 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2014-06-02 16:45 - 2012-09-20 08:32 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2014-06-02 16:45 - 2012-09-20 08:32 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2014-06-02 16:45 - 2012-09-20 08:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2014-06-02 16:45 - 2012-09-20 08:32 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2014-06-02 16:45 - 2012-09-20 08:32 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2014-06-02 16:45 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2014-06-02 16:45 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchapi.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchph.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhautoplay.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcleanup.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhtask.dll
2014-06-02 16:45 - 2012-09-20 08:31 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvcctl.dll
2014-06-02 16:45 - 2012-09-20 08:12 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2014-06-02 16:45 - 2012-09-20 08:09 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2014-06-02 16:45 - 2012-09-20 07:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndptsp.tsp
2014-06-02 16:45 - 2012-09-20 07:55 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2014-06-02 16:45 - 2012-09-20 07:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2014-06-02 16:45 - 2012-09-20 07:54 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2014-06-02 16:45 - 2012-09-20 07:54 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2014-06-02 16:45 - 2012-09-20 07:54 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2014-06-02 16:45 - 2012-09-20 07:54 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2014-06-02 16:45 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2014-06-02 16:45 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2014-06-02 16:45 - 2012-09-20 07:32 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2014-06-02 16:44 - 2013-05-15 04:25 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-06-02 16:44 - 2013-05-15 04:25 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-06-02 16:44 - 2013-05-15 04:24 - 00793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2014-06-02 16:44 - 2013-05-15 04:24 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-06-02 16:44 - 2013-05-04 09:58 - 00120736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-06-02 16:44 - 2013-05-04 08:59 - 01483776 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-06-02 16:44 - 2013-05-04 08:59 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2014-06-02 16:44 - 2013-05-04 08:58 - 01332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-06-02 16:44 - 2013-05-04 08:58 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2014-06-02 16:44 - 2013-05-04 08:58 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-06-02 16:44 - 2013-05-04 08:58 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-06-02 16:44 - 2013-05-04 08:58 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2014-06-02 16:44 - 2013-05-04 08:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2014-06-02 16:44 - 2013-05-04 08:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll
2014-06-02 16:44 - 2013-05-04 08:56 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2014-06-02 16:44 - 2013-05-04 06:58 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2014-06-02 16:44 - 2013-05-04 06:57 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2014-06-02 16:44 - 2013-05-04 06:57 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2014-06-02 16:44 - 2013-05-04 06:57 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2014-06-02 16:44 - 2013-05-04 06:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2014-06-02 16:44 - 2013-05-04 06:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll
2014-06-02 16:44 - 2013-05-04 06:56 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2014-06-02 16:44 - 2013-05-04 06:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-06-02 16:44 - 2013-05-04 06:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2014-06-02 16:44 - 2013-05-04 06:56 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2014-06-02 16:44 - 2013-05-04 06:55 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2014-06-02 16:44 - 2013-05-04 06:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs
2014-06-02 16:44 - 2013-05-04 06:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-06-02 16:44 - 2013-05-04 06:47 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-06-02 16:44 - 2013-05-04 06:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-06-02 16:44 - 2013-03-02 11:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-06-02 16:44 - 2013-03-02 10:23 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-06-02 16:44 - 2013-03-02 10:22 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 01149952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2014-06-02 16:44 - 2013-03-02 04:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-06-02 16:44 - 2013-03-02 04:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-06-02 16:44 - 2013-03-02 04:44 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2014-06-02 16:44 - 2013-03-01 06:55 - 01175040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-06-02 16:44 - 2013-02-02 10:39 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2014-06-02 16:44 - 2013-02-02 10:39 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2014-06-02 16:43 - 2013-03-02 12:57 - 00077544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2014-06-02 16:43 - 2013-03-02 12:39 - 00495336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2014-06-02 16:43 - 2013-03-02 10:23 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2014-06-02 16:43 - 2013-03-02 10:23 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-06-02 16:43 - 2013-03-02 10:23 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncInfo.dll
2014-06-02 16:43 - 2013-03-02 10:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2014-06-02 16:43 - 2013-03-02 10:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2014-06-02 16:43 - 2013-03-02 10:21 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
2014-06-02 16:43 - 2013-03-02 04:45 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2014-06-02 16:43 - 2013-03-02 04:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe
2014-06-02 16:43 - 2013-03-02 04:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL
2014-06-02 16:43 - 2013-03-02 04:44 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-06-02 16:43 - 2013-03-02 04:44 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2014-06-02 16:43 - 2013-03-02 04:44 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\NdisImPlatform.dll
2014-06-02 16:43 - 2013-03-02 04:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2014-06-02 16:43 - 2013-03-02 04:43 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2014-06-02 16:43 - 2013-03-02 04:15 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2014-06-02 16:43 - 2013-03-01 06:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2014-06-02 16:43 - 2013-03-01 06:56 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2014-06-02 16:43 - 2013-01-09 05:59 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2014-06-02 16:43 - 2013-01-09 05:58 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2014-06-02 16:43 - 2012-11-06 06:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-06-02 16:43 - 2012-11-06 06:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wushareduxresources.dll
2014-06-02 16:42 - 2012-08-31 02:52 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2014-06-02 16:41 - 2012-08-31 02:53 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2014-06-02 16:40 - 2013-01-10 03:53 - 00028904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2014-06-02 16:40 - 2013-01-10 03:29 - 00091880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2014-06-02 16:40 - 2013-01-10 01:26 - 01752064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2014-06-02 16:40 - 2013-01-10 01:26 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2014-06-02 16:40 - 2013-01-10 01:26 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2014-06-02 16:40 - 2013-01-10 01:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-06-02 16:40 - 2013-01-10 01:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe
