Hallo miteinander,

wie in der Überschrift erwähnt habe ich das Problem das sich ein Programm names "Zombie Invasion" nicht über die Systemteuerungen deinstallieren lässt. Wenn ich auf deinstallieren klicke passiert einfach nichts. Zwar kann ich es über den Taskmanager ausschalten jedoch startet es immer wieder neu. In meinem Browser (Chrome) tauchen ständig zusätzliche Fenster und andere Werbung auf und das bei fast jedem Klick. McAfee findet jedoch keine unerwünschten Programme und da ich mich nicht so gut auskenne bin ich jetzt hier.

Viele Dank im Voraus
Lutz

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-04-2015
Ran by user (administrator) on ACER on 14-04-2015 14:34:48
Running from C:\Users\user\Desktop
Loaded Profiles: UpdatusUser & user (Available profiles: UpdatusUser & user)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(XTab system) C:\Program Files (x86)\XTab\ProtectService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Windows\rcore.exe
(scsp) C:\Program Files (x86)\System-Checker\Files\scxy.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\CommonBuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\CommonBuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
() C:\Program Files (x86)\System-Checker\syschkrs.exe
() C:\Program Files (x86)\System-Checker\syschkrm.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\CommonBuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\CommonBuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\CommonBuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\CommonBuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\CommonBuild\McCBEntAndInstru.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
         

Das ist die FRST.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-04-2015
Ran by user at 2015-04-14 14:36:35
Running from C:\Users\user\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8105 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.01.2008.3 - Acer Incorporated)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Free YouTube to MP3 Converter version 3.12.57.324 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.57.324 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 41.0.2272.118 - Google Inc.)
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
McAfee LiveSafe – Internet Security (HKLM-x32\...\MSC) (Version: 13.6.1529 - McAfee, Inc.)
McAfee SiteAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.7.194 - McAfee, Inc.)
Microsoft Office Home and Business 2013 - de-de (HKLM\...\HomeBusinessRetail - de-de) (Version: 15.0.4701.1002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\OneDriveSetup.exe) (Version: 17.3.4726.0226 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
NVIDIA Grafiktreiber 332.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.35 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4701.1002 - Microsoft Corporation) Hidden
Pokki Start Menu (HKU\S-1-5-21-2489847289-3309440512-3948852859-1001\...\Pokki) (Version: 0.269.2.471 - Pokki)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21247 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.25.108.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7203 - Realtek Semiconductor Corp.)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
System-Checker (HKLM-x32\...\System-Checker) (Version: 0.5 - System-Checker)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)
Zombie Invasion (HKLM-x32\...\ZombieInvasion) (Version: 2.7.59 - Time Lapse Solutions) <==== ATTENTION

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2489847289-3309440512-3948852859-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2489847289-3309440512-3948852859-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\user\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

06-04-2015 23:14:02 Konfiguriert Power Media Player
12-04-2015 21:27:18 Installiert Medieval II Total War

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {04D44CB9-8D07-4074-AD6D-44B3A84DAB82} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-04] (Google Inc.)
Task: {1975A9B2-C4B6-485A-A6CE-409BEF9611AC} - System32\Tasks\Run_Browser => C:\Users\user\AppData\Local\UnicoBrowser\Application\unicobrowser.exe
Task: {2BDC9DED-F4FE-4F0A-812F-0797F3A70753} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-04-04] (Google Inc.)
Task: {310919DD-61AB-4189-8B00-7C29D82BD59B} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-06-12] (Acer Incorporated)
Task: {411EABB4-F262-4FAD-9E77-918690D9554B} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-24] (Microsoft Corporation)
Task: {46352608-0E53-4FE6-A384-F3DDEBE2B798} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-02-26] (Microsoft Corporation)
Task: {4EE76154-4B74-472B-B1E7-F6A72E3C9CD2} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {80E93779-4640-4CAB-B35E-E0FF91DA77EB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {93C9C4AB-CF9F-46A3-8A4A-C4376F8F5E31} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: {97F9D752-7B0D-4455-8A78-0464DD218885} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {AD4A8A00-ACB2-4E46-994F-FEF6E22AA2DB} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2489847289-3309440512-3948852859-1002 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {B80D42D8-96B0-4745-98BD-F47D61E70EF2} - System32\Tasks\FUB => C:\Program Files (x86)\Acer\Care Center\FUB.bat
Task: {BBA76514-A3E7-488C-9A3B-523F33CE0134} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-02-10] (Microsoft Corporation)
Task: {BD299213-A6B0-4CC3-B06F-68C854CD1411} - System32\Tasks\VZZXGN => C:\ProgramData\4d0801eee76440b5aa8e9e9bd8f25f47\4d0801eee76440b5aa8e9e9bd8f25f47.exe
Task: {D7C3927B-5DCA-430C-BC3F-664422C1C461} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {E11FC728-DFFC-4F5D-B41C-DF25F3A32930} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-24] (Microsoft Corporation)
Task: {E72A04D5-4B7C-466C-A450-9F105E8A7A8E} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: {F37EF4A2-CCA4-4B26-926A-C484EF05009F} - System32\Tasks\{9700D7FA-E5DB-4AB6-B549-9260F5FC3C27} => pcalua.exe -a C:\Users\user\Desktop\Games\rome\medieval2.exe -d C:\Users\user\Desktop\Games\rome
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: {FB4D5525-F8B5-4A20-B00E-743C8EBDC0F2} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) ==============

2015-04-04 18:30 - 2015-03-12 08:40 - 04687360 _____ () C:\Windows\rcore.exe
2015-04-05 17:54 - 2014-05-20 08:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-04-01 20:19 - 2015-04-01 20:19 - 00186880 _____ () C:\Program Files (x86)\System-Checker\syschkrs.exe
2015-04-01 20:19 - 2015-04-01 20:19 - 00110080 _____ () C:\Program Files (x86)\System-Checker\syschkrm.exe
2014-08-30 13:31 - 2014-01-08 02:48 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-02-25 22:14 - 2014-02-25 22:14 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-02-25 22:11 - 2014-02-25 22:11 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-02-25 22:17 - 2014-02-25 22:17 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-03-19 03:35 - 2014-03-07 18:21 - 00080312 _____ () C:\Windows\system32\igfxexps.dll
2014-08-30 13:33 - 2013-12-10 01:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-04-04 18:55 - 2015-03-10 08:37 - 00775680 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-04-04 18:55 - 2014-12-02 02:29 - 05002752 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-04-04 18:55 - 2015-04-14 01:44 - 02371776 _____ () C:\Program Files (x86)\Steam\video.dll
2015-04-04 18:55 - 2014-12-02 02:29 - 01612800 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-04-04 18:55 - 2014-12-02 02:29 - 01210368 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-04-04 18:55 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-04-04 18:55 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-04-04 18:55 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-04-04 18:55 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-04-04 18:55 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-04-04 18:55 - 2015-04-14 01:44 - 00702656 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-04-04 18:55 - 2015-02-25 03:58 - 34641288 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-04-04 19:36 - 2015-03-30 23:07 - 01174856 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\libglesv2.dll
2015-04-04 19:36 - 2015-03-30 23:07 - 00080200 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\libegl.dll
2015-04-04 19:36 - 2015-03-30 23:07 - 09279304 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\pdf.dll
2015-04-04 19:36 - 2015-03-30 23:07 - 14974280 _____ () C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.118\PepperFlash\pepflashplayer.dll

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\scjrtf.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\scjrtr.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\scjrtf.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\scjrtr.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\scxy => ""="service"

==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\user\Desktop\tron_lamborghini_aventador-HD.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrator (S-1-5-21-2489847289-3309440512-3948852859-500 - Administrator - Disabled)
Gast (S-1-5-21-2489847289-3309440512-3948852859-501 - Limited - Disabled)
UpdatusUser (S-1-5-21-2489847289-3309440512-3948852859-1001 - Limited - Enabled) => C:\Users\UpdatusUser
user (S-1-5-21-2489847289-3309440512-3948852859-1002 - Administrator - Enabled) => C:\Users\user

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/13/2015 09:42:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x2f4c
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 09:42:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x838
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 09:41:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x2930
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 09:40:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x18b4
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 09:40:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x2148
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 09:40:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x15d4
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 09:40:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x2730
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 09:39:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x3394
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 08:06:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0x27f8
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5

Error: (04/13/2015 08:06:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: LegoRR.exe, Version: 0.0.0.0, Zeitstempel: 0x37ef49e9
Name des fehlerhaften Moduls: d3drm.dll, Version: 6.3.9600.17668, Zeitstempel: 0x54c846bb
Ausnahmecode: 0xc0000135
Fehleroffset: 0x0009e052
ID des fehlerhaften Prozesses: 0xd38
Startzeit der fehlerhaften Anwendung: 0xLegoRR.exe0
Pfad der fehlerhaften Anwendung: LegoRR.exe1
Pfad des fehlerhaften Moduls: LegoRR.exe2
Berichtskennung: LegoRR.exe3
Vollständiger Name des fehlerhaften Pakets: LegoRR.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: LegoRR.exe5


System errors:
=============
Error: (04/14/2015 02:31:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "sadrfM" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/14/2015 02:14:53 PM) (Source: DCOM) (EventID: 10010) (User: Acer)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (04/14/2015 02:14:16 PM) (Source: DCOM) (EventID: 10010) (User: Acer)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (04/14/2015 01:25:04 PM) (Source: DCOM) (EventID: 10010) (User: Acer)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (04/14/2015 01:24:34 PM) (Source: DCOM) (EventID: 10010) (User: Acer)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (04/14/2015 01:09:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "sadrfM" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/14/2015 01:04:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (04/14/2015 01:04:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (04/13/2015 10:05:48 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "sadrfM" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (04/13/2015 07:53:47 PM) (Source: DCOM) (EventID: 10010) (User: Acer)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}


Microsoft Office Sessions:
=========================
Error: (04/13/2015 09:42:13 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e0522f4c01d07621ef80b020C:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dll2de8d685-e215-11e4-8263-f8a963e75cde

Error: (04/13/2015 09:42:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e05283801d07621ea8cc7deC:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dll28cf0917-e215-11e4-8263-f8a963e75cde

Error: (04/13/2015 09:41:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e052293001d07621e47b89dbC:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dll23d65d04-e215-11e4-8263-f8a963e75cde

Error: (04/13/2015 09:40:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e05218b401d07621c3c1fc02C:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dll022a4c41-e215-11e4-8263-f8a963e75cde

Error: (04/13/2015 09:40:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e052214801d07621bece15f5C:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dllfd2a8f51-e214-11e4-8263-f8a963e75cde

Error: (04/13/2015 09:40:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e05215d401d07621bb14fb05C:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dllfa34ce2e-e214-11e4-8263-f8a963e75cde

Error: (04/13/2015 09:40:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e052273001d07621ad3d2c37C:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dllebaaf748-e214-11e4-8263-f8a963e75cde

Error: (04/13/2015 09:39:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e052339401d076219fb14fe2C:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dllde63cbd4-e214-11e4-8263-f8a963e75cde

Error: (04/13/2015 08:06:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e05227f801d0761490440dafC:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dllced9d061-e207-11e4-8263-f8a963e75cde

Error: (04/13/2015 08:06:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: LegoRR.exe0.0.0.037ef49e9d3drm.dll6.3.9600.1766854c846bbc00001350009e052d3801d0761489a6e920C:\Program Files (x86)\LEGO Media\Spiele\Rock Raiders\LegoRR.exed3drm.dllca407330-e207-11e4-8263-f8a963e75cde


CodeIntegrity Errors:
===================================
  Date: 2015-04-13 22:20:00.926
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-04-04 22:28:21.108
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 43%
Total physical RAM: 8115.27 MB
Available physical RAM: 4609.54 MB
Total Pagefile: 10035.27 MB
Available Pagefile: 4983.88 MB
Total Virtual: 131072 MB
Available Virtual: 131071.77 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:914.95 GB) (Free:844.63 GB) NTFS
Drive d: (LEGO RockRaiders) (CDROM) (Total:0.64 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 2000CC9F)

Partition: GPT Partition Type.

==================== End Of Log ============================
         

--- --- ---


und das die Addition.txt

Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  
  Zombie Invasion
  
  
  
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Vielen Dank soweit. Habe jetzt alle Scans durchgeführt.

Der Mbam.txt:

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 15.04.2015
Suchlauf-Zeit: 23:40:01
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.4.1018
Malware Datenbank: v2015.04.15.08
Rootkit Datenbank: v2015.03.31.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: user

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 396567
Verstrichene Zeit: 25 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 4
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, 540, Löschen bei Neustart, [473257ec32587bbba4adb955ab57c739]
PUP.Optional.ZombieInvasion.A, C:\ProgramData\dZmUpbFe\sadrfM.exe, 8384, Löschen bei Neustart, [8bee8bb87f0b3105d3dfcc03b24f0ef2]
PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 1444, Löschen bei Neustart, [0277e36026648da98a09496b0ef5d42c]
PUP.Optional.Score.A, C:\Windows\rcore.exe, 2296, Löschen bei Neustart, [f485e95a0f7b94a2da7076bb9471758b]

Module: 2
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, Löschen bei Neustart, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, Löschen bei Neustart, [3643ff44adddb086914d8f21fb0826da], 

Registrierungsschlüssel: 55
PUP.Optional.XTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, In Quarantäne, [473257ec32587bbba4adb955ab57c739], 
PUP.Optional.ZombieInvasion.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\sadrfM, In Quarantäne, [8bee8bb87f0b3105d3dfcc03b24f0ef2], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [2e4b3211a2e884b20d2848d9847f9769], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [2e4b3211a2e884b20d2848d9847f9769], 
PUP.Optional.WebSteroids.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, In Quarantäne, [2e4b3211a2e884b20d2848d9847f9769], 
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [db9e70d30a8063d339cb2cf506fdf907], 
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [db9e70d30a8063d339cb2cf506fdf907], 
PUP.Optional.DynConIE.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, In Quarantäne, [db9e70d30a8063d339cb2cf506fdf907], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.SupTab.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.LolliScan.A, HKLM\SOFTWARE\LolliScan, In Quarantäne, [2c4dc77c395179bdbfee4961976c649c], 
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [cfaa370c9af0102666396aace71efc04], 
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, In Quarantäne, [eb8e8cb7c2c8a393677640703fc4619f], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [8feae1623d4d132328ff50a6fd06e51b], 
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, In Quarantäne, [ea8f52f14a40db5b8ac587418f74f808], 
PUP.Optional.LolliScan.A, HKLM\SOFTWARE\WOW6432NODE\LolliScan, In Quarantäne, [60195de6f09a87affbb29317ff0422de], 
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, In Quarantäne, [4f2a55ee8dfd62d495e1a12d3bc8847c], 
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [5326142f56343204aaf5fe18f90c1de3], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, In Quarantäne, [f881ed568cfea78fd3b74f5a6d9655ab], 
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, In Quarantäne, [fa7f4201226839fdaddc9613956e28d8], 
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, In Quarantäne, [1960a99af99191a5f631baffe51e9d63], 
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{542bb8ed}, In Quarantäne, [90e93a094446d6605f278f4222e1ee12], 
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, In Quarantäne, [c9b0083bd3b7f3435b2b5081b1522bd5], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, In Quarantäne, [e495f44f5436c472dcb8fb3212f3a060], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, In Quarantäne, [dd9c7dc6f39769cd8f0653da8085bf41], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In Quarantäne, [2b4e71d22367dc5a66363f874cb7728e], 
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, In Quarantäne, [7504f64d41498babc5b024137a8b6997], 
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, In Quarantäne, [0277e36026648da98a09496b0ef5d42c], 
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, In Quarantäne, [87f25ae913773cfa4790ad0e38cbe61a], 
PUP.Optional.Score.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\RCORES, In Quarantäne, [f485e95a0f7b94a2da7076bb9471758b], 
PUP.Optional.HomeTab.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\HomeTab, In Quarantäne, [3a3f083b98f27bbbee525782679c639d], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\HQ Video Pro 3.1cV04.04-nv-ie, In Quarantäne, [0871172ce6a437ffdc676149ea196898], 
PUP.Optional.ICinema.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\I - Cinema-nv-ie, In Quarantäne, [10693b086a20fc3a43915c6cd52eec14], 
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\SearchProtectWS, In Quarantäne, [0871b39047434cea2a6376334bb8ce32], 
PUP.Optional.TNT.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\TNT2, In Quarantäne, [b9c0ab98365482b4abc3f0bb8d76c43c], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, In Quarantäne, [d9a0a89b098145f14aee09169f668e72], 
PUP.Optional.MultiIE.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, In Quarantäne, [126766ddb4d6f44270dea6825baa867a], 
PUP.Optional.Qone8, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [5c1d2f14bbcf9e985648bf579c69e818], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, In Quarantäne, [a6d30d3639511d19561b3570ec17e41c], 
PUP.Optional.Iminent.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, In Quarantäne, [a5d4f15226640432145e931259aae21e], 
PUP.Optional.Linkey.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Linkey, In Quarantäne, [f485af943e4c44f22e455a4bef149f61], 
PUP.Optional.Vosteran.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, In Quarantäne, [ea8fde65f59542f4ea8a8f16c043eb15], 
PUP.Optional.Wajam.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, In Quarantäne, [760380c32664a5919dd8eeb728db0af6], 
PUP.Optional.Wajam.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\SIMPLYTECH\HomeTabWajIEnhance, In Quarantäne, [86f387bc54362c0a048452576e9535cb], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 

Registrierungswerte: 5
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, In Quarantäne, [4f2a55ee8dfd62d495e1a12d3bc8847c]
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_de_370, In Quarantäne, [aacfc97a35550234564660557f84669a], 
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, tugs, In Quarantäne, [2b4e71d22367dc5a66363f874cb7728e]
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, D1378411-9CEA-4E69-B78B-13474F2E3B22, In Quarantäne, [7504f64d41498babc5b024137a8b6997]
PUP.Optional.Score.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\RCORES|ImagePath, C:\Windows\rcore.exe, In Quarantäne, [f485e95a0f7b94a2da7076bb9471758b]

Registrierungsdaten: 13
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298),Ersetzt,[4237f84b6a20f83e05b79a3cfb0a2ed2]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}),Ersetzt,[4e2be0637c0e1c1a9f77a035010402fe]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hppp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hppp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298),Ersetzt,[87f2dd66b0da34029e78f1e4d3326a96]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}),Ersetzt,[7aff48fb7911f541d343f9dc82833dc3]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[c1b8ba8971194beb0397677ae32203fd]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.istartsurf.com/?type=sc&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298),Ersetzt,[28514ef51b6fea4c318bf5e1fc097888]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}),Ersetzt,[74052e158307092d8f8732a30005ce32]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hppp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hppp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298),Ersetzt,[14653a09c6c4b4822de973620ef7bc44]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=ds&ts=1428165035&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}),Ersetzt,[4930bd86a5e5e452cc4a09cc41c4cd33]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[bdbc1e25c9c1b87e7624b22f8a7b54ac]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://www.istartsurf.com/web/?type=dspp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=dspp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}),Ersetzt,[2158d3703a50f83e25ef3d9820e5c53b]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://www.istartsurf.com/?type=hppp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/?type=hppp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298),Ersetzt,[9bde92b13e4cf73f8094f0e501043ec2]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://www.istartsurf.com/web/?type=dspp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://www.istartsurf.com/web/?type=dspp&ts=1428165066&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX21E545429854298&q={searchTerms}),Ersetzt,[73064bf8a1e9a78f967eba1be4210af6]

Ordner: 37
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab, Löschen bei Neustart, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\image, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, Löschen bei Neustart, [6217d271cac0f44268372e52d72c16ea], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, In Quarantäne, [6217d271cac0f44268372e52d72c16ea], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.ZombieInvasion.A, C:\Users\user\AppData\Local\ZombieInvasion, In Quarantäne, [adccf053c9c194a26d87216a966dff01], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, In Quarantäne, [2059a69d008a2d092b0bb8e5e91a0bf5], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, In Quarantäne, [2059a69d008a2d092b0bb8e5e91a0bf5], 
PUP.Optional.BrowserGood.A, C:\Users\user\AppData\Local\Temp\Browser Good, In Quarantäne, [c5b4df643a50e056a853386817ecee12], 
PUP.Optional.LolliScan.A, C:\ProgramData\LolliScan, In Quarantäne, [0f6a71d28208c670342ba7fa47bcbf41], 

Dateien: 138
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, Löschen bei Neustart, [473257ec32587bbba4adb955ab57c739], 
PUP.Optional.ZombieInvasion.A, C:\ProgramData\dZmUpbFe\sadrfM.exe, Löschen bei Neustart, [8bee8bb87f0b3105d3dfcc03b24f0ef2], 
PUP.Optional.SupTab.A, C:\Program Files (x86)\XTab\SupTab.dll, In Quarantäne, [0178c182602a76c0066959c7798a54ac], 
PUP.Optional.ZombieInvasion.A, C:\ProgramData\dZmUpbFe\dat\BMObhlud.exe, Löschen bei Neustart, [0178152e7911ac8aad05ede26e93cd33], 
PUP.Optional.ZombieInvasion.A, C:\ProgramData\dZmUpbFe\dat\kWQvnNGh.exe, Löschen bei Neustart, [295088bb4c3e3cfa03af9837ee13f10f], 
PUP.Optional.ZombieInvasion.A, C:\ProgramData\dZmUpbFe\dat\VyoOCO.dll, Löschen bei Neustart, [c9b057ec1b6f77bf7231379a0bfa6d93], 
PUP.Optional.BrowserWatch, C:\Program Files (x86)\XTab\BrowerWatchCH.dll, In Quarantäne, [d7a2ea59b5d5cf670fedff6e15ebed13], 
PUP.Optional.BrowserWatch, C:\Program Files (x86)\XTab\BrowerWatchFF.dll, In Quarantäne, [ceaba3a0c9c1280e06f69fce16ea9769], 
PUP.Optional.ELEX, C:\Program Files (x86)\XTab\HPNotify.exe, In Quarantäne, [b2c781c2a8e2b383eb2647e8fe04fc04], 
PUP.Optional.HQVideoPro.A, C:\Users\user\AppData\Local\Temp\1274.exe, In Quarantäne, [9bde4ff43555c274feba8e8c9670ee12], 
PUP.Optional.HQVideoPro.A, C:\Users\user\AppData\Local\Temp\1353.exe, In Quarantäne, [5c1dc87bc5c5350134847e9ce125cc34], 
PUP.Optional.SystemNotifier.A, C:\Users\user\AppData\Local\Temp\2daa6a77-124e-4a4f-9e2e-f44ce421f5fe\mini_installer.exe, In Quarantäne, [3b3e60e3fb8ff0467ab3100b7a8cec14], 
PUP.Optional.SystemNotifier.A, C:\Users\user\AppData\Local\Temp\9eec929e-aaec-4336-ae1f-252290e64fbc\mini_installer.exe, In Quarantäne, [f18862e1107afc3a220bf02b19edd22e], 
PUP.Optional.MyBestOffersToday.A, C:\Users\user\AppData\Local\Temp\d93005b8-3515-4c98-af9b-79b005e60019\games desktop.exe, In Quarantäne, [7ffa192abad0d75f8da633c56d94728e], 
PUP.Optional.CrossRider, C:\Users\user\AppData\Local\Temp\DwlTempFolder\temp.exe, In Quarantäne, [2d4c5be87d0dcd6970037b6308f93fc1], 
PUP.Optional.IStartsurf.A, C:\Users\user\AppData\Local\Temp\695930e5-8834-4cc9-92dc-95580b57ed2e\lly_istartsurf.exe, In Quarantäne, [da9fd271b9d1bf774e88ff1b40c61fe1], 
PUP.Optional.Clara.A, C:\Users\user\AppData\Local\Temp\b638f589-9277-4fe2-8406-7cbf1500f54b\unicobrowser.exe, In Quarantäne, [45340b38fa9045f1e427508dc43d43bd], 
PUP.Optional.CrossRider, C:\Users\user\AppData\Local\Temp\51fd55f7-ca50-4bf1-903f-8fe8f16b8e6c\setup.exe, In Quarantäne, [c7b20340325838fe136009d531d0a55b], 
PUP.Optional.WebTInst.A, C:\Windows\System32\drivers\Msft_Kernel_webTinstMKTN_01009.Wdf, In Quarantäne, [3a3f6bd8c4c6af87ab712b7d4cb7ae52], 
PUP.Optional.SelectNGo.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.selectgo00.selectgo.net_0.localstorage, Löschen bei Neustart, [f980301399f1cd69087fa30a798ad42c], 
PUP.Optional.SelectNGo.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.selectgo00.selectgo.net_0.localstorage-journal, Löschen bei Neustart, [a2d774cfa5e5ec4a6225109d9c679868], 
PUP.Optional.Patsearch.A, C:\Windows\patsearch.bin, In Quarantäne, [a3d683c0f991d75f64abcae5d82b7789], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\uninstall.exe, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowserAction.dll, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\CmdShell.exe, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\conf, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ffsearch_toolbar!1.0.0.1025.xpi, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\IeWatchDog.dll, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\install.data, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, Löschen bei Neustart, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, Löschen bei Neustart, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\searchProvider.xml, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about_bk.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn_apply.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\close.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf.xml, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf_back.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\input_bk.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\logo.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\main.xml, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_1.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_2.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\rigth_arrow.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\settings.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\data.html, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE.html, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE8.html, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\main.css, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\ver.txt, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\google_trends.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon128.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon16.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon48.png, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\loading.gif, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\logo32.ico, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\common.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ga.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery-1.11.0.min.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.autocomplete.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\js.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\library.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit-ie8.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit2.0.js, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW\messages.json, In Quarantäne, [3643ff44adddb086914d8f21fb0826da], 
PUP.Optional.SelectNGo.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage, Löschen bei Neustart, [dc9d73d01d6d6bcb234054860df69b65], 
PUP.Optional.SelectNGo.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.select-n-go00.select-n-go.com_0.localstorage-journal, Löschen bei Neustart, [80f9b291d6b4092d9fc4c61448bb0cf4], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, In Quarantäne, [1861dd66008a290dd2aa4be09b6acd33], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, In Quarantäne, [5a1fe261107a77bfde9fa08b7a8bc937], 
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, In Quarantäne, [92e7be85adddd4628fef2209d92cf40c], 
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, In Quarantäne, [65144ff46d1d6fc70e715ecdab5a7789], 
PUP.Optional.ReMarkable.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, Löschen bei Neustart, [1e5b291a1f6bf442deca88a7e91c33cd], 
PUP.Optional.ReMarkable.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, Löschen bei Neustart, [fb7ed172cebc62d4f4b4052a8e771de3], 
PUP.Optional.WindowsMangerProtect.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, Löschen bei Neustart, [0277e36026648da98a09496b0ef5d42c], 
PUP.Optional.Score.A, C:\Windows\rcore.exe, Löschen bei Neustart, [f485e95a0f7b94a2da7076bb9471758b], 
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, In Quarantäne, [6217d271cac0f44268372e52d72c16ea], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\GoogleCrashHandler.exe, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\GoogleUpdate.exe, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\GoogleUpdateBroker.exe, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\GoogleUpdateHelper.msi, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\GoogleUpdateOnDemand.exe, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\goopdate.dll, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\goopdateres_en.dll, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\npGoogleUpdate4.dll, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\psmachine.dll, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.115891\psuser.dll, In Quarantäne, [2d4cdd669cee64d2117839496c97cf31], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\GoogleCrashHandler.exe, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\GoogleUpdate.exe, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\GoogleUpdateBroker.exe, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\GoogleUpdateHelper.msi, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\GoogleUpdateOnDemand.exe, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\goopdate.dll, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\goopdateres_en.dll, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\npGoogleUpdate4.dll, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\psmachine.dll, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.336135\psuser.dll, In Quarantäne, [10693d0699f182b42c5d275b1fe49d63], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\GoogleCrashHandler.exe, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\GoogleUpdate.exe, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\GoogleUpdateBroker.exe, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\GoogleUpdateHelper.msi, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\GoogleUpdateOnDemand.exe, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\goopdate.dll, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\goopdateres_en.dll, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\npGoogleUpdate4.dll, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\psmachine.dll, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.357953\psuser.dll, In Quarantäne, [4a2f232048422a0c5b2eadd5c73cf709], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\GoogleCrashHandler.exe, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\GoogleUpdate.exe, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\GoogleUpdateBroker.exe, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\GoogleUpdateHelper.msi, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\GoogleUpdateOnDemand.exe, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\goopdate.dll, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\goopdateres_en.dll, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\npGoogleUpdate4.dll, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\psmachine.dll, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.GlobalUpdate.A, C:\Users\user\AppData\Local\Temp\comh.87100\psuser.dll, In Quarantäne, [0f6a0d36d2b873c35b2e4042da291fe1], 
PUP.Optional.ZombieInvasion.A, C:\Users\user\AppData\Local\ZombieInvasion\data2.dat, In Quarantäne, [adccf053c9c194a26d87216a966dff01], 
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, In Quarantäne, [2059a69d008a2d092b0bb8e5e91a0bf5], 
PUP.Optional.LolliScan.A, C:\ProgramData\LolliScan\SoftConfigTest.exe, In Quarantäne, [0f6a71d28208c670342ba7fa47bcbf41], 

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         

Der AdwCleaner.txt:

# AdwCleaner v4.201 - Bericht erstellt 16/04/2015 um 00:23:32
# Aktualisiert 08/04/2015 von Xplode
# Datenbank : 2015-04-15.1 [Server]
# Betriebssystem : Windows 8.1  (x64)
# Benutzername : user - ACER
# Gestarted von : C:\Users\user\Desktop\AdwCleaner_4.201.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : globalUpdate
[#] Dienst Gelöscht : globalUpdatem
[#] Dienst Gelöscht : scxy
Dienst Gelöscht : syschkrm
Dienst Gelöscht : syschkrs
Dienst Gelöscht : scjrtf
Dienst Gelöscht : scjrtr

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ZombieInvasion
Ordner Gelöscht : C:\ProgramData\pokki
Ordner Gelöscht : C:\ProgramData\57e3c28400004115
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
Ordner Gelöscht : C:\Program Files (x86)\predm
[!] Ordner Gelöscht : C:\Program Files (x86)\System-Checker
Ordner Gelöscht : C:\users\user\SupTab
Ordner Gelöscht : C:\users\user\AppData\Local\globalUpdate
Datei Gelöscht : C:\Windows\SysWOW64\scxy.dll
Datei Gelöscht : C:\Windows\System32\scxy64.dll
Datei Gelöscht : C:\Windows\System32\drivers\scjrtf.sys
Datei Gelöscht : C:\Windows\System32\drivers\scjrtr.sys
Datei Gelöscht : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.reimageplus.com_0.localstorage
Datei Gelöscht : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.reimageplus.com_0.localstorage-journal

***** [ Geplante Tasks ] *****

Task Gelöscht : LaunchSignup
Task Gelöscht : Run_Browser

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\ed6538cf-e48f-2478-adfa-524b7f931f99
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B3D48DDF-ECC4-4840-A3EF-498FA3AFE76D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Optimizer Pro
Schlüssel Gelöscht : HKCU\Software\simplytech
Schlüssel Gelöscht : HKCU\Software\Wnkey
Schlüssel Gelöscht : HKCU\Software\Crossbrowse
Schlüssel Gelöscht : HKCU\Software\UnicoBrowser
Schlüssel Gelöscht : HKCU\Software\System-Checker
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\CheckMeUp
Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\SOFTWARE\AskPartnerNetwork
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\Clara
Schlüssel Gelöscht : HKLM\SOFTWARE\Crossbrowse
Schlüssel Gelöscht : HKLM\SOFTWARE\SpeedBit
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System-Checker
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\istartsurf.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\webssearches.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.istartsurf.com
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:49836;hxxps=127.0.0.1:49836
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] - 1
Daten Gelöscht : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Google Chrome v41.0.2272.118


