HKLM\System\CCS\Services\Tcpip\... - Eintrag kommt immer wieder!

netfreak · 12.10.2015, 12:56

Habe mir eine SSD Platte zugelegt für meinen Laptop. Habe Windows XP neu installiert und alles aktiviert.

Nun habe ich Virenscan gemacht nichts gefunden. Spybot Scan durchlaufen lassen nichts gefunden. Zur sicherheit habe ich auch in Abgesicherten Modus Virenscan und Spybot scannen lassen. Nichts gefunden.

HiJackThis hingegen finden aber diesen Eintrag hier:

Code:

ATTFilter

O17 - HKLM\System\CCS\Services\Tcpip\..\{99A53946-CEA5-4897-9563-1C013177EF1A}: NameServer = 46.165.246.196 46.165.246.197

Sonst gibt es nichts auffälliges.

Wenn ich den Eintrag nun mit HijackThis Fixe und neu scanne scheint der Eintrag nicht mehr da zu sein. Nach einen Neustart allerdings wenn ich wieder mit HJT scanne ist der Eintrag Plötzlich wieder da.

Nun habe ich erneut gefixt und neu gestartet. Nur diesmal habe ich die Internetferbindung unterbrochen um zu sehen ob der Eintrag dann auch wieder Plötzlich da ist.
HJT fand diesmal den Eintrag nicht. Auch nachdem ich anschliesend die Internetverbindung aufbaute kam der Eintrag nicht mehr.

Aber ... beim neustart mit vorhandener Internetverbindung hat sich der Eintrag wieder selber eingtragen. HJT hat den Eintrag wieder erblickt.

HiJackThis Logfile

Code:

ATTFilter

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:57:35, on 12.10.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.23739)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Programme\Nero\Update\NASvc.exe
C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe
C:\Programme\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Programme\Acronis\DiskDirector\OSS\reinstall_svc.exe
C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\COMODO\COMODO Internet Security\cistray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\PLFSetL.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\CKSOFT~1\CKPOPU~1\pkill.exe
C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Programme\TClock Light\Zima Alexander\tclock.exe
C:\Programme\AutoHotkey\AutoHotkey.exe
C:\Programme\DeskPins\DeskPins.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\DOKUME~1\ZIMAAL~1\LOKALE~1\Temp\RtkBtMnt.exe
C:\Programme\COMODO\COMODO Internet Security\cis.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [COMODO Internet Security] C:\Programme\COMODO\COMODO Internet Security\cistray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Programme\Realtek\Audio\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Programme\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [SynTPStart] C:\Programme\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [CK POPUP KILLER] C:\PROGRA~1\CKSOFT~1\CKPOPU~1\pkill.exe -hide
O4 - HKCU\..\Run: [AnyDVD] C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [TClock Light] C:\Programme\TClock Light\Zima Alexander\tclock.exe
O4 - HKCU\..\Run: [TBP] C:\Programme\BatteryInfo\Suite\bicmd.exe /showtbpanel
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [TBP] C:\Programme\BatteryInfo\Suite\BICmd.exe /showtbpanel (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: ac'tivAid.lnk = C:\Programme\ac'tivAid\ac'tivAid.ahk
O4 - Startup: DeskPins.lnk = C:\Programme\DeskPins\DeskPins.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1444424446640
O17 - HKLM\System\CCS\Services\Tcpip\..\{99A53946-CEA5-4897-9563-1C013177EF1A}: NameServer = 46.165.246.196 46.165.246.197
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Programme\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @C:\Programme\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Programme\Nero\Update\NASvc.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Acronis OS Selector Activator (OS Selector) - Unknown owner - C:\Programme\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Programme\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: TuneUp Drive Defrag-Dienst (TuneUp.Defrag) - TuneUp Software - C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 7220 bytes

Habe ich mir was schädliches eingefangen?
Wie lösche ich den Eintrag dauerhaft so das er nicht mehr kommt?

schrauber · 12.10.2015, 16:36

Hi,

Windows XP neu installiert? Ernsthaft? XP darf nicht mehr online, ist bekannt oder?

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

netfreak · 12.10.2015, 18:36

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:11-10-2015 02
durchgeführt von Zima Alexander (2015-10-12 19:18:57)
Gestartet von D:\Eigene Dateien\Zima Alexander\Eigene Dateien\Downloads
Microsoft Windows XP Professional Service Pack 3 (X86) (2015-10-08 16:41:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2025429265-507921405-1417001333-500 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Administrator
Gast (S-1-5-21-2025429265-507921405-1417001333-501 - Limited - Disabled)
Hilfeassistent (S-1-5-21-2025429265-507921405-1417001333-1000 - Limited - Disabled)
SUPPORT_388945a0 (S-1-5-21-2025429265-507921405-1417001333-1002 - Limited - Disabled)
Zima Alexander (S-1-5-21-2025429265-507921405-1417001333-1003 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Zima Alexander