2014-06-02 16:40 - 2013-01-10 01:23 - 02094592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2014-06-02 16:40 - 2013-01-10 01:23 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2014-06-02 16:40 - 2013-01-10 01:23 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2014-06-02 16:40 - 2013-01-10 01:23 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-06-02 16:40 - 2013-01-10 01:23 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-06-02 16:40 - 2013-01-10 01:23 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe
2014-06-02 16:40 - 2013-01-10 01:22 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-06-02 16:40 - 2013-01-10 01:22 - 00666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2014-06-02 16:40 - 2013-01-10 01:22 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2014-06-02 16:40 - 2012-11-02 07:19 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2014-06-02 16:40 - 2012-11-02 07:18 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-06-02 16:40 - 2012-11-02 07:18 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-06-02 16:40 - 2012-11-02 07:18 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll
2014-06-02 16:40 - 2012-11-02 07:18 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2014-06-02 16:40 - 2012-11-02 07:18 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2014-06-02 16:39 - 2014-03-07 02:48 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-06-02 16:39 - 2014-03-07 02:48 - 01140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-06-02 16:39 - 2014-03-07 02:47 - 13760512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-06-02 16:39 - 2014-03-07 02:47 - 02877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-06-02 16:39 - 2014-03-07 02:47 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-06-02 16:39 - 2014-03-07 02:47 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-06-02 16:39 - 2014-03-07 02:47 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-06-02 16:39 - 2014-03-07 02:47 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 15404544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 03959808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 02648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 02240000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 01365504 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-06-02 16:39 - 2014-03-07 02:08 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-06-02 16:39 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2014-06-02 16:39 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2014-06-02 16:39 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2014-06-02 16:39 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2014-06-02 16:39 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-06-02 16:39 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-06-02 16:39 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-06-02 16:39 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-06-02 16:39 - 2013-02-21 12:29 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-06-02 16:39 - 2013-02-21 12:29 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-06-02 16:39 - 2013-02-21 12:29 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-06-02 16:39 - 2013-02-21 12:29 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-06-02 16:39 - 2013-02-21 12:14 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-06-02 16:39 - 2013-02-21 12:14 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-06-02 16:39 - 2013-02-19 11:53 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-06-02 16:39 - 2012-11-08 06:20 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-06-02 16:39 - 2012-11-08 06:20 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-06-02 16:38 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-06-02 16:38 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-06-02 16:38 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2014-06-02 16:38 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2014-06-02 16:38 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2014-06-02 16:38 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2014-06-02 16:37 - 2014-06-02 16:37 - 00000000 _____ () C:\Recovery.txt
2014-06-02 16:37 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-06-02 16:37 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-06-02 16:37 - 2014-02-08 06:34 - 04036608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-06-02 16:37 - 2013-12-09 02:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-06-02 16:37 - 2013-12-09 01:59 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-06-02 16:37 - 2013-10-03 01:25 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-06-02 16:37 - 2013-10-02 00:22 - 01022976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-06-02 16:37 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2014-06-02 16:37 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-06-02 16:37 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-06-02 16:37 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-06-02 16:37 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-06-02 16:37 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2014-06-02 16:37 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-06-02 16:37 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2014-06-02 16:37 - 2013-08-16 00:43 - 00083968 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-06-02 16:37 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-06-02 16:37 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2014-06-02 16:37 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2014-06-02 16:37 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2014-06-02 16:37 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2014-06-02 16:37 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2014-06-02 16:37 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2014-06-02 16:37 - 2012-11-26 06:21 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-06-02 16:37 - 2012-11-26 06:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-06-02 16:37 - 2012-10-10 09:04 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll
2014-06-02 16:37 - 2012-10-10 08:31 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll
2014-06-02 16:37 - 2012-09-20 08:33 - 00110592 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-06-02 16:36 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-06-02 16:36 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-06-02 16:36 - 2013-12-05 01:43 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-06-02 16:36 - 2013-12-05 01:37 - 01419264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-06-02 16:36 - 2013-10-10 13:53 - 00096600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-06-02 16:36 - 2013-10-10 11:21 - 01160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-06-02 16:36 - 2013-10-10 11:20 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-06-02 16:36 - 2013-10-02 01:37 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-06-02 16:36 - 2013-10-02 01:26 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-06-02 16:36 - 2013-09-04 05:11 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-06-02 16:36 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-06-02 16:36 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-06-02 16:36 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-06-02 16:36 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-06-02 16:36 - 2012-10-06 06:53 - 02893824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-06-02 16:36 - 2012-10-06 06:15 - 02400256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-06-02 16:35 - 2014-01-13 01:30 - 02238976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-06-02 16:35 - 2014-01-13 01:30 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-06-02 16:35 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-06-02 16:35 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-06-02 16:35 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-06-02 16:35 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-06-02 16:35 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-06-02 16:35 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-06-02 16:35 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-06-02 16:35 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-06-02 16:35 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-06-02 16:35 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-06-02 16:35 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-06-02 16:35 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2014-06-02 16:35 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-06-02 16:35 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2014-06-02 16:35 