*************************

AdwCleaner[R0].txt - [11491 Bytes] - [16/04/2015 00:21:26]
AdwCleaner[S0].txt - [9868 Bytes] - [16/04/2015 00:23:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9927  Bytes] ##########
         

Der JRT.txt:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.5.5 (04.15.2015:1)
OS: Windows 8.1 x64
Ran by user on 16.04.2015 at  0:35:48,95
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.04.2015 at  0:38:28,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

und der neue FRST.txt:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04
Ran by user (administrator) on ACER on 16-04-2015 00:41:34
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available profiles: UpdatusUser & user)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(scsp) C:\Program Files (x86)\System-Checker\Files\scxy.exe
() C:\Program Files (x86)\System-Checker\syschkrm.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\Core\mchost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\System-Checker\syschkrs.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUpd.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\MountPoints2: {35660590-303f-11e4-825c-806e6f6e6963} - "D:\AutoRun.exe" 
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe (PC Utilities Software Limited)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49836;https=127.0.0.1:49836
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-04-06] (Microsoft Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-06] (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-04-06] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 02 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 03 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 04 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 16 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9-x64 01 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 02 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 03 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 04 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 16 C:\Windows\system32\scxy64.dll [416552] (scsp)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-04-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-25]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-25]

Chrome: 
=======
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-04]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-04]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-04]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-04]
CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-04]
CHR Extension: (SiteAdvisor) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-04-04]
CHR Extension: (gihkgljdimgfffabkemicpaeljmoobil) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gihkgljdimgfffabkemicpaeljmoobil [2015-04-09]
CHR Extension: (gomekmidlodglbbmalcneegieacbdmki) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-09]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-04]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-04]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-04-04]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-04-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]
S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [3053312 2014-06-27] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-02-19] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-30] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 scxy; C:\Program Files (x86)\System-Checker\Files\scxy.exe [1936280 2015-04-01] (scsp)
R2 syschkrm; C:\Program Files (x86)\System-Checker\syschkrm.exe [110080 2015-04-01] () [File not signed]
R2 syschkrs; C:\Program Files (x86)\System-Checker\syschkrs.exe [186880 2015-04-01] () [File not signed]
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
R1 scjrtf; C:\Windows\system32\Drivers\scjrtf.sys [35744 2015-04-01] () [File not signed]
R1 scjrtr; C:\Windows\system32\Drivers\scjrtr.sys [46496 2015-04-01] () [File not signed]
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 00:41 - 2015-04-16 00:41 - 00000000 ____D () C:\Users\user\Desktop\FRST-OlderVersion
2015-04-16 00:38 - 2015-04-16 00:38 - 00000588 _____ () C:\Users\user\Desktop\JRT.txt
2015-04-16 00:35 - 2015-04-16 00:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACER-Windows-8.1-(64-bit).dat
2015-04-16 00:35 - 2015-04-16 00:35 - 00000000 ____D () C:\RegBackup
2015-04-16 00:33 - 2015-04-16 00:33 - 02686088 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2015-04-16 00:30 - 2015-04-16 00:23 - 00010019 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2015-04-16 00:29 - 2015-04-16 00:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-04-16 00:20 - 2015-04-16 00:23 - 00000000 ____D () C:\AdwCleaner
2015-04-16 00:19 - 2015-04-16 00:19 - 02217984 _____ () C:\Users\user\Desktop\AdwCleaner_4.201.exe
2015-04-16 00:14 - 2015-04-16 00:18 - 00040250 _____ () C:\Users\user\Desktop\mbam.txt
2015-04-15 23:39 - 2015-04-16 00:15 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-15 23:39 - 2015-04-15 23:39 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-15 23:39 - 2015-04-15 23:39 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-15 23:39 - 2015-04-15 23:39 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-15 23:39 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-15 23:39 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-15 23:39 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-15 23:37 - 2015-04-15 23:37 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-15 23:30 - 2015-04-15 23:30 - 00000707 _____ () C:\Users\user\Desktop\Revo Uninstaller.lnk
2015-04-15 23:29 - 2015-04-15 23:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\user\Desktop\revosetup95.exe
2015-04-15 22:16 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 22:16 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 22:16 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-15 22:16 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 22:16 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-15 22:16 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-15 22:16 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 22:16 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 22:16 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-15 22:16 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-15 22:16 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-15 22:16 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-15 22:16 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-15 22:16 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-15 22:16 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 22:16 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 22:16 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 22:16 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-15 22:16 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 22:16 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 22:16 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 22:16 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 22:16 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 22:16 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-15 22:16 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-15 22:16 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 22:16 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 22:16 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 22:16 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-15 22:16 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-15 22:16 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 22:16 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 22:16 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 22:16 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-15 22:16 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 22:16 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 22:16 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 22:16 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 22:16 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 22:16 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 22:16 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-15 22:16 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-15 22:16 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-15 22:16 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-15 22:16 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-15 22:16 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-15 22:16 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-15 22:16 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-15 22:16 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-15 22:16 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-15 22:15 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 22:10 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 22:10 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 22:10 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 22:10 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 22:10 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 22:10 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 22:10 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 22:10 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 22:10 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 22:10 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-15 22:10 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-15 22:10 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 22:10 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 22:10 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 22:10 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 22:10 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 22:10 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 22:10 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 22:10 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-15 22:10 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 22:10 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 22:10 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-15 22:09 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 14:36 - 2015-04-14 14:38 - 00031053 _____ () C:\Users\user\Desktop\Addition.txt
2015-04-14 14:34 - 2015-04-16 00:41 - 00019185 _____ () C:\Users\user\Desktop\FRST.txt
2015-04-14 14:34 - 2015-04-16 00:41 - 00000000 ____D () C:\FRST
2015-04-14 14:33 - 2015-04-16 00:41 - 02097664 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2015-04-13 20:05 - 2015-04-13 20:05 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf32.dll
2015-04-13 20:05 - 2015-04-13 20:05 - 00002272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf16.dll
2015-04-13 20:05 - 2015-04-13 20:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Media
2015-04-13 20:05 - 1998-09-02 10:28 - 01088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\danim.dll
2015-04-13 20:05 - 1998-09-02 10:28 - 00155408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRT.dll
2015-04-13 20:05 - 1998-09-02 10:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unam4ie.exe
2015-04-13 20:05 - 1998-09-02 10:28 - 00038160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRTREND.dll
2015-04-13 20:05 - 1998-09-02 10:02 - 00194320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcut.dll
2015-04-13 20:05 - 1998-08-27 06:51 - 00182032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft3.dll
2015-04-13 20:05 - 1998-08-20 13:02 - 00140800 _____ (The Duck Corporation) C:\Windows\SysWOW64\tm20dec.ax
2015-04-13 20:05 - 1998-08-20 12:38 - 00217984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\strmdll.dll
2015-04-13 20:05 - 1998-08-17 11:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz.drv
2015-04-13 20:05 - 1998-08-17 11:21 - 00010240 _____ () C:\Windows\SysWOW64\vidx16.dll
2015-04-13 20:05 - 1998-08-17 11:21 - 00005672 _____ () C:\Windows\SysWOW64\quartz.vxd
2015-04-13 20:04 - 1998-10-21 18:43 - 00328704 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
2015-04-12 22:04 - 2015-04-12 22:04 - 00003148 _____ () C:\Windows\System32\Tasks\{9700D7FA-E5DB-4AB6-B549-9260F5FC3C27}
2015-04-09 13:07 - 2015-04-09 13:07 - 00000000 ____D () C:\Users\user\AppData\Roaming\LolClient
2015-04-07 08:31 - 2015-04-07 08:31 - 00001516 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-04-07 08:31 - 2015-04-07 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:31 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:30 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-04-07 08:25 - 2015-04-07 08:26 - 36053064 _____ (DVDVideoSoft Ltd. ) C:\Users\user\Downloads\FreeYouTubeToMP3Converter_3.12.57.324.exe
2015-04-06 23:12 - 2015-04-06 23:12 - 00000000 ____D () C:\Users\user\AppData\Local\MediaShow
2015-04-06 11:18 - 2015-04-06 12:08 - 02345800 _____ () C:\Users\user\Documents\ABI seite Lutz.pptx
2015-04-06 11:18 - 2015-04-06 11:18 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieBrowserModeList
2015-04-06 11:17 - 2015-04-06 11:17 - 05706441 _____ () C:\Users\user\Documents\R.pptx
2015-04-06 11:17 - 2015-04-06 11:17 - 05706441 _____ () C:\Users\user\Documents\ABIseite Ruben.pptx
2015-04-05 22:16 - 2015-04-06 23:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2015-04-05 22:16 - 2015-04-05 22:16 - 00000891 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-05 22:16 - 2015-04-05 22:16 - 00000000 ____D () C:\Users\user\AppData\Roaming\dvdcss
2015-04-05 22:16 - 2015-04-05 22:16 - 00000000 ____D () C:\Program Files\VideoLAN
2015-04-05 22:13 - 2015-04-05 22:14 - 01203488 _____ () C:\Users\user\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2015-04-05 22:08 - 2015-04-05 22:09 - 00000686 _____ () C:\Windows\wmsetup.log
2015-04-05 22:07 - 2015-04-05 22:07 - 01203488 _____ () C:\Users\user\Downloads\Windows Media Player - CHIP-Installer.exe
2015-04-05 21:55 - 2015-04-06 11:16 - 05706438 _____ () C:\Users\user\Documents\powerpoints.pptx
2015-04-05 17:57 - 2015-04-06 19:08 - 00003086 _____ () C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-05 17:57 - 2015-04-06 19:08 - 00000000 ___RD () C:\Users\user\OneDrive
2015-04-05 17:57 - 2015-04-05 17:57 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-04-05 17:54 - 2015-04-06 23:11 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-04-05 17:54 - 2015-04-05 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-05 17:53 - 2015-04-05 17:53 - 01078976 _____ (Microsoft Corporation) C:\Users\user\Downloads\Setup.X86.de-DE_HomeBusinessRetail_af6fbc01-34c4-49c8-a29d-f1b824319f99_TX_DB_.exe
2015-04-05 13:51 - 2014-07-24 17:28 - 00412992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2015-04-05 13:51 - 2014-07-24 17:28 - 00143680 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-04-05 13:51 - 2014-07-24 17:23 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-04-05 13:51 - 2014-07-24 17:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-04-05 13:51 - 2014-07-24 17:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-04-05 13:51 - 2014-07-24 17:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-04-05 13:51 - 2014-07-24 17:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-04-05 13:51 - 2014-07-24 17:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-04-05 13:51 - 2014-07-24 17:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-04-05 13:51 - 2014-07-24 17:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2015-04-05 13:51 - 2014-07-24 15:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2015-04-05 13:51 - 2014-07-24 15:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2015-04-05 13:51 - 2014-07-24 13:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2015-04-05 13:51 - 2014-07-24 13:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2015-04-05 13:51 - 2014-07-24 13:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2015-04-05 13:51 - 2014-07-24 13:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2015-04-05 13:51 - 2014-07-24 13:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-04-05 13:51 - 2014-07-24 12:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-04-05 13:51 - 2014-07-24 12:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-04-05 13:51 - 2014-07-24 11:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2015-04-05 13:51 - 2014-07-24 11:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-04-05 13:51 - 2014-07-24 11:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2015-04-05 13:51 - 2014-07-24 11:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-04-05 13:51 - 2014-07-24 11:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-04-05 13:51 - 2014-07-24 11:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2015-04-05 13:51 - 2014-07-24 11:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2015-04-05 13:51 - 2014-07-24 10:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2015-04-05 13:51 - 2014-07-24 10:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2015-04-05 13:51 - 2014-07-24 10:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2015-04-05 13:51 - 2014-07-24 10:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2015-04-05 13:51 - 2014-07-24 10:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2015-04-05 13:51 - 2014-07-24 10:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2015-04-05 13:51 - 2014-07-24 10:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-04-05 13:51 - 2014-07-24 10:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2015-04-05 13:51 - 2014-07-24 10:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-04-05 13:51 - 2014-07-24 10:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2015-04-05 13:51 - 2014-07-24 10:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-04-05 13:51 - 2014-07-24 10:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-04-05 13:51 - 2014-07-24 10:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2015-04-05 13:51 - 2014-07-24 10:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2015-04-05 13:51 - 2014-07-24 09:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2015-04-05 13:51 - 2014-07-24 09:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2015-04-05 13:51 - 2014-07-24 09:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2015-04-05 13:51 - 2014-07-12 07:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2015-04-05 13:51 - 2014-07-04 11:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2015-04-05 13:51 - 2014-07-04 11:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2015-04-05 13:51 - 2014-06-27 08:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2015-04-05 13:51 - 2014-06-26 02:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2015-04-05 13:51 - 2014-06-19 04:13 - 00310080 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2015-04-05 13:51 - 2014-06-14 08:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-04-05 13:51 - 2014-06-14 07:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-04-05 13:51 - 2014-06-05 12:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2015-04-05 13:51 - 2014-06-05 11:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2015-04-05 13:51 - 2014-05-31 07:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2015-04-05 13:51 - 2014-05-29 08:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2015-04-05 13:51 - 2014-05-29 07:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2015-04-05 13:51 - 2014-05-06 06:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-04-05 13:51 - 2014-05-06 02:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-04-05 13:51 - 2014-03-25 04:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2015-04-05 13:50 - 2014-07-24 17:28 - 00419648 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-04-05 13:50 - 2014-07-24 17:28 - 00280384 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2015-04-05 13:50 - 2014-07-24 17:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-04-05 13:50 - 2014-07-24 17:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-04-05 13:50 - 2014-07-24 17:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2015-04-05 13:50 - 2014-07-24 17:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-04-05 13:50 - 2014-07-24 15:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-04-05 13:50 - 2014-07-24 15:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2015-04-05 13:50 - 2014-07-24 13:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-04-05 13:50 - 2014-07-24 13:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2015-04-05 13:50 - 2014-07-24 13:45 - 00076800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2015-04-05 13:50 - 2014-07-24 13:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2015-04-05 13:50 - 2014-07-24 13:41 - 00118272 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2015-04-05 13:50 - 2014-07-24 13:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-04-05 13:50 - 2014-07-24 12:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2015-04-05 13:50 - 2014-07-24 12:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2015-04-05 13:50 - 2014-07-24 12:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2015-04-05 13:50 - 2014-07-24 12:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2015-04-05 13:50 - 2014-07-24 12:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2015-04-05 13:50 - 2014-07-24 12:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-04-05 13:50 - 2014-07-24 12:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2015-04-05 13:50 - 2014-07-24 12:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2015-04-05 13:50 - 2014-07-24 11:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2015-04-05 13:50 - 2014-07-24 11:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2015-04-05 13:50 - 2014-07-24 11:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2015-04-05 13:50 - 2014-07-24 11:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-04-05 13:50 - 2014-07-24 11:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2015-04-05 13:50 - 2014-07-24 11:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2015-04-05 13:50 - 2014-07-24 11:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2015-04-05 13:50 - 2014-07-24 11:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2015-04-05 13:50 - 2014-07-24 11:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2015-04-05 13:50 - 2014-07-24 11:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-04-05 13:50 - 2014-07-24 11:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-05 13:50 - 2014-07-24 11:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2015-04-05 13:50 - 2014-07-24 11:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2015-04-05 13:50 - 2014-07-24 11:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2015-04-05 13:50 - 2014-07-24 10:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2015-04-05 13:50 - 2014-07-24 10:49 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-04-05 13:50 - 2014-07-24 10:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2015-04-05 13:50 - 2014-07-24 10:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-04-05 13:50 - 2014-07-24 10:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2015-04-05 13:50 - 2014-07-24 10:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2015-04-05 13:50 - 2014-07-24 10:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2015-04-05 13:50 - 2014-07-24 10:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2015-04-05 13:50 - 2014-07-24 10:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2015-04-05 13:50 - 2014-07-24 10:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2015-04-05 13:50 - 2014-07-24 10:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2015-04-05 13:50 - 2014-07-24 10:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2015-04-05 13:50 - 2014-07-24 10:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2015-04-05 13:50 - 2014-07-24 10:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2015-04-05 13:50 - 2014-07-24 10:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2015-04-05 13:50 - 2014-07-24 10:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2015-04-05 13:50 - 2014-07-24 10:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2015-04-05 13:50 - 2014-07-24 10:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2015-04-05 13:50 - 2014-07-24 10:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-04-05 13:50 - 2014-07-24 09:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2015-04-05 13:50 - 2014-07-24 09:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2015-04-05 13:50 - 2014-07-24 09:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2015-04-05 13:50 - 2014-07-24 09:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-04-05 13:50 - 2014-07-24 09:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-04-05 13:50 - 2014-07-12 06:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2015-04-05 13:50 - 2014-07-04 14:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2015-04-05 13:50 - 2014-07-04 12:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2015-04-05 13:50 - 2014-07-04 12:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2015-04-05 13:50 - 2014-07-04 12:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2015-04-05 13:50 - 2014-07-04 12:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2015-04-05 13:50 - 2014-06-26 02:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2015-04-05 13:50 - 2014-06-20 01:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-04-05 13:50 - 2014-06-07 14:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2015-04-05 13:50 - 2014-06-07 12:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2015-04-05 13:50 - 2014-05-31 06:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2015-04-05 13:50 - 2014-05-26 09:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2015-04-05 13:50 - 2014-05-10 12:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-04-05 13:50 - 2014-05-10 10:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-04-05 13:50 - 2014-03-25 04:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2015-04-05 13:50 - 2014-03-25 03:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2015-04-05 13:50 - 2014-03-25 03:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2015-04-05 09:48 - 2015-04-05 09:48 - 00000000 ____D () C:\ProgramData\Riot Games
2015-04-05 09:38 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-04-05 09:38 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-04-05 09:38 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-04-05 09:37 - 2015-04-05 09:38 - 00000000 ____D () C:\Users\user\AppData\Roaming\Riot Games
2015-04-05 09:32 - 2015-04-05 09:33 - 30668968 _____ (Riot Games) C:\Users\user\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe
2015-04-05 08:59 - 2015-04-16 00:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-05 08:59 - 2015-04-16 00:07 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-05 08:59 - 2015-04-05 09:01 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-05 08:59 - 2015-04-05 08:59 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-05 08:39 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-04-05 08:32 - 2015-04-05 08:33 - 00000000 ____D () C:\Users\user\Documents\My Games
2015-04-05 07:31 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2015-04-04 23:42 - 2015-04-04 23:42 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-04-04 23:40 - 2015-04-14 01:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-04 23:40 - 2015-04-14 01:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-04 23:33 - 2015-04-16 00:06 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-04 23:33 - 2015-04-15 23:59 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-04 22:43 - 2015-04-04 22:43 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-04-04 22:43 - 2015-04-04 22:43 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-04-04 22:43 - 2015-04-04 22:43 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-04 22:42 - 2015-04-04 23:41 - 00000000 ____D () C:\ProgramData\Adobe
2015-04-04 22:38 - 2015-04-04 22:44 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2015-04-04 22:33 - 2015-04-04 22:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\CyberLink
2015-04-04 22:21 - 2015-04-04 22:21 - 00000000 ____D () C:\Users\user\Tracing
2015-04-04 22:19 - 2015-04-04 22:19 - 00000000 ____D () C:\Users\user\AppData\Local\Skype
2015-04-04 22:19 - 2014-08-15 02:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2015-04-04 22:19 - 2014-07-30 03:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2015-04-04 22:19 - 2014-07-29 07:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2015-04-04 22:18 - 2015-04-15 23:27 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00002715 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ____D () C:\ProgramData\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-04-04 22:16 - 2015-04-04 22:16 - 01380960 _____ (Skype Technologies S.A.) C:\Users\user\Downloads\SkypeSetup.exe
2015-04-04 21:19 - 2014-09-27 09:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2015-04-04 21:19 - 2014-09-27 07:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2015-04-04 21:19 - 2014-09-27 05:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-04-04 21:05 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-04-04 21:05 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-04-04 21:05 - 2014-10-29 05:56 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-04-04 21:05 - 2014-10-29 04:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2015-04-04 21:05 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2015-04-04 21:05 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-04-04 21:05 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-04-04 21:05 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-04-04 21:05 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-04-04 21:05 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-04-04 21:05 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-04-04 21:05 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-04-04 21:05 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-04-04 21:05 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-04-04 21:05 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2015-04-04 21:05 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2015-04-04 21:03 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-04 21:03 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-04-04 21:03 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-04 21:03 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-04 21:03 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-04 21:03 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-04-04 21:03 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-04 21:03 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-04 21:03 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-04-04 21:03 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-04 21:03 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-04 21:03 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-04-04 21:03 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-04-04 21:03 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-04 21:03 - 2015-01-12 04:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-04 21:03 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-04 21:03 - 2015-01-12 03:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-04 21:03 - 2014-12-09 05:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-04-04 21:03 - 2014-12-09 03:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-04-04 21:03 - 2014-11-22 04:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-04 21:03 - 2014-11-22 04:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-04 21:03 - 2014-10-31 07:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-04-04 21:03 - 2014-10-31 07:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-04-04 21:03 - 2014-10-31 07:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-04-04 21:03 - 2014-10-31 07:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-04-04 21:03 - 2014-10-31 07:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-04-04 21:03 - 2014-10-31 07:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-04-04 21:03 - 2014-10-31 07:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-04 21:03 - 2014-10-31 07:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-04 21:03 - 2014-10-31 06:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-04 21:03 - 2014-10-31 06:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-04 21:03 - 2014-10-31 06:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-04-04 21:03 - 2014-10-31 06:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-04 21:03 - 2014-10-31 06:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2015-04-04 21:03 - 2014-10-31 06:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-04 21:03 - 2014-10-31 06:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-04 21:03 - 2014-10-31 06:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-04-04 21:03 - 2014-10-31 06:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-04 21:03 - 2014-10-31 06:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-04-04 21:03 - 2014-10-31 06:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-04-04 21:03 - 2014-10-31 06:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-04-04 21:03 - 2014-10-31 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-04 21:03 - 2014-10-31 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-04-04 21:03 - 2014-10-31 06:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-04-04 21:03 - 2014-10-31 05:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-04-04 21:03 - 2014-10-31 05:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2015-04-04 21:03 - 2014-10-31 05:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-04-04 21:03 - 2014-10-31 05:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2015-04-04 21:03 - 2014-10-31 05:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2015-04-04 21:03 - 2014-10-31 05:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-04-04 21:03 - 2014-10-31 05:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-04-04 21:03 - 2014-10-31 05:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-04 21:03 - 2014-10-31 05:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-04 21:03 - 2014-10-31 05:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-04 21:03 - 2014-10-31 05:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-04 21:03 - 2014-10-31 05:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2015-04-04 21:03 - 2014-10-31 05:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-04 21:03 - 2014-10-31 05:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2015-04-04 21:03 - 2014-10-31 05:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-04 21:03 - 2014-10-31 05:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-04 21:03 - 2014-10-31 05:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2015-04-04 21:03 - 2014-10-31 04:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-04-04 21:03 - 2014-10-31 04:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-04 21:03 - 2014-10-31 04:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-04-04 21:03 - 2014-10-31 04:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-04-04 21:03 - 2014-10-31 04:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-04-04 21:03 - 2014-10-31 04:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2015-04-04 21:03 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-04-04 21:03 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-04-04 21:03 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-04 21:02 - 2015-01-16 00:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-04-04 21:02 - 2015-01-16 00:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-04 21:02 - 2015-01-14 06:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-04-04 21:02 - 2015-01-14 05:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-04-04 21:02 - 2014-10-29 04:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-04 21:02 - 2014-10-29 04:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-04 21:02 - 2014-10-29 04:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-04 21:02 - 2014-10-29 04:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-04 21:02 - 2014-10-29 03:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-04 21:01 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2015-04-04 21:01 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-04-04 21:01 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-04-04 21:01 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-04-04 21:01 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-04-04 21:00 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-04-04 21:00 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-04-04 21:00 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-04-04 21:00 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-04-04 21:00 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2015-04-04 21:00 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
2015-04-04 21:00 - 2014-12-09 03:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-04-04 21:00 - 2014-10-29 04:49 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-04-04 21:00 - 2014-10-29 04:44 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-04-04 21:00 - 2014-10-29 04:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-04-04 21:00 - 2014-10-29 04:04 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-04-04 21:00 - 2014-10-29 04:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-04-04 21:00 - 2014-10-29 04:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-04-04 21:00 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-04-04 20:59 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-04 20:59 - 2014-11-10 04:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2015-04-04 20:59 - 2014-11-10 03:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-04-04 20:58 - 2015-03-06 04:53 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-04 20:58 - 2015-03-06 04:33 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-04 20:58 - 2015-02-26 01:26 - 04178944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-04-04 20:58 - 2015-02-07 01:09 - 00396419 _____ () C:\Windows\system32\ApnDatabase.xml
2015-04-04 20:58 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-04-04 20:58 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-04-04 20:58 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-04-04 20:58 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2015-04-04 20:58 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2015-04-04 20:58 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-04-04 20:58 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-04-04 20:58 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2015-04-04 20:58 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2015-04-04 20:58 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\SysWOW64\locale.nls
2015-04-04 20:58 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\system32\locale.nls
2015-04-04 20:58 - 2014-10-29 03:27 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2015-04-04 20:58 - 2014-10-29 03:27 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2015-04-04 20:58 - 2014-10-29 03:04 - 00868352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2015-04-04 20:58 - 2014-10-29 03:04 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2015-04-04 20:58 - 2014-10-13 04:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-04-04 20:58 - 2014-10-11 02:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-04-04 20:58 - 2014-10-11 02:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-04-04 20:58 - 2014-10-08 09:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-04-04 20:58 - 2014-10-08 09:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-04-04 20:58 - 2014-10-08 08:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-04-04 20:58 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-04 20:58 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-04 20:57 - 2014-12-19 10:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-04-04 20:57 - 2014-12-19 10:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-04-04 20:57 - 2014-10-31 01:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-04-04 20:57 - 2014-10-31 01:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-04-04 20:57 - 2014-08-23 08:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-04-04 20:57 - 2014-08-23 07:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-04-04 20:57 - 2014-08-23 06:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2015-04-04 20:55 - 2015-02-06 03:28 - 02257408 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-04-04 20:55 - 2015-02-06 03:08 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-04-04 20:55 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-04-04 20:55 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2015-04-04 20:55 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2015-04-04 20:55 - 2015-01-30 05:01 - 00097792 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2015-04-04 20:55 - 2015-01-30 05:00 - 00167424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2015-04-04 20:55 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2015-04-04 20:55 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2015-04-04 20:55 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2015-04-04 20:55 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2015-04-04 20:55 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll
2015-04-04 20:55 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-04-04 20:55 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-04-04 20:55 - 2014-12-19 08:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-04-04 20:55 - 2014-12-12 04:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-04-04 20:55 - 2014-12-12 02:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-04-04 20:55 - 2014-10-29 04:46 - 00081920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2015-04-04 20:55 - 2014-10-29 04:46 - 00053248 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2015-04-04 20:55 - 2014-10-29 04:45 - 01198080 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-04-04 20:55 - 2014-10-29 04:43 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2015-04-04 20:55 - 2014-10-29 04:34 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-04-04 20:55 - 2014-10-29 04:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2015-04-04 20:55 - 2014-10-29 04:03 - 00241152 ____C (Microsoft Corporation) C:\Windows\system32\fsquirt.exe
2015-04-04 20:55 - 2014-10-29 03:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2015-04-04 20:55 - 2014-10-29 03:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2015-04-04 20:55 - 2014-10-29 03:51 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-04-04 20:55 - 2014-10-29 03:45 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2015-04-04 20:55 - 2014-10-29 03:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2015-04-04 20:55 - 2014-10-29 03:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\atlthunk.dll
2015-04-04 20:55 - 2014-10-29 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-04-04 20:55 - 2014-10-29 03:15 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2015-04-04 20:55 - 2014-10-29 02:55 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2015-04-04 20:55 - 2014-10-29 02:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2015-04-04 20:55 - 2014-10-29 02:41 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2015-04-04 20:55 - 2014-10-29 02:35 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2015-04-04 20:55 - 2014-09-04 02:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-04-04 20:55 - 2014-09-04 02:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-04-04 20:55 - 2014-08-02 02:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-04-04 20:55 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2015-04-04 20:55 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-04-04 20:55 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2015-04-04 20:55 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-04-04 20:55 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-04-04 20:55 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-04-04 20:54 - 2014-08-16 06:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2015-04-04 20:54 - 2014-08-16 05:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-04 20:54 - 2014-08-16 05:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2015-04-04 20:54 - 2014-08-16 03:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-04 20:54 - 2014-08-16 03:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2015-04-04 20:54 - 2014-08-16 02:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-04-04 20:54 - 2014-08-16 02:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2015-04-04 20:54 - 2014-08-16 02:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2015-04-04 20:54 - 2014-08-16 02:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2015-04-04 20:54 - 2014-08-16 02:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2015-04-04 20:54 - 2014-08-16 02:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2015-04-04 20:54 - 2014-08-16 02:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-04-04 20:54 - 2014-08-16 02:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2015-04-04 20:54 - 2014-08-16 02:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2015-04-04 20:54 - 2014-08-16 02:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-04-04 20:54 - 2014-08-16 02:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2015-04-04 20:54 - 2014-08-16 02:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-04-04 20:54 - 2014-08-16 02:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2015-04-04 20:54 - 2014-08-16 02:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-04-04 20:54 - 2014-08-16 02:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-04-04 20:54 - 2014-08-16 02:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-04-04 20:54 - 2014-07-24 17:28 - 00468288 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-04-04 20:54 - 2014-07-24 13:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2015-04-04 20:54 - 2014-07-24 12:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-04-04 20:54 - 2014-07-24 11:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-04-04 20:54 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-04-04 20:54 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-04-04 20:53 - 2015-01-19 20:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-04-04 20:53 - 2014-10-23 07:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-04-04 20:53 - 2014-10-23 07:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-04-04 20:53 - 2014-08-23 07:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-04 20:53 - 2014-08-23 07:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-04 20:52 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 20:52 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 20:52 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-04-04 20:52 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-04-04 20:52 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-04-04 20:52 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-04-04 20:52 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2015-04-04 20:52 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2015-04-04 20:52 - 2014-10-29 04:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2015-04-04 20:52 - 2014-10-29 04:34 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2015-04-04 20:52 - 2014-10-29 03:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-04 20:52 - 2014-10-29 03:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-04 20:52 - 2014-10-29 03:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-04 20:52 - 2014-10-29 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-04 20:52 - 2014-10-29 03:13 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-04-04 20:52 - 2014-10-29 03:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-04 20:52 - 2014-10-29 03:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-04 20:52 - 2014-10-29 02:55 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-04-04 20:52 - 2014-10-13 04:43 - 00238912 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00153920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-04-04 20:52 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2015-04-04 20:52 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2015-04-04 20:52 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2015-04-04 20:52 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-04-04 20:52 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-04-04 20:52 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-04-04 20:33 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-04-04 20:33 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-04-04 20:33 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-04-04 20:33 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2015-04-04 20:33 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2015-04-04 20:33 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2015-04-04 20:33 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2015-04-04 20:33 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2015-04-04 20:33 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2015-04-04 20:33 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2015-04-04 20:33 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2015-04-04 20:33 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-04-04 20:33 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-04-04 20:33 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2015-04-04 20:33 - 2014-12-06 05:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-04-04 20:33 - 2014-12-06 03:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-04-04 20:33 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-04-04 20:33 - 2014-10-31 00:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-04-04 20:33 - 2014-10-29 03:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-04-04 20:33 - 2014-10-29 03:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2015-04-04 20:33 - 2014-10-29 03:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-04-04 20:33 - 2014-10-29 02:59 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
2015-04-04 20:33 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-04-04 20:33 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-04-04 20:33 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-04-04 20:33 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2015-04-04 20:33 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2015-04-04 20:26 - 2014-11-10 01:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-04 20:26 - 2014-11-10 01:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-04 20:26 - 2014-09-10 08:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-04-04 20:26 - 2014-09-08 05:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-04-04 20:26 - 2014-09-08 05:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-04-04 20:26 - 2014-09-04 05:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-04-04 20:26 - 2014-09-04 04:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-04-04 20:26 - 2014-09-04 02:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2015-04-04 20:26 - 2014-08-31 02:17 - 00148800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-04-04 20:26 - 2014-08-31 00:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2015-04-04 20:26 - 2014-08-30 23:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2015-04-04 20:26 - 2014-08-30 23:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-04-04 20:26 - 2014-08-30 22:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2015-04-04 20:26 - 2014-08-30 22:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-04-04 20:26 - 2014-08-28 02:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-04-04 20:26 - 2014-08-28 02:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-04-04 20:26 - 2014-08-23 07:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-04-04 20:26 - 2014-08-23 07:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-04-04 20:26 - 2014-08-23 06:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-04-04 20:26 - 2014-08-02 02:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-04-04 20:26 - 2014-08-02 02:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-04-04 20:23 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-04-04 20:23 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-04-04 20:23 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-04-04 20:23 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-04-04 20:23 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-04-04 20:23 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-04-04 20:23 - 2014-12-08 21:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2015-04-04 20:23 - 2014-12-08 21:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-04-04 20:23 - 2014-12-06 03:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-04-04 20:23 - 2014-10-29 06:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2015-04-04 20:23 - 2014-10-29 06:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2015-04-04 20:23 - 2014-10-29 05:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-04-04 20:23 - 2014-10-29 05:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-04-04 20:23 - 2014-10-29 05:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-04-04 20:23 - 2014-10-29 05:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-04-04 20:23 - 2014-10-29 05:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-04-04 20:23 - 2014-10-29 05:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-04-04 20:23 - 2014-10-29 04:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-04-04 20:23 - 2014-10-29 03:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-04-04 20:23 - 2014-10-29 03:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-04-04 19:36 - 2015-04-04 19:36 - 00002235 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-04 19:36 - 2015-04-04 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-04 19:34 - 2015-04-16 00:36 - 00009072 _____ () C:\Windows\SysWOW64\29xyOff.ini
2015-04-04 19:34 - 2015-04-16 00:36 - 00009072 _____ () C:\Windows\system32\29xyOff.ini
2015-04-04 19:34 - 2015-04-16 00:23 - 00000000 ____D () C:\Program Files (x86)\System-Checker
2015-04-04 19:34 - 2015-04-01 12:35 - 00416552 _____ (scsp) C:\Windows\system32\scxy64.dll
2015-04-04 19:34 - 2015-04-01 12:35 - 00349872 _____ (scsp) C:\Windows\SysWOW64\scxy.dll
2015-04-04 19:34 - 2015-04-01 12:34 - 00046496 _____ () C:\Windows\system32\Drivers\scjrtr.sys
2015-04-04 19:34 - 2015-04-01 12:34 - 00035744 _____ () C:\Windows\system32\Drivers\scjrtf.sys
2015-04-04 19:33 - 2015-04-16 00:38 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-04 19:33 - 2015-04-16 00:25 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-04 19:33 - 2015-04-04 19:33 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-04-04 19:33 - 2015-04-04 19:33 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-04-04 19:32 - 2015-04-04 19:33 - 00000000 ____D () C:\Users\user\AppData\Local\Deployment
2015-04-04 19:32 - 2015-04-04 19:32 - 00000000 ____D () C:\Users\user\AppData\Local\Apps\2.0
2015-04-04 19:21 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2015-04-04 19:21 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2015-04-04 19:20 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-04-04 19:20 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2015-04-04 19:20 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-04-04 19:18 - 2015-04-04 19:18 - 00000000 ____D () C:\ProgramData\e69bfb600002cd1
2015-04-04 19:12 - 2015-04-04 19:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WildTangent
2015-04-04 19:01 - 2015-04-14 21:38 - 00000000 ___RD () C:\Users\user\Desktop\Games
2015-04-04 18:55 - 2015-04-04 18:55 - 00000000 ____D () C:\Users\user\AppData\Local\Steam
2015-04-04 18:51 - 2015-04-16 00:26 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-04 18:51 - 2015-04-04 18:51 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-04-04 18:51 - 2015-04-04 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-04-04 18:50 - 2015-04-04 18:50 - 01142128 _____ () C:\Users\user\Downloads\SteamSetup.exe
2015-04-04 18:38 - 2015-04-16 00:09 - 00000000 ____D () C:\ProgramData\dZmUpbFe
2015-04-04 18:38 - 2015-04-10 08:16 - 00000000 ____D () C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}
2015-04-04 18:36 - 2015-04-04 18:36 - 00000000 ____D () C:\ProgramData\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5}
2015-04-04 18:34 - 2015-04-04 18:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-04-04 18:32 - 2015-04-08 00:53 - 00000000 ___HD () C:\Users\Public\Temp
2015-04-04 18:30 - 2015-04-04 19:36 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2015-04-04 18:30 - 2015-04-04 19:36 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-04 18:30 - 2015-04-04 18:31 - 00008552 _____ () C:\claraInstaller.txt
2015-04-04 18:30 - 2015-04-04 18:30 - 00003546 _____ () C:\Windows\System32\Tasks\VZZXGN
2015-04-04 18:30 - 2015-04-04 18:30 - 00002962 _____ () C:\Windows\System32\Tasks\FUB
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () C:\ProgramData\7b2a98c5c3a9485689cfb0f9c7e387ba
2015-04-04 18:29 - 2015-04-13 21:42 - 00000000 ____D () C:\Users\user\AppData\Local\CrashDumps
2015-04-04 18:28 - 2015-04-04 18:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Macromedia
2015-04-04 18:28 - 2015-04-04 18:28 - 00000000 ____D () C:\Users\user\AppData\Local\Acer Aspire R7 Tutorial
2015-04-04 14:04 - 2015-04-15 22:08 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4B77C285-2957-41B2-AC16-E035149999DF}
2015-04-04 14:04 - 2015-04-04 14:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieUserList
2015-04-04 14:04 - 2015-04-04 14:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieSiteList
2015-04-04 13:50 - 2015-04-04 13:50 - 00000000 ___HD () C:\$SysReset
2015-04-04 10:06 - 2015-04-16 00:29 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-04 10:04 - 2015-04-04 10:04 - 00000000 ____D () C:\Users\Public\Pokki
2015-04-04 10:01 - 2015-04-04 18:49 - 00000000 ____D () C:\Users\user\AppData\Local\clear.fi
2015-04-04 10:01 - 2015-04-04 10:01 - 00001280 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\PicStream
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\AppData\Roaming\Atheros
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\AppData\Local\AOP SDK
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2015-04-04 10:00 - 2015-04-05 20:44 - 00000000 ____D () C:\Users\user\AppData\Local\Packages
2015-04-04 10:00 - 2015-04-04 19:08 - 00001458 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-04 10:00 - 2015-04-04 10:00 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-04-04 10:00 - 2015-04-04 10:00 - 00000020 ___SH () C:\Users\user\ntuser.ini
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Vorlagen
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Startmenü
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Netzwerkumgebung
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Lokale Einstellungen
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Eigene Dateien
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Druckumgebung
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Musik
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Bilder
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Verlauf
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Anwendungsdaten
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Anwendungsdaten
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Windows\oem
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Roaming\Adobe
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Local\OEM
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Program Files\Accessory Store
2015-04-04 09:59 - 2014-07-25 23:18 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-04 09:59 - 2014-03-18 12:33 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-04 09:59 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-04 09:59 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-04 09:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-04 09:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 00:38 - 2014-08-30 14:27 - 01804298 _____ () C:\Windows\WindowsUpdate.log
2015-04-16 00:24 - 2014-03-18 11:54 - 00066230 _____ () C:\Windows\PFRO.log
2015-04-16 00:24 - 2013-08-22 16:46 - 00024190 _____ () C:\Windows\setupact.log
2015-04-16 00:24 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-16 00:16 - 2014-08-30 22:48 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-04-16 00:16 - 2014-08-30 22:48 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-04-16 00:16 - 2014-03-18 12:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-16 00:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 00:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\schemas
2015-04-16 00:09 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-04-16 00:08 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-04-16 00:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-04-15 23:58 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-14 21:37 - 2013-08-22 16:44 - 00381472 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-14 21:25 - 2014-07-25 23:21 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-14 20:52 - 2014-07-25 23:24 - 00229172 _____ () C:\Windows\DirectX.log
2015-04-13 20:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2015-04-07 14:19 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-04-06 23:15 - 2014-07-25 23:22 - 00000000 ____D () C:\ProgramData\CyberLink
2015-04-06 23:14 - 2014-08-30 13:59 - 00000000 ____D () C:\Users\Public\CyberLink
2015-04-05 20:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-05 17:13 - 2014-03-18 11:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup
2015-04-05 17:13 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2015-04-05 09:01 - 2014-07-25 23:28 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-04-05 07:31 - 2014-07-25 23:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-04-05 07:30 - 2014-07-25 23:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-04-05 06:53 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-04-04 23:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-04 23:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2015-04-04 19:12 - 2014-07-25 23:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-04-04 19:12 - 2014-07-25 23:23 - 00000000 ____D () C:\ProgramData\WildTangent
2015-04-04 18:52 - 2014-07-25 23:26 - 00000000 ____D () C:\Program Files\Acer
2015-04-04 18:52 - 2014-07-25 23:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-04-04 18:52 - 2014-07-25 23:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-04-04 18:48 - 2014-07-25 23:57 - 00000000 ___HD () C:\OEM
2015-04-04 18:48 - 2014-07-25 23:21 - 00000000 ____D () C:\ProgramData\OEM
2015-04-04 18:48 - 2014-07-25 23:20 - 00000000 ____D () C:\ProgramData\acer
2015-04-04 18:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2015-04-04 10:00 - 2014-07-25 23:58 - 00000000 ____D () C:\Windows\Panther
2015-04-04 09:59 - 2014-07-25 23:00 - 00000000 ____D () C:\Users\Administrator