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: COMODO Antivirus (Enabled - Up to date) {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO Firewall (Disabled) {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acronis*Disk*Director*Home (HKLM\...\{9CCC78EF-027E-40E0-9B61-39932C65E3FE}) (Version: 11.0.216 - Acronis)
Acronis*True*Image*Home (HKLM\...\{37C8899D-FD70-481F-94AA-1F1B08765E22}) (Version: 12.0.9551 - Acronis)
ac'tivAid v1.3.1 (HKLM\...\ac'tivAid) (Version: 1.3.1 - Heise Zeitschriften Verlag GmbH & Co. KG)
Adobe Flash Player 10 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 10.3.181.34 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
AnyDVD (HKLM\...\AnyDVD) (Version: 7.6.4.0 - SlySoft)
Atheros Driver Installation Program (HKLM\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 7.7.0.267 - Atheros)
AutoHotkey 1.0.47.06 (HKLM\...\AutoHotkey) (Version: 1.0.47.06 - Chris Mallett)
CK Popup Killer (HKLM\...\CK Popup Killer) (Version:  - )
CloneBD (HKLM\...\CloneBD) (Version: 1.0.5.8 - Elaborate Bytes)
COMODO Internet Security Premium (HKLM\...\{D32EF4F9-1506-434E-A813-3D4C0AA50300}) (Version: 7.0.53315.4132 - COMODO Security Solutions Inc.)
DeskPins (remove only) (HKLM\...\DeskPins) (Version:  - )
FaJo XP File Security Extension v1.2 (HKLM\...\FaJo XP File Security Extension_is1) (Version: v1.2 - FaJo)
High-Definition Video Playback (Version: 7.1.13400.42.0 - Nero AG) Hidden
HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
Hotfix für Windows Media Player 11 (KB939683) (HKLM\...\KB939683) (Version:  - Microsoft Corporation)
Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - Intel Corporation)
Leawo Blu-ray Player (HKLM\...\{B6498454-B98B-4D0D-BCFB-AC9BDB8344EE}_is1) (Version: 1.8.0.2 - leawo Software)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C314CE45-3392-3B73-B4E1-139CD41CA933}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30730 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation)
Microsoft FrontPage 2002 (HKLM\...\{90170407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office XP Professional (HKLM\...\{91110407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Rechner-Plus (HKLM\...\{437C19B3-7E20-4E39-B868-CA6BAA820E1C}) (Version: 1.0.0 - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version:  - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft-Basissmartcard-Kryptografiedienstanbieterpaket (HKLM\...\KB909520) (Version:  - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (HKLM\...\Mozilla Thunderbird 24.2.0 (x86 de)) (Version: 24.2.0 - Mozilla)
mysms Version 2.1.1 (HKLM\...\{48F31003-B5A3-4E17-917A-5DDFF60B9FA2}_is1) (Version: 2.1.1 - Up to Eleven Digital Solutions GmbH)
Nero 10 ClipartPack (HKLM\...\{96ED4B78-300E-4033-AE6C-C115CEB4DF07}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Menu TemplatePack 1 (HKLM\...\{42C8B7DF-FEB0-4D51-B169-506B6BEC5797}) (Version: 10.2.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 2 (HKLM\...\{E712C273-7564-4C8E-AA59-0FA19BC35117}) (Version: 10.2.10000.0.0 - Nero AG)
Nero 10 Menu TemplatePack 3 (HKLM\...\{92146419-AE44-4C8B-A48B-0ABB1B5EC026}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 Movie ThemePack 1 (HKLM\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Movie ThemePack 2 (HKLM\...\{70F19404-B96C-4EBB-AD2B-3574F8736197}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 Movie ThemePack 3 (HKLM\...\{DD238642-14C7-4D54-8BD7-FAD6DEA9999B}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 Movie ThemePack 4 (HKLM\...\{A70B0C7B-3527-4D53-A694-E9492ECE9EE1}) (Version: 10.2.10100.1.0 - Nero AG)
Nero 10 PiP EffectPack 1 (HKLM\...\{EF3A4DAE-F16F-4AC1-87BB-FE00A784084F}) (Version: 10.2.10000.0.0 - Nero AG)
Nero 10 Sample ImagePack (HKLM\...\{ACD15FDF-FC42-4175-B477-576F92FF2256}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Sample Videos (HKLM\...\{92A10E9D-EA00-4A46-8F22-EEA660992D61}) (Version: 10.2.10000.11.0 - Nero AG)
Nero 10 Video TransitionPack 1 (HKLM\...\{85BEC8F6-9AA3-43FF-B56B-8276277137B3}) (Version: 10.2.10000.0.0 - Nero AG)
Nero BackItUp 10 (HKLM\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.6.11000.11.100 - Nero AG)
Nero Burning ROM 10 (HKLM\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.2.11000.12.100 - Nero AG)
Nero BurnRights 10 (HKLM\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10300.0.102 - Nero AG)
Nero CoverDesigner 10 (HKLM\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.2.10700.7.100 - Nero AG)
Nero DiscSpeed 10 (HKLM\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10300.1.100 - Nero AG)
Nero Express 10 (HKLM\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.11100.12.100 - Nero AG)
Nero InfoTool 10 (HKLM\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.2.10300.5.100 - Nero AG)
Nero MediaHub 10 (HKLM\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.2.12300.27.100 - Nero AG)
Nero Multimedia Suite 10 Platinum HD (HKLM\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.5.10900 - Nero AG)
Nero Recode 10 (HKLM\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.8.10400.3.100 - Nero AG)
Nero RescueAgent 10 (HKLM\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.2.10600.7.100 - Nero AG)
Nero SoundTrax 10 (HKLM\...\{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}) (Version: 4.8.10200.1.100 - Nero AG)
Nero StartSmart 10 (HKLM\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11100.10.100 - Nero AG)
Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Nero Vision 10 (HKLM\...\{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}) (Version: 7.2.14700.9.100 - Nero AG)
Nero WaveEditor 10 (HKLM\...\{EDCDFAD5-DF80-4600-A493-E9DAD6810230}) (Version: 5.8.10400.2.100 - Nero AG)
Notebook BatteryInfo Suite 1.4  (HKLM\...\BatteryInfo_Suite) (Version: 1.4 - Thomas Michel)
O2Micro Flash Memory Card Reader Driver (x86) (HKLM\...\{61B9BC1E-F0E6-4A4F-98CB-A0D2EB2D7731}) (Version: 3.24.1 - O2Micro)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41417}) (Version: 3.61.0 - dotPDN LLC)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
Rainlendar (remove only) (HKLM\...\Rainlendar) (Version:  - )
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 5.10.0.5643 - Realtek Semiconductor Corp.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Sicherheitsupdate für Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2909921) (HKLM\...\KB2909921-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB3087038) (HKLM\...\KB3087038-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2378111) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB2803821-v2) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB2834904-v2) (HKLM\...\KB2834904-v2_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB3067903) (HKLM\...\KB3067903_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB952069) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB954155) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB973540) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB975558) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB978695) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player 11 (KB3033890) (HKLM\...\KB3033890_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player 11 (KB954154) (HKLM\...\KB954154_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2510581) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2619339) (HKLM\...\KB2619339) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2661637) (HKLM\...\KB2661637) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2705219-v2) (HKLM\...\KB2705219-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2723135-v2) (HKLM\...\KB2723135-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2847311) (HKLM\...\KB2847311) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862152) (HKLM\...\KB2862152) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862330) (HKLM\...\KB2862330) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862335) (HKLM\...\KB2862335) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2868038) (HKLM\...\KB2868038) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2868626) (HKLM\...\KB2868626) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876331) (HKLM\...\KB2876331) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2879017) (HKLM\...\KB2879017) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2892075) (HKLM\...\KB2892075) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2893294) (HKLM\...\KB2893294) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2898715) (HKLM\...\KB2898715) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2900986) (HKLM\...\KB2900986) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2909212) (HKLM\...\KB2909212) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2914368) (HKLM\...\KB2914368) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2916036) (HKLM\...\KB2916036) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2922229) (HKLM\...\KB2922229) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2926765) (HKLM\...\KB2926765) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2929961) (HKLM\...\KB2929961) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2930275) (HKLM\...\KB2930275) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2957503) (HKLM\...\KB2957503) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2957509) (HKLM\...\KB2957509) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2961072) (HKLM\...\KB2961072) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2989935) (HKLM\...\KB2989935) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2993254) (HKLM\...\KB2993254) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2998579) (HKLM\...\KB2998579) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3004361) (HKLM\...\KB3004361) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3006226) (HKLM\...\KB3006226) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3011780) (HKLM\...\KB3011780) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3013126) (HKLM\...\KB3013126) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3019215) (HKLM\...\KB3019215) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3020393-v2) (HKLM\...\KB3020393-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3021674) (HKLM\...\KB3021674) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3023562) (HKLM\...\KB3023562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3029944) (HKLM\...\KB3029944) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3033395) (HKLM\...\KB3033395) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3033889) (HKLM\...\KB3033889) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3035132) (HKLM\...\KB3035132) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3039066) (HKLM\...\KB3039066) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3061518) (HKLM\...\KB3061518) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3069392) (HKLM\...\KB3069392) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3072630) (HKLM\...\KB3072630) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3072633) (HKLM\...\KB3072633) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3073921) (HKLM\...\KB3073921) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3076895) (HKLM\...\KB3076895) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3078601) (HKLM\...\KB3078601) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB3087039) (HKLM\...\KB3087039) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923789) (HKLM\...\KB923789) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB941569) (HKLM\...\KB941569) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975713) (Version: 1 - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 10.0.15.0 - Synaptics)
ThinkVantage Fingerprint Software (HKLM\...\{9AB3F8D9-3EF7-466D-B124-08B3AF53CB6A}) (Version: 5.8.9.7266 - AuthenTec Inc.)
TuneUp Utilities (HKLM\...\TuneUp Utilities) (Version: 9.0.6000.19 - TuneUp Software)
TuneUp Utilities (Version: 9.0.6000.19 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.6000.19 - TuneUp Software) Hidden
Update für Windows Internet Explorer 8 (KB2598845) (HKLM\...\KB2598845-IE8) (Version: 1 - Microsoft Corporation)
Update für Windows Internet Explorer 8 (KB2632503) (HKLM\...\KB2632503-IE8) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2492386) (HKLM\...\KB2492386) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2808679) (HKLM\...\KB2808679) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2993651) (HKLM\...\KB2993651) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB3020338) (HKLM\...\KB3020338) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB3065979) (HKLM\...\KB3065979) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB3077715) (HKLM\...\KB3077715) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden
Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.8.0 - Shark007)
VLC media player 2.0.4 (HKLM\...\VLC media player) (Version: 2.0.4 - VideoLAN)
WebCam (HKLM\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.52.004 - Sonix)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray (HKLM\...\KB952011) (Version: 1.0 - Microsoft Corporation)
Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version:  - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Windows Management Framework Core (HKLM\...\KB968930) (Version:  - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
XML Paper Specification Shared Components Language Pack 1.0 (Version:  - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

12-10-2015 15:43:26 Systemprüfpunkt

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2008-08-21 14:00 - 2015-10-11 17:45 - 00450770 ____R C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com

Da befinden sich 1000 zusätzliche Einträge.