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-06-02 16:35 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-06-02 16:35 - 2012-10-24 05:25 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2014-06-02 16:35 - 2012-10-24 05:24 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2014-06-02 16:35 - 2012-10-24 05:24 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2014-06-02 16:35 - 2012-10-24 05:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2014-06-02 16:34 - 2014-05-06 07:14 - 19274752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-06-02 16:34 - 2014-05-06 07:14 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-06-02 16:34 - 2014-05-06 05:48 - 14367232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-06-02 16:34 - 2014-05-06 05:48 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-06-02 16:34 - 2014-05-06 05:37 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-06-02 16:34 - 2014-05-06 05:26 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-06-02 16:34 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-06-02 16:34 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2014-06-02 16:34 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2014-06-02 16:34 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2014-06-02 16:34 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-06-02 16:34 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2014-06-02 16:34 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2014-06-02 16:34 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2014-06-02 16:34 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2014-06-02 16:34 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2014-06-02 16:34 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2014-06-02 16:34 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-06-02 16:34 - 2013-02-12 02:17 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2014-06-02 16:34 - 2013-02-02 10:40 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlroamextension.dll
2014-06-02 16:34 - 2013-02-02 10:40 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2014-06-02 16:34 - 2013-02-02 10:40 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2014-06-02 16:34 - 2013-02-02 10:40 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tasklist.exe
2014-06-02 16:34 - 2013-02-02 10:40 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskkill.exe
2014-06-02 16:34 - 2013-02-02 10:39 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2014-06-02 16:34 - 2013-02-02 10:38 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2014-06-02 16:34 - 2013-02-02 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskkill.exe
2014-06-02 16:34 - 2013-02-02 10:24 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\tasklist.exe
2014-06-02 16:34 - 2013-02-02 10:23 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2014-06-02 16:34 - 2013-02-02 10:23 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlroamextension.dll
2014-06-02 16:34 - 2013-02-02 10:23 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2014-06-02 16:34 - 2013-02-02 10:23 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-06-02 16:34 - 2013-02-02 10:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2014-06-02 16:34 - 2013-02-02 10:21 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2014-06-02 16:34 - 2013-02-02 10:20 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2014-06-02 16:34 - 2013-02-02 10:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll
2014-06-02 16:34 - 2013-02-02 09:25 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-06-02 16:34 - 2013-02-02 07:41 - 01437184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-06-02 16:34 - 2013-02-02 07:31 - 01690624 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-06-02 16:34 - 2012-11-27 05:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-06-02 16:34 - 2012-11-27 05:55 - 00029952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys
2014-06-02 16:34 - 2012-11-20 06:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2014-06-02 16:34 - 2012-11-20 06:54 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys
2014-06-02 16:34 - 2012-11-08 06:24 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2014-06-02 16:34 - 2012-11-08 06:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2014-06-02 16:34 - 2012-11-08 06:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2014-06-02 16:34 - 2012-11-08 06:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2014-06-02 16:34 - 2012-11-08 06:02 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2014-06-02 16:34 - 2012-11-08 06:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2014-06-02 16:34 - 2012-11-03 07:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-06-02 16:34 - 2012-11-03 07:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-06-02 16:34 - 2012-11-03 07:24 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-06-02 16:34 - 2012-11-03 07:24 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-06-02 16:34 - 2012-11-03 07:24 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-06-02 16:34 - 2012-11-03 07:24 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-06-02 16:34 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-06-02 16:34 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-06-02 16:34 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-06-02 16:34 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-06-02 16:34 - 2012-11-03 07:04 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2014-06-02 16:34 - 2012-11-03 07:04 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2014-06-02 16:34 - 2012-11-03 07:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2014-06-02 16:34 - 2012-11-03 07:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2014-06-02 16:34 - 2012-09-20 08:32 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2014-06-02 16:34 - 2012-09-20 08:32 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2014-06-02 16:33 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-06-02 16:33 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-06-02 16:33 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-06-02 16:33 - 2014-04-12 11:09 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-06-02 16:33 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2014-06-02 16:33 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2014-06-02 16:33 - 2014-04-12 11:08 - 01281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-06-02 16:33 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-06-02 16:33 - 2014-04-12 11:08 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-06-02 16:33 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2014-06-02 16:33 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2014-06-02 16:33 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2014-06-02 16:33 - 2014-04-12 09:23 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2014-06-02 16:33 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2014-06-02 16:33 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2014-06-02 16:33 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2014-06-02 16:33 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-06-02 16:33 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2014-06-02 16:33 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-06-02 16:33 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-06-02 16:33 - 2014-03-11 05:32 - 06987096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-06-02 16:33 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2014-06-02 16:33 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2014-06-02 16:33 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-06-02 16:33 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2014-06-02 16:33 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2014-06-02 16:33 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-06-02 16:33 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2014-06-02 16:33 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-06-02 16:33 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-06-02 16:33 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2014-06-02 16:33 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2014-06-02 16:33 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2014-06-02 16:33 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-06-02 16:33 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2014-06-02 16:33 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-06-02 16:33 - 2013-12-05 01:43 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-06-02 