==================== Files in the root of some directories =======

2014-08-30 13:44 - 2014-08-30 13:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\AcerDocsSetup.exe
C:\Users\user\AppData\Local\Temp\BackupSetup.exe
C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.dll
C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.exe
C:\Users\user\AppData\Local\Temp\CB0DF04A-6CF5-5E3A-B99C-9AD7C1226D27.exe
C:\Users\user\AppData\Local\Temp\FoxitUpdater.exe
C:\Users\user\AppData\Local\Temp\optprosetup.exe
C:\Users\user\AppData\Local\Temp\Quarantine.exe
C:\Users\user\AppData\Local\Temp\sqlite3.dll
C:\Users\user\AppData\Local\Temp\supoptsetup.exe
C:\Users\user\AppData\Local\Temp\_is6D2D.exe
C:\Users\user\AppData\Local\Temp\_isEF6B.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-15 23:52

==================== End Of Log ============================
         

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hier sind die logs

der log von ESET:

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=748a89e2756ef242a8d695b7f80595a3
# engine=23417
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-04-16 06:29:06
# local_time=2015-04-16 08:29:06 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='McAfee Anti-Virus * Anti-Spyware'
# compatibility_mode=5130 16777214 100 97 991708 52694386 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 991786 34025714 0 0
# scanned=187826
# found=24
# cleaned=0
# scan_time=2741
sh=4164E78F824056687DF7AA77E2B886C5024F3DBE ft=1 fh=c2d793bb92c72643 vn="Variante von MSIL/Adware.PullUpdate.K.gen Anwendung" ac=I fn="C:\ProgramData\dZmUpbFe\dat\NqrDpHp.dll"
sh=023B423C470DD634F21B13692916B7FF3E15B190 ft=1 fh=42ac93cf5b820589 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\ProgramData\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5}\hqghumeaylnlf.exe"
sh=03F23F83CDB6A83E6257711E3EDD5793460AF2F1 ft=1 fh=879eda08f64c3dcb vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe"
sh=4164E78F824056687DF7AA77E2B886C5024F3DBE ft=1 fh=c2d793bb92c72643 vn="Variante von MSIL/Adware.PullUpdate.K.gen Anwendung" ac=I fn="C:\Users\All Users\dZmUpbFe\dat\NqrDpHp.dll"
sh=023B423C470DD634F21B13692916B7FF3E15B190 ft=1 fh=42ac93cf5b820589 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\Users\All Users\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5}\hqghumeaylnlf.exe"
sh=03F23F83CDB6A83E6257711E3EDD5793460AF2F1 ft=1 fh=879eda08f64c3dcb vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\Users\All Users\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe"
sh=182109D2C4916249F9D60AB9C30BF70A2061490E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\64EC.tmp"
sh=4495024B25F21088902FBD82FC915E621187FE85 ft=1 fh=cc5f08593bdd79bc vn="MSIL/MyPCBackup.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\BackupSetup.exe"
sh=4CA5B72CEE6409917D79FB3B0256F5B8B40FA11E ft=1 fh=c71c0011caa13e32 vn="Variante von Win32/Adware.AddLyrics.DY Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.exe"
sh=60E80DEB87F462F04DA55B23A05636144CAA1DB7 ft=1 fh=c71c0011e7e83433 vn="Variante von Win32/Adware.AddLyrics.DY Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\CB0DF04A-6CF5-5E3A-B99C-9AD7C1226D27.exe"
sh=182109D2C4916249F9D60AB9C30BF70A2061490E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\FB76.tmp"
sh=5BEDC69BB5A630F3314B378493BB5223FBE0D18D ft=1 fh=08d374f9f8de9542 vn="Variante von Win32/Adware.MultiPlug.IX Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\optprosetup.exe"
sh=04B71EB467661EF00CF9B339CE7ECF7A2112058D ft=1 fh=d519d57b033bea82 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\user\AppData\Local\Temp\supoptsetup.exe"
sh=186258A0BF5E485023A59EDA1349B6A4F2C10F96 ft=1 fh=c4f412697edcf36a vn="Variante von Win32/Adware.AddLyrics.DX Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\143cb4f4-0383-4446-9dd1-a66f7ea8a1bd\5555-1007_checkmeup.exe"
sh=AF023CD20C85601E6874CB788BCAA49AE325A40D ft=1 fh=da3b4c00ec0bc47d vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\17255684-8aba-46be-a970-485276686b2d\cloud_backup_setup.exe"
sh=CA41151212F56C9A108CB756DE250524653870F0 ft=1 fh=121ae17dc6d58f70 vn="Win32/Wajam.K evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\210f275c-4282-40cb-9b54-f0883c495bd0\wie_2.19.2.6.exe"
sh=47B19AB97028D8925579BED54EFEE88C8107D6B6 ft=1 fh=34f71966959b3eb8 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\DMR\dmr_72.exe"
sh=745ABD52A9331C27F9913C76AA773580B87ADB2D ft=1 fh=7fb01a3ddc28b3a2 vn="Variante von Win32/Adware.MultiPlug.IX Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\is-APAPQ.tmp\OptProMon.dll"
sh=023B423C470DD634F21B13692916B7FF3E15B190 ft=1 fh=42ac93cf5b820589 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\is-EN9RQ.tmp\superpc_soft_partner.exe"
sh=702EBDD504DA115C3F52FA047C6E2B380C5BBD7A ft=1 fh=e3d302ade271027c vn="Win32/BrowseFox.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\is-MEGC6.tmp\browsergood_soft_partner.exe"
sh=E62C7743BC24549F7B82E98C8B0EA68DF9E47CFA ft=1 fh=c65b2612f0d09c3b vn="Win32/UniBlue.E evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\AppData\Local\Temp\is-NS4SG.tmp\pm-standalone-setup.exe"
sh=99DFB86F0807B8C197C3289A6D233D3B429DCFC6 ft=1 fh=72ef8e0611c068af vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Downloads\VLC media player 64 Bit - CHIP-Installer.exe"
sh=B0644F9DFD6806F5E2F4E10AE8C2DC703E68D379 ft=1 fh=184764616534ee2f vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Downloads\Windows Media Player - CHIP-Installer.exe"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="Variante von Win32/Adware.SpeedingUpMyPC.AA Anwendung" ac=I fn="${Memory}"
         