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9}.job => C:\Programme\COMODO\COMODO Internet Security\cfpconfg.exe
Task: C:\WINDOWS\Tasks\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22}.job => C:\Programme\COMODO\COMODO Internet Security\cfpconfg.exe
Task: C:\WINDOWS\Tasks\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}.job => C:\Programme\COMODO\COMODO Internet Security\cfpconfg.exe
Task: C:\WINDOWS\Tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job => C:\Programme\COMODO\COMODO Internet Security\cfpconfg.exe
Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job => C:\WINDOWS\system32\xp_eos.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2010-05-25 19:53 - 2015-10-09 11:57 - 02155848 _____ () C:\Programme\Acronis\DiskDirector\OSS\reinstall_svc.exe
2013-04-15 18:39 - 2015-01-09 00:02 - 00061152 _____ () C:\Programme\COMODO\COMODO Internet Security\scanners\smart.cav
2008-03-09 17:12 - 2015-10-09 20:59 - 00240640 _____ () C:\Programme\AutoHotkey\AutoHotkey.exe
2015-10-12 16:18 - 2006-01-21 14:31 - 00573440 _____ () C:\Programme\Rainlendar\Rainlendar.dll
2015-10-12 16:18 - 2006-01-21 14:31 - 00176128 _____ () C:\Programme\Rainlendar\Plugins\iCalPlugin.dll
2015-10-12 16:18 - 2006-01-21 14:31 - 00065536 _____ () C:\Programme\Rainlendar\Plugins\IniFormatPlugin.dll
2015-10-12 16:18 - 2006-01-21 14:31 - 00053248 _____ () C:\Programme\Rainlendar\Plugins\OutlookPlugin.dll
2015-10-12 16:18 - 2006-01-21 14:31 - 00045056 _____ () C:\Programme\Rainlendar\Plugins\ServerPlugin.dll
2014-07-14 15:58 - 2014-03-07 07:00 - 03641968 _____ () C:\Programme\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\WINDOWS\ERUNT.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\unin0407.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\6to4svc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\advpack.dll.mui:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\agrsmdel.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\asferror.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\asycfilt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\audiodev.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\avifil32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\axaltocm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\basecsp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\bcsprsrc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\bdaplgin.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\cabview.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\cewmdm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\corpol.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\cscript.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\csrsrv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_42.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\D3DCompiler_43.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\d3dx9_30.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\d3dx9_34.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\d3dx9_35.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\D3DX9_40.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\D3DX9_42.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\D3DX9_43.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dpnet.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\drmupgds.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dxdllreg.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\encdec.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\fontsub.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\GPhotos.scr:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\iacenc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\icardagt.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\icardie.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\iccvid.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\idndl.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ie4uinit.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ie4uinit.exe.mui:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ieapfltr.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\iedkcs32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\iedkcs32.dll.mui:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ieencode.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ieframe.dll.mui:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ieudinit.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ieui.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ifxcardm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\imapi2.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\imapi2fs.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\inetcomm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\inetcpl.cpl:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\isign32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\iyuv_32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\jsproxy.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ksolay.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\l3codecp.acm:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\l3codecx.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\LAPRXY.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\licmgr10.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\localspl.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\logagent.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\lsasrv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mciseq.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mdmxsdk.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mfc40.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mfc40u.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mfc42.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mfc42u.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\MFPLAT.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\MP43DECD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\MP43DMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mp4sdecd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\MP4SDMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mpg2splt.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\MPG4DECD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\MPG4DMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\MRT.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msdbg2.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msdelta.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msdtclog.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msdtcprx.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msdtctm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msdtcuiu.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msdvbnp.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msfeedssync.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mshta.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mshta.exe.mui:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mshtmled.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msiexec.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msihnd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mspaint.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mspmsp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msrating.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msrating.dll.mui:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msrle32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msscp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mstime.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mstsc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mstscax.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msvidc32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mswebdvd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mswmdm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\msyuv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mtxoci.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\mucltui.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\muweb.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\nlsdl.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\normaliz.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ntkrnlpa.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\occache.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\packager.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\pdh.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\pintool.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\pngfilt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\PortableDeviceApi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\PortableDeviceClassExtension.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\PortableDeviceTypes.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\PortableDeviceWiaCompat.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\PortableDeviceWMDRM.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\PresentationHost.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\prntvpt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\psisdecd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\psisrndr.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\pwrshplugin.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\qasf.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\qedit.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\quartz.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\query.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\sbe.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\sc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\scrobj.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\scrrun.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\services.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\shimgvw.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\spoolsv.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\spupdsvc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\srvsvc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\strmdll.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\synceng.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\t2embed.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\telnet.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\tlntsess.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\tsbyuv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\TsWpfWrp.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\tzchange.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\UCI32M16.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\UCI32M17.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\uharc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\uiautomationcore.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\uwdf.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\vbscript.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wdfapi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wdfmgr.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wevtfwd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WgaTray.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\win32k.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WinFXDocObj.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrm.cmd:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrm.vbs:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrmprov.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrs.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrscmd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrshost.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrsmgr.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\winrssrv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wkssvc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMADMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMADMOE.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmdmlog.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmdmps.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmdrmdev.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmdrmnet.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmdrmsdk.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmerror.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmidx.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmpasf.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmpdxm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmpencen.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmploc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmpmde.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmpps.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmpshell.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmpsrcwp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmsdmod.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmsdmoe2.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMSPDMOE.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMVADVD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMVADVE.DLL:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmvdmod.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wmvdmoe2.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMVENCOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMVSDECD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMVSENCD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WMVXENCD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wpdconns.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wpdmtp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wpdmtpus.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WpdShext.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wpdshextautoplay.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wpdshextres.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WPDShServiceObj.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wpdsp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wpd_ci.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wscript.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wshext.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wshom.ocx:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wsmanhttpconfig.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WsmAuto.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wsmplpxy.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\wsmprovhost.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WsmRes.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WsmSvc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WsmWmiPl.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WUDFCoinstaller.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WudfHost.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WudfPlatform.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WudfSvc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\WUDFx.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\xmllite.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\xpsshhdr.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\xpssvcs.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\xp_eos.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\afd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\b57xp32.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\bdasup.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\fastfat.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\hidparse.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\HSFHWAZL.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\HSF_CNXT.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\HSF_DPV.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\http.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ksecdd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\mdmxsdk.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\mpe.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxdav.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\msdv.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ndistapi.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\ndproxy.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\rdpwd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\snapman.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\snman378.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\tcpip.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\tcpip6.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\tdrpm124.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\tifsfilt.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\usb8023.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbccgp.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbehci.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbport.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\USBSTOR.SYS:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\usbvideo.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\VClone.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\wpdusb.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\WudfPf.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\Drivers\WudfRd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\6to4svc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\aclayers.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\advapi32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\afd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\asferror.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\asycfilt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\atmfd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\avifil32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\b57xp32.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\bdaplgin.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\bdasup.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\blackbox.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\browser.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\browseui.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\cabview.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\cdrom.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\cewmdm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\corpol.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\crypt32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\cscript.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\csrsrv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\dhtmled.ocx:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\dnsapi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\dnsrslvr.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\dpnet.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\drmv2clt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\dxtmsft.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\dxtrans.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\encdec.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\fastfat.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\fastprox.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\filterpipelineprintproc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\gdi32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\helpsvc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\hidparse.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\http.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\httpapi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iacenc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ie4uinit.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iecompat.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iedkcs32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iedvtool.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ieencode.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ieframe.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iepeers.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ieproxy.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iertutil.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iexplore.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\imapi2.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\imapi2fs.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\inetcomm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\inetcpl.cpl:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\irbus.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\isign32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\iyuv_32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\jscript.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\jsdbgui.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\jsprofilerui.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\jsproxy.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\kerberos.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\kernel32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ksecdd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\LAPRXY.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\lhmstsc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\lhmstscx.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\licmgr10.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\localspl.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\logagent.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\lsasrv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mciseq.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mfc40.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mfc40u.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mfc42.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mfc42u.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\moviemk.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\MP43DMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mp4sdecd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\MP4SDMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mpe.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mpg2splt.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\MPG4DMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mpvis.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mqac.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mqqm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mrxdav.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mrxsmb.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msadce.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msadco.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msado15.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msadomd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msadox.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msasn1.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mscms.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msctf.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msdtclog.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msdtcprx.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msdtctm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msdtcuiu.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msdv.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msdvbnp.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msfeeds.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msfeedsbs.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mshta.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mshtml.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mshtmled.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msiexec.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msihnd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msjro.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msnetobj.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msoe.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mspaint.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mspmsnsv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mspmsp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msrating.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msrle32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msscp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mstime.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msv1_0.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msvidc32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mswebdvd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mswmdm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mswsock.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msxml3.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msxml6.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\msyuv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mtxclu.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\mtxoci.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ndistapi.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ndproxy.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\netapi32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ntdll.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ntkrnlmp.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ntkrnlpa.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ntkrpamp.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ntoskrnl.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\oakley.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\occache.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\odbc32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\ole32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\oleaut32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\packager.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\pdh.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\pid.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\pngfilt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\printfilterpipelinesvc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\psisdecd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\psisrndr.ax:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\qasf.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\qdvd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\qedit.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\quartz.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\query.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\raschap.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\rastls.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\rdpwd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\rpcrt4.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\rpcss.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\sbe.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\sc.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\scesrv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\schannel.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\scrobj.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\scrrun.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\secur32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\services.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\setup_wm.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\shdocvw.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\shell32.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\shimgvw.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\shlwapi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\shsvcs.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\spoolsv.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\sqmapi.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\srvsvc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\strmdll.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\strmfilt.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\synceng.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\t2embed.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\tcpip.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\tcpip6.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\telnet.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\themeui.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\tlntsess.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\triedit.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\tsbyuv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\unregmp2.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\url.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\urlmon.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usb8023.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usb8023x.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbaudio.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbccgp.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbd.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbehci.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbport.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbscan.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbstor.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usbvideo.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\userenv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\usp10.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\vbscript.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\vgx.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wab.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wdigest.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\webcheck.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\WgaTray.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\win32k.sys:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\winhttp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wininet.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\winmm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\winsrv.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wintrust.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wkssvc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\WMADMOD.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\WMADMOE.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmdmlog.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmdmps.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmerror.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmidx.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmiprvsd.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmiprvse.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmp.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmpasf.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmpband.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmpdxm.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmplayer.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmploc.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmpshell.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmsdmod.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmsdmoe2.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\WMSPDMOE.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmvdmod.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wmvdmoe2.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wordpad.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wscript.exe:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wshext.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\wshom.ocx:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\xpshims.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\xpsshhdr.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\xpssvcs.dll:$CmdTcID
AlternateDataStreams: C:\WINDOWS\system32\dllcache\xp_eos.exe:$CmdTcID