16:33 - 2013-12-05 01:37 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-06-02 16:33 - 2013-11-23 08:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-06-02 16:33 - 2013-11-23 07:05 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-06-02 16:33 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2014-06-02 16:33 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2014-06-02 16:33 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-06-02 16:33 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2014-06-02 16:33 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-06-02 16:33 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-06-02 16:33 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-06-02 16:33 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-06-02 16:33 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-06-02 16:33 - 2013-03-22 05:49 - 02382336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2014-06-02 16:33 - 2013-03-22 00:47 - 02851840 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2014-06-02 16:33 - 2013-03-15 02:17 - 00861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-06-02 16:33 - 2013-03-06 09:10 - 00112872 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-06-02 16:33 - 2013-03-06 08:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-06-02 16:33 - 2013-03-02 10:23 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-06-02 16:33 - 2013-03-02 04:44 - 01011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-06-02 16:33 - 2012-12-15 06:55 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-06-02 16:33 - 2012-11-03 07:26 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysreset.exe
2014-06-02 16:33 - 2012-11-03 07:25 - 00945152 _____ (Microsoft Corporation) C:\WINDOWS\system32\resetengmig.dll
2014-06-02 16:33 - 2012-10-24 05:25 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2014-06-02 16:33 - 2012-10-24 04:48 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2014-06-02 16:23 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2014-06-02 16:22 - 2012-11-10 06:23 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-06-02 16:22 - 2012-11-10 06:23 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-06-02 16:22 - 2012-11-10 06:22 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDWebAI.dll
2014-06-02 16:22 - 2012-11-10 06:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmHostAI.dll
2014-06-02 16:22 - 2012-11-10 06:20 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appserverai.dll
2014-06-02 16:20 - 2012-11-01 06:41 - 01802240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-06-02 16:20 - 2012-11-01 06:40 - 02361344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-06-02 16:20 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2014-06-02 16:20 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2014-06-02 16:20 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2014-06-02 16:20 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2014-06-02 16:16 - 2014-02-06 01:41 - 00595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-06-02 16:16 - 2014-02-06 01:37 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-06-02 16:14 - 2013-09-28 05:35 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-06-02 16:14 - 2012-10-11 09:02 - 01636672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-06-02 16:14 - 2012-10-11 07:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2014-06-02 16:14 - 2012-10-11 07:19 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2014-06-02 16:14 - 2012-10-11 07:18 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2014-06-02 16:13 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2014-06-02 16:13 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2014-06-02 09:04 - 2013-10-02 01:37 - 02035712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-06-02 09:04 - 2013-10-02 01:26 - 02304512 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-06-02 09:04 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-06-02 09:04 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-06-02 09:04 - 2013-03-02 12:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-06-02 09:04 - 2013-03-02 04:43 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-06-02 09:04 - 2013-02-07 03:33 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-06-02 09:03 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-06-02 09:03 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-06-02 09:02 - 2014-06-02 22:53 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-02 09:02 - 2014-06-02 09:05 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-02 09:02 - 2014-06-02 09:02 - 00001423 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-06-02 09:02 - 2014-06-02 09:02 - 00001411 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking
2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-06-02 09:02 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2014-06-02 09:00 - 2014-06-02 09:01 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Verena\Downloads\spybot-2.3.exe
2014-06-02 08:59 - 2014-06-02 08:59 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Avira
2014-06-02 08:55 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-06-02 08:55 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-06-02 08:55 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2014-06-02 08:55 - 2013-11-01 07:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-06-02 08:55 - 2013-11-01 05:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-06-02 08:55 - 2012-12-13 06:00 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2014-06-02 08:55 - 2012-12-13 05:59 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2014-06-02 08:54 - 2014-06-03 11:22 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2678595623-4148133582-4009595467-1001
2014-06-02 08:52 - 2014-06-03 10:15 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-06-02 08:52 - 2014-06-02 08:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-02 08:52 - 2014-06-02 08:55 - 00000000 ____D () C:\ProgramData\Avira
2014-06-02 08:52 - 2014-06-02 08:55 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-02 08:52 - 2014-06-02 08:52 - 00001155 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files\Intel
2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Intel
2014-06-02 08:52 - 2014-01-25 02:23 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2014-06-02 08:52 - 2014-01-25 02:23 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2014-06-02 08:51 - 2014-06-02 08:51 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Verena\Downloads\avira_de_av___ws.exe
2014-06-02 08:50 - 2014-06-02 08:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Macromedia
2014-06-02 08:46 - 2014-06-03 09:57 - 00000000 ____D () C:\Users\Verena\AppData\Local\VirtualStore
2014-06-02 08:46 - 2014-06-03 09:31 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-02 08:46 - 2014-06-03 09:31 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-02 08:46 - 2014-06-02 08:46 - 00001454 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Adobe
2014-06-02 08:45 - 2014-06-03 11:27 - 00000000 ____D () C:\Users\Verena\AppData\Local\Temp
2014-06-02 08:45 - 2014-06-03 11:24 - 00000000 ____D () C:\Users\Verena
2014-06-02 08:45 - 2014-06-03 09:30 - 00000000 ____D () C:\Users\Verena\AppData\Local\Packages
2014-06-02 08:45 - 2014-06-02 08:45 - 00000020 ___SH () C:\Users\Verena\ntuser.ini
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Vorlagen
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Startmenü
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Netzwerkumgebung
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Lokale Einstellungen
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Eigene Dateien
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Druckumgebung
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Musik
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Bilder
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Verlauf
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Anwendungsdaten
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Anwendungsdaten
2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-02 08:45 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-06-02 08:42 - 2014-06-02 08:42 - 00001135 _____ () C:\WINDOWS\system32\netcfg-278890.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284171.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284140.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-283796.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-282484.txt