der ceckup.txt

Results of screen317's Security Check version 1.00  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender                     
McAfee Anti-Virus und Anti-Spyware   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 McAfee SiteAdvisor    
 Adobe Reader XI  
 Google Chrome (41.0.2272.118) 
````````Process Check: objlist.exe by Laurent````````  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         

und wieder ein neuer FRST.txt


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04
Ran by user (administrator) on ACER on 16-04-2015 20:35:14
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available profiles: UpdatusUser & user)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(scsp) C:\Program Files (x86)\System-Checker\Files\scxy.exe
() C:\Program Files (x86)\System-Checker\syschkrm.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\System-Checker\syschkrs.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(PC Utilities Software Limited) C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\WINWORD.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\MountPoints2: {35660590-303f-11e4-825c-806e6f6e6963} - "D:\AutoRun.exe" 
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe (PC Utilities Software Limited)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:49836;https=127.0.0.1:49836
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-04-06] (Microsoft Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-06] (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-04-06] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 02 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 03 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 04 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 16 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9-x64 01 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 02 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 03 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 04 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 16 C:\Windows\system32\scxy64.dll [416552] (scsp)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-04-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-25]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-25]

Chrome: 
=======
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-04]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-04]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-04]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-04]
CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-04]
CHR Extension: (gihkgljdimgfffabkemicpaeljmoobil) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gihkgljdimgfffabkemicpaeljmoobil [2015-04-09]
CHR Extension: (gomekmidlodglbbmalcneegieacbdmki) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-09]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-04]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-04]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-04-04]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-04-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]
S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [3053312 2014-06-27] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
S2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-02-19] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-30] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 scxy; C:\Program Files (x86)\System-Checker\Files\scxy.exe [1936280 2015-04-01] (scsp)
R2 syschkrm; C:\Program Files (x86)\System-Checker\syschkrm.exe [110080 2015-04-01] () [File not signed]
R2 syschkrs; C:\Program Files (x86)\System-Checker\syschkrs.exe [186880 2015-04-01] () [File not signed]
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
R1 scjrtf; C:\Windows\system32\Drivers\scjrtf.sys [35744 2015-04-01] () [File not signed]
R1 scjrtr; C:\Windows\system32\Drivers\scjrtr.sys [46496 2015-04-01] () [File not signed]
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 20:34 - 2015-04-16 20:34 - 00000737 _____ () C:\Users\user\Desktop\checkup.txt
2015-04-16 20:33 - 2015-04-16 20:33 - 00852616 _____ () C:\Users\user\Desktop\SecurityCheck.exe
2015-04-16 20:02 - 2015-04-16 20:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-04-16 19:33 - 2015-04-16 19:33 - 00000000 ____D () C:\ProgramData\Age of Empires 3
2015-04-16 19:31 - 2015-04-16 19:31 - 00000000 ____D () C:\Users\user\Documents\Benutzerdefinierte Office-Vorlagen
2015-04-16 01:06 - 2015-04-16 01:06 - 00000588 _____ () C:\Users\user\Desktop\JRT.txt
2015-04-16 00:41 - 2015-04-16 00:41 - 00000000 ____D () C:\Users\user\Desktop\FRST-OlderVersion
2015-04-16 00:35 - 2015-04-16 00:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACER-Windows-8.1-(64-bit).dat
2015-04-16 00:35 - 2015-04-16 00:35 - 00000000 ____D () C:\RegBackup
2015-04-16 00:33 - 2015-04-16 00:33 - 02686088 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2015-04-16 00:30 - 2015-04-16 00:23 - 00010019 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2015-04-16 00:20 - 2015-04-16 00:23 - 00000000 ____D () C:\AdwCleaner
2015-04-16 00:19 - 2015-04-16 00:19 - 02217984 _____ () C:\Users\user\Desktop\AdwCleaner_4.201.exe
2015-04-16 00:14 - 2015-04-16 00:18 - 00040250 _____ () C:\Users\user\Desktop\mbam.txt
2015-04-15 23:39 - 2015-04-16 00:15 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-15 23:39 - 2015-04-15 23:39 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-15 23:39 - 2015-04-15 23:39 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-15 23:39 - 2015-04-15 23:39 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-15 23:39 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-15 23:39 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-15 23:39 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-15 23:37 - 2015-04-15 23:37 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-15 23:30 - 2015-04-15 23:30 - 00000707 _____ () C:\Users\user\Desktop\Revo Uninstaller.lnk
2015-04-15 23:29 - 2015-04-15 23:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\user\Desktop\revosetup95.exe
2015-04-15 22:16 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 22:16 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 22:16 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-15 22:16 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 22:16 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-15 22:16 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-15 22:16 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 22:16 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 22:16 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-15 22:16 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-15 22:16 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-15 22:16 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-15 22:16 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-15 22:16 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-15 22:16 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 22:16 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 22:16 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 22:16 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-15 22:16 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 22:16 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 22:16 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 22:16 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 22:16 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 22:16 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-15 22:16 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-15 22:16 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 22:16 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 22:16 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 22:16 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-15 22:16 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-15 22:16 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 22:16 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 22:16 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 22:16 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-15 22:16 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 22:16 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 22:16 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 22:16 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 22:16 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 22:16 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 22:16 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-15 22:16 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-15 22:16 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-15 22:16 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-15 22:16 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-15 22:16 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-15 22:16 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-15 22:16 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-15 22:16 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-15 22:16 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-15 22:15 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 22:10 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 22:10 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 22:10 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 22:10 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 22:10 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 22:10 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 22:10 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 22:10 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 22:10 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 22:10 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-15 22:10 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-15 22:10 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 22:10 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 22:10 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 22:10 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 22:10 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 22:10 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 22:10 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 22:10 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-15 22:10 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 22:10 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 22:10 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-15 22:09 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 14:36 - 2015-04-14 14:38 - 00031053 _____ () C:\Users\user\Desktop\Addition.txt
2015-04-14 14:34 - 2015-04-16 20:35 - 00019738 _____ () C:\Users\user\Desktop\FRST.txt
2015-04-14 14:34 - 2015-04-16 20:35 - 00000000 ____D () C:\FRST
2015-04-14 14:33 - 2015-04-16 00:41 - 02097664 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2015-04-13 20:05 - 2015-04-13 20:05 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf32.dll
2015-04-13 20:05 - 2015-04-13 20:05 - 00002272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf16.dll
2015-04-13 20:05 - 2015-04-13 20:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Media
2015-04-13 20:05 - 1998-09-02 10:28 - 01088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\danim.dll
2015-04-13 20:05 - 1998-09-02 10:28 - 00155408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRT.dll
2015-04-13 20:05 - 1998-09-02 10:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unam4ie.exe
2015-04-13 20:05 - 1998-09-02 10:28 - 00038160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRTREND.dll
2015-04-13 20:05 - 1998-09-02 10:02 - 00194320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcut.dll
2015-04-13 20:05 - 1998-08-27 06:51 - 00182032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft3.dll
2015-04-13 20:05 - 1998-08-20 13:02 - 00140800 _____ (The Duck Corporation) C:\Windows\SysWOW64\tm20dec.ax
2015-04-13 20:05 - 1998-08-20 12:38 - 00217984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\strmdll.dll
2015-04-13 20:05 - 1998-08-17 11:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz.drv
2015-04-13 20:05 - 1998-08-17 11:21 - 00010240 _____ () C:\Windows\SysWOW64\vidx16.dll
2015-04-13 20:05 - 1998-08-17 11:21 - 00005672 _____ () C:\Windows\SysWOW64\quartz.vxd
2015-04-13 20:04 - 1998-10-21 18:43 - 00328704 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
2015-04-12 22:04 - 2015-04-12 22:04 - 00003148 _____ () C:\Windows\System32\Tasks\{9700D7FA-E5DB-4AB6-B549-9260F5FC3C27}
2015-04-09 13:07 - 2015-04-09 13:07 - 00000000 ____D () C:\Users\user\AppData\Roaming\LolClient
2015-04-07 08:31 - 2015-04-07 08:31 - 00001516 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-04-07 08:31 - 2015-04-07 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:31 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:30 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-04-07 08:25 - 2015-04-07 08:26 - 36053064 _____ (DVDVideoSoft Ltd. ) C:\Users\user\Downloads\FreeYouTubeToMP3Converter_3.12.57.324.exe
2015-04-06 23:12 - 2015-04-06 23:12 - 00000000 ____D () C:\Users\user\AppData\Local\MediaShow
2015-04-06 11:18 - 2015-04-06 12:08 - 02345800 _____ () C:\Users\user\Documents\ABI seite Lutz.pptx
2015-04-06 11:18 - 2015-04-06 11:18 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieBrowserModeList
2015-04-06 11:17 - 2015-04-06 11:17 - 05706441 _____ () C:\Users\user\Documents\R.pptx
2015-04-06 11:17 - 2015-04-06 11:17 - 05706441 _____ () C:\Users\user\Documents\ABIseite Ruben.pptx
2015-04-05 22:16 - 2015-04-06 23:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2015-04-05 22:16 - 2015-04-05 22:16 - 00000891 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-05 22:16 - 2015-04-05 22:16 - 00000000 ____D () C:\Users\user\AppData\Roaming\dvdcss
2015-04-05 22:16 - 2015-04-05 22:16 - 00000000 ____D () C:\Program Files\VideoLAN
2015-04-05 22:13 - 2015-04-05 22:14 - 01203488 _____ () C:\Users\user\Downloads\VLC media player 64 Bit - CHIP-Installer.exe
2015-04-05 22:08 - 2015-04-05 22:09 - 00000686 _____ () C:\Windows\wmsetup.log
2015-04-05 22:07 - 2015-04-05 22:07 - 01203488 _____ () C:\Users\user\Downloads\Windows Media Player - CHIP-Installer.exe
2015-04-05 21:55 - 2015-04-06 11:16 - 05706438 _____ () C:\Users\user\Documents\powerpoints.pptx
2015-04-05 17:57 - 2015-04-06 19:08 - 00003086 _____ () C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-05 17:57 - 2015-04-06 19:08 - 00000000 ___RD () C:\Users\user\OneDrive
2015-04-05 17:57 - 2015-04-05 17:57 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-04-05 17:54 - 2015-04-06 23:11 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-04-05 17:54 - 2015-04-05 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-05 17:53 - 2015-04-05 17:53 - 01078976 _____ (Microsoft Corporation) C:\Users\user\Downloads\Setup.X86.de-DE_HomeBusinessRetail_af6fbc01-34c4-49c8-a29d-f1b824319f99_TX_DB_.exe
2015-04-05 13:51 - 2014-07-24 17:28 - 00412992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2015-04-05 13:51 - 2014-07-24 17:28 - 00143680 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-04-05 13:51 - 2014-07-24 17:23 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-04-05 13:51 - 2014-07-24 17:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-04-05 13:51 - 2014-07-24 17:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-04-05 13:51 - 2014-07-24 17:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-04-05 13:51 - 2014-07-24 17:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-04-05 13:51 - 2014-07-24 17:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-04-05 13:51 - 2014-07-24 17:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-04-05 13:51 - 2014-07-24 17:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2015-04-05 13:51 - 2014-07-24 15:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2015-04-05 13:51 - 2014-07-24 15:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2015-04-05 13:51 - 2014-07-24 13:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2015-04-05 13:51 - 2014-07-24 13:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2015-04-05 13:51 - 2014-07-24 13:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2015-04-05 13:51 - 2014-07-24 13:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2015-04-05 13:51 - 2014-07-24 13:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-04-05 13:51 - 2014-07-24 12:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-04-05 13:51 - 2014-07-24 12:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-04-05 13:51 - 2014-07-24 11:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2015-04-05 13:51 - 2014-07-24 11:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-04-05 13:51 - 2014-07-24 11:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2015-04-05 13:51 - 2014-07-24 11:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-04-05 13:51 - 2014-07-24 11:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-04-05 13:51 - 2014-07-24 11:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2015-04-05 13:51 - 2014-07-24 11:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2015-04-05 13:51 - 2014-07-24 10:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2015-04-05 13:51 - 2014-07-24 10:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2015-04-05 13:51 - 2014-07-24 10:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2015-04-05 13:51 - 2014-07-24 10:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2015-04-05 13:51 - 2014-07-24 10:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2015-04-05 13:51 - 2014-07-24 10:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2015-04-05 13:51 - 2014-07-24 10:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-04-05 13:51 - 2014-07-24 10:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2015-04-05 13:51 - 2014-07-24 10:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-04-05 13:51 - 2014-07-24 10:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2015-04-05 13:51 - 2014-07-24 10:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-04-05 13:51 - 2014-07-24 10:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-04-05 13:51 - 2014-07-24 10:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2015-04-05 13:51 - 2014-07-24 10:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2015-04-05 13:51 - 2014-07-24 09:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2015-04-05 13:51 - 2014-07-24 09:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2015-04-05 13:51 - 2014-07-24 09:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2015-04-05 13:51 - 2014-07-12 07:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2015-04-05 13:51 - 2014-07-04 11:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2015-04-05 13:51 - 2014-07-04 11:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2015-04-05 13:51 - 2014-06-27 08:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2015-04-05 13:51 - 2014-06-26 02:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2015-04-05 13:51 - 2014-06-19 04:13 - 00310080 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2015-04-05 13:51 - 2014-06-14 08:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-04-05 13:51 - 2014-06-14 07:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-04-05 13:51 - 2014-06-05 12:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2015-04-05 13:51 - 2014-06-05 11:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2015-04-05 13:51 - 2014-05-31 07:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2015-04-05 13:51 - 2014-05-29 08:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2015-04-05 13:51 - 2014-05-29 07:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2015-04-05 13:51 - 2014-05-06 06:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-04-05 13:51 - 2014-05-06 02:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-04-05 13:51 - 2014-03-25 04:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2015-04-05 13:50 - 2014-07-24 17:28 - 00419648 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-04-05 13:50 - 2014-07-24 17:28 - 00280384 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2015-04-05 13:50 - 2014-07-24 17:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-04-05 13:50 - 2014-07-24 17:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-04-05 13:50 - 2014-07-24 17:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2015-04-05 13:50 - 2014-07-24 17:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-04-05 13:50 - 2014-07-24 15:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-04-05 13:50 - 2014-07-24 15:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2015-04-05 13:50 - 2014-07-24 13:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-04-05 13:50 - 2014-07-24 13:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2015-04-05 13:50 - 2014-07-24 13:45 - 00076800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2015-04-05 13:50 - 2014-07-24 13:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2015-04-05 13:50 - 2014-07-24 13:41 - 00118272 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2015-04-05 13:50 - 2014-07-24 13:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-04-05 13:50 - 2014-07-24 12:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2015-04-05 13:50 - 2014-07-24 12:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2015-04-05 13:50 - 2014-07-24 12:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2015-04-05 13:50 - 2014-07-24 12:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2015-04-05 13:50 - 2014-07-24 12:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2015-04-05 13:50 - 2014-07-24 12:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-04-05 13:50 - 2014-07-24 12:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2015-04-05 13:50 - 2014-07-24 12:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2015-04-05 13:50 - 2014-07-24 11:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2015-04-05 13:50 - 2014-07-24 11:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2015-04-05 13:50 - 2014-07-24 11:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2015-04-05 13:50 - 2014-07-24 11:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-04-05 13:50 - 2014-07-24 11:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2015-04-05 13:50 - 2014-07-24 11:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2015-04-05 13:50 - 2014-07-24 11:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2015-04-05 13:50 - 2014-07-24 11:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2015-04-05 13:50 - 2014-07-24 11:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2015-04-05 13:50 - 2014-07-24 11:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-04-05 13:50 - 2014-07-24 11:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-05 13:50 - 2014-07-24 11:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2015-04-05 13:50 - 2014-07-24 11:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2015-04-05 13:50 - 2014-07-24 11:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2015-04-05 13:50 - 2014-07-24 10:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2015-04-05 13:50 - 2014-07-24 10:49 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-04-05 13:50 - 2014-07-24 10:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2015-04-05 13:50 - 2014-07-24 10:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-04-05 13:50 - 2014-07-24 10:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2015-04-05 13:50 - 2014-07-24 10:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2015-04-05 13:50 - 2014-07-24 10:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2015-04-05 13:50 - 2014-07-24 10:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2015-04-05 13:50 - 2014-07-24 10:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2015-04-05 13:50 - 2014-07-24 10:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2015-04-05 13:50 - 2014-07-24 10:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2015-04-05 13:50 - 2014-07-24 10:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2015-04-05 13:50 - 2014-07-24 10:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2015-04-05 13:50 - 2014-07-24 10:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2015-04-05 13:50 - 2014-07-24 10:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2015-04-05 13:50 - 2014-07-24 10:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2015-04-05 13:50 - 2014-07-24 10:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2015-04-05 13:50 - 2014-07-24 10:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2015-04-05 13:50 - 2014-07-24 10:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-04-05 13:50 - 2014-07-24 09:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2015-04-05 13:50 - 2014-07-24 09:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2015-04-05 13:50 - 2014-07-24 09:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2015-04-05 13:50 - 2014-07-24 09:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-04-05 13:50 - 2014-07-24 09:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-04-05 13:50 - 2014-07-12 06:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2015-04-05 13:50 - 2014-07-04 14:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2015-04-05 13:50 - 2014-07-04 12:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2015-04-05 13:50 - 2014-07-04 12:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2015-04-05 13:50 - 2014-07-04 12:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2015-04-05 13:50 - 2014-07-04 12:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2015-04-05 13:50 - 2014-06-26 02:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2015-04-05 13:50 - 2014-06-20 01:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-04-05 13:50 - 2014-06-07 14:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2015-04-05 13:50 - 2014-06-07 12:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2015-04-05 13:50 - 2014-05-31 06:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2015-04-05 13:50 - 2014-05-26 09:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2015-04-05 13:50 - 2014-05-10 12:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-04-05 13:50 - 2014-05-10 10:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-04-05 13:50 - 2014-03-25 04:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2015-04-05 13:50 - 2014-03-25 03:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2015-04-05 13:50 - 2014-03-25 03:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2015-04-05 09:48 - 2015-04-05 09:48 - 00000000 ____D () C:\ProgramData\Riot Games
2015-04-05 09:38 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-04-05 09:38 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-04-05 09:38 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-04-05 09:37 - 2015-04-05 09:38 - 00000000 ____D () C:\Users\user\AppData\Roaming\Riot Games
2015-04-05 09:32 - 2015-04-05 09:33 - 30668968 _____ (Riot Games) C:\Users\user\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe
2015-04-05 08:59 - 2015-04-16 00:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-05 08:59 - 2015-04-16 00:07 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-05 08:59 - 2015-04-05 09:01 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-05 08:59 - 2015-04-05 08:59 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-05 08:39 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-04-05 08:32 - 2015-04-16 19:33 - 00000000 ____D () C:\Users\user\Documents\My Games
2015-04-05 07:31 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2015-04-04 23:42 - 2015-04-04 23:42 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-04-04 23:40 - 2015-04-14 01:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-04 23:40 - 2015-04-14 01:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-04 23:33 - 2015-04-16 00:06 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-04 23:33 - 2015-04-15 23:59 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-04 22:43 - 2015-04-04 22:43 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-04-04 22:43 - 2015-04-04 22:43 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-04-04 22:43 - 2015-04-04 22:43 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-04 22:42 - 2015-04-04 23:41 - 00000000 ____D () C:\ProgramData\Adobe
2015-04-04 22:38 - 2015-04-04 22:44 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2015-04-04 22:33 - 2015-04-04 22:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\CyberLink
2015-04-04 22:21 - 2015-04-04 22:21 - 00000000 ____D () C:\Users\user\Tracing
2015-04-04 22:19 - 2015-04-04 22:19 - 00000000 ____D () C:\Users\user\AppData\Local\Skype
2015-04-04 22:19 - 2014-08-15 02:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2015-04-04 22:19 - 2014-07-30 03:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2015-04-04 22:19 - 2014-07-29 07:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2015-04-04 22:18 - 2015-04-15 23:27 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00002715 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ____D () C:\ProgramData\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-04-04 22:16 - 2015-04-04 22:16 - 01380960 _____ (Skype Technologies S.A.) C:\Users\user\Downloads\SkypeSetup.exe
2015-04-04 21:19 - 2014-09-27 09:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2015-04-04 21:19 - 2014-09-27 07:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2015-04-04 21:19 - 2014-09-27 05:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-04-04 21:05 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-04-04 21:05 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-04-04 21:05 - 2014-10-29 05:56 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-04-04 21:05 - 2014-10-29 04:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2015-04-04 21:05 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2015-04-04 21:05 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-04-04 21:05 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-04-04 21:05 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-04-04 21:05 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-04-04 21:05 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-04-04 21:05 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-04-04 21:05 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-04-04 21:05 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-04-04 21:05 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-04-04 21:05 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2015-04-04 21:05 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2015-04-04 21:03 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-04 21:03 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-04-04 21:03 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-04 21:03 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-04 21:03 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-04 21:03 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-04-04 21:03 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-04 21:03 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-04 21:03 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-04-04 21:03 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-04 21:03 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-04 21:03 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-04-04 21:03 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-04-04 21:03 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-04 21:03 - 2015-01-12 04:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-04 21:03 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-04 21:03 - 2015-01-12 03:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-04 21:03 - 2014-12-09 05:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-04-04 21:03 - 2014-12-09 03:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-04-04 21:03 - 2014-11-22 04:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-04 21:03 - 2014-11-22 04:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-04 21:03 - 2014-10-31 07:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-04-04 21:03 - 2014-10-31 07:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-04-04 21:03 - 2014-10-31 07:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-04-04 21:03 - 2014-10-31 07:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-04-04 21:03 - 2014-10-31 07:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-04-04 21:03 - 2014-10-31 07:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-04-04 21:03 - 2014-10-31 07:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-04 21:03 - 2014-10-31 07:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-04 21:03 - 2014-10-31 06:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-04 21:03 - 2014-10-31 06:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-04 21:03 - 2014-10-31 06:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-04-04 21:03 - 2014-10-31 06:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-04 21:03 - 2014-10-31 06:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2015-04-04 21:03 - 2014-10-31 06:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-04 21:03 - 2014-10-31 06:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-04 21:03 - 2014-10-31 06:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-04-04 21:03 - 2014-10-31 06:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-04 21:03 - 2014-10-31 06:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-04-04 21:03 - 2014-10-31 06:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-04-04 21:03 - 2014-10-31 06:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-04-04 21:03 - 2014-10-31 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-04 21:03 - 2014-10-31 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-04-04 21:03 - 2014-10-31 06:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-04-04 21:03 - 2014-10-31 05:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-04-04 21:03 - 2014-10-31 05:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2015-04-04 21:03 - 2014-10-31 05:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-04-04 21:03 - 2014-10-31 05:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2015-04-04 21:03 - 2014-10-31 05:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2015-04-04 21:03 - 2014-10-31 05:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-04-04 21:03 - 2014-10-31 05:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-04-04 21:03 - 2014-10-31 05:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-04 21:03 - 2014-10-31 05:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-04 21:03 - 2014-10-31 05:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-04 21:03 - 2014-10-31 05:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-04 21:03 - 2014-10-31 05:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2015-04-04 21:03 - 2014-10-31 05:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-04 21:03 - 2014-10-31 05:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2015-04-04 21:03 - 2014-10-31 05:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-04 21:03 - 2014-10-31 05:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-04 21:03 - 2014-10-31 05:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2015-04-04 21:03 - 2014-10-31 04:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-04-04 21:03 - 2014-10-31 04:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-04 21:03 - 2014-10-31 04:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-04-04 21:03 - 2014-10-31 04:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-04-04 21:03 - 2014-10-31 04:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-04-04 21:03 - 2014-10-31 04:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2015-04-04 21:03 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-04-04 21:03 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-04-04 21:03 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-04 21:02 - 2015-01-16 00:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-04-04 21:02 - 2015-01-16 00:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-04 21:02 - 2015-01-14 06:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-04-04 21:02 - 2015-01-14 05:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-04-04 21:02 - 2014-10-29 04:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-04 21:02 - 2014-10-29 04:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-04 21:02 - 2014-10-29 04:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-04 21:02 - 2014-10-29 04:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-04 21:02 - 2014-10-29 03:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-04 21:01 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2015-04-04 21:01 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-04-04 21:01 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-04-04 21:01 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-04-04 21:01 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-04-04 21:00 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-04-04 21:00 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-04-04 21:00 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-04-04 21:00 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-04-04 21:00 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2015-04-04 21:00 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
2015-04-04 21:00 - 2014-12-09 03:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-04-04 21:00 - 2014-10-29 04:49 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-04-04 21:00 - 2014-10-29 04:44 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-04-04 21:00 - 2014-10-29 04:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-04-04 21:00 - 2014-10-29 04:04 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-04-04 21:00 - 2014-10-29 04:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-04-04 21:00 - 2014-10-29 04:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-04-04 21:00 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-04-04 20:59 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-04 20:59 - 2014-11-10 04:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2015-04-04 20:59 - 2014-11-10 03:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-04-04 20:58 - 2015-03-06 04:53 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-04 20:58 - 2015-03-06 04:33 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-04 20:58 - 2015-02-26 01:26 - 04178944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-04-04 20:58 - 2015-02-07 01:09 - 00396419 _____ () C:\Windows\system32\ApnDatabase.xml
2015-04-04 20:58 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-04-04 20:58 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-04-04 20:58 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-04-04 20:58 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2015-04-04 20:58 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2015-04-04 20:58 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-04-04 20:58 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-04-04 20:58 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2015-04-04 20:58 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2015-04-04 20:58 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\SysWOW64\locale.nls
2015-04-04 20:58 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\system32\locale.nls
2015-04-04 20:58 - 2014-10-29 03:27 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2015-04-04 20:58 - 2014-10-29 03:27 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2015-04-04 20:58 - 2014-10-29 03:04 - 00868352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2015-04-04 20:58 - 2014-10-29 03:04 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2015-04-04 20:58 - 2014-10-13 04:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-04-04 20:58 - 2014-10-11 02:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-04-04 20:58 - 2014-10-11 02:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-04-04 20:58 - 2014-10-08 09:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-04-04 20:58 - 2014-10-08 09:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-04-04 20:58 - 2014-10-08 08:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-04-04 20:58 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-04 20:58 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-04 20:57 - 2014-12-19 10:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-04-04 20:57 - 2014-12-19 10:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-04-04 20:57 - 2014-10-31 01:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-04-04 20:57 - 2014-10-31 01:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-04-04 20:57 - 2014-08-23 08:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-04-04 20:57 - 2014-08-23 07:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-04-04 20:57 - 2014-08-23 06:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2015-04-04 20:55 - 2015-02-06 03:28 - 02257408 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-04-04 20:55 - 2015-02-06 03:08 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-04-04 20:55 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-04-04 20:55 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2015-04-04 20:55 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2015-04-04 20:55 - 2015-01-30 05:01 - 00097792 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2015-04-04 20:55 - 2015-01-30 05:00 - 00167424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2015-04-04 20:55 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2015-04-04 20:55 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2015-04-04 20:55 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2015-04-04 20:55 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2015-04-04 20:55 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll
2015-04-04 20:55 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-04-04 20:55 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-04-04 20:55 - 2014-12-19 08:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-04-04 20:55 - 2014-12-12 04:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-04-04 20:55 - 2014-12-12 02:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-04-04 20:55 - 2014-10-29 04:46 - 00081920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2015-04-04 20:55 - 2014-10-29 04:46 - 00053248 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2015-04-04 20:55 - 2014-10-29 04:45 - 01198080 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-04-04 20:55 - 2014-10-29 04:43 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2015-04-04 20:55 - 2014-10-29 04:34 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-04-04 20:55 - 2014-10-29 04:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2015-04-04 20:55 - 2014-10-29 04:03 - 00241152 ____C (Microsoft Corporation) C:\Windows\system32\fsquirt.exe
2015-04-04 20:55 - 2014-10-29 03:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2015-04-04 20:55 - 2014-10-29 03:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2015-04-04 20:55 - 2014-10-29 03:51 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-04-04 20:55 - 2014-10-29 03:45 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2015-04-04 20:55 - 2014-10-29 03:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2015-04-04 20:55 - 2014-10-29 03:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\atlthunk.dll