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Da befinden sich 15751 mehr eingeschränkte Seiten.

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2025429265-507921405-1417001333-1003\Control Panel\Desktop\\Wallpaper -> C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
DNS Servers: 192.168.8.1 - 46.165.246.196
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

StandardProfile\AuthorizedApplications: [C:\WINDOWS\Network Diagnostic\xpnetdiag.exe] => Disabled:@xpsp3res.dll,-20000
StandardProfile\AuthorizedApplications: [C:\WINDOWS\system32\sessmgr.exe] => Disabled:@xpsp2res.dll,-22019
StandardProfile\GloballyOpenPorts: [5985:TCP] => Disabled:Windows-Remoteverwaltung 
StandardProfile\GloballyOpenPorts: [80:TCP] => Disabled:Windows-Remoteverwaltung - Kompatibilitätsmodus (HTTP eingehend) 

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Broadcom NetXtreme Gigabit Ethernet
Description: Broadcom NetXtreme Gigabit Ethernet
Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318}
Manufacturer: Broadcom
Service: b57w2k
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/12/2015 04:25:34 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 04:23:56 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 04:23:55 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 04:23:55 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 03:58:04 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 03:56:26 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 03:56:25 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 03:56:25 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 12:28:50 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler

Error: (10/12/2015 12:27:12 PM) (Source: Userenv) (EventID: 1500) (User: NT-AUTORITÄT)
Description: Sie konnte nicht angemeldet werden , da das lokal gespeicherte Profil nicht geladen werden konnte. Überprüfen Sie, das eine Netzwerkverbindung besteht und das das Netzwerk korrekt arbeitet. Wenden Sie sich an den Netzwerkadministrator, wenn das Problem weiterhin besteht. 


Details - Unbekannter Fehler


Systemfehler:
=============
Error: (10/08/2015 09:40:08 PM) (Source: Windows Update Agent) (EventID: 20) (User: )
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Microsoft .NET Framework 3.0: x86 Language Pack (KB928416)

Error: (10/08/2015 07:43:29 PM) (Source: W32Time) (EventID: 29) (User: )
Description: Der Zeitanbieter "NtpClient" wurde für die Zeiterfassung von mehreren Zeitquellen
konfiguriert. Es ist jedoch Keine der Quellen verfügbar. Innerhalb
der nächsten 14 Minuten wird kein Versuch unternommen, eine Verbindung
mit der Quelle herzustellen.
Der NtpClient verfügt über keine Quelle mit genauer Zeit.

Error: (10/08/2015 07:43:29 PM) (Source: W32Time) (EventID: 17) (User: )
Description: Zeitabieter "NtpClient": Beim DNS-Lookup für den manuell konfigurierten Peer
"time.windows.com,0x1" ist ein Fehler aufgetreten. Der DNS-Lookup wird in 15 Minuten
wiederholt.
Fehler: Der Host war bei einem Socketvorgang nicht erreichbar. (0x80072751)


==================== Memory info =========================== 

Processor: Intel(R) Celeron(R) CPU 900 @ 2.20GHz
Prozentuale Nutzung des RAM: 28%
Installierter physikalischer RAM: 3000.89 MB
Verfügbarer physikalischer RAM: 2157.66 MB
Summe virtueller Speicher: 4890.11 MB
Verfügbarer virtueller Speicher: 3978.37 MB

==================== Laufwerke ================================

Drive c: (WINDOWS XP) (Fixed) (Total:100.01 GB) (Free:74.82 GB) NTFS ==>[Laufwerk mit Startkomponenten (Windows XP)]
Drive d: (DATEN) (Fixed) (Total:500 GB) (Free:254.91 GB) NTFS
Drive h: (HOME) (Fixed) (Total:231.5 GB) (Free:229.99 GB) NTFS
Drive r: (RECOVERY) (Fixed) (Total:100.01 GB) (Free:73.93 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 0007DB06)
Partition 1: (Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=831.5 GB) - (Type=OF Extended)

==================== Ende vom Addition.txt ============================

netfreak · 12.10.2015, 19:00

Code:

ATTFilter

FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-10-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AcrSch2Svc; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [554264 2015-10-09] (Acronis)
R2 CmdAgent; C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe [4353840 2015-09-03] (COMODO)
R3 cmdvirth; C:\Programme\COMODO\COMODO Internet Security\cmdvirth.exe [1664704 2015-08-05] (COMODO)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [136120 2015-10-11] (Google)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [119408 2014-03-07] (Mozilla Foundation)
R2 NAUpdate; C:\Programme\Nero\Update\NASvc.exe [503080 2015-10-11] (Nero AG)
R2 o2flash; C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe [65536 2007-02-12] (O2Micro International) [Datei ist nicht signiert]
R2 OS Selector; C:\Programme\Acronis\DiskDirector\OSS\reinstall_svc.exe [2155848 2015-10-09] ()
R2 ss_conn_service; C:\Programme\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-10-10] (DEVGURU Co., LTD.)
S3 TuneUp.Defrag; C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe [435008 2015-10-09] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1052480 2015-10-09] (TuneUp Software)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2015-10-08] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [136488 2015-04-28] (SlySoft, Inc.)
R3 AR5416; C:\WINDOWS\System32\DRIVERS\athw.sys [1529600 2009-03-27] (Atheros Communications, Inc.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R1 cmderd; C:\WINDOWS\System32\DRIVERS\cmderd.sys [15808 2015-08-05] (COMODO)
R1 cmdGuard; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [631872 2015-08-05] (COMODO)
R1 cmdHlp; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [30144 2015-08-05] (COMODO)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [30616 2014-12-25] (Elaborate Bytes AG)
R3 HSFHWAZL; C:\WINDOWS\System32\DRIVERS\HSFHWAZL.sys [210688 2015-10-08] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\WINDOWS\System32\DRIVERS\HSF_DPV.sys [988032 2015-10-08] (Conexant Systems, Inc.)
R0 Inspect; C:\WINDOWS\System32\DRIVERS\inspect.sys [105664 2015-08-05] (COMODO)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R2 smihlp; C:\Programme\ThinkVantage Fingerprint Software\smihlp.sys [11976 2011-05-30] (Authentec Inc.)
R0 snapman378; C:\WINDOWS\System32\DRIVERS\snman378.sys [134272 2015-10-09] (Acronis)
R3 SNP2UVC; C:\WINDOWS\System32\DRIVERS\snp2uvc.sys [1759744 2009-05-06] ()
R3 TcUsb; C:\WINDOWS\System32\Drivers\tcusb.sys [51400 2011-08-19] (AuthenTec, Inc.)
R0 tdrpman124; C:\WINDOWS\System32\DRIVERS\tdrpm124.sys [950848 2015-10-09] (Acronis)
R2 tifsfilter; C:\WINDOWS\System32\DRIVERS\tifsfilt.sys [44704 2015-10-09] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2009-10-14] (TuneUp Software)
R3 VClone; C:\WINDOWS\System32\DRIVERS\VClone.sys [29696 2015-10-10] (Elaborate Bytes AG) [Datei ist nicht signiert]
S4 IntelIde; kein ImagePath
S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [X]
U1 WS2IFSL; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Code:

ATTFilter

==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-12 19:15 - 2015-10-12 19:17 - 00000000 ____D C:\FRST
2015-10-12 16:25 - 2015-10-12 16:29 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Rainlendar
2015-10-12 16:18 - 2015-10-12 16:18 - 00000000 ____D C:\Programme\Rainlendar
2015-10-12 16:18 - 2015-10-12 16:18 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\Rainlendar
2015-10-12 15:40 - 2008-08-21 14:00 - 00002233 ____C C:\WINDOWS\system32\dllcache\12520850.cpx
2015-10-12 15:40 - 2008-08-21 14:00 - 00002233 _____ C:\WINDOWS\system32\12520850.cpx
2015-10-12 15:40 - 2008-08-21 14:00 - 00002151 ____C C:\WINDOWS\system32\dllcache\12520437.cpx
2015-10-12 15:40 - 2008-08-21 14:00 - 00002151 _____ C:\WINDOWS\system32\12520437.cpx
2015-10-12 14:21 - 2015-10-12 14:27 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
2015-10-12 14:20 - 2015-10-12 14:27 - 00000000 ____D C:\Programme\Security Task Manager
2015-10-11 17:45 - 2015-10-09 19:15 - 00450770 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20151011-174516.backup
2015-10-11 15:47 - 2015-10-11 15:47 - 00000000 ____D C:\Programme\TClock Light
2015-10-11 15:41 - 2015-10-11 15:41 - 00000000 __SHD C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.000\IETldCache
2015-10-11 15:39 - 2015-10-11 15:41 - 00000000 __SHD C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.000
2015-10-11 15:39 - 2015-10-11 15:39 - 00000020 ___SH C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.001\ntuser.ini
2015-10-11 15:39 - 2015-10-11 15:39 - 00000020 ___SH C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.000\ntuser.ini
2015-10-11 15:39 - 2015-10-11 15:39 - 00000000 __SHD C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.001
2015-10-11 15:39 - 2015-10-11 15:39 - 00000000 ____D C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.001\Lokale Einstellungen\Temp
2015-10-11 15:39 - 2015-10-11 15:39 - 00000000 ____D C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.000\Lokale Einstellungen\Temp
2015-10-11 15:39 - 2015-10-08 19:31 - 00000000 __SHD C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.000\Lokale Einstellungen\Verlauf
2015-10-11 15:39 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT.001\Lokale Einstellungen\Verlauf
2015-10-11 15:38 - 2015-10-11 15:38 - 00000020 ___SH C:\Dokumente und Einstellungen\TEMP\ntuser.ini
2015-10-11 15:38 - 2015-10-11 15:38 - 00000020 ___SH C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT\ntuser.ini
2015-10-11 15:38 - 2015-10-11 15:38 - 00000000 __SHD C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT
2015-10-11 15:38 - 2015-10-11 15:38 - 00000000 __SHD C:\Dokumente und Einstellungen\TEMP
2015-10-11 15:38 - 2015-10-11 15:38 - 00000000 ____D C:\Dokumente und Einstellungen\TEMP\Lokale Einstellungen\Temp
2015-10-11 15:38 - 2015-10-11 15:38 - 00000000 ____D C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT\Lokale Einstellungen\Temp
2015-10-11 15:38 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\TEMP\Lokale Einstellungen\Verlauf
2015-10-11 15:38 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\TEMP.NT-AUTORITÄT\Lokale Einstellungen\Verlauf
2015-10-11 15:05 - 2015-10-11 15:05 - 00000000 ____D C:\WINDOWS\SxsCaPendDel
2015-10-11 15:03 - 2015-10-11 15:03 - 00331158 _____ C:\WINDOWS\msxml4-KB973688-enu.LOG
2015-10-11 15:03 - 2015-10-11 15:03 - 00323658 _____ C:\WINDOWS\msxml4-KB954430-enu.LOG
2015-10-11 15:03 - 2015-10-11 15:03 - 00000000 ____D C:\Programme\MSXML 4.0
2015-10-11 14:30 - 2015-10-11 14:30 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Nero
2015-10-11 14:12 - 2015-10-11 14:17 - 00000000 ____D C:\Programme\Nero
2015-10-11 14:12 - 2015-10-11 14:12 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Nero
2015-10-11 14:12 - 2015-10-11 14:12 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Nero
2015-10-11 14:11 - 2015-10-11 14:17 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nero
2015-10-11 13:58 - 2015-10-11 13:58 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2015-10-11 13:58 - 2015-10-11 13:58 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2015-10-11 13:58 - 2015-10-11 13:58 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2015-10-11 13:58 - 2015-10-11 13:58 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2015-10-11 13:58 - 2015-10-11 13:58 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2015-10-11 13:58 - 2015-10-11 13:58 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2015-10-11 13:39 - 2015-10-11 13:39 - 00000000 ____D C:\Programme\Microsoft Rechner-Plus
2015-10-11 13:39 - 2015-10-11 13:39 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\Microsoft Rechner-Plus
2015-10-11 13:23 - 2015-10-11 13:23 - 00000000 __SHD C:\Dokumente und Einstellungen\LocalService\IETldCache
2015-10-11 13:23 - 2015-10-11 13:23 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Google
2015-10-11 13:19 - 2015-10-11 13:19 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Picasa 3
2015-10-11 13:18 - 2015-10-11 13:19 - 00007071 _____ C:\WINDOWS\KB952011.log
2015-10-11 13:18 - 2015-10-11 13:19 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\Google
2015-10-11 13:18 - 2015-10-11 13:18 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952011$
2015-10-11 13:18 - 2015-10-11 13:18 - 00000000 ____D C:\Programme\Google
2015-10-11 05:00 - 2015-10-11 05:00 - 01135104 _____ (Thomas Michel) C:\WINDOWS\system32\bih.dll
2015-10-11 05:00 - 2015-10-11 05:00 - 00000000 ____D C:\Programme\BatteryInfo
2015-10-11 05:00 - 2015-10-11 05:00 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Notebook BatteryInfo Suite
2015-10-11 04:40 - 2015-10-11 04:40 - 00000000 ____D C:\Programme\FaJo
2015-10-11 04:03 - 2015-10-12 18:34 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\Paint.NET
2015-10-11 04:03 - 2015-10-11 04:03 - 00000856 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Paint.NET.lnk
2015-10-11 04:03 - 2015-10-11 04:03 - 00000000 ____D C:\Programme\Paint.NET
2015-10-11 03:23 - 2015-10-11 03:23 - 00111104 _____ C:\WINDOWS\system32\uharc.exe
2015-10-11 03:23 - 2005-01-28 01:49 - 00000111 _____ C:\WINDOWS\system32\winx.url
2015-10-11 03:23 - 2004-09-03 23:43 - 00000199 _____ C:\WINDOWS\system32\paypal.url
2015-10-10 19:41 - 2015-10-12 00:26 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\vlc
2015-10-10 19:41 - 2015-10-10 19:41 - 00000000 ____D C:\Programme\VideoLAN
2015-10-10 19:40 - 2015-10-10 19:40 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\VideoLAN
2015-10-10 18:40 - 2015-10-10 18:40 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\Elaborate Bytes
2015-10-10 18:40 - 2015-10-10 18:40 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Elaborate Bytes
2015-10-10 18:04 - 2015-10-10 18:04 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-10-10 18:04 - 2015-10-10 18:04 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2015-10-10 18:04 - 2015-10-10 18:04 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Elaborate Bytes
2015-10-10 18:04 - 2015-10-10 18:04 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Elaborate Bytes
2015-10-10 17:59 - 2015-10-10 17:59 - 00275696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mucltui.dll
2015-10-10 17:59 - 2015-10-10 17:59 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Leawo
2015-10-10 17:59 - 2012-06-02 15:18 - 00018160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mucltui.dll.mui
2015-10-10 17:58 - 2015-10-10 17:59 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Leawo
2015-10-10 17:58 - 2015-10-10 17:58 - 00000000 ____D C:\Programme\leawo
2015-10-10 17:58 - 2015-10-10 17:58 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\leawo
2015-10-10 15:59 - 2015-10-10 15:59 - 00000040 ___SH C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
2015-10-10 15:45 - 2015-10-10 17:57 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\SlySoft
2015-10-10 15:45 - 2015-10-10 15:45 - 00000000 ____D C:\Programme\SlySoft
2015-10-10 15:45 - 2015-10-10 15:45 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
2015-10-10 15:39 - 2015-10-10 18:04 - 00000000 ____D C:\Programme\Elaborate Bytes
2015-10-10 15:36 - 2015-10-10 15:36 - 00000000 ____D C:\Programme\SAMSUNG
2015-10-10 15:36 - 2015-10-10 15:36 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
2015-10-10 14:05 - 2015-10-10 14:07 - 00000000 ____D C:\Programme\mysms
2015-10-10 14:05 - 2015-10-10 14:07 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\mysms
2015-10-10 14:05 - 2015-10-10 14:05 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\sms.at
2015-10-10 13:36 - 2015-10-10 13:36 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
2015-10-10 13:35 - 2015-10-10 13:35 - 00000000 ____D C:\Programme\Microsoft Silverlight
2015-10-10 13:25 - 2015-10-10 13:25 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office Live Add-in
2015-10-10 13:16 - 2015-10-10 13:16 - 00001576 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Microsoft Update.lnk
2015-10-09 23:45 - 2015-10-09 23:45 - 00354816 ____C C:\WINDOWS\system32\dllcache\psisdecd.dll
2015-10-09 23:45 - 2015-10-09 23:45 - 00354816 _____ C:\WINDOWS\system32\psisdecd.dll
2015-10-09 23:45 - 2015-10-09 23:45 - 00052224 ____C C:\WINDOWS\system32\dllcache\msdvbnp.ax
2015-10-09 23:45 - 2015-10-09 23:45 - 00052224 _____ C:\WINDOWS\system32\msdvbnp.ax
2015-10-09 23:45 - 2015-10-09 23:45 - 00052096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdv.sys
2015-10-09 23:45 - 2015-10-09 23:45 - 00052096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msdv.sys
2015-10-09 23:45 - 2015-10-09 23:45 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdllreg.exe
2015-10-09 23:45 - 2015-10-09 23:45 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pid.dll
2015-10-09 23:45 - 2015-10-09 23:45 - 00030208 ____C C:\WINDOWS\system32\dllcache\psisrndr.ax
2015-10-09 23:45 - 2015-10-09 23:45 - 00030208 _____ C:\WINDOWS\system32\psisrndr.ax
2015-10-09 23:45 - 2015-10-09 23:45 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdaplgin.ax
2015-10-09 23:45 - 2015-10-09 23:45 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdaplgin.ax
2015-10-09 23:45 - 2015-10-09 23:45 - 00015104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpe.sys
2015-10-09 23:45 - 2015-10-09 23:45 - 00015104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpe.sys
2015-10-09 23:45 - 2015-10-09 23:45 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksolay.ax
2015-10-09 23:45 - 2015-10-09 23:45 - 00011392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bdasup.sys
2015-10-09 23:45 - 2015-10-09 23:45 - 00011392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bdasup.sys
2015-10-09 23:45 - 2015-10-09 23:45 - 00000000 ____D C:\WINDOWS\RegisteredPackages
2015-10-09 23:44 - 2015-10-09 23:47 - 00081234 _____ C:\WINDOWS\DirectX.log
2015-10-09 22:26 - 2015-10-09 22:26 - 00000000 _____ C:\WINDOWS\PROTOCOL.INI
2015-10-09 22:25 - 2015-10-09 22:26 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\CK Popup Killer
2015-10-09 22:25 - 2015-10-09 22:25 - 00000000 ____D C:\Programme\CK Software
2015-10-09 22:22 - 2015-10-09 22:22 - 00304128 _____ (InstallShield Corporation, Inc.) C:\WINDOWS\unin0407.exe
2015-10-09 22:21 - 2015-10-09 22:21 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\WINDOWS