==================== One Month Modified Files and Folders =======

2014-06-03 11:27 - 2014-06-03 11:27 - 00009787 _____ () C:\Users\Verena\Downloads\FRST.txt
2014-06-03 11:27 - 2014-06-03 11:27 - 00000000 ____D () C:\FRST
2014-06-03 11:27 - 2014-06-02 08:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Temp
2014-06-03 11:26 - 2014-06-03 11:26 - 02068992 _____ (Farbar) C:\Users\Verena\Downloads\FRST64.exe
2014-06-03 11:24 - 2014-06-03 11:24 - 00050477 _____ () C:\Users\Verena\Downloads\Defogger.exe
2014-06-03 11:24 - 2014-06-03 11:24 - 00000474 _____ () C:\Users\Verena\Desktop\defogger_disable.log
2014-06-03 11:24 - 2014-06-03 11:24 - 00000000 _____ () C:\Users\Verena\defogger_reenable
2014-06-03 11:24 - 2014-06-02 08:45 - 00000000 ____D () C:\Users\Verena
2014-06-03 11:22 - 2014-06-02 08:54 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2678595623-4148133582-4009595467-1001
2014-06-03 11:20 - 2014-06-03 10:18 - 00000000 ____D () C:\ProgramData\WinClon
2014-06-03 11:19 - 2012-07-26 09:21 - 00026319 _____ () C:\WINDOWS\setupact.log
2014-06-03 11:17 - 2014-06-02 22:42 - 00001120 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-03 11:16 - 2012-07-26 09:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-06-03 11:15 - 2014-06-03 10:23 - 00000000 ____D () C:\ProgramData\Norton
2014-06-03 11:15 - 2012-08-05 23:07 - 00726918 _____ () C:\WINDOWS\PFRO.log
2014-06-03 11:15 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-06-03 11:12 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-06-03 11:12 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-06-03 11:09 - 2012-09-18 12:12 - 01476744 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-03 11:08 - 2014-06-03 09:59 - 00007986 _____ () C:\Users\Verena\Downloads\hijackthis.log
2014-06-03 11:07 - 2014-06-03 11:07 - 00018944 ___SH () C:\Users\Verena\Desktop\Thumbs.db
2014-06-03 11:00 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-06-03 10:54 - 2012-09-19 03:58 - 00754172 _____ () C:\WINDOWS\system32\perfh007.dat
2014-06-03 10:54 - 2012-09-19 03:58 - 00156362 _____ () C:\WINDOWS\system32\perfc007.dat
2014-06-03 10:54 - 2012-07-26 09:28 - 01748838 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-03 10:53 - 2014-06-03 10:53 - 00001206 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\S Agent.lnk
2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\ATI
2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\Users\Verena\AppData\Local\ATI
2014-06-03 10:52 - 2014-06-03 10:52 - 00000000 ____D () C:\ProgramData\ATI
2014-06-03 10:51 - 2014-06-03 10:51 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Intel Corporation
2014-06-03 10:50 - 2014-06-03 10:50 - 01774862 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Synaptics
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Atheros
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Synaptics
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Intel
2014-06-03 10:50 - 2014-06-03 10:50 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-03 10:46 - 2014-06-03 10:46 - 00281248 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-06-03 10:45 - 2014-06-03 10:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Samsung
2014-06-03 10:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\WinStore
2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files\Common Files\QCA_Bluetooth
2014-06-03 10:41 - 2014-06-03 10:41 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite
2014-06-03 10:41 - 2014-06-03 10:00 - 00000000 ____D () C:\Users\Verena\AppData\Local\CrashDumps
2014-06-03 10:36 - 2014-06-03 10:36 - 00003434 _____ () C:\WINDOWS\System32\Tasks\Settings
2014-06-03 10:36 - 2014-06-03 10:36 - 00002038 _____ () C:\Users\Public\Desktop\Settings.lnk
2014-06-03 10:36 - 2012-09-18 12:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-03 10:36 - 2012-09-18 12:12 - 00000000 ____D () C:\Program Files (x86)\Samsung
2014-06-03 10:32 - 2014-06-03 10:32 - 00002050 _____ () C:\Users\Public\Desktop\Support Center.lnk
2014-06-03 10:32 - 2014-06-03 09:54 - 00000000 ____D () C:\ProgramData\Samsung
2014-06-03 10:32 - 2012-09-18 12:12 - 00000000 ____D () C:\Program Files\Samsung
2014-06-03 10:19 - 2014-06-03 10:19 - 00000000 ____D () C:\ProgramData\ColorMode
2014-06-03 10:18 - 2014-06-03 10:18 - 00003126 _____ () C:\WINDOWS\System32\Tasks\advRecovery
2014-06-03 10:18 - 2014-06-03 10:18 - 00001513 _____ () C:\Users\Public\Desktop\Recovery.lnk
2014-06-03 10:18 - 2012-09-18 12:11 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-03 10:16 - 2014-06-03 10:16 - 00005552 _____ () C:\WINDOWS\DPINST.LOG
2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-06-03 10:16 - 2014-06-03 10:16 - 00000000 ____D () C:\Program Files\Synaptics
2014-06-03 10:16 - 2014-06-03 10:15 - 00001478 _____ () C:\WINDOWS\Synaptics.log
2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-06-03 10:15 - 2014-06-03 10:15 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\InstallShield
2014-06-03 10:15 - 2014-06-03 10:14 - 00000203 _____ () C:\setup.log
2014-06-03 10:15 - 2014-06-03 10:13 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-06-03 10:15 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-06-03 10:15 - 2012-09-18 12:11 - 00000000 ____D () C:\Program Files (x86)\Qualcomm Atheros
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-06-03 10:13 - 2014-06-03 10:13 - 00000000 ____D () C:\Program Files\Realtek
2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-06-03 10:12 - 2014-06-03 10:12 - 00000000 _____ () C:\WINDOWS\ativpsrm.bin
2014-06-03 10:12 - 2014-06-03 10:09 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-06-03 10:10 - 2014-06-03 10:10 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-06-03 10:09 - 2014-06-03 10:09 - 00000000 ____D () C:\Program Files\ATI
2014-06-03 10:08 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-03 09:57 - 2014-06-02 08:46 - 00000000 ____D () C:\Users\Verena\AppData\Local\VirtualStore
2014-06-03 09:55 - 2014-06-03 09:55 - 00001956 _____ () C:\Users\Public\Desktop\SW Update.lnk
2014-06-03 09:47 - 2014-06-02 22:42 - 00001124 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-03 09:34 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-06-03 09:33 - 2014-06-03 09:33 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2014-06-03 09:31 - 2014-06-02 08:46 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-03 09:31 - 2014-06-02 08:46 - 00000000 ___RD () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-03 09:30 - 2014-06-03 00:40 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-06-03 09:30 - 2014-06-02 08:45 - 00000000 ____D () C:\Users\Verena\AppData\Local\Packages
2014-06-03 09:30 - 2012-08-05 23:11 - 00000000 ____D () C:\ProgramData\PRICache
2014-06-03 01:11 - 2014-06-02 20:53 - 00000000 ____D () C:\WINDOWS\rescache
2014-06-03 00:41 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-06-03 00:41 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-06-03 00:40 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-06-03 00:40 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal
2014-06-03 00:40 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-06-03 00:39 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-03 00:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-06-03 00:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-06-03 00:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-06-03 00:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-06-02 22:53 - 2014-06-02 09:02 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-02 22:43 - 2014-06-02 22:43 - 00002263 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-02 22:43 - 2014-06-02 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-02 22:43 - 2014-06-02 22:42 - 00000000 ____D () C:\Users\Verena\AppData\Local\Google
2014-06-02 22:43 - 2014-06-02 22:42 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-02 22:42 - 2014-06-02 22:42 - 00004096 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-02 22:42 - 2014-06-02 22:42 - 00003860 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-02 22:42 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\Deployment