2015-04-04 20:55 - 2014-10-29 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-04-04 20:55 - 2014-10-29 03:15 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2015-04-04 20:55 - 2014-10-29 02:55 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2015-04-04 20:55 - 2014-10-29 02:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2015-04-04 20:55 - 2014-10-29 02:41 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2015-04-04 20:55 - 2014-10-29 02:35 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2015-04-04 20:55 - 2014-09-04 02:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-04-04 20:55 - 2014-09-04 02:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-04-04 20:55 - 2014-08-02 02:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-04-04 20:55 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2015-04-04 20:55 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-04-04 20:55 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2015-04-04 20:55 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-04-04 20:55 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-04-04 20:55 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-04-04 20:54 - 2014-08-16 06:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2015-04-04 20:54 - 2014-08-16 05:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-04 20:54 - 2014-08-16 05:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2015-04-04 20:54 - 2014-08-16 03:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-04 20:54 - 2014-08-16 03:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2015-04-04 20:54 - 2014-08-16 02:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-04-04 20:54 - 2014-08-16 02:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2015-04-04 20:54 - 2014-08-16 02:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2015-04-04 20:54 - 2014-08-16 02:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2015-04-04 20:54 - 2014-08-16 02:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2015-04-04 20:54 - 2014-08-16 02:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2015-04-04 20:54 - 2014-08-16 02:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-04-04 20:54 - 2014-08-16 02:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2015-04-04 20:54 - 2014-08-16 02:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2015-04-04 20:54 - 2014-08-16 02:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-04-04 20:54 - 2014-08-16 02:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2015-04-04 20:54 - 2014-08-16 02:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-04-04 20:54 - 2014-08-16 02:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2015-04-04 20:54 - 2014-08-16 02:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-04-04 20:54 - 2014-08-16 02:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-04-04 20:54 - 2014-08-16 02:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-04-04 20:54 - 2014-07-24 17:28 - 00468288 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-04-04 20:54 - 2014-07-24 13:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2015-04-04 20:54 - 2014-07-24 12:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-04-04 20:54 - 2014-07-24 11:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-04-04 20:54 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-04-04 20:54 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-04-04 20:53 - 2015-01-19 20:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-04-04 20:53 - 2014-10-23 07:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-04-04 20:53 - 2014-10-23 07:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-04-04 20:53 - 2014-08-23 07:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-04 20:53 - 2014-08-23 07:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-04 20:52 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 20:52 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 20:52 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-04-04 20:52 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-04-04 20:52 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-04-04 20:52 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-04-04 20:52 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2015-04-04 20:52 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2015-04-04 20:52 - 2014-10-29 04:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2015-04-04 20:52 - 2014-10-29 04:34 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2015-04-04 20:52 - 2014-10-29 03:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-04 20:52 - 2014-10-29 03:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-04 20:52 - 2014-10-29 03:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-04 20:52 - 2014-10-29 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-04 20:52 - 2014-10-29 03:13 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-04-04 20:52 - 2014-10-29 03:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-04 20:52 - 2014-10-29 03:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-04 20:52 - 2014-10-29 02:55 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-04-04 20:52 - 2014-10-13 04:43 - 00238912 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00153920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-04-04 20:52 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2015-04-04 20:52 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2015-04-04 20:52 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2015-04-04 20:52 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-04-04 20:52 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-04-04 20:52 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-04-04 20:33 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-04-04 20:33 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-04-04 20:33 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-04-04 20:33 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2015-04-04 20:33 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2015-04-04 20:33 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2015-04-04 20:33 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2015-04-04 20:33 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2015-04-04 20:33 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2015-04-04 20:33 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2015-04-04 20:33 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2015-04-04 20:33 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-04-04 20:33 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-04-04 20:33 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2015-04-04 20:33 - 2014-12-06 05:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-04-04 20:33 - 2014-12-06 03:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-04-04 20:33 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-04-04 20:33 - 2014-10-31 00:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-04-04 20:33 - 2014-10-29 03:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-04-04 20:33 - 2014-10-29 03:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2015-04-04 20:33 - 2014-10-29 03:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-04-04 20:33 - 2014-10-29 02:59 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
2015-04-04 20:33 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-04-04 20:33 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-04-04 20:33 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-04-04 20:33 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2015-04-04 20:33 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2015-04-04 20:26 - 2014-11-10 01:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-04 20:26 - 2014-11-10 01:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-04 20:26 - 2014-09-10 08:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-04-04 20:26 - 2014-09-08 05:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-04-04 20:26 - 2014-09-08 05:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-04-04 20:26 - 2014-09-04 05:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-04-04 20:26 - 2014-09-04 04:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-04-04 20:26 - 2014-09-04 02:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2015-04-04 20:26 - 2014-08-31 02:17 - 00148800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-04-04 20:26 - 2014-08-31 00:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2015-04-04 20:26 - 2014-08-30 23:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2015-04-04 20:26 - 2014-08-30 23:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-04-04 20:26 - 2014-08-30 22:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2015-04-04 20:26 - 2014-08-30 22:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-04-04 20:26 - 2014-08-28 02:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-04-04 20:26 - 2014-08-28 02:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-04-04 20:26 - 2014-08-23 07:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-04-04 20:26 - 2014-08-23 07:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-04-04 20:26 - 2014-08-23 06:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-04-04 20:26 - 2014-08-02 02:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-04-04 20:26 - 2014-08-02 02:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-04-04 20:23 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-04-04 20:23 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-04-04 20:23 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-04-04 20:23 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-04-04 20:23 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-04-04 20:23 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-04-04 20:23 - 2014-12-08 21:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2015-04-04 20:23 - 2014-12-08 21:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-04-04 20:23 - 2014-12-06 03:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-04-04 20:23 - 2014-10-29 06:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2015-04-04 20:23 - 2014-10-29 06:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2015-04-04 20:23 - 2014-10-29 05:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-04-04 20:23 - 2014-10-29 05:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-04-04 20:23 - 2014-10-29 05:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-04-04 20:23 - 2014-10-29 05:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-04-04 20:23 - 2014-10-29 05:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-04-04 20:23 - 2014-10-29 05:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-04-04 20:23 - 2014-10-29 04:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-04-04 20:23 - 2014-10-29 03:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-04-04 20:23 - 2014-10-29 03:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-04-04 19:36 - 2015-04-04 19:36 - 00002235 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-04 19:36 - 2015-04-04 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-04 19:34 - 2015-04-16 01:04 - 00009072 _____ () C:\Windows\SysWOW64\29xyOff.ini
2015-04-04 19:34 - 2015-04-16 01:04 - 00009072 _____ () C:\Windows\system32\29xyOff.ini
2015-04-04 19:34 - 2015-04-16 00:23 - 00000000 ____D () C:\Program Files (x86)\System-Checker
2015-04-04 19:34 - 2015-04-01 12:35 - 00416552 _____ (scsp) C:\Windows\system32\scxy64.dll
2015-04-04 19:34 - 2015-04-01 12:35 - 00349872 _____ (scsp) C:\Windows\SysWOW64\scxy.dll
2015-04-04 19:34 - 2015-04-01 12:34 - 00046496 _____ () C:\Windows\system32\Drivers\scjrtr.sys
2015-04-04 19:34 - 2015-04-01 12:34 - 00035744 _____ () C:\Windows\system32\Drivers\scjrtf.sys
2015-04-04 19:33 - 2015-04-16 19:38 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-04 19:33 - 2015-04-16 19:38 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-04 19:33 - 2015-04-04 19:33 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-04-04 19:33 - 2015-04-04 19:33 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-04-04 19:32 - 2015-04-04 19:33 - 00000000 ____D () C:\Users\user\AppData\Local\Deployment
2015-04-04 19:32 - 2015-04-04 19:32 - 00000000 ____D () C:\Users\user\AppData\Local\Apps\2.0
2015-04-04 19:21 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2015-04-04 19:21 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2015-04-04 19:20 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-04-04 19:20 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2015-04-04 19:20 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-04-04 19:18 - 2015-04-04 19:18 - 00000000 ____D () C:\ProgramData\e69bfb600002cd1
2015-04-04 19:12 - 2015-04-04 19:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WildTangent
2015-04-04 19:01 - 2015-04-14 21:38 - 00000000 ___RD () C:\Users\user\Desktop\Games
2015-04-04 18:55 - 2015-04-04 18:55 - 00000000 ____D () C:\Users\user\AppData\Local\Steam
2015-04-04 18:51 - 2015-04-16 14:47 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-04 18:51 - 2015-04-04 18:51 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-04-04 18:51 - 2015-04-04 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-04-04 18:50 - 2015-04-04 18:50 - 01142128 _____ () C:\Users\user\Downloads\SteamSetup.exe
2015-04-04 18:38 - 2015-04-16 00:09 - 00000000 ____D () C:\ProgramData\dZmUpbFe
2015-04-04 18:38 - 2015-04-10 08:16 - 00000000 ____D () C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}
2015-04-04 18:36 - 2015-04-04 18:36 - 00000000 ____D () C:\ProgramData\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5}
2015-04-04 18:34 - 2015-04-04 18:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-04-04 18:32 - 2015-04-08 00:53 - 00000000 ___HD () C:\Users\Public\Temp
2015-04-04 18:30 - 2015-04-04 19:36 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2015-04-04 18:30 - 2015-04-04 19:36 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-04 18:30 - 2015-04-04 18:31 - 00008552 _____ () C:\claraInstaller.txt
2015-04-04 18:30 - 2015-04-04 18:30 - 00003546 _____ () C:\Windows\System32\Tasks\VZZXGN
2015-04-04 18:30 - 2015-04-04 18:30 - 00002962 _____ () C:\Windows\System32\Tasks\FUB
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () C:\ProgramData\7b2a98c5c3a9485689cfb0f9c7e387ba
2015-04-04 18:29 - 2015-04-13 21:42 - 00000000 ____D () C:\Users\user\AppData\Local\CrashDumps
2015-04-04 18:28 - 2015-04-04 18:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Macromedia
2015-04-04 18:28 - 2015-04-04 18:28 - 00000000 ____D () C:\Users\user\AppData\Local\Acer Aspire R7 Tutorial
2015-04-04 14:04 - 2015-04-16 14:50 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4B77C285-2957-41B2-AC16-E035149999DF}
2015-04-04 14:04 - 2015-04-04 14:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieUserList
2015-04-04 14:04 - 2015-04-04 14:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieSiteList
2015-04-04 13:50 - 2015-04-04 13:50 - 00000000 ___HD () C:\$SysReset
2015-04-04 10:06 - 2015-04-16 20:29 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-04 10:04 - 2015-04-04 10:04 - 00000000 ____D () C:\Users\Public\Pokki
2015-04-04 10:01 - 2015-04-04 18:49 - 00000000 ____D () C:\Users\user\AppData\Local\clear.fi
2015-04-04 10:01 - 2015-04-04 10:01 - 00001280 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\PicStream
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\AppData\Roaming\Atheros
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\AppData\Local\AOP SDK
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2015-04-04 10:00 - 2015-04-05 20:44 - 00000000 ____D () C:\Users\user\AppData\Local\Packages
2015-04-04 10:00 - 2015-04-04 19:08 - 00001458 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-04 10:00 - 2015-04-04 10:00 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-04-04 10:00 - 2015-04-04 10:00 - 00000020 ___SH () C:\Users\user\ntuser.ini
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Vorlagen
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Startmenü
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Netzwerkumgebung
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Lokale Einstellungen
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Eigene Dateien
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Druckumgebung
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Musik
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Bilder
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Verlauf
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Anwendungsdaten
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Anwendungsdaten
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Windows\oem
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Roaming\Adobe
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Local\OEM
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Program Files\Accessory Store
2015-04-04 09:59 - 2014-07-25 23:18 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-04 09:59 - 2014-03-18 12:33 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-04 09:59 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-04 09:59 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-04 09:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-04 09:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-16 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-04-16 19:34 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-16 19:33 - 2013-08-22 13:22 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2015-04-16 19:33 - 2013-08-22 13:22 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2015-04-16 19:33 - 2013-08-22 13:17 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2015-04-16 19:33 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2015-04-16 19:33 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2015-04-16 19:33 - 2013-08-22 06:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2015-04-16 19:33 - 2013-08-22 06:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2015-04-16 19:33 - 2013-08-22 05:59 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2015-04-16 19:33 - 2013-08-22 05:56 - 00377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2015-04-16 19:33 - 2013-08-22 05:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2015-04-16 19:33 - 2013-08-22 05:51 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2015-04-16 19:33 - 2013-08-22 05:51 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2015-04-16 19:33 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2015-04-16 19:33 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2015-04-16 19:28 - 2014-07-25 23:24 - 00276123 _____ () C:\Windows\DirectX.log
2015-04-16 19:12 - 2014-08-30 14:27 - 01883811 _____ () C:\Windows\WindowsUpdate.log
2015-04-16 17:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-04-16 01:01 - 2013-08-22 16:46 - 00024306 _____ () C:\Windows\setupact.log
2015-04-16 00:24 - 2014-03-18 11:54 - 00066230 _____ () C:\Windows\PFRO.log
2015-04-16 00:24 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-16 00:16 - 2014-08-30 22:48 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-04-16 00:16 - 2014-08-30 22:48 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-04-16 00:16 - 2014-03-18 12:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-16 00:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 00:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\schemas
2015-04-16 00:09 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-04-16 00:08 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-04-14 21:37 - 2013-08-22 16:44 - 00381472 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-14 21:25 - 2014-07-25 23:21 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-13 20:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2015-04-06 23:15 - 2014-07-25 23:22 - 00000000 ____D () C:\ProgramData\CyberLink
2015-04-06 23:14 - 2014-08-30 13:59 - 00000000 ____D () C:\Users\Public\CyberLink
2015-04-05 20:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-05 17:13 - 2014-03-18 11:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup
2015-04-05 17:13 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2015-04-05 09:01 - 2014-07-25 23:28 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-04-05 07:31 - 2014-07-25 23:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-04-05 07:30 - 2014-07-25 23:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-04-05 06:53 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-04-04 23:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-04 23:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2015-04-04 19:12 - 2014-07-25 23:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-04-04 19:12 - 2014-07-25 23:23 - 00000000 ____D () C:\ProgramData\WildTangent
2015-04-04 18:52 - 2014-07-25 23:26 - 00000000 ____D () C:\Program Files\Acer
2015-04-04 18:52 - 2014-07-25 23:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-04-04 18:52 - 2014-07-25 23:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-04-04 18:48 - 2014-07-25 23:57 - 00000000 ___HD () C:\OEM
2015-04-04 18:48 - 2014-07-25 23:21 - 00000000 ____D () C:\ProgramData\OEM
2015-04-04 18:48 - 2014-07-25 23:20 - 00000000 ____D () C:\ProgramData\acer
2015-04-04 18:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2015-04-04 10:00 - 2014-07-25 23:58 - 00000000 ____D () C:\Windows\Panther
2015-04-04 09:59 - 2014-07-25 23:00 - 00000000 ____D () C:\Users\Administrator

==================== Files in the root of some directories =======

2014-08-30 13:44 - 2014-08-30 13:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\AcerDocsSetup.exe
C:\Users\user\AppData\Local\Temp\BackupSetup.exe
C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.dll
C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.exe
C:\Users\user\AppData\Local\Temp\CB0DF04A-6CF5-5E3A-B99C-9AD7C1226D27.exe
C:\Users\user\AppData\Local\Temp\FoxitUpdater.exe
C:\Users\user\AppData\Local\Temp\optprosetup.exe
C:\Users\user\AppData\Local\Temp\Quarantine.exe
C:\Users\user\AppData\Local\Temp\sqlite3.dll
C:\Users\user\AppData\Local\Temp\supoptsetup.exe
C:\Users\user\AppData\Local\Temp\_is6D2D.exe
C:\Users\user\AppData\Local\Temp\_isEF6B.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-15 23:52

==================== End Of Log ============================
         

--- --- ---

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

CloseProcesses:
R1 scjrtf; C:\Windows\system32\Drivers\scjrtf.sys [35744 2015-04-01] () [File not signed]
R1 scjrtr; C:\Windows\system32\Drivers\scjrtr.sys [46496 2015-04-01] () [File not signed]
C:\Windows\system32\Drivers\scjrtf.sys
C:\Windows\system32\Drivers\scjrtr.sys
R2 scxy; C:\Program Files (x86)\System-Checker\Files\scxy.exe [1936280 2015-04-01] (scsp)
R2 syschkrm; C:\Program Files (x86)\System-Checker\syschkrm.exe [110080 2015-04-01] () [File not signed]
R2 syschkrs; C:\Program Files (x86)\System-Checker\syschkrs.exe [186880 2015-04-01] () [File not signed]
C:\Program Files (x86)\System-Checker
C:\ProgramData\dZmUpbFe

C:\ProgramData\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5}

C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}

C:\Users\user\AppData\Local\Temp\64EC.tmp

C:\Users\user\AppData\Local\Temp\BackupSetup.exe

C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.exe

C:\Users\user\AppData\Local\Temp\CB0DF04A-6CF5-5E3A-B99C-9AD7C1226D27.exe

C:\Users\user\AppData\Local\Temp\FB76.tmp

C:\Users\user\AppData\Local\Temp\optprosetup.exe

C:\Users\user\AppData\Local\Temp\supoptsetup.exe

C:\Users\user\AppData\Local\Temp\143cb4f4-0383-4446-9dd1-a66f7ea8a1bd\5555-1007_checkmeup.exe

C:\Users\user\AppData\Local\Temp\17255684-8aba-46be-a970-485276686b2d\cloud_backup_setup.exe

C:\Users\user\AppData\Local\Temp\210f275c-4282-40cb-9b54-f0883c495bd0\wie_2.19.2.6.exe

C:\Users\user\AppData\Local\Temp\DMR\dmr_72.exe

C:\Users\user\AppData\Local\Temp\is-APAPQ.tmp\OptProMon.dll

C:\Users\user\AppData\Local\Temp\is-EN9RQ.tmp\superpc_soft_partner.exe

C:\Users\user\AppData\Local\Temp\is-MEGC6.tmp\browsergood_soft_partner.exe

C:\Users\user\AppData\Local\Temp\is-NS4SG.tmp\pm-standalone-setup.exe

C:\Users\user\Downloads\VLC media player 64 Bit - CHIP-Installer.exe

C:\Users\user\Downloads\Windows Media Player - CHIP-Installer.exe
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe (PC Utilities Software Limited)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Winsock: Catalog9 01 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 02 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 03 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 04 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 16 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9-x64 01 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 02 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 03 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 04 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 16 C:\Windows\system32\scxy64.dll [416552] (scsp)
cmd: netsh winsock reset
C:\Windows\SysWOW64\scxy.dll
C:\Windows\system32\scxy64.dll
RemoveProxy:
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Frisches FRST log bitte.

Hier sind die beiden txt. Dateien

Fixlog.txt:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-04-2015 04
Ran by user at 2015-04-17 16:13:25 Run:1
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available profiles: UpdatusUser & user)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CloseProcesses:
R1 scjrtf; C:\Windows\system32\DRIVERS\scjrtf.sys [35744 2015-04-01] () [File not signed]
R1 scjrtr; C:\Windows\system32\DRIVERS\scjrtr.sys [46496 2015-04-01] () [File not signed]
C:\Windows\system32\DRIVERS\scjrtf.sys
C:\Windows\system32\Drivers\scjrtr.sys
R2 scxy; C:\Program Files (x86)\System-Checker\Files\scxy.exe [1936280 2015-04-01] (scsp)
R2 syschkrm; C:\Program Files (x86)\System-Checker\syschkrm.exe [110080 2015-04-01] () [File not signed]
R2 syschkrs; C:\Program Files (x86)\System-Checker\syschkrs.exe [186880 2015-04-01] () [File not signed]
C:\Program Files (x86)\System-Checker
C:\ProgramData\dZmUpbFe

C:\ProgramData\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5}

C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}

C:\Users\user\AppData\Local\Temp\64EC.tmp

C:\Users\user\AppData\Local\Temp\BackupSetup.exe

C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.exe

C:\Users\user\AppData\Local\Temp\CB0DF04A-6CF5-5E3A-B99C-9AD7C1226D27.exe

C:\Users\user\AppData\Local\Temp\FB76.tmp

C:\Users\user\AppData\Local\Temp\optprosetup.exe

C:\Users\user\AppData\Local\Temp\supoptsetup.exe

C:\Users\user\AppData\Local\Temp\143cb4f4-0383-4446-9dd1-a66f7ea8a1bd\5555-1007_checkmeup.exe

C:\Users\user\AppData\Local\Temp\17255684-8aba-46be-a970-485276686b2d\cloud_backup_setup.exe

C:\Users\user\AppData\Local\Temp\210f275c-4282-40cb-9b54-f0883c495bd0\wie_2.19.2.6.exe

C:\Users\user\AppData\Local\Temp\DMR\dmr_72.exe

C:\Users\user\AppData\Local\Temp\is-APAPQ.tmp\OptProMon.dll

C:\Users\user\AppData\Local\Temp\is-EN9RQ.tmp\superpc_soft_partner.exe

C:\Users\user\AppData\Local\Temp\is-MEGC6.tmp\browsergood_soft_partner.exe

C:\Users\user\AppData\Local\Temp\is-NS4SG.tmp\pm-standalone-setup.exe

C:\Users\user\DOWNLOADS\VLC media player 64 Bit - CHIP-Installer.exe

C:\Users\user\Downloads\Windows Media Player - CHIP-Installer.exe
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe (PC Utilities SOFTWARE Limited)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Winsock: Catalog9 01 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 02 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 03 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 04 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 16 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9-x64 01 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 02 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 03 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 04 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 16 C:\Windows\system32\scxy64.dll [416552] (scsp)
cmd: netsh winsock reset
C:\Windows\SysWOW64\scxy.dll
C:\Windows\system32\scxy64.dll
RemoveProxy:
Emptytemp:
*****************

Processes closed successfully.
scjrtf => Unable to stop service
scjrtf => Error deleting Service
scjrtr => Unable to stop service
scjrtr => Error deleting Service
Could not move "C:\Windows\system32\DRIVERS\scjrtf.sys" => Scheduled to move on reboot.
Could not move "C:\Windows\system32\Drivers\scjrtr.sys" => Scheduled to move on reboot.
scxy => Unable to stop service
scxy => Error deleting Service
syschkrm => Unable to stop service
syschkrm => Error deleting Service
syschkrs => Unable to stop service
syschkrs => Error deleting Service

"C:\Program Files (x86)\System-Checker" directory move:

Could not move "C:\Program Files (x86)\System-Checker" directory. => Scheduled to move on reboot.

C:\ProgramData\dZmUpbFe => Moved successfully.
C:\ProgramData\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5} => Moved successfully.
C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c} => Moved successfully.
C:\Users\user\AppData\Local\Temp\64EC.tmp => Moved successfully.
C:\Users\user\AppData\Local\Temp\BackupSetup.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\C9FF1539-7A11-E4DB-11BE-001EAC812386.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\CB0DF04A-6CF5-5E3A-B99C-9AD7C1226D27.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\FB76.tmp => Moved successfully.
C:\Users\user\AppData\Local\Temp\optprosetup.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\supoptsetup.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\143cb4f4-0383-4446-9dd1-a66f7ea8a1bd\5555-1007_checkmeup.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\17255684-8aba-46be-a970-485276686b2d\cloud_backup_setup.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\210f275c-4282-40cb-9b54-f0883c495bd0\wie_2.19.2.6.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\DMR\dmr_72.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\is-APAPQ.tmp\OptProMon.dll => Moved successfully.
C:\Users\user\AppData\Local\Temp\is-EN9RQ.tmp\superpc_soft_partner.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\is-MEGC6.tmp\browsergood_soft_partner.exe => Moved successfully.
C:\Users\user\AppData\Local\Temp\is-NS4SG.tmp\pm-standalone-setup.exe => Moved successfully.
C:\Users\user\DOWNLOADS\VLC media player 64 Bit - CHIP-Installer.exe => Moved successfully.
C:\Users\user\Downloads\Windows Media Player - CHIP-Installer.exe => Moved successfully.
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk => Moved successfully.
C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}\hqghumeaylnlf.exe not found.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
Winsock: Catalog entry 000000000001 => Could not be deleted.
Winsock: Catalog entry 000000000002 => Could not be deleted.
Winsock: Catalog entry 000000000003 => Could not be deleted.
Winsock: Catalog entry 000000000004 => Could not be deleted.
Winsock: Catalog entry 000000000016 => Could not be deleted.
Winsock: Catalog entry 000000000001 => Could not be deleted.
Winsock: Catalog entry 000000000002 => Could not be deleted.
Winsock: Catalog entry 000000000003 => Could not be deleted.
Winsock: Catalog entry 000000000004 => Could not be deleted.
Winsock: Catalog entry 000000000016 => Could not be deleted.

=========  netsh winsock reset =========

Zugriff verweigert



========= End of CMD: =========

Could not move "C:\Windows\SysWOW64\scxy.dll" => Scheduled to move on reboot.
Could not move "C:\Windows\system32\scxy64.dll" => Scheduled to move on reboot.

========= RemoveProxy: =========

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value deleted successfully.
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value deleted successfully.


========= End of RemoveProxy: =========

EmptyTemp: => Removed 717.4 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-17 16:15:55)<=

"C:\Windows\system32\DRIVERS\scjrtf.sys" => File could not move.
"C:\Windows\system32\Drivers\scjrtr.sys" => File could not move.
C:\Program Files (x86)\System-Checker => Is moved successfully.
"C:\Windows\SysWOW64\scxy.dll" => File could not move.
"C:\Windows\system32\scxy64.dll" => File could not move.

==== End of Fixlog 16:15:57 ====
         

FRST.txt:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04
Ran by user (administrator) on ACER on 17-04-2015 16:25:04
Running from C:\Users\user\Desktop
Loaded Profiles: UpdatusUser & user (Available profiles: UpdatusUser & user)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.3.336.0\McCSPServiceHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\steamerrorreporter.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe [643064 2014-09-17] (McAfee, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2489847289-3309440512-3948852859-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-2489847289-3309440512-3948852859-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"
HKU\S-1-5-21-2489847289-3309440512-3948852859-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\MountPoints2: {26f63c3c-e3be-11e4-8266-f8a963e75cde} - "E:\LaunchU3.exe" -a
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\...\MountPoints2: {35660590-303f-11e4-825c-806e6f6e6963} - "D:\AutoRun.exe" 

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2489847289-3309440512-3948852859-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2489847289-3309440512-3948852859-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-2489847289-3309440512-3948852859-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-04-06] (Microsoft Corporation)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-04-06] (Microsoft Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-04-06] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\x64\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\siteadvisor\McIEPlg.dll [2015-01-28] (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-01-13] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-01-13] (McAfee, Inc.)
Winsock: Catalog9 01 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 02 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 03 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 04 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9 16 C:\Windows\SysWOW64\scxy.dll [349872] (scsp)
Winsock: Catalog9-x64 01 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 02 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 03 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 04 C:\Windows\system32\scxy64.dll [416552] (scsp)
Winsock: Catalog9-x64 16 C:\Windows\system32\scxy64.dll [416552] (scsp)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-01-13] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-04-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-04] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-04] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-07-25]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-07-25]

Chrome: 
=======
CHR StartupUrls: Default -> "https://www.google.de/"
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-04]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-04]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-04]
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-04]
CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-04]
CHR Extension: (gihkgljdimgfffabkemicpaeljmoobil) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gihkgljdimgfffabkemicpaeljmoobil [2015-04-09]
CHR Extension: (Bookmark Manager) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-17]
CHR Extension: (gomekmidlodglbbmalcneegieacbdmki) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-09]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-04]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-04]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-04-04]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-04-04]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [3053312 2014-06-27] (Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [155368 2015-02-19] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-01-13] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-30] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.336.0\McCSPServiceHost.exe [422632 2014-11-21] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-01-07] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S2 scxy; C:\Program Files (x86)\System-Checker\Files\scxy.exe [X]
S2 syschkrm; C:\Program Files (x86)\System-Checker\syschkrm.exe [X]
S2 syschkrs; C:\Program Files (x86)\System-Checker\syschkrs.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
R1 scjrtf; C:\Windows\system32\Drivers\scjrtf.sys [35744 2015-04-01] () [File not signed]
R1 scjrtr; C:\Windows\system32\Drivers\scjrtr.sys [46496 2015-04-01] () [File not signed]
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-17 16:23 - 2015-04-17 16:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-04-17 06:40 - 2015-04-17 06:40 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-04-16 20:34 - 2015-04-16 20:34 - 00000737 _____ () C:\Users\user\Desktop\checkup.txt
2015-04-16 20:33 - 2015-04-16 20:33 - 00852616 _____ () C:\Users\user\Desktop\SecurityCheck.exe
2015-04-16 19:33 - 2015-04-16 19:33 - 00000000 ____D () C:\ProgramData\Age of Empires 3
2015-04-16 19:31 - 2015-04-16 19:31 - 00000000 ____D () C:\Users\user\Documents\Benutzerdefinierte Office-Vorlagen
2015-04-16 01:06 - 2015-04-16 01:06 - 00000588 _____ () C:\Users\user\Desktop\JRT.txt
2015-04-16 00:41 - 2015-04-16 00:41 - 00000000 ____D () C:\Users\user\Desktop\FRST-OlderVersion
2015-04-16 00:35 - 2015-04-16 00:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACER-Windows-8.1-(64-bit).dat
2015-04-16 00:35 - 2015-04-16 00:35 - 00000000 ____D () C:\RegBackup
2015-04-16 00:33 - 2015-04-16 00:33 - 02686088 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2015-04-16 00:30 - 2015-04-16 00:23 - 00010019 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2015-04-16 00:20 - 2015-04-16 00:23 - 00000000 ____D () C:\AdwCleaner
2015-04-16 00:19 - 2015-04-16 00:19 - 02217984 _____ () C:\Users\user\Desktop\AdwCleaner_4.201.exe
2015-04-16 00:14 - 2015-04-16 00:18 - 00040250 _____ () C:\Users\user\Desktop\mbam.txt
2015-04-15 23:39 - 2015-04-16 00:15 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-15 23:39 - 2015-04-15 23:39 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-15 23:39 - 2015-04-15 23:39 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-15 23:39 - 2015-04-15 23:39 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-15 23:39 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-04-15 23:39 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-04-15 23:39 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-04-15 23:37 - 2015-04-15 23:37 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-15 23:30 - 2015-04-15 23:30 - 00000707 _____ () C:\Users\user\Desktop\Revo Uninstaller.lnk
2015-04-15 23:29 - 2015-04-15 23:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\user\Desktop\revosetup95.exe
2015-04-15 22:16 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 22:16 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 22:16 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-04-15 22:16 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 22:16 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-15 22:16 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2015-04-15 22:16 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-04-15 22:16 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-04-15 22:16 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-04-15 22:16 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-15 22:16 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-04-15 22:16 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-15 22:16 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-04-15 22:16 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-15 22:16 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 22:16 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 22:16 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 22:16 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-04-15 22:16 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 22:16 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 22:16 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 22:16 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 22:16 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 22:16 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-04-15 22:16 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-15 22:16 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 22:16 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 22:16 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 22:16 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-04-15 22:16 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-15 22:16 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 22:16 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 22:16 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 22:16 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-15 22:16 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 22:16 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 22:16 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 22:16 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 22:16 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 22:16 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 22:16 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll
2015-04-15 22:16 - 2014-10-29 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll
2015-04-15 22:16 - 2014-10-29 04:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-04-15 22:16 - 2014-10-29 04:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-04-15 22:16 - 2014-10-29 03:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-15 22:16 - 2014-10-29 03:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-15 22:16 - 2014-10-29 03:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-04-15 22:16 - 2014-10-29 03:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-04-15 22:16 - 2014-10-29 03:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-15 22:16 - 2014-10-29 03:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-15 22:15 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 22:10 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 22:10 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 22:10 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 22:10 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 22:10 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 22:10 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 22:10 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 22:10 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 22:10 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 22:10 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2015-04-15 22:10 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-04-15 22:10 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 22:10 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 22:10 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 22:10 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 22:10 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 22:10 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 22:10 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 22:10 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2015-04-15 22:10 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 22:10 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 22:10 - 2014-10-18 08:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2015-04-15 22:09 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 22:09 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 14:36 - 2015-04-14 14:38 - 00031053 _____ () C:\Users\user\Desktop\Addition.txt
2015-04-14 14:34 - 2015-04-17 16:25 - 00020369 _____ () C:\Users\user\Desktop\FRST.txt
2015-04-14 14:34 - 2015-04-17 16:25 - 00000000 ____D () C:\FRST
2015-04-14 14:33 - 2015-04-16 00:41 - 02097664 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2015-04-13 20:05 - 2015-04-13 20:05 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf32.dll
2015-04-13 20:05 - 2015-04-13 20:05 - 00002272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf16.dll
2015-04-13 20:05 - 2015-04-13 20:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Media
2015-04-13 20:05 - 1998-09-02 10:28 - 01088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\danim.dll
2015-04-13 20:05 - 1998-09-02 10:28 - 00155408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRT.dll
2015-04-13 20:05 - 1998-09-02 10:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unam4ie.exe
2015-04-13 20:05 - 1998-09-02 10:28 - 00038160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRTREND.dll
2015-04-13 20:05 - 1998-09-02 10:02 - 00194320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcut.dll
2015-04-13 20:05 - 1998-08-27 06:51 - 00182032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft3.dll
2015-04-13 20:05 - 1998-08-20 13:02 - 00140800 _____ (The Duck Corporation) C:\Windows\SysWOW64\tm20dec.ax
2015-04-13 20:05 - 1998-08-20 12:38 - 00217984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\strmdll.dll
2015-04-13 20:05 - 1998-08-17 11:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz.drv
2015-04-13 20:05 - 1998-08-17 11:21 - 00010240 _____ () C:\Windows\SysWOW64\vidx16.dll
2015-04-13 20:05 - 1998-08-17 11:21 - 00005672 _____ () C:\Windows\SysWOW64\quartz.vxd
2015-04-13 20:04 - 1998-10-21 18:43 - 00328704 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
2015-04-12 22:04 - 2015-04-12 22:04 - 00003148 _____ () C:\Windows\System32\Tasks\{9700D7FA-E5DB-4AB6-B549-9260F5FC3C27}
2015-04-09 13:07 - 2015-04-09 13:07 - 00000000 ____D () C:\Users\user\AppData\Roaming\LolClient
2015-04-07 08:31 - 2015-04-07 08:31 - 00001516 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-04-07 08:31 - 2015-04-07 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:31 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-04-07 08:30 - 2015-04-07 08:30 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-04-07 08:25 - 2015-04-07 08:26 - 36053064 _____ (DVDVideoSoft Ltd. ) C:\Users\user\Downloads\FreeYouTubeToMP3Converter_3.12.57.324.exe
2015-04-06 23:12 - 2015-04-06 23:12 - 00000000 ____D () C:\Users\user\AppData\Local\MediaShow
2015-04-06 11:18 - 2015-04-06 12:08 - 02345800 _____ () C:\Users\user\Documents\ABI seite Lutz.pptx
2015-04-06 11:18 - 2015-04-06 11:18 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieBrowserModeList
2015-04-06 11:17 - 2015-04-06 11:17 - 05706441 _____ () C:\Users\user\Documents\R.pptx
2015-04-06 11:17 - 2015-04-06 11:17 - 05706441 _____ () C:\Users\user\Documents\ABIseite Ruben.pptx
2015-04-05 22:16 - 2015-04-06 23:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2015-04-05 22:16 - 2015-04-05 22:16 - 00000891 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-05 22:16 - 2015-04-05 22:16 - 00000000 ____D () C:\Users\user\AppData\Roaming\dvdcss
2015-04-05 22:16 - 2015-04-05 22:16 - 00000000 ____D () C:\Program Files\VideoLAN
2015-04-05 22:08 - 2015-04-05 22:09 - 00000686 _____ () C:\Windows\wmsetup.log
2015-04-05 21:55 - 2015-04-06 11:16 - 05706438 _____ () C:\Users\user\Documents\powerpoints.pptx
2015-04-05 17:57 - 2015-04-06 19:08 - 00003086 _____ () C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-05 17:57 - 2015-04-06 19:08 - 00000000 ___RD () C:\Users\user\OneDrive
2015-04-05 17:57 - 2015-04-05 17:57 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-04-05 17:54 - 2015-04-06 23:11 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-04-05 17:54 - 2015-04-05 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-05 17:53 - 2015-04-05 17:53 - 01078976 _____ (Microsoft Corporation) C:\Users\user\Downloads\Setup.X86.de-DE_HomeBusinessRetail_af6fbc01-34c4-49c8-a29d-f1b824319f99_TX_DB_.exe