2015-10-09 22:20 - 2015-10-09 22:20 - 00000000 ____D C:\Programme\WinRAR
2015-10-09 22:20 - 2015-10-09 22:20 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\WinRAR
2015-10-09 22:20 - 2015-10-09 22:20 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WinRAR
2015-10-09 22:12 - 2015-10-09 22:12 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\Thunderbird
2015-10-09 22:10 - 2015-10-09 22:11 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Thunderbird
2015-10-09 22:09 - 2015-10-09 22:09 - 00000000 ____D C:\Programme\Mozilla Thunderbird
2015-10-09 22:08 - 2015-10-09 22:08 - 00001648 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Thunderbird.lnk
2015-10-09 21:33 - 2015-10-09 21:33 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Mozilla
2015-10-09 21:02 - 2015-10-12 16:25 - 00000000 ____D C:\Programme\ac'tivAid
2015-10-09 20:59 - 2015-10-09 20:59 - 00000000 ____D C:\Programme\AutoHotkey
2015-10-09 20:59 - 2015-10-09 20:59 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\ac'tivAid
2015-10-09 20:59 - 2015-10-09 20:59 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AutoHotkey
2015-10-09 20:17 - 2015-10-09 20:17 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\Mozilla
2015-10-09 20:14 - 2015-10-09 20:14 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Mozilla
2015-10-09 20:12 - 2015-10-09 21:36 - 00000000 ____D C:\Programme\Mozilla Firefox
2015-10-09 19:15 - 2008-08-21 14:00 - 00000820 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20151009-191536.backup
2015-10-09 19:06 - 2015-10-09 19:44 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2015-10-09 19:06 - 2015-10-09 19:08 - 00000000 ____D C:\Programme\Spybot - Search & Destroy
2015-10-09 19:06 - 2015-10-09 19:06 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spybot - Search & Destroy
2015-10-09 15:53 - 2015-10-09 15:54 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
2015-10-09 15:53 - 2015-10-09 15:53 - 00001804 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Reader XI.lnk
2015-10-09 15:53 - 2015-10-09 15:53 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Adobe
2015-10-09 15:53 - 2015-10-09 15:53 - 00000000 ____D C:\Programme\Adobe
2015-10-09 15:52 - 2015-10-09 15:54 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\Adobe
2015-10-09 15:51 - 2015-10-09 15:54 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Adobe
2015-10-09 15:51 - 2015-10-09 15:51 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\Macromedia
2015-10-09 15:24 - 2015-10-09 15:24 - 00000000 __SHD C:\Dokumente und Einstellungen\Administrator\IETldCache
2015-10-09 15:24 - 2015-10-09 15:24 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TuneUp Software
2015-10-09 15:23 - 2015-10-11 19:27 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator
2015-10-09 15:23 - 2015-10-09 23:58 - 00000190 ___SH C:\Dokumente und Einstellungen\Administrator\ntuser.ini
2015-10-09 15:23 - 2015-10-09 23:58 - 00000000 ____D C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp
2015-10-09 15:23 - 2015-10-09 15:24 - 00000778 _____ C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Windows Media Player.lnk
2015-10-09 15:23 - 2015-10-09 15:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör
2015-10-09 15:23 - 2015-10-09 15:24 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme
2015-10-09 15:23 - 2015-10-08 19:31 - 00000000 __SHD C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Verlauf
2015-10-09 15:23 - 2015-10-08 19:31 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
2015-10-09 15:23 - 2015-10-08 19:31 - 00000000 ___RD C:\Dokumente und Einstellungen\Administrator\Startmenü
2015-10-09 15:23 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung
2015-10-09 15:23 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\Administrator\Druckumgebung
2015-10-09 15:23 - 2015-10-08 18:39 - 00001599 _____ C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Remoteunterstützung.lnk
2015-10-09 13:57 - 2015-10-12 16:23 - 00065536 _____ C:\WINDOWS\system32\config\TuneUp.evt
2015-10-09 13:54 - 2015-10-09 13:57 - 00001711 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TuneUp Utilities.lnk
2015-10-09 13:54 - 2015-10-09 13:57 - 00000000 ____D C:\Programme\TuneUp Utilities 2010
2015-10-09 13:54 - 2015-10-09 13:54 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\TuneUp Software
2015-10-09 13:54 - 2015-10-09 13:54 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\TuneUp Utilities
2015-10-09 13:54 - 2015-10-09 13:54 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
2015-10-09 13:54 - 2011-05-31 20:22 - 00030528 _____ (TuneUp Software) C:\WINDOWS\system32\TURegOpt.exe
2015-10-09 13:54 - 2011-05-31 20:16 - 00030016 _____ (TuneUp Software) C:\WINDOWS\system32\uxtuneup.dll
2015-10-09 12:51 - 2015-10-09 12:51 - 00950848 _____ (Acronis) C:\WINDOWS\system32\Drivers\tdrpm124.sys
2015-10-09 12:51 - 2015-10-09 12:51 - 00539104 _____ (Acronis) C:\WINDOWS\system32\Drivers\timntr.sys
2015-10-09 12:51 - 2015-10-09 12:51 - 00134272 _____ (Acronis) C:\WINDOWS\system32\Drivers\snman378.sys
2015-10-09 12:51 - 2015-10-09 12:51 - 00044704 _____ (Acronis) C:\WINDOWS\system32\Drivers\tifsfilt.sys
2015-10-09 12:44 - 2015-10-09 12:44 - 00000000 ____D C:\Programme\DeskPins
2015-10-09 12:44 - 2015-10-09 12:44 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\DeskPins
2015-10-09 12:30 - 2015-10-09 12:30 - 00026368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbstor.sys
2015-10-09 12:30 - 2015-10-09 12:30 - 00026368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2015-10-09 12:09 - 2015-10-11 16:10 - 00027648 _____ C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-09 12:01 - 2015-10-09 12:01 - 00000151 _____ C:\WINDOWS\system32\autopart.opt
2015-10-09 12:01 - 2015-10-09 12:01 - 00000000 ____D C:\WINDOWS\Acronis
2015-10-09 11:58 - 2015-10-09 13:09 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
2015-10-09 11:57 - 2015-10-09 12:51 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Acronis
2015-10-09 11:57 - 2015-10-09 12:51 - 00000000 ____D C:\Programme\Acronis
2015-10-09 11:57 - 2015-10-09 12:51 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Acronis
2015-10-09 11:57 - 2015-10-09 11:57 - 00170080 _____ (Acronis) C:\WINDOWS\system32\Drivers\snapman.sys
2015-10-09 11:18 - 2015-10-09 11:18 - 00000000 ____D C:\ATIH
2015-10-09 11:18 - 2011-03-14 15:10 - 00217769 ____H C:\grldr
2015-10-09 11:18 - 2010-08-19 18:44 - 00000396 _____ C:\menu.lst
2015-10-09 11:18 - 2010-08-19 18:44 - 00000297 ___SH C:\boot.ini~
2015-10-09 11:07 - 2015-10-09 11:07 - 00000000 ____D C:\Programme\Trend Micro
2015-10-09 11:07 - 2015-10-09 11:07 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\HiJackThis
2015-10-09 10:58 - 2015-10-09 10:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3020338$
2015-10-09 10:47 - 2015-10-09 10:58 - 00010465 _____ C:\WINDOWS\KB3020338.log
2015-10-09 10:39 - 2015-10-09 10:39 - 00000000 __SHD C:\Dokumente und Einstellungen\Zima Alexander\PrivacIE
2015-10-09 10:38 - 2015-10-09 10:38 - 00000000 ____D C:\Programme\VistaCodecPack
2015-10-09 10:38 - 2015-10-09 10:38 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\VistaCodecs
2015-10-09 10:38 - 2015-10-09 10:38 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Shark007 Codecs
2015-10-09 10:38 - 2015-10-09 10:38 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\VistaCodecs
2015-10-08 23:20 - 2015-10-08 23:20 - 00026259 _____ C:\WINDOWS\KB3087038-IE8.log
2015-10-08 23:20 - 2015-10-08 23:20 - 00022804 _____ C:\WINDOWS\KB3077715.log
2015-10-08 23:20 - 2015-10-08 23:20 - 00016561 _____ C:\WINDOWS\KB3078601.log
2015-10-08 23:20 - 2015-10-08 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3087039$
2015-10-08 23:20 - 2015-10-08 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3078601$
2015-10-08 23:20 - 2015-10-08 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3077715$
2015-10-08 23:20 - 2015-10-08 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3076895$
2015-10-08 23:20 - 2015-10-08 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3073921$
2015-10-08 23:20 - 2015-10-08 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3072633$
2015-10-08 23:20 - 2015-10-08 23:20 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3072630$
2015-10-08 23:19 - 2015-10-08 23:20 - 00012765 _____ C:\WINDOWS\KB3067903.log
2015-10-08 23:19 - 2015-10-08 23:19 - 00012848 _____ C:\WINDOWS\KB3065979.log
2015-10-08 23:19 - 2015-10-08 23:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3069392$
2015-10-08 23:19 - 2015-10-08 23:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3067903_WM11$
2015-10-08 23:19 - 2015-10-08 23:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3065979$
2015-10-08 23:19 - 2015-10-08 23:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3061518$
2015-10-08 23:19 - 2015-10-08 23:19 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3033890_WM11$
2015-10-08 23:14 - 2015-10-08 23:14 - 00012324 _____ C:\WINDOWS\KB3035132.log
2015-10-08 23:14 - 2015-10-08 23:14 - 00011291 _____ C:\WINDOWS\KB3029944.log
2015-10-08 23:14 - 2015-10-08 23:14 - 00010480 _____ C:\WINDOWS\KB3023562.log
2015-10-08 23:14 - 2015-10-08 23:14 - 00009961 _____ C:\WINDOWS\KB3019215.log
2015-10-08 23:14 - 2015-10-08 23:14 - 00009713 _____ C:\WINDOWS\KB3013126.log
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3039066$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3035132$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3033889$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3033395$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3029944$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3023562$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3021674$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3020393-v2$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3019215$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3013126$
2015-10-08 23:14 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3004361$
2015-10-08 23:13 - 2015-10-08 23:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3011780$
2015-10-08 23:13 - 2015-10-08 23:13 - 00009683 _____ C:\WINDOWS\KB2989935.log
2015-10-08 23:13 - 2015-10-08 23:13 - 00008660 _____ C:\WINDOWS\KB2998579.log
2015-10-08 23:13 - 2015-10-08 23:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3006226$
2015-10-08 23:13 - 2015-10-08 23:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2998579$
2015-10-08 23:13 - 2015-10-08 23:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2993254$
2015-10-08 23:13 - 2015-10-08 23:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2989935$
2015-10-08 23:06 - 2015-10-08 23:06 - 00006044 _____ C:\WINDOWS\KB2961072.log
2015-10-08 23:06 - 2015-10-08 23:06 - 00005275 _____ C:\WINDOWS\KB2957503.log
2015-10-08 23:06 - 2015-10-08 23:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2993651$
2015-10-08 23:06 - 2015-10-08 23:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2961072$
2015-10-08 23:06 - 2015-10-08 23:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2957509$
2015-10-08 23:06 - 2015-10-08 23:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2957503$
2015-10-08 23:02 - 2015-10-08 23:20 - 00233984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsprofilerui.dll