2014-06-02 22:41 - 2014-06-02 22:41 - 00000000 ____D () C:\Users\Verena\AppData\Local\Apps\2.0
2014-06-02 22:31 - 2014-06-02 22:31 - 00000117 _____ () C:\WINDOWS\system32\netcfg-46234.txt
2014-06-02 22:29 - 2014-06-02 22:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-201890.txt
2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9373062.txt
2014-06-02 22:14 - 2014-06-02 22:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9372734.txt
2014-06-02 20:51 - 2012-09-19 03:50 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-06-02 20:51 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm
2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr
2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2014-06-02 20:51 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\winrm
2014-06-02 20:51 - 2012-07-26 07:37 - 00000000 ____D () C:\WINDOWS\servicing
2014-06-02 20:49 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-06-02 20:49 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\slmgr
2014-06-02 20:49 - 2012-07-26 09:51 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts
2014-06-02 20:49 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-06-02 20:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-06-02 20:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\Com
2014-06-02 20:45 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\migwiz
2014-06-02 20:45 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe
2014-06-02 20:43 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform
2014-06-02 20:43 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\Com
2014-06-02 20:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB
2014-06-02 20:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\en-GB
2014-06-02 20:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\System
2014-06-02 20:37 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-06-02 19:38 - 2014-06-02 19:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-34812.txt
2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-78578.txt
2014-06-02 19:36 - 2014-06-02 19:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-35906.txt
2014-06-02 19:34 - 2014-06-02 19:34 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1102546.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000136 _____ () C:\WINDOWS\system32\netcfg-108093.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000135 _____ () C:\WINDOWS\system32\netcfg-105359.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107953.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000134 _____ () C:\WINDOWS\system32\netcfg-107734.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000129 _____ () C:\WINDOWS\system32\netcfg-104984.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-114890.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000128 _____ () C:\WINDOWS\system32\netcfg-105484.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000127 _____ () C:\WINDOWS\system32\netcfg-105718.txt
2014-06-02 19:17 - 2014-06-02 19:17 - 00000126 _____ () C:\WINDOWS\system32\netcfg-105609.txt
2014-06-02 19:16 - 2014-06-02 19:16 - 00000117 _____ () C:\WINDOWS\system32\netcfg-36906.txt
2014-06-02 19:14 - 2014-06-02 19:14 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1131796.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000136 _____ () C:\WINDOWS\system32\netcfg-140296.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000135 _____ () C:\WINDOWS\system32\netcfg-137859.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-140171.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000134 _____ () C:\WINDOWS\system32\netcfg-139984.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000129 _____ () C:\WINDOWS\system32\netcfg-137687.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-146437.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000128 _____ () C:\WINDOWS\system32\netcfg-137968.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000127 _____ () C:\WINDOWS\system32\netcfg-138203.txt
2014-06-02 18:58 - 2014-06-02 18:58 - 00000126 _____ () C:\WINDOWS\system32\netcfg-138078.txt
2014-06-02 18:56 - 2014-06-02 18:56 - 00000117 _____ () C:\WINDOWS\system32\netcfg-55468.txt
2014-06-02 18:54 - 2014-06-02 18:54 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2673609.txt
2014-06-02 17:10 - 2014-06-02 17:10 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-02 16:51 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-06-02 16:37 - 2014-06-02 16:37 - 00000000 _____ () C:\Recovery.txt
2014-06-02 16:36 - 2012-07-26 10:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-06-02 09:05 - 2014-06-02 09:02 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-06-02 09:02 - 2014-06-02 09:02 - 00001423 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2014-06-02 09:02 - 2014-06-02 09:02 - 00001411 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Safer-Networking
2014-06-02 09:02 - 2014-06-02 09:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2014-06-02 09:01 - 2014-06-02 09:00 - 46392680 _____ (Safer-Networking Ltd. ) C:\Users\Verena\Downloads\spybot-2.3.exe
2014-06-02 08:59 - 2014-06-02 08:59 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Avira
2014-06-02 08:55 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-02 08:55 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Avira
2014-06-02 08:55 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-02 08:52 - 2014-06-02 08:52 - 00001155 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Program Files\Intel
2014-06-02 08:52 - 2014-06-02 08:52 - 00000000 ____D () C:\Intel
2014-06-02 08:51 - 2014-06-02 08:51 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Verena\Downloads\avira_de_av___ws.exe
2014-06-02 08:50 - 2014-06-02 08:50 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Macromedia
2014-06-02 08:46 - 2014-06-02 08:46 - 00001454 _____ () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-06-02 08:46 - 2014-06-02 08:46 - 00000000 ____D () C:\Users\Verena\AppData\Roaming\Adobe
2014-06-02 08:45 - 2014-06-02 08:45 - 00000020 ___SH () C:\Users\Verena\ntuser.ini
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Vorlagen
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Startmenü
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Netzwerkumgebung
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Lokale Einstellungen
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Eigene Dateien
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Druckumgebung
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Musik
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Documents\Eigene Bilder
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Verlauf
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\AppData\Local\Anwendungsdaten
2014-06-02 08:45 - 2014-06-02 08:45 - 00000000 _SHDL () C:\Users\Verena\Anwendungsdaten
2014-06-02 08:42 - 2014-06-02 08:42 - 00001135 _____ () C:\WINDOWS\system32\netcfg-278890.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284171.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-284140.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-283796.txt
2014-06-02 08:42 - 2014-06-02 08:42 - 00000117 _____ () C:\WINDOWS\system32\netcfg-282484.txt
2014-05-09 11:16 - 2014-06-02 08:55 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-05-09 11:16 - 2014-06-02 08:55 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-05-09 11:16 - 2014-06-02 08:55 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2014-05-06 07:14 - 2014-06-02 16:34 - 19274752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-05-06 07:14 - 2014-06-02 16:34 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-05-06 05:48 - 2014-06-02 16:34 - 14367232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-05-06 05:48 - 2014-06-02 16:34 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-05-06 05:37 - 2014-06-02 16:34 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-05-06 05:26 - 2014-06-02 16:34 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-05-04 17:12 - 2014-06-02 17:10 - 93223848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe


Some content of TEMP:
====================
C:\Users\Verena\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-06-02 16:33] - [2014-04-12 11:10] - 0578048 ____A (Microsoft Corporation) 75DD70A14145499C9F7D903CF9A8C91B

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-08-05 23:07

==================== End Of Log ============================
         
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014
Ran by Verena at 2014-06-03 11:28:07
Running from C:\Users\Verena\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{D1FE6D8B-E5EE-5205-3E53-CDA000257D99}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
Avira (HKLM-x32\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.0806.1156.19437 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3097 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.6.0.1030 - Intel Corporation)
Microsoft App Update for microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe (x64) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.314 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.3.730.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6702 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39030 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.0.7.2 - Samsung Electronics CO., LTD.)
S Agent (Version: 1.1.47 - Samsung Electronics CO., LTD.) Hidden
Settings (HKLM-x32\...\{8CB5C357-12E5-41B1-A024-D57D4E6F32D9}) (Version: 2.0.1 - Samsung Electronics CO., LTD.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.3.39 - Safer-Networking Ltd.)
Support Center (HKLM\...\{AB0DEFBB-1A16-47B5-86D2-39F0A2B24AE4}) (Version: 2.1.1210 - Samsung Electronics CO., LTD.)
Support Center FAQ (x32 Version: 1.0.14 - Samsung Electronics CO., LTD.) Hidden
SW Update (HKLM-x32\...\{DA06101F-FD76-4BF0-88BD-B26A197005E3}) (Version: 2.1.21 - Samsung Electronics CO., LTD.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.14.2 - Synaptics Incorporated)

==================== Restore Points  =========================

02-06-2014 14:50:25 Windows Update

==================== Hosts content: ==========================

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {4177A352-DFCB-4F4B-B52B-CAC7F705131E} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {70607345-A7E3-4379-944C-08FD11B5E0D3} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2014-01-29] (Samsung Electronics CO., LTD.)
Task: {70E01ADD-DB4F-4E92-8369-6A1C2D00A5AC} - System32\Tasks\Microsoft\WINRE\WinRE-Repair => C:\windows\System32\reagentc.exe [2012-10-24] (Microsoft Corporation)
Task: {74BA27EE-2B71-4C19-87D6-6D9E717C8F67} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2012-10-15] (SEC)
Task: {844156D0-373A-4DC3-8702-0FC74FC06F55} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {9DCAE56A-934A-4476-8952-E3B213C0E1F2} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2014-03-19] (Samsung Electronics CO., LTD.)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CCA14E14-B044-422F-8BAF-D6209D544843} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {D99C5146-5BE6-4A0F-B130-654653457DA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-02] (Google Inc.)
Task: {E3F78E40-93B7-4C14-B8B6-A96283909E58} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {E9CDFE9C-4481-4533-8D15-A040A9E758F4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-02] (Google Inc.)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-01-29 13:20 - 2014-01-29 13:20 - 00084800 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
2014-01-07 01:29 - 2014-01-07 01:29 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-01-07 01:26 - 2014-01-07 01:26 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2014-01-07 01:32 - 2014-01-07 01:32 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2014-01-25 02:22 - 2014-01-25 02:22 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-03-19 11:41 - 2014-03-19 11:41 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2012-08-06 11:54 - 2012-08-06 11:54 - 00369664 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-06-03 11:24 - 2014-06-03 11:24 - 00050477 _____ () C:\Users\Verena\Downloads\Defogger.exe
2014-06-02 09:02 - 2014-04-25 14:11 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-06-02 09:02 - 2014-04-25 14:11 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-06-02 09:02 - 2014-04-25 14:11 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-06-02 09:02 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-06-02 09:02 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00027968 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 01141056 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00025920 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00109888 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00059712 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2014-01-29 13:20 - 2014-01-29 13:20 - 00102720 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-06-02 08:55 - 2014-05-14 14:27 - 00049744 _____ () C:\Users\Verena\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-02 22:43 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-06-02 22:43 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2014-06-02 22:43 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-06-02 22:43 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-06-02 22:43 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-06-02 22:43 - 2014-05-14 01:40 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll
2014-06-03 10:15 - 2014-06-03 10:15 - 00017920 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\b7497ee745bead9869f53a314470edeb\PSIClient.ni.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/03/2014 10:50:36 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (06/03/2014 10:41:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MsiExec.exe, Version: 5.0.9200.16384, Zeitstempel: 0x5010a60b
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.1, Zeitstempel: 0x4d5f0c22
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00013157
ID des fehlerhaften Prozesses: 0xb88
Startzeit der fehlerhaften Anwendung: 0xMsiExec.exe0
Pfad der fehlerhaften Anwendung: MsiExec.exe1
Pfad des fehlerhaften Moduls: MsiExec.exe2
Berichtskennung: MsiExec.exe3
Vollständiger Name des fehlerhaften Pakets: MsiExec.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MsiExec.exe5

Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0xb8c
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5

Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0x2e8
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5

Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0xed0
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0x15bc
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0x1674
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0x700
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0xef0
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Name des fehlerhaften Moduls: igfxsrvc.exe, Version: 8.15.10.3412, Zeitstempel: 0x52e048ae
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000021882
ID des fehlerhaften Prozesses: 0xcb0
Startzeit der fehlerhaften Anwendung: 0xigfxsrvc.exe0
Pfad der fehlerhaften Anwendung: igfxsrvc.exe1
Pfad des fehlerhaften Moduls: igfxsrvc.exe2
Berichtskennung: igfxsrvc.exe3
Vollständiger Name des fehlerhaften Pakets: igfxsrvc.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: igfxsrvc.exe5


System errors:
=============
Error: (06/03/2014 11:17:39 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.

Error: (06/03/2014 10:36:37 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "Easy Launcher" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/03/2014 10:27:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS

Error: (06/03/2014 10:27:38 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS

Error: (06/03/2014 10:06:17 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS

Error: (06/03/2014 09:55:15 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "SW Update Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (06/03/2014 09:31:35 AM) (Source: DCOM) (EventID: 10001) (User: VERENA)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaNicht verfügbarNicht verfügbar

Error: (06/03/2014 09:31:35 AM) (Source: DCOM) (EventID: 10001) (User: VERENA)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaNicht verfügbarNicht verfügbar

Error: (06/03/2014 09:31:35 AM) (Source: DCOM) (EventID: 10001) (User: VERENA)
Description: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server31Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mcaNicht verfügbarNicht verfügbar

Error: (06/03/2014 09:29:24 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Qualcomm Atheros Communications - Bluetooth Controller - Qualcomm Atheros AR3012 Bluetooth 4.0 + HS


Microsoft Office Sessions:
=========================
Error: (06/03/2014 10:50:36 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4