2015-04-05 13:51 - 2014-07-24 17:28 - 00412992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2015-04-05 13:51 - 2014-07-24 17:28 - 00143680 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-04-05 13:51 - 2014-07-24 17:23 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-04-05 13:51 - 2014-07-24 17:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2015-04-05 13:51 - 2014-07-24 17:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-04-05 13:51 - 2014-07-24 17:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-04-05 13:51 - 2014-07-24 17:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-04-05 13:51 - 2014-07-24 17:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-04-05 13:51 - 2014-07-24 17:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-04-05 13:51 - 2014-07-24 17:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2015-04-05 13:51 - 2014-07-24 17:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2015-04-05 13:51 - 2014-07-24 15:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2015-04-05 13:51 - 2014-07-24 15:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2015-04-05 13:51 - 2014-07-24 15:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2015-04-05 13:51 - 2014-07-24 13:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2015-04-05 13:51 - 2014-07-24 13:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2015-04-05 13:51 - 2014-07-24 13:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2015-04-05 13:51 - 2014-07-24 13:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2015-04-05 13:51 - 2014-07-24 13:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-04-05 13:51 - 2014-07-24 12:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-04-05 13:51 - 2014-07-24 12:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-04-05 13:51 - 2014-07-24 11:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2015-04-05 13:51 - 2014-07-24 11:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2015-04-05 13:51 - 2014-07-24 11:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2015-04-05 13:51 - 2014-07-24 11:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-04-05 13:51 - 2014-07-24 11:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-04-05 13:51 - 2014-07-24 11:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2015-04-05 13:51 - 2014-07-24 11:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2015-04-05 13:51 - 2014-07-24 10:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2015-04-05 13:51 - 2014-07-24 10:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2015-04-05 13:51 - 2014-07-24 10:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2015-04-05 13:51 - 2014-07-24 10:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2015-04-05 13:51 - 2014-07-24 10:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2015-04-05 13:51 - 2014-07-24 10:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2015-04-05 13:51 - 2014-07-24 10:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-04-05 13:51 - 2014-07-24 10:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2015-04-05 13:51 - 2014-07-24 10:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2015-04-05 13:51 - 2014-07-24 10:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2015-04-05 13:51 - 2014-07-24 10:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-04-05 13:51 - 2014-07-24 10:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-04-05 13:51 - 2014-07-24 10:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2015-04-05 13:51 - 2014-07-24 10:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2015-04-05 13:51 - 2014-07-24 09:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2015-04-05 13:51 - 2014-07-24 09:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2015-04-05 13:51 - 2014-07-24 09:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2015-04-05 13:51 - 2014-07-12 07:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2015-04-05 13:51 - 2014-07-04 11:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2015-04-05 13:51 - 2014-07-04 11:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2015-04-05 13:51 - 2014-06-27 08:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2015-04-05 13:51 - 2014-06-26 02:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2015-04-05 13:51 - 2014-06-19 04:13 - 00310080 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2015-04-05 13:51 - 2014-06-14 08:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-04-05 13:51 - 2014-06-14 07:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-04-05 13:51 - 2014-06-05 12:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2015-04-05 13:51 - 2014-06-05 11:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2015-04-05 13:51 - 2014-05-31 07:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2015-04-05 13:51 - 2014-05-29 08:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2015-04-05 13:51 - 2014-05-29 07:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2015-04-05 13:51 - 2014-05-06 06:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2015-04-05 13:51 - 2014-05-06 02:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-04-05 13:51 - 2014-03-25 04:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2015-04-05 13:50 - 2014-07-24 17:28 - 00419648 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-04-05 13:50 - 2014-07-24 17:28 - 00280384 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2015-04-05 13:50 - 2014-07-24 17:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-04-05 13:50 - 2014-07-24 17:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2015-04-05 13:50 - 2014-07-24 17:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2015-04-05 13:50 - 2014-07-24 17:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-04-05 13:50 - 2014-07-24 15:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-04-05 13:50 - 2014-07-24 15:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2015-04-05 13:50 - 2014-07-24 13:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-04-05 13:50 - 2014-07-24 13:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-04-05 13:50 - 2014-07-24 13:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2015-04-05 13:50 - 2014-07-24 13:45 - 00076800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2015-04-05 13:50 - 2014-07-24 13:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2015-04-05 13:50 - 2014-07-24 13:41 - 00118272 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2015-04-05 13:50 - 2014-07-24 13:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2015-04-05 13:50 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-04-05 13:50 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-04-05 13:50 - 2014-07-24 12:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2015-04-05 13:50 - 2014-07-24 12:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2015-04-05 13:50 - 2014-07-24 12:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2015-04-05 13:50 - 2014-07-24 12:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2015-04-05 13:50 - 2014-07-24 12:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2015-04-05 13:50 - 2014-07-24 12:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-04-05 13:50 - 2014-07-24 12:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2015-04-05 13:50 - 2014-07-24 12:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2015-04-05 13:50 - 2014-07-24 11:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2015-04-05 13:50 - 2014-07-24 11:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2015-04-05 13:50 - 2014-07-24 11:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2015-04-05 13:50 - 2014-07-24 11:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-04-05 13:50 - 2014-07-24 11:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2015-04-05 13:50 - 2014-07-24 11:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2015-04-05 13:50 - 2014-07-24 11:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2015-04-05 13:50 - 2014-07-24 11:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2015-04-05 13:50 - 2014-07-24 11:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2015-04-05 13:50 - 2014-07-24 11:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2015-04-05 13:50 - 2014-07-24 11:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-04-05 13:50 - 2014-07-24 11:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2015-04-05 13:50 - 2014-07-24 11:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2015-04-05 13:50 - 2014-07-24 11:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2015-04-05 13:50 - 2014-07-24 10:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2015-04-05 13:50 - 2014-07-24 10:49 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-04-05 13:50 - 2014-07-24 10:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2015-04-05 13:50 - 2014-07-24 10:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2015-04-05 13:50 - 2014-07-24 10:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2015-04-05 13:50 - 2014-07-24 10:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2015-04-05 13:50 - 2014-07-24 10:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2015-04-05 13:50 - 2014-07-24 10:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2015-04-05 13:50 - 2014-07-24 10:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2015-04-05 13:50 - 2014-07-24 10:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2015-04-05 13:50 - 2014-07-24 10:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2015-04-05 13:50 - 2014-07-24 10:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2015-04-05 13:50 - 2014-07-24 10:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2015-04-05 13:50 - 2014-07-24 10:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2015-04-05 13:50 - 2014-07-24 10:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2015-04-05 13:50 - 2014-07-24 10:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2015-04-05 13:50 - 2014-07-24 10:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2015-04-05 13:50 - 2014-07-24 10:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2015-04-05 13:50 - 2014-07-24 10:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2015-04-05 13:50 - 2014-07-24 09:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2015-04-05 13:50 - 2014-07-24 09:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2015-04-05 13:50 - 2014-07-24 09:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2015-04-05 13:50 - 2014-07-24 09:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-04-05 13:50 - 2014-07-24 09:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-04-05 13:50 - 2014-07-12 06:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2015-04-05 13:50 - 2014-07-04 14:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2015-04-05 13:50 - 2014-07-04 12:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2015-04-05 13:50 - 2014-07-04 12:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2015-04-05 13:50 - 2014-07-04 12:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2015-04-05 13:50 - 2014-07-04 12:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2015-04-05 13:50 - 2014-06-26 02:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2015-04-05 13:50 - 2014-06-20 01:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-04-05 13:50 - 2014-06-07 14:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2015-04-05 13:50 - 2014-06-07 12:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2015-04-05 13:50 - 2014-05-31 06:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2015-04-05 13:50 - 2014-05-26 09:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2015-04-05 13:50 - 2014-05-10 12:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-04-05 13:50 - 2014-05-10 10:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-04-05 13:50 - 2014-03-25 04:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2015-04-05 13:50 - 2014-03-25 03:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2015-04-05 13:50 - 2014-03-25 03:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2015-04-05 09:48 - 2015-04-05 09:48 - 00000000 ____D () C:\ProgramData\Riot Games
2015-04-05 09:38 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-04-05 09:38 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-04-05 09:38 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-04-05 09:37 - 2015-04-05 09:38 - 00000000 ____D () C:\Users\user\AppData\Roaming\Riot Games
2015-04-05 09:32 - 2015-04-05 09:33 - 30668968 _____ (Riot Games) C:\Users\user\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe
2015-04-05 08:59 - 2015-04-16 00:07 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-05 08:59 - 2015-04-16 00:07 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-05 08:59 - 2015-04-05 09:01 - 00000000 ___SD () C:\Windows\system32\GWX
2015-04-05 08:59 - 2015-04-05 08:59 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-05 08:39 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-04-05 08:32 - 2015-04-16 19:33 - 00000000 ____D () C:\Users\user\Documents\My Games
2015-04-05 07:31 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\system32\Drivers\HipShieldK.sys
2015-04-04 23:42 - 2015-04-04 23:42 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-04-04 23:40 - 2015-04-14 01:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-04 23:40 - 2015-04-14 01:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-04 23:33 - 2015-04-16 00:06 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-04 23:33 - 2015-04-15 23:59 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-04 22:43 - 2015-04-04 22:43 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-04-04 22:43 - 2015-04-04 22:43 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-04-04 22:43 - 2015-04-04 22:43 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-04 22:42 - 2015-04-04 23:41 - 00000000 ____D () C:\ProgramData\Adobe
2015-04-04 22:38 - 2015-04-04 22:44 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2015-04-04 22:33 - 2015-04-04 22:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\CyberLink
2015-04-04 22:21 - 2015-04-04 22:21 - 00000000 ____D () C:\Users\user\Tracing
2015-04-04 22:19 - 2015-04-04 22:19 - 00000000 ____D () C:\Users\user\AppData\Local\Skype
2015-04-04 22:19 - 2014-08-15 02:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2015-04-04 22:19 - 2014-07-30 03:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2015-04-04 22:19 - 2014-07-29 07:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2015-04-04 22:18 - 2015-04-15 23:27 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00002715 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ____D () C:\ProgramData\Skype
2015-04-04 22:18 - 2015-04-04 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-04-04 22:16 - 2015-04-04 22:16 - 01380960 _____ (Skype Technologies S.A.) C:\Users\user\Downloads\SkypeSetup.exe
2015-04-04 21:19 - 2014-09-27 09:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2015-04-04 21:19 - 2014-09-27 07:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2015-04-04 21:19 - 2014-09-27 05:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-04-04 21:05 - 2015-01-27 06:22 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-04-04 21:05 - 2015-01-27 04:11 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-04-04 21:05 - 2014-10-29 05:56 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-04-04 21:05 - 2014-10-29 04:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2015-04-04 21:05 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2015-04-04 21:05 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-04-04 21:05 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-04-04 21:05 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-04-04 21:05 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-04-04 21:05 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2015-04-04 21:05 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2015-04-04 21:05 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2015-04-04 21:05 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2015-04-04 21:05 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2015-04-04 21:05 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2015-04-04 21:05 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2015-04-04 21:03 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-04 21:03 - 2015-02-21 02:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-04-04 21:03 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-04 21:03 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-04 21:03 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-04 21:03 - 2015-02-20 04:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-04-04 21:03 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-04 21:03 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-04 21:03 - 2015-02-20 03:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-04-04 21:03 - 2015-02-20 03:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-04 21:03 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-04 21:03 - 2015-02-20 03:29 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-04-04 21:03 - 2015-02-20 03:26 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-04-04 21:03 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-04 21:03 - 2015-01-12 04:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-04 21:03 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-04 21:03 - 2015-01-12 03:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-04 21:03 - 2014-12-09 05:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-04-04 21:03 - 2014-12-09 03:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-04-04 21:03 - 2014-11-22 04:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-04 21:03 - 2014-11-22 04:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-04 21:03 - 2014-10-31 07:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-04-04 21:03 - 2014-10-31 07:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-04-04 21:03 - 2014-10-31 07:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-04-04 21:03 - 2014-10-31 07:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-04-04 21:03 - 2014-10-31 07:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-04-04 21:03 - 2014-10-31 07:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-04-04 21:03 - 2014-10-31 07:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-04 21:03 - 2014-10-31 07:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-04 21:03 - 2014-10-31 06:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-04 21:03 - 2014-10-31 06:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-04 21:03 - 2014-10-31 06:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-04-04 21:03 - 2014-10-31 06:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-04 21:03 - 2014-10-31 06:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2015-04-04 21:03 - 2014-10-31 06:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-04 21:03 - 2014-10-31 06:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-04 21:03 - 2014-10-31 06:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-04-04 21:03 - 2014-10-31 06:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-04 21:03 - 2014-10-31 06:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-04-04 21:03 - 2014-10-31 06:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-04-04 21:03 - 2014-10-31 06:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-04-04 21:03 - 2014-10-31 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-04 21:03 - 2014-10-31 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-04-04 21:03 - 2014-10-31 06:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-04-04 21:03 - 2014-10-31 05:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-04-04 21:03 - 2014-10-31 05:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2015-04-04 21:03 - 2014-10-31 05:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-04-04 21:03 - 2014-10-31 05:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2015-04-04 21:03 - 2014-10-31 05:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2015-04-04 21:03 - 2014-10-31 05:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-04-04 21:03 - 2014-10-31 05:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-04-04 21:03 - 2014-10-31 05:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-04 21:03 - 2014-10-31 05:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-04 21:03 - 2014-10-31 05:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-04 21:03 - 2014-10-31 05:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-04 21:03 - 2014-10-31 05:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2015-04-04 21:03 - 2014-10-31 05:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-04 21:03 - 2014-10-31 05:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2015-04-04 21:03 - 2014-10-31 05:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-04 21:03 - 2014-10-31 05:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-04 21:03 - 2014-10-31 05:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2015-04-04 21:03 - 2014-10-31 04:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-04-04 21:03 - 2014-10-31 04:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-04-04 21:03 - 2014-10-31 04:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-04 21:03 - 2014-10-31 04:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-04-04 21:03 - 2014-10-31 04:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-04-04 21:03 - 2014-10-31 04:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-04-04 21:03 - 2014-10-31 04:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2015-04-04 21:03 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-04-04 21:03 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-04-04 21:03 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-04 21:02 - 2015-01-16 00:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-04-04 21:02 - 2015-01-16 00:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-04 21:02 - 2015-01-14 06:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-04-04 21:02 - 2015-01-14 05:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-04-04 21:02 - 2014-10-29 04:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-04 21:02 - 2014-10-29 04:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-04 21:02 - 2014-10-29 04:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-04 21:02 - 2014-10-29 04:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-04 21:02 - 2014-10-29 03:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-04 21:01 - 2015-01-23 09:17 - 00723072 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2015-04-04 21:01 - 2015-01-23 07:02 - 00560392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-04-04 21:01 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2015-04-04 21:01 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-04-04 21:01 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-04-04 21:00 - 2015-02-20 05:03 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-04-04 21:00 - 2015-02-20 04:58 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-04-04 21:00 - 2015-02-20 04:20 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-04-04 21:00 - 2015-02-20 04:15 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-04-04 21:00 - 2015-01-29 03:58 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2015-04-04 21:00 - 2015-01-29 03:29 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
2015-04-04 21:00 - 2014-12-09 03:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-04-04 21:00 - 2014-10-29 04:49 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-04-04 21:00 - 2014-10-29 04:44 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-04-04 21:00 - 2014-10-29 04:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-04-04 21:00 - 2014-10-29 04:04 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-04-04 21:00 - 2014-10-29 04:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-04-04 21:00 - 2014-10-29 04:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-04-04 21:00 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-04-04 20:59 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-04 20:59 - 2014-11-10 04:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2015-04-04 20:59 - 2014-11-10 03:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-04-04 20:58 - 2015-03-06 04:53 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-04 20:58 - 2015-03-06 04:33 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-04 20:58 - 2015-02-26 01:26 - 04178944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-04-04 20:58 - 2015-02-07 01:09 - 00396419 _____ () C:\Windows\system32\ApnDatabase.xml
2015-04-04 20:58 - 2015-02-04 01:58 - 00264000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2015-04-04 20:58 - 2015-02-04 01:58 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2015-04-04 20:58 - 2015-02-04 01:58 - 00044024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2015-04-04 20:58 - 2015-02-03 01:53 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2015-04-04 20:58 - 2015-02-03 01:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2015-04-04 20:58 - 2015-01-31 01:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-04-04 20:58 - 2015-01-31 01:29 - 02484224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-04-04 20:58 - 2015-01-27 05:44 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2015-04-04 20:58 - 2015-01-24 03:51 - 00816128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2015-04-04 20:58 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\SysWOW64\locale.nls
2015-04-04 20:58 - 2014-12-13 23:28 - 00513488 _____ () C:\Windows\system32\locale.nls
2015-04-04 20:58 - 2014-10-29 03:27 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2015-04-04 20:58 - 2014-10-29 03:27 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2015-04-04 20:58 - 2014-10-29 03:04 - 00868352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2015-04-04 20:58 - 2014-10-29 03:04 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2015-04-04 20:58 - 2014-10-13 04:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-04-04 20:58 - 2014-10-11 02:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-04-04 20:58 - 2014-10-11 02:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-04-04 20:58 - 2014-10-08 09:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-04-04 20:58 - 2014-10-08 09:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-04-04 20:58 - 2014-10-08 08:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-04-04 20:58 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-04 20:58 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-04 20:57 - 2014-12-19 10:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-04-04 20:57 - 2014-12-19 10:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-04-04 20:57 - 2014-10-31 01:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-04-04 20:57 - 2014-10-31 01:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-04-04 20:57 - 2014-08-23 08:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2015-04-04 20:57 - 2014-08-23 07:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-04-04 20:57 - 2014-08-23 06:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2015-04-04 20:55 - 2015-02-06 03:28 - 02257408 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-04-04 20:55 - 2015-02-06 03:08 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-04-04 20:55 - 2015-02-05 22:24 - 01113920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-04-04 20:55 - 2015-02-03 02:03 - 03551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2015-04-04 20:55 - 2015-02-03 02:02 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2015-04-04 20:55 - 2015-01-30 05:01 - 00097792 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2015-04-04 20:55 - 2015-01-30 05:00 - 00167424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2015-04-04 20:55 - 2015-01-30 04:03 - 01488896 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2015-04-04 20:55 - 2015-01-30 04:03 - 01464832 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2015-04-04 20:55 - 2015-01-30 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2015-04-04 20:55 - 2015-01-30 03:42 - 01204224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2015-04-04 20:55 - 2015-01-30 03:29 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll
2015-04-04 20:55 - 2015-01-29 03:04 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-04-04 20:55 - 2015-01-29 03:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2015-04-04 20:55 - 2014-12-19 08:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-04-04 20:55 - 2014-12-12 04:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-04-04 20:55 - 2014-12-12 02:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-04-04 20:55 - 2014-10-29 04:46 - 00081920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2015-04-04 20:55 - 2014-10-29 04:46 - 00053248 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2015-04-04 20:55 - 2014-10-29 04:45 - 01198080 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2015-04-04 20:55 - 2014-10-29 04:43 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2015-04-04 20:55 - 2014-10-29 04:34 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-04-04 20:55 - 2014-10-29 04:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2015-04-04 20:55 - 2014-10-29 04:03 - 00241152 ____C (Microsoft Corporation) C:\Windows\system32\fsquirt.exe
2015-04-04 20:55 - 2014-10-29 03:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2015-04-04 20:55 - 2014-10-29 03:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2015-04-04 20:55 - 2014-10-29 03:51 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-04-04 20:55 - 2014-10-29 03:45 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2015-04-04 20:55 - 2014-10-29 03:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2015-04-04 20:55 - 2014-10-29 03:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\atlthunk.dll
2015-04-04 20:55 - 2014-10-29 03:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-04-04 20:55 - 2014-10-29 03:15 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2015-04-04 20:55 - 2014-10-29 02:55 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2015-04-04 20:55 - 2014-10-29 02:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2015-04-04 20:55 - 2014-10-29 02:41 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2015-04-04 20:55 - 2014-10-29 02:35 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2015-04-04 20:55 - 2014-09-04 02:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-04-04 20:55 - 2014-09-04 02:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-04-04 20:55 - 2014-08-02 02:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-04-04 20:55 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2015-04-04 20:55 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2015-04-04 20:55 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2015-04-04 20:55 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2015-04-04 20:55 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2015-04-04 20:55 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2015-04-04 20:55 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-04-04 20:55 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2015-04-04 20:55 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-04-04 20:54 - 2014-08-16 06:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2015-04-04 20:54 - 2014-08-16 05:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-04-04 20:54 - 2014-08-16 05:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2015-04-04 20:54 - 2014-08-16 03:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-04 20:54 - 2014-08-16 03:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2015-04-04 20:54 - 2014-08-16 02:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2015-04-04 20:54 - 2014-08-16 02:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2015-04-04 20:54 - 2014-08-16 02:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2015-04-04 20:54 - 2014-08-16 02:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2015-04-04 20:54 - 2014-08-16 02:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2015-04-04 20:54 - 2014-08-16 02:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2015-04-04 20:54 - 2014-08-16 02:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2015-04-04 20:54 - 2014-08-16 02:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2015-04-04 20:54 - 2014-08-16 02:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2015-04-04 20:54 - 2014-08-16 02:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2015-04-04 20:54 - 2014-08-16 02:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2015-04-04 20:54 - 2014-08-16 02:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2015-04-04 20:54 - 2014-08-16 02:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2015-04-04 20:54 - 2014-08-16 02:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-04-04 20:54 - 2014-08-16 02:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-04-04 20:54 - 2014-08-16 02:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2015-04-04 20:54 - 2014-08-16 02:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-04-04 20:54 - 2014-07-24 17:28 - 00468288 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-04-04 20:54 - 2014-07-24 13:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2015-04-04 20:54 - 2014-07-24 12:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-04-04 20:54 - 2014-07-24 11:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-04-04 20:54 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-04-04 20:54 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-04-04 20:53 - 2015-01-19 20:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2015-04-04 20:53 - 2014-10-23 07:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-04-04 20:53 - 2014-10-23 07:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-04-04 20:53 - 2014-08-23 07:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-04 20:53 - 2014-08-23 07:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-04 20:52 - 2015-01-29 03:11 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 20:52 - 2015-01-29 03:00 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 20:52 - 2015-01-29 02:59 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-04-04 20:52 - 2015-01-29 02:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2015-04-04 20:52 - 2015-01-29 02:50 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-04-04 20:52 - 2015-01-29 02:49 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-04-04 20:52 - 2015-01-28 04:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2015-04-04 20:52 - 2015-01-28 03:47 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2015-04-04 20:52 - 2014-10-29 04:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WSCollect.exe
2015-04-04 20:52 - 2014-10-29 04:34 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2015-04-04 20:52 - 2014-10-29 03:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-04-04 20:52 - 2014-10-29 03:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-04 20:52 - 2014-10-29 03:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-04 20:52 - 2014-10-29 03:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-04 20:52 - 2014-10-29 03:13 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2015-04-04 20:52 - 2014-10-29 03:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-04 20:52 - 2014-10-29 03:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-04 20:52 - 2014-10-29 02:55 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-04-04 20:52 - 2014-10-13 04:43 - 00238912 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00153920 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2015-04-04 20:52 - 2014-10-13 04:43 - 00039744 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2015-04-04 20:52 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2015-04-04 20:52 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2015-04-04 20:52 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2015-04-04 20:52 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-04-04 20:52 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-04-04 20:52 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-04-04 20:33 - 2015-02-12 19:40 - 22291584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-04-04 20:33 - 2015-02-12 19:34 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-04-04 20:33 - 2015-01-31 01:20 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-04-04 20:33 - 2015-01-30 04:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2015-04-04 20:33 - 2015-01-30 03:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2015-04-04 20:33 - 2015-01-30 03:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2015-04-04 20:33 - 2015-01-30 03:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2015-04-04 20:33 - 2015-01-30 03:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2015-04-04 20:33 - 2015-01-30 03:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2015-04-04 20:33 - 2015-01-30 03:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2015-04-04 20:33 - 2015-01-30 03:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2015-04-04 20:33 - 2015-01-29 20:45 - 01763352 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-04-04 20:33 - 2015-01-29 20:34 - 01488040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-04-04 20:33 - 2014-12-11 07:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\system32\LockScreenContentServer.exe
2015-04-04 20:33 - 2014-12-06 05:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2015-04-04 20:33 - 2014-12-06 03:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-04-04 20:33 - 2014-10-31 00:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-04-04 20:33 - 2014-10-31 00:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-04-04 20:33 - 2014-10-29 03:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2015-04-04 20:33 - 2014-10-29 03:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2015-04-04 20:33 - 2014-10-29 03:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-04-04 20:33 - 2014-10-29 02:59 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
2015-04-04 20:33 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2015-04-04 20:33 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-04-04 20:33 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-04-04 20:33 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2015-04-04 20:33 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2015-04-04 20:26 - 2014-11-10 01:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-04 20:26 - 2014-11-10 01:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-04 20:26 - 2014-09-10 08:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-04-04 20:26 - 2014-09-08 05:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-04-04 20:26 - 2014-09-08 05:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-04-04 20:26 - 2014-09-04 05:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2015-04-04 20:26 - 2014-09-04 04:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-04-04 20:26 - 2014-09-04 02:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2015-04-04 20:26 - 2014-08-31 02:17 - 00148800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-04-04 20:26 - 2014-08-31 00:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2015-04-04 20:26 - 2014-08-30 23:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2015-04-04 20:26 - 2014-08-30 23:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2015-04-04 20:26 - 2014-08-30 22:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2015-04-04 20:26 - 2014-08-30 22:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-04-04 20:26 - 2014-08-28 02:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-04-04 20:26 - 2014-08-28 02:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-04-04 20:26 - 2014-08-23 07:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2015-04-04 20:26 - 2014-08-23 07:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-04-04 20:26 - 2014-08-23 06:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-04-04 20:26 - 2014-08-02 02:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2015-04-04 20:26 - 2014-08-02 02:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-04-04 20:23 - 2015-02-08 01:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2015-04-04 20:23 - 2015-02-08 01:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-04-04 20:23 - 2015-01-28 03:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-04-04 20:23 - 2015-01-28 03:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-04-04 20:23 - 2015-01-28 01:47 - 02501368 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-04-04 20:23 - 2015-01-28 01:41 - 02207488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-04-04 20:23 - 2014-12-08 21:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-04-04 20:23 - 2014-12-08 21:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2015-04-04 20:23 - 2014-12-08 21:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-04-04 20:23 - 2014-12-06 03:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2015-04-04 20:23 - 2014-10-29 06:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2015-04-04 20:23 - 2014-10-29 06:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2015-04-04 20:23 - 2014-10-29 05:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-04-04 20:23 - 2014-10-29 05:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-04-04 20:23 - 2014-10-29 05:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-04-04 20:23 - 2014-10-29 05:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-04-04 20:23 - 2014-10-29 05:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-04-04 20:23 - 2014-10-29 05:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-04-04 20:23 - 2014-10-29 05:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-04-04 20:23 - 2014-10-29 04:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2015-04-04 20:23 - 2014-10-29 03:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-04-04 20:23 - 2014-10-29 03:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-04-04 19:36 - 2015-04-16 20:40 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-04 19:36 - 2015-04-04 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-04 19:34 - 2015-04-17 16:13 - 00009072 _____ () C:\Windows\SysWOW64\29xyOff.ini
2015-04-04 19:34 - 2015-04-17 16:13 - 00009072 _____ () C:\Windows\system32\29xyOff.ini
2015-04-04 19:34 - 2015-04-01 12:35 - 00416552 _____ (scsp) C:\Windows\system32\scxy64.dll
2015-04-04 19:34 - 2015-04-01 12:35 - 00349872 _____ (scsp) C:\Windows\SysWOW64\scxy.dll
2015-04-04 19:34 - 2015-04-01 12:34 - 00046496 _____ () C:\Windows\system32\Drivers\scjrtr.sys
2015-04-04 19:34 - 2015-04-01 12:34 - 00035744 _____ () C:\Windows\system32\Drivers\scjrtf.sys
2015-04-04 19:33 - 2015-04-17 16:15 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-04 19:33 - 2015-04-17 04:38 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-04 19:33 - 2015-04-04 19:33 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-04-04 19:33 - 2015-04-04 19:33 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-04-04 19:32 - 2015-04-04 19:33 - 00000000 ____D () C:\Users\user\AppData\Local\Deployment
2015-04-04 19:32 - 2015-04-04 19:32 - 00000000 ____D () C:\Users\user\AppData\Local\Apps\2.0
2015-04-04 19:21 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2015-04-04 19:21 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2015-04-04 19:20 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2015-04-04 19:20 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2015-04-04 19:20 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-04-04 19:18 - 2015-04-04 19:18 - 00000000 ____D () C:\ProgramData\e69bfb600002cd1
2015-04-04 19:12 - 2015-04-04 19:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WildTangent
2015-04-04 19:01 - 2015-04-14 21:38 - 00000000 ___RD () C:\Users\user\Desktop\Games
2015-04-04 18:55 - 2015-04-04 18:55 - 00000000 ____D () C:\Users\user\AppData\Local\Steam
2015-04-04 18:51 - 2015-04-17 16:24 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-04 18:51 - 2015-04-04 18:51 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-04-04 18:51 - 2015-04-04 18:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-04-04 18:50 - 2015-04-04 18:50 - 01142128 _____ () C:\Users\user\Downloads\SteamSetup.exe
2015-04-04 18:34 - 2015-04-04 18:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-04-04 18:32 - 2015-04-08 00:53 - 00000000 ___HD () C:\Users\Public\Temp
2015-04-04 18:30 - 2015-04-04 19:36 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2015-04-04 18:30 - 2015-04-04 19:36 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-04 18:30 - 2015-04-04 18:31 - 00008552 _____ () C:\claraInstaller.txt
2015-04-04 18:30 - 2015-04-04 18:30 - 00003546 _____ () C:\Windows\System32\Tasks\VZZXGN
2015-04-04 18:30 - 2015-04-04 18:30 - 00002962 _____ () C:\Windows\System32\Tasks\FUB
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () C:\ProgramData\7b2a98c5c3a9485689cfb0f9c7e387ba
2015-04-04 18:29 - 2015-04-13 21:42 - 00000000 ____D () C:\Users\user\AppData\Local\CrashDumps
2015-04-04 18:28 - 2015-04-04 18:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Macromedia
2015-04-04 18:28 - 2015-04-04 18:28 - 00000000 ____D () C:\Users\user\AppData\Local\Acer Aspire R7 Tutorial
2015-04-04 14:04 - 2015-04-17 16:12 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4B77C285-2957-41B2-AC16-E035149999DF}
2015-04-04 14:04 - 2015-04-04 14:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieUserList
2015-04-04 14:04 - 2015-04-04 14:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieSiteList
2015-04-04 13:50 - 2015-04-04 13:50 - 00000000 ___HD () C:\$SysReset
2015-04-04 10:06 - 2015-04-17 16:14 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-04 10:04 - 2015-04-04 10:04 - 00000000 ____D () C:\Users\Public\Pokki
2015-04-04 10:01 - 2015-04-04 18:49 - 00000000 ____D () C:\Users\user\AppData\Local\clear.fi
2015-04-04 10:01 - 2015-04-04 10:01 - 00001280 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\PicStream
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\AppData\Roaming\Atheros
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\Users\user\AppData\Local\AOP SDK
2015-04-04 10:01 - 2015-04-04 10:01 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2015-04-04 10:00 - 2015-04-05 20:44 - 00000000 ____D () C:\Users\user\AppData\Local\Packages
2015-04-04 10:00 - 2015-04-04 19:08 - 00001458 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-04 10:00 - 2015-04-04 10:00 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-04-04 10:00 - 2015-04-04 10:00 - 00000020 ___SH () C:\Users\user\ntuser.ini