Error: (06/03/2014 10:41:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: MsiExec.exe5.0.9200.163845010a60bMSVCR100.dll10.0.40219.14d5f0c22c000000500013157b8801cf7f078f4d0a59C:\Windows\syswow64\MsiExec.exeC:\Windows\SYSTEM32\MSVCR100.dlle875b5c0-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882b8c01cf7f06f64e4727C:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33fb328c-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec000000500000000000218822e801cf7f06f61ccac7C:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33c9cfd8-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882ed001cf7f06f5f32afeC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33a013fb-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec0000005000000000002188215bc01cf7f06f5df561fC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe338c664f-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882167401cf7f06f5cba69aC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe3378326c-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec0000005000000000002188270001cf7f06f5b8938bC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33651f66-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882ef001cf7f06f5a31e1dC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe33520c57-eafa-11e3-be74-50b7c3555292

Error: (06/03/2014 10:36:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: igfxsrvc.exe8.15.10.341252e048aeigfxsrvc.exe8.15.10.341252e048aec00000050000000000021882cb001cf7f06f5900afcC:\WINDOWS\system32\igfxsrvc.exeC:\WINDOWS\system32\igfxsrvc.exe333c96e9-eafa-11e3-be74-50b7c3555292


==================== Memory info =========================== 

Percentage of memory in use: 25%
Total physical RAM: 8083.55 MB
Available physical RAM: 5988.01 MB
Total Pagefile: 12691.55 MB
Available Pagefile: 10135.22 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:673.4 GB) (Free:631.19 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 699 GB) (Disk ID: 4F494D44)

Partition: GPT Partition Type.

==================== End Of Log ============================
         
Meine bisherige Recherche ergab, dass Zurücksetzen nicht ausreicht. Aber ich selbst kann das leider nicht überprüfen, daher mein Hilferuf :/

Ich hoffe, mit diesen Daten kann man nun was anfangen. Ich wäre sehr dankbar, wenn du mir sagen könntest, ob durch das Zurücksetzen nun soweit alles sauber ist, oder ob ich noch weitere Schritte unternehmen muss.

Alt 05.06.2014, 09:03   #5
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8.1: Trojaner - Hinweis durch Online-Banking - Standard

Windows 8.1: Trojaner - Hinweis durch Online-Banking



Logs sind sauber

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.06.2014, 09:15   #6
VplusS
 
Windows 8.1: Trojaner - Hinweis durch Online-Banking - Standard

Windows 8.1: Trojaner - Hinweis durch Online-Banking



Vielen lieben Dank!

Alt 05.06.2014, 19:32   #7
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 8.1: Trojaner - Hinweis durch Online-Banking - Standard

Windows 8.1: Trojaner - Hinweis durch Online-Banking



Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Windows 8.1: Trojaner - Hinweis durch Online-Banking
agent, bli, browser, computer, dll, e-banking, explorer, explorer.exe, file, flash player, google, helper.exe, infiziert, installation, laptop, microsoft, notebook, problem, registry, registry key, seite, setup, software, spybot, tracking cookie, trojaner, verbindung, werkseinstellungen, windows



Ähnliche Themen: Windows 8.1: Trojaner - Hinweis durch Online-Banking


  1. Secure Banking - Online Banking auf der sicheren Seite!
    Archiv - 29.08.2016 (471)
  2. Windows 8.1: Online-Banking-Trojaner (BAWAG) entfernt, noch immer falsche Login-Seite
    Plagegeister aller Art und deren Bekämpfung - 15.11.2015 (24)
  3. Windows 7 Trojaner führt zur Sperrung von Online Banking
    Log-Analyse und Auswertung - 29.06.2014 (16)
  4. Windows 7: Postbank Online-Banking Trojaner
    Log-Analyse und Auswertung - 16.01.2014 (9)
  5. Windows 8: Online-Banking Trojaner
    Log-Analyse und Auswertung - 09.10.2013 (11)
  6. Windows XP: Avira meldet mehrere Trojaner, wurde beim Online Banking auf falsche Seite geleitet...
    Log-Analyse und Auswertung - 09.09.2013 (13)
  7. Windows 7 - Trojanerfund durch AntiVir, Online Banking betroffen, Java-Virus JAVA/Dldr.Obfshlp.MB und weitere ...
    Log-Analyse und Auswertung - 05.09.2013 (13)
  8. Sparkasse hat das Online-Banking gesperrt, Hinweis: Trojaner
    Log-Analyse und Auswertung - 24.05.2013 (12)
  9. Online Banking Zugriff durch Trojaner - Laptop neu aufsetzen?
    Plagegeister aller Art und deren Bekämpfung - 01.04.2013 (4)
  10. Online Banking gesperrt durch Trojaner
    Plagegeister aller Art und deren Bekämpfung - 28.12.2012 (3)
  11. Müll aus Secure Banking - Online Banking auf der sicheren Seite!
    Mülltonne - 04.10.2012 (0)
  12. Online Banking - TAN Abfrage beim Banking - Trojaner?
    Log-Analyse und Auswertung - 12.08.2011 (3)
  13. Online-Banking-Trojaner attackiert Smartphones mit Windows Mobile
    Nachrichten - 23.02.2011 (0)
  14. Online Banking gesperrt, Hinweis mals von mail provider, ebay, etc (Gozi)
    Plagegeister aller Art und deren Bekämpfung - 28.12.2010 (15)
  15. Online-Banking durch Trojaner Gozi gesperrt
    Plagegeister aller Art und deren Bekämpfung - 14.11.2010 (21)
  16. Trojaner agent2.AGSV durch Online-Banking erkannt
    Plagegeister aller Art und deren Bekämpfung - 28.01.2010 (2)
  17. Online Banking gehackt durch Trojaner !!!!!!!!
    Plagegeister aller Art und deren Bekämpfung - 24.01.2006 (9)

Zum Thema Windows 8.1: Trojaner - Hinweis durch Online-Banking - Hallo! Nachdem ich nach der Anmeldung beim Online-Banking auf eine Seite weitergeleitet wurde, auf der nach einer PIN/TAN gefragt wurde (ich habe die Seite daraufhin geschlossen), habe ich mich mit - Windows 8.1: Trojaner - Hinweis durch Online-Banking...
Archiv
Du betrachtest: Windows 8.1: Trojaner - Hinweis durch Online-Banking auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.