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Vorlagen
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Startmenü
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Netzwerkumgebung
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Lokale Einstellungen
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Eigene Dateien
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Druckumgebung
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Musik
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Bilder
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Verlauf
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Anwendungsdaten
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 _SHDL () C:\Users\user\Anwendungsdaten
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Windows\oem
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Roaming\Adobe
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Users\user\AppData\Local\OEM
2015-04-04 10:00 - 2015-04-04 10:00 - 00000000 ____D () C:\Program Files\Accessory Store
2015-04-04 09:59 - 2014-07-25 23:18 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-04 09:59 - 2014-03-18 12:33 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-04 09:59 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-04-04 09:59 - 2014-03-18 12:13 - 00000369 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-04-04 09:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-04 09:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-17 16:24 - 2014-08-30 14:27 - 02014455 _____ () C:\Windows\WindowsUpdate.log
2015-04-17 16:19 - 2014-08-30 22:48 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-04-17 16:19 - 2014-08-30 22:48 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-04-17 16:19 - 2014-03-18 12:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-17 16:15 - 2014-03-18 11:54 - 00068816 _____ () C:\Windows\PFRO.log
2015-04-17 16:15 - 2013-08-22 16:46 - 00025182 _____ () C:\Windows\setupact.log
2015-04-17 16:15 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-17 16:11 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-04-16 19:34 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-16 19:33 - 2013-08-22 13:22 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2015-04-16 19:33 - 2013-08-22 13:22 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2015-04-16 19:33 - 2013-08-22 13:17 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2015-04-16 19:33 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2015-04-16 19:33 - 2013-08-22 13:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2015-04-16 19:33 - 2013-08-22 06:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2015-04-16 19:33 - 2013-08-22 06:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2015-04-16 19:33 - 2013-08-22 05:59 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2015-04-16 19:33 - 2013-08-22 05:56 - 00377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2015-04-16 19:33 - 2013-08-22 05:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2015-04-16 19:33 - 2013-08-22 05:51 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2015-04-16 19:33 - 2013-08-22 05:51 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2015-04-16 19:33 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2015-04-16 19:33 - 2013-08-22 05:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2015-04-16 19:28 - 2014-07-25 23:24 - 00276123 _____ () C:\Windows\DirectX.log
2015-04-16 17:34 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-04-16 00:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 00:09 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\schemas
2015-04-16 00:09 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-04-16 00:08 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-04-14 21:37 - 2013-08-22 16:44 - 00381472 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-04-14 21:25 - 2014-07-25 23:21 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-13 20:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Help
2015-04-06 23:15 - 2014-07-25 23:22 - 00000000 ____D () C:\ProgramData\CyberLink
2015-04-06 23:14 - 2014-08-30 13:59 - 00000000 ____D () C:\Users\Public\CyberLink
2015-04-05 20:45 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-05 17:13 - 2014-03-18 11:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-04-05 17:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\setup
2015-04-05 17:13 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2015-04-05 09:01 - 2014-07-25 23:28 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-04-05 08:59 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-04-05 07:31 - 2014-07-25 23:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-04-05 07:30 - 2014-07-25 23:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-04-05 06:53 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-04-04 23:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-04 23:37 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\MediaViewer
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\FileManager
2015-04-04 23:36 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Camera
2015-04-04 19:12 - 2014-07-25 23:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-04-04 19:12 - 2014-07-25 23:23 - 00000000 ____D () C:\ProgramData\WildTangent
2015-04-04 18:52 - 2014-07-25 23:26 - 00000000 ____D () C:\Program Files\Acer
2015-04-04 18:52 - 2014-07-25 23:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-04-04 18:52 - 2014-07-25 23:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-04-04 18:48 - 2014-07-25 23:57 - 00000000 ___HD () C:\OEM
2015-04-04 18:48 - 2014-07-25 23:21 - 00000000 ____D () C:\ProgramData\OEM
2015-04-04 18:48 - 2014-07-25 23:20 - 00000000 ____D () C:\ProgramData\acer
2015-04-04 18:31 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\restore
2015-04-04 10:00 - 2014-07-25 23:58 - 00000000 ____D () C:\Windows\Panther
2015-04-04 09:59 - 2014-07-25 23:00 - 00000000 ____D () C:\Users\Administrator

==================== Files in the root of some directories =======

2014-08-30 13:44 - 2014-08-30 13:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-15 23:52

==================== End Of Log ============================
         

--- --- ---

Ok, dann müssen wir einmal von aussen ran:


Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)

Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)

• Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST 32-Bit | FRST 64-Bit
• Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.
• Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:

Über den Boot Manager:

• Starte den Rechner neu.
• Während dem Hochfahren drücke mehrmals die F8 Taste
• Wähle nun Computer reparieren.
• Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Mit Windows CD/DVD (auch bei Windows 8 möglich):

• Lege die Windows CD in dein Laufwerk.
• Starte den Rechner neu und starte von der CD.
• Wähle die Spracheinstellungen und klicke "Weiter".
• Klicke auf Computerreparaturoptionen !
• Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Wähle in den Reparaturoptionen: Eingabeaufforderung

• Gib nun bitte notepad ein und drücke Enter.
• Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
  Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.
• Schließe Notepad wieder
• Gib nun bitte folgenden Befehl ein.
  e:\frst.exe bzw. e:\frst64.exe
  Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.
• Akzeptiere den Disclaimer mit Ja und klicke Untersuchen

Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).

Erstmal vielen Dank für die Hilfe soweit.
Hier ist das Logfile:


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by SYSTEM on MININT-2URNCED on 21-04-2015 21:06:09
Running from d:\
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [643064 2015-02-09] (McAfee, Inc.)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\Default\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\Default\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abMedia\SwitchUserVideoKey.reg"
HKU\Default\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\Default User\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\Default User\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abMedia\SwitchUserVideoKey.reg"
HKU\Default User\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\UpdatusUser\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\UpdatusUser\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"
HKU\UpdatusUser\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\user\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-13] (Valve Corporation)

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [3053312 2014-06-26] (Acer Incorporated)
S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-09] (Microsoft Corporation)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
S2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-09] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-03-16] (Malwarebytes Corporation)
S2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [154856 2015-04-10] (McAfee, Inc.)
S2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-02-27] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
S2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe [422632 2015-01-22] (McAfee, Inc.)
S2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [601864 2015-02-27] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-05] (McAfee, Inc.)
S2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.)
S2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.)
S2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-14] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-03] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-03] (Microsoft Corporation)
S2 scxy; C:\Program Files (x86)\System-Checker\Files\scxy.exe [X]
S2 syschkrm; C:\Program Files (x86)\System-Checker\syschkrm.exe [X]
S2 syschkrs; C:\Program Files (x86)\System-Checker\syschkrs.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-13] (Qualcomm Atheros Communications, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-02] (Intel Corporation)
S3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-16] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-16] (Malwarebytes Corporation)
S3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-09] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.)
S3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70608 2014-10-01] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.)
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.)
S3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [447440 2014-09-18] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-18] (McAfee, Inc.)
S0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.)
S3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-13] (Realsil Semiconductor Corporation)
S1 scjrtf; C:\Windows\system32\Drivers\scjrtf.sys [35744 2015-04-01] (scsp)
S1 scjrtr; C:\Windows\system32\Drivers\scjrtr.sys [46496 2015-04-01] (scsp)
S3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-03] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-21 10:48 - 2015-04-21 10:48 - 02099712 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2015-04-18 03:48 - 2015-04-18 03:48 - 00000000 ____D () C:\Users\user\AppData\Roaming\LEGO Media
2015-04-17 16:03 - 2013-09-23 03:49 - 00197704 _____ (McAfee, Inc.) C:\Windows\System32\Drivers\HipShieldK.sys
2015-04-16 20:40 - 2015-04-16 20:40 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-04-16 10:34 - 2015-04-16 10:34 - 00000737 _____ () C:\Users\user\Desktop\checkup.txt
2015-04-16 10:33 - 2015-04-16 10:33 - 00852616 _____ () C:\Users\user\Desktop\SecurityCheck.exe
2015-04-16 09:33 - 2015-04-16 09:33 - 00000000 ____D () C:\ProgramData\Age of Empires 3
2015-04-16 09:31 - 2015-04-16 09:31 - 00000000 ____D () C:\Users\user\Documents\Benutzerdefinierte Office-Vorlagen
2015-04-15 15:06 - 2015-04-15 15:06 - 00000588 _____ () C:\Users\user\Desktop\JRT.txt
2015-04-15 14:41 - 2015-04-15 14:41 - 00000000 ____D () C:\Users\user\Desktop\FRST-OlderVersion
2015-04-15 14:35 - 2015-04-15 14:35 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ACER-Windows-8.1-(64-bit).dat
2015-04-15 14:35 - 2015-04-15 14:35 - 00000000 ____D () C:\RegBackup
2015-04-15 14:33 - 2015-04-15 14:33 - 02686088 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2015-04-15 14:30 - 2015-04-15 14:23 - 00010019 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2015-04-15 14:20 - 2015-04-15 14:23 - 00000000 ____D () C:\AdwCleaner
2015-04-15 14:19 - 2015-04-15 14:19 - 02217984 _____ () C:\Users\user\Desktop\AdwCleaner_4.201.exe
2015-04-15 14:14 - 2015-04-15 14:18 - 00040250 _____ () C:\Users\user\Desktop\mbam.txt
2015-04-15 13:39 - 2015-04-15 14:15 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\MBAMSwissArmy.sys
2015-04-15 13:39 - 2015-04-15 13:39 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-04-15 13:39 - 2015-04-15 13:39 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-04-15 13:39 - 2015-04-15 13:39 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-04-15 13:39 - 2015-03-16 20:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbamchameleon.sys
2015-04-15 13:39 - 2015-03-16 20:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\mwac.sys
2015-04-15 13:39 - 2015-03-16 20:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2015-04-15 13:37 - 2015-04-15 13:37 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.1.4.1018.exe
2015-04-15 13:30 - 2015-04-15 13:30 - 00000707 _____ () C:\Users\user\Desktop\Revo Uninstaller.lnk
2015-04-15 13:29 - 2015-04-15 13:29 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\user\Desktop\revosetup95.exe
2015-04-15 12:16 - 2015-03-23 13:59 - 07476032 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2015-04-15 12:16 - 2015-03-23 13:59 - 01733952 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2015-04-15 12:16 - 2015-03-23 13:59 - 00360480 _____ (Microsoft Corporation) C:\Windows\System32\sechost.dll
2015-04-15 12:16 - 2015-03-23 13:58 - 01498872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-04-15 12:16 - 2015-03-23 13:45 - 00257216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-04-15 12:16 - 2015-03-19 20:12 - 00246272 _____ (Microsoft Corporation) C:\Windows\System32\microsoft-windows-system-events.dll
2015-04-15 12:16 - 2015-03-19 20:10 - 00285184 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2015-04-15 12:16 - 2015-03-19 20:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2015-04-15 12:16 - 2015-03-19 19:17 - 00411648 _____ (Microsoft Corporation) C:\Windows\System32\tracerpt.exe
2015-04-15 12:16 - 2015-03-19 18:41 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-04-15 12:16 - 2015-03-19 18:40 - 00950784 _____ (Microsoft Corporation) C:\Windows\System32\tdh.dll
2015-04-15 12:16 - 2015-03-19 18:16 - 00749568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-04-15 12:16 - 2015-03-14 00:20 - 01385256 _____ (Microsoft Corporation) C:\Windows\System32\msctf.dll
2015-04-15 12:16 - 2015-03-14 00:13 - 01124352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-04-15 12:16 - 2015-03-12 20:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2015-04-15 12:16 - 2015-03-12 20:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2015-04-15 12:16 - 2015-03-12 20:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2015-04-15 12:16 - 2015-03-12 19:53 - 00816128 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2015-04-15 12:16 - 2015-03-12 19:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2015-04-15 12:16 - 2015-03-12 19:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-04-15 12:16 - 2015-03-12 19:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-04-15 12:16 - 2015-03-12 19:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2015-04-15 12:16 - 2015-03-12 19:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-04-15 12:16 - 2015-03-12 19:17 - 01032704 _____ (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2015-04-15 12:16 - 2015-03-12 19:16 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-04-15 12:16 - 2015-03-12 19:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2015-04-15 12:16 - 2015-03-12 19:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2015-04-15 12:16 - 2015-03-12 19:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2015-04-15 12:16 - 2015-03-12 18:58 - 00259072 _____ (Microsoft Corporation) C:\Windows\System32\pku2u.dll
2015-04-15 12:16 - 2015-03-12 18:50 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-04-15 12:16 - 2015-03-12 18:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-04-15 12:16 - 2015-03-12 18:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2015-04-15 12:16 - 2015-03-12 18:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-04-15 12:16 - 2015-03-12 18:37 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-04-15 12:16 - 2015-03-12 18:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-04-15 12:16 - 2015-03-12 18:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2015-04-15 12:16 - 2015-03-12 18:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2015-04-15 12:16 - 2015-03-12 18:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-04-15 12:16 - 2015-03-12 18:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-04-15 12:16 - 2015-03-12 18:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-04-15 12:16 - 2015-02-20 15:49 - 00780800 _____ (Microsoft Corporation) C:\Windows\System32\lsm.dll
2015-04-15 12:16 - 2014-10-28 18:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\System32\workerdd.dll
2015-04-15 12:16 - 2014-10-28 18:43 - 00019968 _____ (Microsoft Corporation) C:\Windows\System32\diskperf.exe
2015-04-15 12:16 - 2014-10-28 18:17 - 00110592 _____ (Microsoft Corporation) C:\Windows\System32\logman.exe
2015-04-15 12:16 - 2014-10-28 17:58 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-04-15 12:16 - 2014-10-28 17:38 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-04-15 12:16 - 2014-10-28 17:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\System32\typeperf.exe
2015-04-15 12:16 - 2014-10-28 17:26 - 00043008 _____ (Microsoft Corporation) C:\Windows\System32\relog.exe
2015-04-15 12:16 - 2014-10-28 17:04 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-04-15 12:16 - 2014-10-28 17:04 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-04-15 12:15 - 2015-02-24 00:32 - 00991552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys
2015-04-15 12:10 - 2015-03-14 00:54 - 00133256 _____ (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2015-04-15 12:10 - 2015-03-13 17:56 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\wups.dll
2015-04-15 12:10 - 2015-03-13 17:56 - 00052224 _____ (Microsoft Corporation) C:\Windows\System32\wups2.dll
2015-04-15 12:10 - 2015-03-13 17:51 - 00015360 _____ (Microsoft Corporation) C:\Windows\System32\wu.upgrade.ps.dll
2015-04-15 12:10 - 2015-03-13 17:37 - 00267264 _____ (Microsoft Corporation) C:\Windows\System32\WinSetupUI.dll
2015-04-15 12:10 - 2015-03-13 17:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-04-15 12:10 - 2015-03-13 16:22 - 03678720 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2015-04-15 12:10 - 2015-03-13 16:12 - 00140288 _____ (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2015-04-15 12:10 - 2015-03-13 16:12 - 00035840 _____ (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2015-04-15 12:10 - 2015-03-13 16:09 - 00200192 _____ (Microsoft Corporation) C:\Windows\System32\storewuauth.dll
2015-04-15 12:10 - 2015-03-13 16:08 - 00408064 _____ (Microsoft Corporation) C:\Windows\System32\WUSettingsProvider.dll
2015-04-15 12:10 - 2015-03-13 16:08 - 00095744 _____ (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2015-04-15 12:10 - 2015-03-13 16:06 - 02373632 _____ (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2015-04-15 12:10 - 2015-03-13 16:06 - 00891392 _____ (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2015-04-15 12:10 - 2015-03-13 16:02 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-04-15 12:10 - 2015-03-13 16:02 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-04-15 12:10 - 2015-03-13 15:59 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-04-15 12:10 - 2015-03-13 15:59 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-04-15 12:10 - 2015-03-04 02:25 - 00377152 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\clfs.sys
2015-04-15 12:10 - 2015-03-03 19:04 - 00075264 _____ (Microsoft Corporation) C:\Windows\System32\clfsw32.dll
2015-04-15 12:10 - 2015-03-03 18:19 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll
2015-04-15 12:10 - 2014-10-17 22:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\System32\wuaext.dll
2015-04-15 12:09 - 2015-03-22 14:45 - 00227328 _____ (Microsoft Corporation) C:\Windows\System32\aepdu.dll
2015-04-15 12:09 - 2015-03-22 14:09 - 01111552 _____ (Microsoft Corporation) C:\Windows\System32\aeinv.dll
2015-04-15 12:09 - 2015-03-22 14:09 - 00957440 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2015-04-15 12:09 - 2015-03-22 14:09 - 00769024 _____ (Microsoft Corporation) C:\Windows\System32\invagent.dll
2015-04-15 12:09 - 2015-03-22 14:09 - 00726528 _____ (Microsoft Corporation) C:\Windows\System32\generaltel.dll
2015-04-15 12:09 - 2015-03-22 14:09 - 00419328 _____ (Microsoft Corporation) C:\Windows\System32\devinv.dll
2015-04-15 12:09 - 2015-03-22 14:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\System32\acmigration.dll
2015-04-14 04:36 - 2015-04-14 04:38 - 00031053 _____ () C:\Users\user\Desktop\Addition.txt
2015-04-14 04:34 - 2015-04-17 10:07 - 00113516 _____ () C:\Users\user\Desktop\FRST.txt
2015-04-14 04:34 - 2015-04-17 06:26 - 00000000 ____D () C:\FRST
2015-04-14 04:33 - 2015-04-15 14:41 - 02097664 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2015-04-13 10:05 - 2015-04-13 10:05 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf32.dll
2015-04-13 10:05 - 2015-04-13 10:05 - 00002272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w95inf16.dll
2015-04-13 10:05 - 1998-09-02 00:28 - 01088272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\danim.dll
2015-04-13 10:05 - 1998-09-02 00:28 - 00155408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRT.dll
2015-04-13 10:05 - 1998-09-02 00:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unam4ie.exe
2015-04-13 10:05 - 1998-09-02 00:28 - 00038160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LMRTREND.dll
2015-04-13 10:05 - 1998-09-02 00:02 - 00194320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcut.dll
2015-04-13 10:05 - 1998-08-26 20:51 - 00182032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft3.dll
2015-04-13 10:05 - 1998-08-20 03:02 - 00140800 _____ (The Duck Corporation) C:\Windows\SysWOW64\tm20dec.ax
2015-04-13 10:05 - 1998-08-20 02:38 - 00217984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\strmdll.dll
2015-04-13 10:05 - 1998-08-17 01:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciqtz.drv
2015-04-13 10:05 - 1998-08-17 01:21 - 00010240 _____ () C:\Windows\SysWOW64\vidx16.dll
2015-04-13 10:05 - 1998-08-17 01:21 - 00005672 _____ () C:\Windows\SysWOW64\quartz.vxd
2015-04-13 10:04 - 1998-10-21 08:43 - 00328704 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
2015-04-12 12:04 - 2015-04-12 12:04 - 00003148 _____ () C:\Windows\System32\Tasks\{9700D7FA-E5DB-4AB6-B549-9260F5FC3C27}
2015-04-09 03:07 - 2015-04-09 03:07 - 00000000 ____D () C:\Users\user\AppData\Roaming\LolClient
2015-04-06 22:31 - 2015-04-06 22:31 - 00001516 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2015-04-06 22:30 - 2015-04-06 22:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\DVDVideoSoft
2015-04-06 22:30 - 2015-04-06 22:31 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2015-04-06 22:30 - 2015-04-06 22:30 - 00000000 ____D () C:\Program Files (x86)\Free Codec Pack
2015-04-06 22:25 - 2015-04-06 22:26 - 36053064 _____ (DVDVideoSoft Ltd. ) C:\Users\user\Downloads\FreeYouTubeToMP3Converter_3.12.57.324.exe
2015-04-06 13:12 - 2015-04-06 13:12 - 00000000 ____D () C:\Users\user\AppData\Local\MediaShow
2015-04-06 01:18 - 2015-04-06 02:08 - 02345800 _____ () C:\Users\user\Documents\ABI seite Lutz.pptx
2015-04-06 01:18 - 2015-04-06 01:18 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieBrowserModeList
2015-04-06 01:17 - 2015-04-06 01:17 - 05706441 _____ () C:\Users\user\Documents\R.pptx
2015-04-06 01:17 - 2015-04-06 01:17 - 05706441 _____ () C:\Users\user\Documents\ABIseite Ruben.pptx
2015-04-05 12:16 - 2015-04-06 13:37 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2015-04-05 12:16 - 2015-04-05 12:16 - 00000891 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-04-05 12:16 - 2015-04-05 12:16 - 00000000 ____D () C:\Users\user\AppData\Roaming\dvdcss
2015-04-05 12:16 - 2015-04-05 12:16 - 00000000 ____D () C:\Program Files\VideoLAN
2015-04-05 12:08 - 2015-04-05 12:09 - 00000686 _____ () C:\Windows\wmsetup.log
2015-04-05 11:55 - 2015-04-06 01:16 - 05706438 _____ () C:\Users\user\Documents\powerpoints.pptx
2015-04-05 07:57 - 2015-04-06 09:08 - 00003086 _____ () C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-05 07:57 - 2015-04-06 09:08 - 00000000 ___RD () C:\Users\user\OneDrive
2015-04-05 07:57 - 2015-04-05 07:57 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-04-05 07:54 - 2015-04-06 13:11 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-04-05 07:53 - 2015-04-05 07:53 - 01078976 _____ (Microsoft Corporation) C:\Users\user\Downloads\Setup.X86.de-DE_HomeBusinessRetail_af6fbc01-34c4-49c8-a29d-f1b824319f99_TX_DB_.exe
2015-04-05 03:51 - 2014-07-24 07:28 - 00412992 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys
2015-04-05 03:51 - 2014-07-24 07:28 - 00143680 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\usbccgp.sys
2015-04-05 03:51 - 2014-07-24 07:23 - 01519488 _____ (Microsoft Corporation) C:\Windows\System32\user32.dll
2015-04-05 03:51 - 2014-07-24 07:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
2015-04-05 03:51 - 2014-07-24 07:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2015-04-05 03:51 - 2014-07-24 07:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2015-04-05 03:51 - 2014-07-24 07:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\System32\winload.exe
2015-04-05 03:51 - 2014-07-24 07:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\System32\winresume.efi
2015-04-05 03:51 - 2014-07-24 07:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\System32\winresume.exe
2015-04-05 03:51 - 2014-07-24 07:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\System32\mfcore.dll
2015-04-05 03:51 - 2014-07-24 07:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\System32\mfplat.dll
2015-04-05 03:51 - 2014-07-24 07:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\System32\mfreadwrite.dll
2015-04-05 03:51 - 2014-07-24 07:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\System32\mftranscode.dll
2015-04-05 03:51 - 2014-07-24 05:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2015-04-05 03:51 - 2014-07-24 05:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2015-04-05 03:51 - 2014-07-24 05:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-04-05 03:51 - 2014-07-24 05:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2015-04-05 03:51 - 2014-07-24 05:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2015-04-05 03:51 - 2014-07-24 03:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2015-04-05 03:51 - 2014-07-24 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2015-04-05 03:51 - 2014-07-24 03:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\nwifi.sys
2015-04-05 03:51 - 2014-07-24 03:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\System32\usbmon.dll
2015-04-05 03:51 - 2014-07-24 03:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\System32\WebClnt.dll
2015-04-05 03:51 - 2014-07-24 02:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\System32\SRH.dll
2015-04-05 03:51 - 2014-07-24 02:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-04-05 03:51 - 2014-07-24 01:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\System32\comdlg32.dll
2015-04-05 03:51 - 2014-07-24 01:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll
2015-04-05 03:51 - 2014-07-24 01:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\System32\WorkfoldersControl.dll
2015-04-05 03:51 - 2014-07-24 01:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-04-05 03:51 - 2014-07-24 01:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2015-04-05 03:51 - 2014-07-24 01:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2015-04-05 03:51 - 2014-07-24 01:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\System32\srvsvc.dll
2015-04-05 03:51 - 2014-07-24 00:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\System32\gpsvc.dll
2015-04-05 03:51 - 2014-07-24 00:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\System32\defragsvc.dll
2015-04-05 03:51 - 2014-07-24 00:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\System32\mispace.dll
2015-04-05 03:51 - 2014-07-24 00:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\System32\storagewmi.dll
2015-04-05 03:51 - 2014-07-24 00:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\System32\wlanmsm.dll
2015-04-05 03:51 - 2014-07-24 00:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\System32\wlansvc.dll
2015-04-05 03:51 - 2014-07-24 00:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2015-04-05 03:51 - 2014-07-24 00:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\System32\winspool.drv
2015-04-05 03:51 - 2014-07-24 00:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Media.dll
2015-04-05 03:51 - 2014-07-24 00:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2015-04-05 03:51 - 2014-07-24 00:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\System32\spoolsv.exe
2015-04-05 03:51 - 2014-07-24 00:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2015-04-05 03:51 - 2014-07-24 00:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2015-04-05 03:51 - 2014-07-24 00:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\System32\XpsPrint.dll
2015-04-05 03:51 - 2014-07-23 23:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\System32\printui.dll
2015-04-05 03:51 - 2014-07-23 23:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2015-04-05 03:51 - 2014-07-23 23:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\System32\workfolderssvc.dll
2015-04-05 03:51 - 2014-07-11 21:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\System32\wisp.dll
2015-04-05 03:51 - 2014-07-04 01:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\System32\AppxPackaging.dll
2015-04-05 03:51 - 2014-07-04 01:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2015-04-05 03:51 - 2014-06-26 22:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2015-04-05 03:51 - 2014-06-25 16:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2015-04-05 03:51 - 2014-06-18 18:13 - 00310080 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\volsnap.sys
2015-04-05 03:51 - 2014-06-13 22:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2015-04-05 03:51 - 2014-06-13 21:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-04-05 03:51 - 2014-06-05 02:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\System32\aclui.dll
2015-04-05 03:51 - 2014-06-05 01:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2015-04-05 03:51 - 2014-05-30 21:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\System32\wsecedit.dll
2015-04-05 03:51 - 2014-05-28 22:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\System32\clusapi.dll
2015-04-05 03:51 - 2014-05-28 21:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2015-04-05 03:51 - 2014-05-05 20:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\System32\netcfgx.dll
2015-04-05 03:51 - 2014-05-05 16:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2015-04-05 03:51 - 2014-03-24 18:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\System32\winmmbase.dll
2015-04-05 03:50 - 2014-07-24 07:28 - 00419648 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\usbhub.sys
2015-04-05 03:50 - 2014-07-24 07:28 - 00280384 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\pci.sys
2015-04-05 03:50 - 2014-07-24 07:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\System32\dwmapi.dll
2015-04-05 03:50 - 2014-07-24 07:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe
2015-04-05 03:50 - 2014-07-24 07:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\System32\SndVol.exe
2015-04-05 03:50 - 2014-07-24 07:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\System32\mfps.dll
2015-04-05 03:50 - 2014-07-24 05:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-04-05 03:50 - 2014-07-24 05:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2015-04-05 03:50 - 2014-07-24 03:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\System32\KBDRUM.DLL
2015-04-05 03:50 - 2014-07-24 03:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDYAK.DLL
2015-04-05 03:50 - 2014-07-24 03:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDTT102.DLL
2015-04-05 03:50 - 2014-07-24 03:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDTAT.DLL
2015-04-05 03:50 - 2014-07-24 03:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDRU1.DLL
2015-04-05 03:50 - 2014-07-24 03:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\System32\KBDBASH.DLL
2015-04-05 03:50 - 2014-07-24 03:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\KBDRU.DLL
2015-04-05 03:50 - 2014-07-24 03:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\IPMIDrv.sys
2015-04-05 03:50 - 2014-07-24 03:45 - 00076800 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\hdaudbus.sys
2015-04-05 03:50 - 2014-07-24 03:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\NdisImPlatform.sys
2015-04-05 03:50 - 2014-07-24 03:41 - 00118272 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\bthpan.sys
2015-04-05 03:50 - 2014-07-24 03:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\System32\iasnap.dll
2015-04-05 03:50 - 2014-07-24 02:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-04-05 03:50 - 2014-07-24 02:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2015-04-05 03:50 - 2014-07-24 02:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-04-05 03:50 - 2014-07-24 02:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2015-04-05 03:50 - 2014-07-24 02:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-04-05 03:50 - 2014-07-24 02:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-04-05 03:50 - 2014-07-24 02:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-04-05 03:50 - 2014-07-24 02:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\System32\WorkFoldersGPExt.dll
2015-04-05 03:50 - 2014-07-24 02:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\System32\powercfg.cpl
2015-04-05 03:50 - 2014-07-24 02:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\System32\gpedit.dll
2015-04-05 03:50 - 2014-07-24 02:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\System32\ActionCenter.dll
2015-04-05 03:50 - 2014-07-24 02:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\System32\Display.dll
2015-04-05 03:50 - 2014-07-24 02:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\System32\osk.exe
2015-04-05 03:50 - 2014-07-24 02:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2015-04-05 03:50 - 2014-07-24 02:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\System32\WorkFoldersShell.dll
2015-04-05 03:50 - 2014-07-24 01:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2015-04-05 03:50 - 2014-07-24 01:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\System32\PrintDialogs.dll
2015-04-05 03:50 - 2014-07-24 01:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2015-04-05 03:50 - 2014-07-24 01:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-04-05 03:50 - 2014-07-24 01:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2015-04-05 03:50 - 2014-07-24 01:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2015-04-05 03:50 - 2014-07-24 01:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\System32\browser.dll
2015-04-05 03:50 - 2014-07-24 01:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\System32\wlansvcpal.dll
2015-04-05 03:50 - 2014-07-24 01:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\System32\wlansec.dll
2015-04-05 03:50 - 2014-07-24 01:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\System32\WiFiDisplay.dll
2015-04-05 03:50 - 2014-07-24 01:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2015-04-05 03:50 - 2014-07-24 01:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\System32\wshbth.dll
2015-04-05 03:50 - 2014-07-24 01:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2015-04-05 03:50 - 2014-07-24 01:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\System32\Defrag.exe
2015-04-05 03:50 - 2014-07-24 00:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\System32\BluetoothApis.dll
2015-04-05 03:50 - 2014-07-24 00:49 - 01361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-04-05 03:50 - 2014-07-24 00:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\System32\wlanapi.dll
2015-04-05 03:50 - 2014-07-24 00:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Devices.Bluetooth.dll
2015-04-05 03:50 - 2014-07-24 00:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\System32\wcmcsp.dll
2015-04-05 03:50 - 2014-07-24 00:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2015-04-05 03:50 - 2014-07-24 00:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2015-04-05 03:50 - 2014-07-24 00:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2015-04-05 03:50 - 2014-07-24 00:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Networking.dll
2015-04-05 03:50 - 2014-07-24 00:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2015-04-05 03:50 - 2014-07-24 00:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\System32\wwanmm.dll
2015-04-05 03:50 - 2014-07-24 00:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\System32\VAN.dll
2015-04-05 03:50 - 2014-07-24 00:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\System32\wpdbusenum.dll
2015-04-05 03:50 - 2014-07-24 00:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\System32\twinapi.dll
2015-04-05 03:50 - 2014-07-24 00:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2015-04-05 03:50 - 2014-07-24 00:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\System32\SndVolSSO.dll
2015-04-05 03:50 - 2014-07-24 00:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\System32\stobject.dll
2015-04-05 03:50 - 2014-07-24 00:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2015-04-05 03:50 - 2014-07-24 00:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlowUI.dll
2015-04-05 03:50 - 2014-07-23 23:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\System32\wwanconn.dll
2015-04-05 03:50 - 2014-07-23 23:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2015-04-05 03:50 - 2014-07-23 23:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2015-04-05 03:50 - 2014-07-23 23:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\System32\SettingSync.dll
2015-04-05 03:50 - 2014-07-23 23:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-04-05 03:50 - 2014-07-11 20:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2015-04-05 03:50 - 2014-07-04 04:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ks.sys
2015-04-05 03:50 - 2014-07-04 02:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\System32\AppxSip.dll
2015-04-05 03:50 - 2014-07-04 02:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\System32\GdiPlus.dll
2015-04-05 03:50 - 2014-07-04 02:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2015-04-05 03:50 - 2014-07-04 02:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2015-04-05 03:50 - 2014-06-25 16:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\System32\dab.dll
2015-04-05 03:50 - 2014-06-19 15:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2015-04-05 03:50 - 2014-06-07 04:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\System32\rsaenh.dll
2015-04-05 03:50 - 2014-06-07 02:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2015-04-05 03:50 - 2014-05-30 20:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2015-04-05 03:50 - 2014-05-25 23:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\System32\AppxSysprep.dll
2015-04-05 03:50 - 2014-05-10 02:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\System32\bcryptprimitives.dll
2015-04-05 03:50 - 2014-05-10 00:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-04-05 03:50 - 2014-03-24 18:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\System32\winmm.dll
2015-04-05 03:50 - 2014-03-24 17:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2015-04-05 03:50 - 2014-03-24 17:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2015-04-04 23:48 - 2015-04-04 23:48 - 00000000 ____D () C:\ProgramData\Riot Games
2015-04-04 23:38 - 2008-07-11 22:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-04-04 23:38 - 2008-07-11 22:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2015-04-04 23:38 - 2008-07-11 22:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2015-04-04 23:37 - 2015-04-04 23:38 - 00000000 ____D () C:\Users\user\AppData\Roaming\Riot Games
2015-04-04 23:32 - 2015-04-04 23:33 - 30668968 _____ (Riot Games) C:\Users\user\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe
2015-04-04 22:59 - 2015-04-15 14:07 - 00000000 ___SD () C:\Windows\System32\CompatTel
2015-04-04 22:59 - 2015-04-15 14:07 - 00000000 ____D () C:\Windows\System32\appraiser
2015-04-04 22:59 - 2015-04-04 23:01 - 00000000 ___SD () C:\Windows\System32\GWX
2015-04-04 22:59 - 2015-04-04 22:59 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-04-04 22:39 - 2014-04-13 19:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\System32\termsrv.dll
2015-04-04 22:32 - 2015-04-16 09:33 - 00000000 ____D () C:\Users\user\Documents\My Games
2015-04-04 13:42 - 2015-04-04 13:42 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-04-04 13:40 - 2015-04-13 15:24 - 00792056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-04 13:40 - 2015-04-13 15:24 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-04 13:33 - 2015-04-15 14:06 - 00000000 ____D () C:\Windows\System32\MRT
2015-04-04 13:33 - 2015-04-15 13:59 - 128913832 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2015-04-04 12:43 - 2015-04-04 12:43 - 00002003 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-04-04 12:43 - 2015-04-04 12:43 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-04-04 12:42 - 2015-04-04 13:41 - 00000000 ____D () C:\ProgramData\Adobe
2015-04-04 12:38 - 2015-04-04 12:44 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2015-04-04 12:33 - 2015-04-04 12:33 - 00000000 ____D () C:\Users\user\AppData\Roaming\CyberLink
2015-04-04 12:21 - 2015-04-04 12:21 - 00000000 ____D () C:\Users\user\Tracing
2015-04-04 12:19 - 2015-04-04 12:19 - 00000000 ____D () C:\Users\user\AppData\Local\Skype
2015-04-04 12:19 - 2014-08-14 16:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\msgpioclx.sys
2015-04-04 12:19 - 2014-07-29 17:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\System32\WSDMon.dll
2015-04-04 12:19 - 2014-07-28 21:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\System32\tcpmon.dll
2015-04-04 12:18 - 2015-04-19 07:06 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2015-04-04 12:18 - 2015-04-04 12:18 - 00002715 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-04-04 12:18 - 2015-04-04 12:18 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-04-04 12:18 - 2015-04-04 12:18 - 00000000 ____D () C:\ProgramData\Skype
2015-04-04 12:16 - 2015-04-04 12:16 - 01380960 _____ (Skype Technologies S.A.) C:\Users\user\Downloads\SkypeSetup.exe
2015-04-04 11:19 - 2014-09-26 23:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\System32\ncryptsslp.dll
2015-04-04 11:19 - 2014-09-26 21:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2015-04-04 11:19 - 2014-09-26 19:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\System32\dpapisrv.dll
2015-04-04 11:05 - 2015-01-26 20:22 - 00131584 _____ (Microsoft Corporation) C:\Windows\System32\rdpudd.dll
2015-04-04 11:05 - 2015-01-26 18:11 - 03547648 _____ (Microsoft Corporation) C:\Windows\System32\rdpcorets.dll
2015-04-04 11:05 - 2014-10-28 19:56 - 00027456 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\rdpvideominiport.sys
2015-04-04 11:05 - 2014-10-28 18:37 - 00040448 _____ (Microsoft Corporation) C:\Windows\System32\rfxvmt.dll
2015-04-04 11:05 - 2014-06-01 18:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\System32\hal.dll
2015-04-04 11:05 - 2014-05-31 02:07 - 00440664 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\usbport.sys
2015-04-04 11:05 - 2014-05-31 02:07 - 00089944 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\usbehci.sys
2015-04-04 11:05 - 2014-05-31 02:07 - 00027480 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\usbd.sys
2015-04-04 11:05 - 2014-05-30 22:30 - 00037376 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\usbuhci.sys
2015-04-04 11:05 - 2014-05-30 22:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFPf.sys
2015-04-04 11:05 - 2014-05-30 22:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFRd.sys
2015-04-04 11:05 - 2014-05-30 20:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\System32\WUDFHost.exe
2015-04-04 11:05 - 2014-05-30 20:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\System32\WUDFPlatform.dll
2015-04-04 11:05 - 2014-05-30 20:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\System32\WUDFSvc.dll
2015-04-04 11:05 - 2014-05-27 01:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\System32\DaOtpCredentialProvider.dll
2015-04-04 11:05 - 2014-05-27 01:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2015-04-04 11:03 - 2015-02-20 16:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-04-04 11:03 - 2015-02-20 16:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-04-04 11:03 - 2015-02-20 15:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-04-04 11:03 - 2015-02-19 18:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\System32\MshtmlDac.dll
2015-04-04 11:03 - 2015-02-19 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2015-04-04 11:03 - 2015-02-19 18:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2015-04-04 11:03 - 2015-02-19 18:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-04-04 11:03 - 2015-02-19 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2015-04-04 11:03 - 2015-02-19 17:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2015-04-04 11:03 - 2015-02-19 17:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2015-04-04 11:03 - 2015-02-19 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2015-04-04 11:03 - 2015-02-19 17:29 - 02865152 _____ (Microsoft Corporation) C:\Windows\System32\actxprxy.dll
2015-04-04 11:03 - 2015-02-19 17:26 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-04-04 11:03 - 2015-02-19 17:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-04-04 11:03 - 2015-01-11 18:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2015-04-04 11:03 - 2015-01-11 17:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-04-04 11:03 - 2015-01-11 17:23 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-04-04 11:03 - 2014-12-08 19:45 - 00393728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll
2015-04-04 11:03 - 2014-12-08 17:56 - 00538624 _____ (Microsoft Corporation) C:\Windows\System32\scesrv.dll
2015-04-04 11:03 - 2014-11-21 18:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\System32\html.iec
2015-04-04 11:03 - 2014-11-21 18:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-04-04 11:03 - 2014-10-30 21:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\System32\wextract.exe
2015-04-04 11:03 - 2014-10-30 21:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\System32\mshta.exe
2015-04-04 11:03 - 2014-10-30 21:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2015-04-04 11:03 - 2014-10-30 21:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2015-04-04 11:03 - 2014-10-30 21:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2015-04-04 11:03 - 2014-10-30 21:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2015-04-04 11:03 - 2014-10-30 21:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2015-04-04 11:03 - 2014-10-30 21:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2015-04-04 11:03 - 2014-10-30 20:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2015-04-04 11:03 - 2014-10-30 20:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2015-04-04 11:03 - 2014-10-30 20:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2015-04-04 11:03 - 2014-10-30 20:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2015-04-04 11:03 - 2014-10-30 20:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\System32\hlink.dll
2015-04-04 11:03 - 2014-10-30 20:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2015-04-04 11:03 - 2014-10-30 20:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2015-04-04 11:03 - 2014-10-30 20:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2015-04-04 11:03 - 2014-10-30 20:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\System32\JavaScriptCollectionAgent.dll
2015-04-04 11:03 - 2014-10-30 20:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2015-04-04 11:03 - 2014-10-30 20:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2015-04-04 11:03 - 2014-10-30 20:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\System32\inseng.dll
2015-04-04 11:03 - 2014-10-30 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2015-04-04 11:03 - 2014-10-30 20:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2015-04-04 11:03 - 2014-10-30 20:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\System32\occache.dll
2015-04-04 11:03 - 2014-10-30 19:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2015-04-04 11:03 - 2014-10-30 19:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2015-04-04 11:03 - 2014-10-30 19:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-04-04 11:03 - 2014-10-30 19:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2015-04-04 11:03 - 2014-10-30 19:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2015-04-04 11:03 - 2014-10-30 19:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-04-04 11:03 - 2014-10-30 19:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-04-04 11:03 - 2014-10-30 19:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-04-04 11:03 - 2014-10-30 19:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-04-04 11:03 - 2014-10-30 19:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-04-04 11:03 - 2014-10-30 19:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-04-04 11:03 - 2014-10-30 19:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2015-04-04 11:03 - 2014-10-30 19:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-04-04 11:03 - 2014-10-30 19:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2015-04-04 11:03 - 2014-10-30 19:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-04-04 11:03 - 2014-10-30 19:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-04-04 11:03 - 2014-10-30 19:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2015-04-04 11:03 - 2014-10-30 18:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-04-04 11:03 - 2014-10-30 18:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2015-04-04 11:03 - 2014-10-30 18:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2015-04-04 11:03 - 2014-10-30 18:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2015-04-04 11:03 - 2014-10-30 18:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-04-04 11:03 - 2014-10-30 18:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-04-04 11:03 - 2014-10-30 18:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-04-04 11:03 - 2014-10-30 18:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-04-04 11:03 - 2014-10-30 18:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2015-04-04 11:03 - 2014-06-19 17:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll
2015-04-04 11:03 - 2014-06-19 15:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-04-04 11:03 - 2014-02-06 03:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2015-04-04 11:02 - 2015-01-15 14:43 - 00563504 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2015-04-04 11:02 - 2015-01-15 14:43 - 00177984 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2015-04-04 11:02 - 2015-01-13 20:22 - 00445440 _____ (Microsoft Corporation) C:\Windows\System32\certcli.dll
2015-04-04 11:02 - 2015-01-13 19:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-04-04 11:02 - 2014-10-28 18:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\System32\msaudite.dll
2015-04-04 11:02 - 2014-10-28 18:50 - 00736768 _____ (Microsoft Corporation) C:\Windows\System32\adtschema.dll
2015-04-04 11:02 - 2014-10-28 18:06 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-04-04 11:02 - 2014-10-28 18:06 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-04-04 11:02 - 2014-10-28 17:31 - 01441792 _____ (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2015-04-04 11:01 - 2015-01-22 23:17 - 00723072 _____ (Microsoft Corporation) C:\Windows\System32\SHCore.dll
2015-04-04 11:01 - 2015-01-22 21:02 - 00560392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2015-04-04 11:01 - 2014-06-12 17:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\System32\dxgi.dll
2015-04-04 11:01 - 2014-06-12 17:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2015-04-04 11:01 - 2014-06-12 16:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2015-04-04 11:00 - 2015-02-19 19:03 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2015-04-04 11:00 - 2015-02-19 18:58 - 00044032 _____ (Adobe Systems) C:\Windows\System32\atmlib.dll
2015-04-04 11:00 - 2015-02-19 18:20 - 00301056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-04-04 11:00 - 2015-02-19 18:15 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-04-04 11:00 - 2015-01-28 17:58 - 00347136 _____ (Microsoft Corporation) C:\Windows\System32\photowiz.dll
2015-04-04 11:00 - 2015-01-28 17:29 - 00290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\photowiz.dll
2015-04-04 11:00 - 2014-12-08 17:50 - 00225280 _____ (Microsoft Corporation) C:\Windows\System32\profsvc.dll
2015-04-04 11:00 - 2014-10-28 18:49 - 00003072 _____ (Microsoft Corporation) C:\Windows\System32\lpk.dll
2015-04-04 11:00 - 2014-10-28 18:44 - 00096256 _____ (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2015-04-04 11:00 - 2014-10-28 18:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\System32\dciman32.dll
2015-04-04 11:00 - 2014-10-28 18:04 - 00003072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-04-04 11:00 - 2014-10-28 18:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-04-04 11:00 - 2014-10-28 18:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-04-04 11:00 - 2014-05-29 19:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2015-04-04 10:59 - 2014-12-02 15:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\System32\aepic.dll
2015-04-04 10:59 - 2014-11-09 18:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\DeviceSetupStatusProvider.dll
2015-04-04 10:59 - 2014-11-09 17:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2015-04-04 10:58 - 2015-03-05 18:53 - 00430080 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2015-04-04 10:58 - 2015-03-05 18:33 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-04-04 10:58 - 2015-02-25 15:26 - 04178944 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2015-04-04 10:58 - 2015-02-06 15:09 - 00396419 _____ () C:\Windows\System32\ApnDatabase.xml
2015-04-04 10:58 - 2015-02-03 15:58 - 00264000 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdFilter.sys
2015-04-04 10:58 - 2015-02-03 15:58 - 00114496 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdNisDrv.sys
2015-04-04 10:58 - 2015-02-03 15:58 - 00044024 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\WdBoot.sys
2015-04-04 10:58 - 2015-02-02 15:53 - 00014848 _____ (Microsoft Corporation) C:\Windows\System32\winshfhc.dll
2015-04-04 10:58 - 2015-02-02 15:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2015-04-04 10:58 - 2015-01-30 15:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\System32\msftedit.dll
2015-04-04 10:58 - 2015-01-30 15:29 - 02484224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-04-04 10:58 - 2015-01-26 19:44 - 00933888 _____ (Microsoft Corporation) C:\Windows\System32\calc.exe
2015-04-04 10:58 - 2015-01-23 17:51 - 00816128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\calc.exe
2015-04-04 10:58 - 2014-12-13 13:28 - 00513488 _____ () C:\Windows\SysWOW64\locale.nls
2015-04-04 10:58 - 2014-12-13 13:28 - 00513488 _____ () C:\Windows\System32\locale.nls
2015-04-04 10:58 - 2014-10-28 17:27 - 01200128 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Globalization.dll
2015-04-04 10:58 - 2014-10-28 17:27 - 00323072 _____ (Microsoft Corporation) C:\Windows\System32\GlobCollationHost.dll
2015-04-04 10:58 - 2014-10-28 17:04 - 00868352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2015-04-04 10:58 - 2014-10-28 17:04 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2015-04-04 10:58 - 2014-10-12 18:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\System32\consent.exe
2015-04-04 10:58 - 2014-10-10 16:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2015-04-04 10:58 - 2014-10-10 16:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-04-04 10:58 - 2014-10-07 23:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2015-04-04 10:58 - 2014-10-07 23:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\System32\msihnd.dll
2015-04-04 10:58 - 2014-10-07 22:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-04-04 10:58 - 2014-08-06 18:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2015-04-04 10:58 - 2014-08-01 19:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-04-04 10:57 - 2014-12-19 00:57 - 00788680 _____ (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2015-04-04 10:57 - 2014-12-19 00:25 - 00602776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-04-04 10:57 - 2014-10-30 15:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2015-04-04 10:57 - 2014-10-30 15:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-04-04 10:57 - 2014-08-22 22:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\System32\UXInit.dll
2015-04-04 10:57 - 2014-08-22 21:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2015-04-04 10:57 - 2014-08-22 20:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\System32\uDWM.dll
2015-04-04 10:55 - 2015-02-05 17:28 - 02257408 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll
2015-04-04 10:55 - 2015-02-05 17:08 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-04-04 10:55 - 2015-02-05 12:24 - 01113920 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ndis.sys
2015-04-04 10:55 - 2015-02-02 16:03 - 03551744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2015-04-04 10:55 - 2015-02-02 16:02 - 04298240 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_47.dll
2015-04-04 10:55 - 2015-01-29 19:01 - 00097792 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\hidbth.sys
2015-04-04 10:55 - 2015-01-29 19:00 - 00167424 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\rfcomm.sys
2015-04-04 10:55 - 2015-01-29 18:03 - 01488896 _____ (Microsoft Corporation) C:\Windows\System32\mfc42u.dll
2015-04-04 10:55 - 2015-01-29 18:03 - 01464832 _____ (Microsoft Corporation) C:\Windows\System32\mfc42.dll
2015-04-04 10:55 - 2015-01-29 17:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2015-04-04 10:55 - 2015-01-29 17:42 - 01204224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2015-04-04 10:55 - 2015-01-29 17:29 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atlthunk.dll
2015-04-04 10:55 - 2015-01-28 17:04 - 01091072 _____ (Microsoft Corporation) C:\Windows\System32\localspl.dll
2015-04-04 10:55 - 2015-01-28 17:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2015-04-04 10:55 - 2014-12-18 22:26 - 00140800 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\mrxdav.sys
2015-04-04 10:55 - 2014-12-11 18:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\System32\TSWbPrxy.exe
2015-04-04 10:55 - 2014-12-11 16:51 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ahcache.sys
2015-04-04 10:55 - 2014-10-28 18:46 - 00081920 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\BTHUSB.SYS
2015-04-04 10:55 - 2014-10-28 18:46 - 00053248 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\bthenum.sys
2015-04-04 10:55 - 2014-10-28 18:45 - 01198080 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\bthport.sys
2015-04-04 10:55 - 2014-10-28 18:43 - 00062976 _____ (Microsoft Corporation) C:\Windows\System32\printui.exe
2015-04-04 10:55 - 2014-10-28 18:34 - 00309760 _____ (Microsoft Corporation) C:\Windows\System32\compstui.dll
2015-04-04 10:55 - 2014-10-28 18:04 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\findnetprinters.dll
2015-04-04 10:55 - 2014-10-28 18:03 - 00241152 ____C (Microsoft Corporation) C:\Windows\System32\fsquirt.exe
2015-04-04 10:55 - 2014-10-28 17:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.exe
2015-04-04 10:55 - 2014-10-28 17:52 - 00289280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\compstui.dll
2015-04-04 10:55 - 2014-10-28 17:51 - 00477184 _____ (Microsoft Corporation) C:\Windows\System32\puiobj.dll
2015-04-04 10:55 - 2014-10-28 17:45 - 00221184 _____ (Microsoft Corporation) C:\Windows\System32\prnntfy.dll
2015-04-04 10:55 - 2014-10-28 17:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\findnetprinters.dll
2015-04-04 10:55 - 2014-10-28 17:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\System32\atlthunk.dll
2015-04-04 10:55 - 2014-10-28 17:20 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-04-04 10:55 - 2014-10-28 17:15 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2015-04-04 10:55 - 2014-10-28 16:55 - 00192512 _____ (Microsoft Corporation) C:\Windows\System32\puiapi.dll
2015-04-04 10:55 - 2014-10-28 16:44 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2015-04-04 10:55 - 2014-10-28 16:41 - 00269312 _____ (Microsoft Corporation) C:\Windows\System32\DafPrintProvider.dll
2015-04-04 10:55 - 2014-10-28 16:35 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2015-04-04 10:55 - 2014-09-03 16:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\System32\rastls.dll
2015-04-04 10:55 - 2014-09-03 16:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-04-04 10:55 - 2014-08-01 16:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\System32\schedsvc.dll
2015-04-04 10:55 - 2014-07-15 10:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\System32\WpcMon.exe
2015-04-04 10:55 - 2014-07-15 00:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\System32\Wpc.dll
2015-04-04 10:55 - 2014-07-15 00:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\System32\WpcWebSync.dll
2015-04-04 10:55 - 2014-07-15 00:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2015-04-04 10:55 - 2010-02-04 00:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_6.dll
2015-04-04 10:55 - 2010-02-04 00:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_6.dll
2015-04-04 10:55 - 2010-02-04 00:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_4.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_3.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_3.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_2.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_5.dll
2015-04-04 10:55 - 2008-10-27 00:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2015-04-04 10:55 - 2008-07-31 00:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2015-04-04 10:55 - 2008-07-31 00:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_2.dll
2015-04-04 10:55 - 2008-07-31 00:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_1.dll
2015-04-04 10:55 - 2008-07-31 00:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2015-04-04 10:55 - 2008-07-31 00:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_2.dll
2015-04-04 10:55 - 2008-07-31 00:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2015-04-04 10:54 - 2014-08-15 20:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\System32\propsys.dll
2015-04-04 10:54 - 2014-08-15 19:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2015-04-04 10:54 - 2014-08-15 19:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2015-04-04 10:54 - 2014-08-15 17:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-04-04 10:54 - 2014-08-15 17:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\System32\Wldap32.dll
2015-04-04 10:54 - 2014-08-15 16:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\System32\SystemEventsBrokerServer.dll
2015-04-04 10:54 - 2014-08-15 16:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\System32\httpprxm.dll
2015-04-04 10:54 - 2014-08-15 16:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\System32\ProximityService.dll
2015-04-04 10:54 - 2014-08-15 16:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\System32\bisrv.dll
2015-04-04 10:54 - 2014-08-15 16:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2015-04-04 10:54 - 2014-08-15 16:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\System32\adhsvc.dll
2015-04-04 10:54 - 2014-08-15 16:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll
2015-04-04 10:54 - 2014-08-15 16:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\System32\pcsvDevice.dll
2015-04-04 10:54 - 2014-08-15 16:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\System32\SearchFolder.dll
2015-04-04 10:54 - 2014-08-15 16:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\System32\SkyDriveTelemetry.dll
2015-04-04 10:54 - 2014-08-15 16:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\System32\SkyDriveShell.dll
2015-04-04 10:54 - 2014-08-15 16:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\System32\SyncEngine.dll
2015-04-04 10:54 - 2014-08-15 16:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Search.dll
2015-04-04 10:54 - 2014-08-15 16:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2015-04-04 10:54 - 2014-08-15 16:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2015-04-04 10:54 - 2014-08-15 16:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2015-04-04 10:54 - 2014-08-15 16:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2015-04-04 10:54 - 2014-08-15 16:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
2015-04-04 10:54 - 2014-08-15 16:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-04-04 10:54 - 2014-07-24 07:28 - 00468288 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\USBHUB3.SYS
2015-04-04 10:54 - 2014-07-24 03:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\bridge.sys
2015-04-04 10:54 - 2014-07-24 02:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\System32\rdvidcrl.dll
2015-04-04 10:54 - 2014-07-24 01:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-04-04 10:54 - 2014-06-09 14:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-04-04 10:54 - 2014-06-09 14:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\System32\TsWpfWrp.exe
2015-04-04 10:53 - 2015-01-19 10:42 - 01487976 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll
2015-04-04 10:53 - 2014-10-22 21:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\System32\packager.dll
2015-04-04 10:53 - 2014-10-22 21:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-04-04 10:53 - 2014-08-22 21:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2015-04-04 10:53 - 2014-08-22 21:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-04-04 10:52 - 2015-01-28 17:11 - 00274944 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 10:52 - 2015-01-28 17:00 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-04 10:52 - 2015-01-28 16:59 - 02773504 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2015-04-04 10:52 - 2015-01-28 16:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\System32\WSShared.dll
2015-04-04 10:52 - 2015-01-28 16:50 - 00811008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2015-04-04 10:52 - 2015-01-28 16:49 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-04-04 10:52 - 2015-01-27 18:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\System32\StorageContextHandler.dll
2015-04-04 10:52 - 2015-01-27 17:47 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StorageContextHandler.dll
2015-04-04 10:52 - 2014-10-28 18:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\System32\WSCollect.exe
2015-04-04 10:52 - 2014-10-28 18:34 - 00079872 _____ (Microsoft Corporation) C:\Windows\System32\WSReset.exe
2015-04-04 10:52 - 2014-10-28 17:57 - 00016896 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2015-04-04 10:52 - 2014-10-28 17:15 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-04-04 10:52 - 2014-10-28 17:15 - 00005632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-04-04 10:52 - 2014-10-28 17:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-04-04 10:52 - 2014-10-28 17:13 - 00315392 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.dll
2015-04-04 10:52 - 2014-10-28 17:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-04-04 10:52 - 2014-10-28 17:13 - 00008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-04-04 10:52 - 2014-10-28 16:55 - 00223744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2015-04-04 10:52 - 2014-10-12 18:43 - 00238912 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\sdbus.sys
2015-04-04 10:52 - 2014-10-12 18:43 - 00153920 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\dumpsd.sys
2015-04-04 10:52 - 2014-10-12 18:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\pdc.sys
2015-04-04 10:52 - 2014-10-12 18:43 - 00039744 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\intelpep.sys
2015-04-04 10:52 - 2014-05-18 22:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\System32\drvcfg.exe
2015-04-04 10:52 - 2014-05-18 22:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\System32\drvinst.exe
2015-04-04 10:52 - 2014-05-18 21:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2015-04-04 10:52 - 2014-04-29 20:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2015-04-04 10:52 - 2014-04-29 20:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\System32\FntCache.dll
2015-04-04 10:52 - 2014-04-29 19:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-04-04 10:33 - 2015-02-12 09:40 - 22291584 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2015-04-04 10:33 - 2015-02-12 09:34 - 19731824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-04-04 10:33 - 2015-01-30 15:20 - 00203264 _____ (Microsoft Corporation) C:\Windows\System32\ubpm.dll
2015-04-04 10:33 - 2015-01-29 18:02 - 00102912 _____ (Microsoft Corporation) C:\Windows\System32\eappgnui.dll
2015-04-04 10:33 - 2015-01-29 17:40 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappgnui.dll
2015-04-04 10:33 - 2015-01-29 17:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\System32\eapp3hst.dll
2015-04-04 10:33 - 2015-01-29 17:24 - 00339456 _____ (Microsoft Corporation) C:\Windows\System32\eapphost.dll
2015-04-04 10:33 - 2015-01-29 17:24 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapp3hst.dll
2015-04-04 10:33 - 2015-01-29 17:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eapphost.dll
2015-04-04 10:33 - 2015-01-29 17:08 - 00346112 _____ (Microsoft Corporation) C:\Windows\System32\eappcfg.dll
2015-04-04 10:33 - 2015-01-29 17:06 - 00278016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappcfg.dll
2015-04-04 10:33 - 2015-01-29 10:45 - 01763352 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2015-04-04 10:33 - 2015-01-29 10:34 - 01488040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-04-04 10:33 - 2014-12-10 21:36 - 00046456 _____ (Microsoft Corporation) C:\Windows\System32\LockScreenContentServer.exe
2015-04-04 10:33 - 2014-12-05 19:17 - 00360448 _____ (Microsoft Corporation) C:\Windows\System32\ncsi.dll
2015-04-04 10:33 - 2014-12-05 17:41 - 00391680 _____ (Microsoft Corporation) C:\Windows\System32\nlasvc.dll
2015-04-04 10:33 - 2014-10-30 14:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-04-04 10:33 - 2014-10-30 14:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2015-04-04 10:33 - 2014-10-28 17:24 - 00086016 _____ (Microsoft Corporation) C:\Windows\System32\nlaapi.dll
2015-04-04 10:33 - 2014-10-28 17:19 - 00070656 _____ (Microsoft Corporation) C:\Windows\System32\eappprxy.dll
2015-04-04 10:33 - 2014-10-28 17:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-04-04 10:33 - 2014-10-28 16:59 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\eappprxy.dll
2015-04-04 10:33 - 2014-07-11 20:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\System32\MDMAgent.exe
2015-04-04 10:33 - 2014-06-06 05:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2015-04-04 10:33 - 2014-06-06 04:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-04-04 10:33 - 2014-05-01 05:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wpcfltr.sys
2015-04-04 10:33 - 2014-04-30 21:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\System32\wpccpl.dll
2015-04-04 10:26 - 2014-11-09 15:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2015-04-04 10:26 - 2014-11-09 15:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-04-04 10:26 - 2014-09-09 22:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2015-04-04 10:26 - 2014-09-07 19:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2015-04-04 10:26 - 2014-09-07 19:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2015-04-04 10:26 - 2014-09-03 19:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\System32\mfmp4srcsnk.dll
2015-04-04 10:26 - 2014-09-03 18:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2015-04-04 10:26 - 2014-09-03 16:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\System32\winbici.dll
2015-04-04 10:26 - 2014-08-30 16:17 - 00148800 ____C (Microsoft Corporation) C:\Windows\System32\Drivers\USBSTOR.SYS
2015-04-04 10:26 - 2014-08-30 14:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\System32\FXSCOMEX.dll
2015-04-04 10:26 - 2014-08-30 13:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\System32\FXSAPI.dll
2015-04-04 10:26 - 2014-08-30 13:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll
2015-04-04 10:26 - 2014-08-30 12:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2015-04-04 10:26 - 2014-08-30 12:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2015-04-04 10:26 - 2014-08-27 16:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\System32\WsmSvc.dll
2015-04-04 10:26 - 2014-08-27 16:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-04-04 10:26 - 2014-08-22 21:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll
2015-04-04 10:26 - 2014-08-22 21:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2015-04-04 10:26 - 2014-08-22 20:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers.dll
2015-04-04 10:26 - 2014-08-01 16:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\System32\untfs.dll
2015-04-04 10:26 - 2014-08-01 16:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2015-04-04 10:23 - 2015-02-07 15:57 - 01090048 _____ (Microsoft Corporation) C:\Windows\System32\MrmCoreR.dll
2015-04-04 10:23 - 2015-02-07 15:49 - 00791040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2015-04-04 10:23 - 2015-01-27 17:31 - 00402432 _____ (Microsoft Corporation) C:\Windows\System32\WMPhoto.dll
2015-04-04 10:23 - 2015-01-27 17:11 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-04-04 10:23 - 2015-01-27 15:47 - 02501368 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2015-04-04 10:23 - 2015-01-27 15:41 - 02207488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2015-04-04 10:23 - 2014-12-08 11:42 - 00535640 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2015-04-04 10:23 - 2014-12-08 11:42 - 00531616 _____ (Microsoft Corporation) C:\Windows\System32\ci.dll
2015-04-04 10:23 - 2014-12-08 11:42 - 00448792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-04-04 10:23 - 2014-12-08 11:42 - 00413248 _____ (Microsoft Corporation) C:\Windows\System32\Faultrep.dll
2015-04-04 10:23 - 2014-12-08 11:42 - 00372408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2015-04-04 10:23 - 2014-12-08 11:42 - 00108944 _____ (Microsoft Corporation) C:\Windows\System32\EncDump.dll
2015-04-04 10:23 - 2014-12-08 11:42 - 00038264 _____ (Microsoft Corporation) C:\Windows\System32\WerFaultSecure.exe
2015-04-04 10:23 - 2014-12-08 11:42 - 00033584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2015-04-04 10:23 - 2014-12-05 17:35 - 00229888 _____ (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll
2015-04-04 10:23 - 2014-10-28 20:00 - 00465320 _____ (Microsoft Corporation) C:\Windows\System32\WerFault.exe
2015-04-04 10:23 - 2014-10-28 20:00 - 00139984 _____ (Microsoft Corporation) C:\Windows\System32\wermgr.exe
2015-04-04 10:23 - 2014-10-28 19:52 - 00500016 _____ (Microsoft Corporation) C:\Windows\System32\AudioSes.dll
2015-04-04 10:23 - 2014-10-28 19:52 - 00482872 _____ (Microsoft Corporation) C:\Windows\System32\AudioEng.dll
2015-04-04 10:23 - 2014-10-28 19:52 - 00394120 _____ (Microsoft Corporation) C:\Windows\System32\AUDIOKSE.dll
2015-04-04 10:23 - 2014-10-28 19:52 - 00272248 _____ (Microsoft Corporation) C:\Windows\System32\audiodg.exe
2015-04-04 10:23 - 2014-10-28 19:12 - 00413136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2015-04-04 10:23 - 2014-10-28 19:12 - 00136296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2015-04-04 10:23 - 2014-10-28 19:07 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-04-04 10:23 - 2014-10-28 19:07 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-04-04 10:23 - 2014-10-28 19:07 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-04-04 10:23 - 2014-10-28 18:44 - 00037888 _____ (Microsoft Corporation) C:\Windows\System32\werdiagcontroller.dll
2015-04-04 10:23 - 2014-10-28 17:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll
2015-04-04 10:23 - 2014-10-28 17:02 - 00911360 _____ (Microsoft Corporation) C:\Windows\System32\audiosrv.dll
2015-04-04 09:36 - 2015-04-16 10:40 - 00002159 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-04 09:34 - 2015-04-17 06:13 - 00009072 _____ () C:\Windows\SysWOW64\29xyOff.ini
2015-04-04 09:34 - 2015-04-17 06:13 - 00009072 _____ () C:\Windows\System32\29xyOff.ini
2015-04-04 09:34 - 2015-04-01 02:35 - 00416552 _____ (scsp) C:\Windows\System32\scxy64.dll
2015-04-04 09:34 - 2015-04-01 02:35 - 00349872 _____ (scsp) C:\Windows\SysWOW64\scxy.dll
2015-04-04 09:34 - 2015-04-01 02:34 - 00046496 _____ (scsp) C:\Windows\System32\Drivers\scjrtr.sys
2015-04-04 09:34 - 2015-04-01 02:34 - 00035744 _____ (scsp) C:\Windows\System32\Drivers\scjrtf.sys
2015-04-04 09:33 - 2015-04-21 11:01 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-04 09:33 - 2015-04-21 10:38 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-04 09:33 - 2015-04-04 09:33 - 00004088 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-04-04 09:33 - 2015-04-04 09:33 - 00003852 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-04-04 09:32 - 2015-04-04 09:33 - 00000000 ____D () C:\Users\user\AppData\Local\Deployment
2015-04-04 09:32 - 2015-04-04 09:32 - 00000000 ____D () C:\Users\user\AppData\Local\Apps\2.0
2015-04-04 09:21 - 2014-07-23 19:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2015-04-04 09:21 - 2014-07-23 19:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\System32\msvcr120_clr0400.dll
2015-04-04 09:20 - 2014-05-31 02:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\System32\twinapi.appcore.dll
2015-04-04 09:20 - 2014-05-30 18:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\System32\twinui.appcore.dll
2015-04-04 09:20 - 2014-05-30 18:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2015-04-04 09:18 - 2015-04-04 09:18 - 00000000 ____D () C:\ProgramData\e69bfb600002cd1
2015-04-04 09:12 - 2015-04-04 09:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\WildTangent
2015-04-04 09:01 - 2015-04-18 03:48 - 00000000 ___RD () C:\Users\user\Desktop\Games
2015-04-04 08:55 - 2015-04-04 08:55 - 00000000 ____D () C:\Users\user\AppData\Local\Steam
2015-04-04 08:51 - 2015-04-21 10:56 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-04 08:51 - 2015-04-04 08:51 - 00000983 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-04-04 08:50 - 2015-04-04 08:50 - 01142128 _____ () C:\Users\user\Downloads\SteamSetup.exe
2015-04-04 08:34 - 2015-04-04 08:34 - 00000000 ____H () C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-04-04 08:32 - 2015-04-07 14:53 - 00000000 ___HD () C:\Users\Public\Temp
2015-04-04 08:30 - 2015-04-04 09:36 - 00000000 ____D () C:\Users\user\AppData\Local\Google
2015-04-04 08:30 - 2015-04-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Google
2015-04-04 08:30 - 2015-04-04 08:31 - 00008552 _____ () C:\claraInstaller.txt
2015-04-04 08:30 - 2015-04-04 08:30 - 00003546 _____ () C:\Windows\System32\Tasks\VZZXGN
2015-04-04 08:30 - 2015-04-04 08:30 - 00002962 _____ () C:\Windows\System32\Tasks\FUB
2015-04-04 08:30 - 2015-04-04 08:30 - 00000000 ____D () C:\ProgramData\7b2a98c5c3a9485689cfb0f9c7e387ba
2015-04-04 08:29 - 2015-04-17 16:06 - 00000000 ____D () C:\Users\user\AppData\Local\CrashDumps
2015-04-04 08:28 - 2015-04-04 08:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Macromedia
2015-04-04 08:28 - 2015-04-04 08:28 - 00000000 ____D () C:\Users\user\AppData\Local\Acer Aspire R7 Tutorial
2015-04-04 04:04 - 2015-04-21 09:54 - 00003910 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{4B77C285-2957-41B2-AC16-E035149999DF}
2015-04-04 04:04 - 2015-04-04 04:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieUserList
2015-04-04 04:04 - 2015-04-04 04:04 - 00000000 __SHD () C:\Users\user\AppData\Local\EmieSiteList
2015-04-04 03:50 - 2015-04-04 03:50 - 00000000 ___HD () C:\$SysReset
2015-04-04 00:06 - 2015-04-21 10:29 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2489847289-3309440512-3948852859-1002
2015-04-04 00:04 - 2015-04-04 00:04 - 00000000 ____D () C:\Users\Public\Pokki
2015-04-04 00:01 - 2015-04-04 08:49 - 00000000 ____D () C:\Users\user\AppData\Local\clear.fi
2015-04-04 00:01 - 2015-04-04 00:01 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-04-04 00:01 - 2015-04-04 00:01 - 00000000 ____D () C:\Users\user\PicStream
2015-04-04 00:01 - 2015-04-04 00:01 - 00000000 ____D () C:\Users\user\AppData\Roaming\Atheros
2015-04-04 00:01 - 2015-04-04 00:01 - 00000000 ____D () C:\Users\user\AppData\Local\AOP SDK
2015-04-04 00:01 - 2015-04-04 00:01 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2015-04-04 00:00 - 2015-04-05 10:44 - 00000000 ____D () C:\Users\user\AppData\Local\Packages
2015-04-04 00:00 - 2015-04-04 00:00 - 00000180 _____ () C:\Windows\System32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-04-04 00:00 - 2015-04-04 00:00 - 00000020 ___SH () C:\Users\user\ntuser.ini
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Vorlagen
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Startmenü
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Netzwerkumgebung
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Lokale Einstellungen
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Eigene Dateien
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Druckumgebung
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Musik
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Documents\Eigene Bilder
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Verlauf
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\AppData\Local\Anwendungsdaten
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 _SHDL () C:\Users\user\Anwendungsdaten
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 ____D () C:\Windows\oem
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 ____D () C:\Users\user\AppData\Roaming\Adobe
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 ____D () C:\Users\user\AppData\Local\OEM
2015-04-04 00:00 - 2015-04-04 00:00 - 00000000 ____D () C:\Program Files\Accessory Store

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-21 11:02 - 2014-08-30 04:27 - 01691459 _____ () C:\Windows\WindowsUpdate.log
2015-04-21 11:02 - 2013-08-22 06:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-21 11:02 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\System32\config\BBI
2015-04-21 11:00 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sru
2015-04-21 10:56 - 2014-07-25 13:28 - 00000000 ____D () C:\Program Files (x86)\McAfee
2015-04-21 10:56 - 2013-08-22 06:46 - 00026441 _____ () C:\Windows\setupact.log
2015-04-21 10:55 - 2014-03-18 01:54 - 00070164 _____ () C:\Windows\PFRO.log
2015-04-21 10:26 - 2014-08-30 12:48 - 00765582 _____ () C:\Windows\System32\perfh007.dat
2015-04-21 10:26 - 2014-08-30 12:48 - 00159366 _____ () C:\Windows\System32\perfc007.dat
2015-04-21 10:26 - 2014-03-18 02:03 - 01776918 _____ () C:\Windows\System32\PerfStringBackup.INI
2015-04-18 12:04 - 2013-08-22 05:25 - 00262144 ___SH () C:\Windows\System32\config\ELAM
2015-04-18 03:48 - 2014-07-25 13:21 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-18 03:41 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-04-17 16:04 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Help
2015-04-16 09:34 - 2013-08-22 07:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-04-16 09:33 - 2013-08-22 03:22 - 00461312 _____ (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2015-04-16 09:33 - 2013-08-22 03:22 - 00034304 _____ (Microsoft Corporation) C:\Windows\System32\dpnsvr.exe
2015-04-16 09:33 - 2013-08-22 03:17 - 00066560 _____ (Microsoft Corporation) C:\Windows\System32\dpnathlp.dll
2015-04-16 09:33 - 2013-08-22 03:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\System32\dpnhupnp.dll
2015-04-16 09:33 - 2013-08-22 03:17 - 00009216 _____ (Microsoft Corporation) C:\Windows\System32\dpnhpast.dll
2015-04-16 09:33 - 2013-08-21 20:05 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2015-04-16 09:33 - 2013-08-21 20:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2015-04-16 09:33 - 2013-08-21 19:59 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2015-04-16 09:33 - 2013-08-21 19:56 - 00377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2015-04-16 09:33 - 2013-08-21 19:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2015-04-16 09:33 - 2013-08-21 19:51 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2015-04-16 09:33 - 2013-08-21 19:51 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2015-04-16 09:33 - 2013-08-21 19:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2015-04-16 09:33 - 2013-08-21 19:51 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2015-04-16 09:28 - 2014-07-25 13:24 - 00276123 _____ () C:\Windows\DirectX.log
2015-04-16 07:34 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\rescache
2015-04-15 14:12 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\AppCompat
2015-04-15 14:09 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\schemas
2015-04-14 11:37 - 2013-08-22 06:44 - 00381472 _____ () C:\Windows\System32\FNTCACHE.DAT
2015-04-06 13:15 - 2014-07-25 13:22 - 00000000 ____D () C:\ProgramData\CyberLink
2015-04-06 13:14 - 2014-08-30 03:59 - 00000000 ____D () C:\Users\Public\CyberLink
2015-04-05 07:13 - 2014-03-18 01:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-04-05 07:13 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ToastData
2015-04-05 07:13 - 2013-08-22 07:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-04-05 07:13 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-04-05 07:13 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-04-05 07:13 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\setup
2015-04-05 07:13 - 2013-08-22 05:36 - 00000000 ____D () C:\Windows\System32\oobe
2015-04-04 22:59 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\WinStore
2015-04-04 22:59 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-RS
2015-04-04 22:59 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\sr-Latn-CS
2015-04-04 22:59 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-04-04 22:59 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-04-04 21:31 - 2014-07-25 13:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-04-04 21:30 - 2014-07-25 13:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-04-04 20:53 - 2013-08-22 07:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-04-04 13:37 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-04-04 13:37 - 2013-08-22 07:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-04-04 13:36 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\MediaViewer
2015-04-04 13:36 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\FileManager
2015-04-04 13:36 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\Camera
2015-04-04 09:12 - 2014-07-25 13:23 - 00000000 ____D () C:\ProgramData\WildTangent
2015-04-04 08:52 - 2014-07-25 13:26 - 00000000 ____D () C:\Program Files\Acer
2015-04-04 08:52 - 2014-07-25 13:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-04-04 08:48 - 2014-07-25 13:57 - 00000000 ___HD () C:\OEM
2015-04-04 08:48 - 2014-07-25 13:21 - 00000000 ____D () C:\ProgramData\OEM
2015-04-04 08:48 - 2014-07-25 13:20 - 00000000 ____D () C:\ProgramData\acer
2015-04-04 08:31 - 2013-08-22 07:36 - 00000000 ____D () C:\Windows\System32\restore
2015-04-04 00:00 - 2014-07-25 13:58 - 00000000 ____D () C:\Windows\Panther
2015-04-03 23:59 - 2014-07-25 13:00 - 00000000 ____D () C:\users\Administrator

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2015-04-04 10:23] - [2015-01-27 15:47] - 2501368 ____A (Microsoft Corporation) C10A66189DC8C090E7C84873EDCEBC88

C:\Windows\SysWOW64\explorer.exe
[2015-04-04 10:23] - [2015-01-27 15:41] - 2207488 ____A (Microsoft Corporation) 91E24273FCA076EA9E65DAFA98901225

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2015-04-05 03:51] - [2014-07-24 07:23] - 1519488 ____A (Microsoft Corporation) A055D7D686F1CB5CBEDCFBB4C6DC9E2E

C:\Windows\SysWOW64\User32.dll
[2015-04-05 03:50] - [2014-07-24 00:49] - 1361408 ____A (Microsoft Corporation) A39251FAE3189E1AE1F0DF0884D37E2A

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Restore Points  =========================

Restore point made on: 2015-04-12 11:27:44
Restore point made on: 2015-04-14 10:00:33
Restore point made on: 2015-04-15 13:32:17
Restore point made on: 2015-04-18 03:47:14

==================== Memory info =========================== 

Percentage of memory in use: 8%
Total physical RAM: 8115.27 MB
Available physical RAM: 7399.18 MB
Total Pagefile: 8115.27 MB
Available Pagefile: 7421.1 MB
Total Virtual: 131072 MB
Available Virtual: 131071.88 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:914.95 GB) (Free:844.29 GB) NTFS
Drive d: () (Removable) (Total:1.91 GB) (Free:0.35 GB) FAT
Drive e: (FOOTBALL MANIA) (CDROM) (Total:0.45 GB) (Free:0 GB) CDFS
Drive f: (U3 System) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive g: (Recovery) (Fixed) (Total:0.59 GB) (Free:0.3 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.5 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 2000CC9F)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 1.9 GB) (Disk ID: 265DB6DA)
Partition 1: (Not Active) - (Size=1.9 GB) - (Type=06)


LastRegBack: 2015-04-15 13:52

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Nach diesem Fix von aussen direkt wieder den Fix aus meinem letzten Post im normalen Modus wiederholen, also speicher ihn dir vorher!!!!
Nach dem Fix von Aussen wird das Internet nicht mehr gehen, daher den Fix im normalen Modus direkt hinterher!!!!


Drücke bitte die + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

R1 scjrtf; C:\Windows\system32\DRIVERS\scjrtf.sys [35744 2015-04-01] () [File not signed]
R1 scjrtr; C:\Windows\system32\DRIVERS\scjrtr.sys [46496 2015-04-01] () [File not signed]
C:\Windows\system32\DRIVERS\scjrtf.sys
C:\Windows\system32\Drivers\scjrtr.sys
R2 scxy; C:\Program Files (x86)\System-Checker\Files\scxy.exe [1936280 2015-04-01] (scsp)
R2 syschkrm; C:\Program Files (x86)\System-Checker\syschkrm.exe [110080 2015-04-01] () [File not signed]
R2 syschkrs; C:\Program Files (x86)\System-Checker\syschkrs.exe [186880 2015-04-01] () [File not signed]
C:\Program Files (x86)\System-Checker
C:\ProgramData\dZmUpbFe

C:\ProgramData\{5a1fc2fd-59b0-de74-5a1f-fc2fd59b0bf5}

C:\ProgramData\{e2578e53-2fd8-c3e2-e257-78e532fd394c}
         

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

• Starte deinen Rechner erneut in die Reparaturoptionen
• Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.