Code:

ATTFilter

2015-10-08 23:02 - 2015-10-08 23:20 - 00029783 _____ C:\WINDOWS\KB3087039.log
2015-10-08 23:02 - 2015-10-08 23:20 - 00020816 _____ C:\WINDOWS\KB3076895.log
2015-10-08 23:02 - 2015-10-08 23:20 - 00019927 _____ C:\WINDOWS\KB3073921.log
2015-10-08 23:02 - 2015-10-08 23:20 - 00018871 _____ C:\WINDOWS\KB3072633.log
2015-10-08 23:02 - 2015-10-08 23:19 - 00018942 _____ C:\WINDOWS\KB3069392.log
2015-10-08 23:02 - 2015-10-08 23:02 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2926765$
2015-10-08 23:01 - 2015-10-08 23:19 - 00018355 _____ C:\WINDOWS\KB3061518.log
2015-10-08 23:01 - 2015-10-08 23:14 - 00019275 _____ C:\WINDOWS\KB3033395.log
2015-10-08 23:01 - 2015-10-08 23:14 - 00017842 _____ C:\WINDOWS\KB3039066.log
2015-10-08 23:01 - 2015-10-08 23:14 - 00017308 _____ C:\WINDOWS\KB3033889.log
2015-10-08 23:01 - 2015-10-08 23:14 - 00016523 _____ C:\WINDOWS\KB3004361.log
2015-10-08 23:01 - 2015-10-08 23:14 - 00015740 _____ C:\WINDOWS\KB3021674.log
2015-10-08 23:00 - 2015-10-08 23:14 - 00014933 _____ C:\WINDOWS\KB3020393-v2.log
2015-10-08 23:00 - 2015-10-08 23:13 - 00014393 _____ C:\WINDOWS\KB3006226.log
2015-10-08 23:00 - 2015-10-08 23:13 - 00013994 _____ C:\WINDOWS\KB2993254.log
2015-10-08 23:00 - 2015-10-08 23:06 - 00013158 _____ C:\WINDOWS\KB2993651.log
2015-10-08 23:00 - 2015-10-08 23:06 - 00011306 _____ C:\WINDOWS\KB2957509.log
2015-10-08 22:44 - 2015-10-08 23:02 - 00010925 _____ C:\WINDOWS\KB2926765.log
2015-10-08 22:40 - 2015-10-08 22:41 - 00002525 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft FrontPage.lnk
2015-10-08 22:30 - 2015-10-08 22:40 - 00000400 _____ C:\WINDOWS\ODBC.INI
2015-10-08 22:29 - 2015-10-09 20:59 - 00000000 ____D C:\WINDOWS\ShellNew
2015-10-08 22:29 - 2015-10-08 22:40 - 00002012 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Office-Dokument öffnen.lnk
2015-10-08 22:29 - 2015-10-08 22:40 - 00002008 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Neues Office-Dokument.lnk
2015-10-08 22:29 - 2015-10-08 22:40 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Office Tools
2015-10-08 22:29 - 2015-10-08 22:33 - 00002529 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Excel.lnk
2015-10-08 22:29 - 2015-10-08 22:33 - 00002469 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Access.lnk
2015-10-08 22:29 - 2015-10-08 22:32 - 00002537 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft PowerPoint.lnk
2015-10-08 22:29 - 2015-10-08 22:30 - 00002501 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Word.lnk
2015-10-08 22:29 - 2015-10-08 22:29 - 00000000 ____D C:\Programme\Microsoft Office
2015-10-08 22:29 - 2015-10-08 22:29 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Designer
2015-10-08 22:19 - 2015-10-08 22:22 - 00065536 _____ C:\WINDOWS\system32\config\WindowsPowerShell.evt
2015-10-08 22:19 - 2015-10-08 22:22 - 00065536 _____ C:\WINDOWS\system32\config\EventForwarding-Operational.Evt
2015-10-08 22:15 - 2015-10-08 22:14 - 00050752 ____N (Agere Systems) C:\WINDOWS\system32\agrsmdel.exe
2015-10-08 21:45 - 2015-10-08 21:45 - 00000000 ____D C:\Programme\Microsoft.NET
2015-10-08 21:43 - 2015-10-08 21:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallXPSEPSCLP$
2015-10-08 21:40 - 2015-10-08 22:19 - 00065536 _____ C:\WINDOWS\system32\config\Windows .evt
2015-10-08 21:40 - 2015-10-08 22:19 - 00065536 _____ C:\WINDOWS\system32\config\Microsof.evt
2015-10-08 21:40 - 2015-10-08 21:40 - 00000000 __HDC C:\WINDOWS\$968930Uinstall_KB968930$
2015-10-08 21:40 - 2015-10-08 21:40 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-10-08 21:40 - 2015-10-08 21:40 - 00000000 ____D C:\WINDOWS\system32\WindowsPowerShell
2015-10-08 21:40 - 2015-10-08 21:40 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy
2015-10-08 21:40 - 2015-10-08 21:40 - 00000000 ____D C:\WINDOWS\$NtUninstallKB968930$
2015-10-08 21:29 - 2015-10-08 21:29 - 00005496 _____ C:\WINDOWS\KB2834904-v2.log
2015-10-08 21:29 - 2015-10-08 21:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2015-10-08 21:15 - 2015-10-08 21:15 - 00008232 _____ C:\WINDOWS\KB929399.log
2015-10-08 21:15 - 2015-10-08 21:15 - 00007770 _____ C:\WINDOWS\KB939683.log
2015-10-08 21:15 - 2015-10-08 21:15 - 00004982 _____ C:\WINDOWS\KB961118.log
2015-10-08 21:15 - 2015-10-08 21:15 - 00004595 _____ C:\WINDOWS\KB954154.log
2015-10-08 21:15 - 2015-10-08 21:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB961118$
2015-10-08 21:15 - 2015-10-08 21:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB954154_WM11$
2015-10-08 21:15 - 2015-10-08 21:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB941569$
2015-10-08 21:15 - 2015-10-08 21:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB939683$
2015-10-08 21:15 - 2015-10-08 21:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB929399$
2015-10-08 21:14 - 2015-10-08 21:15 - 00009457 _____ C:\WINDOWS\KB941569.log
2015-10-08 21:07 - 2015-10-11 15:10 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
2015-10-08 21:07 - 2015-10-08 21:07 - 01676288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpssvcs.dll
2015-10-08 21:07 - 2015-10-08 21:07 - 01676288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
2015-10-08 21:07 - 2015-10-08 21:07 - 00597504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\printfilterpipelinesvc.exe
2015-10-08 21:07 - 2015-10-08 21:07 - 00575488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpsshhdr.dll
2015-10-08 21:07 - 2015-10-08 21:07 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsshhdr.dll
2015-10-08 21:07 - 2015-10-08 21:07 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2015-10-08 21:07 - 2015-10-08 21:07 - 00089088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\filterpipelineprintproc.dll
2015-10-08 21:07 - 2015-10-08 21:07 - 00000000 ____D C:\Programme\Reference Assemblies
2015-10-08 21:07 - 2015-10-08 21:07 - 00000000 ____D C:\Programme\MSBuild
2015-10-08 21:06 - 2015-10-12 16:54 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2015-10-08 21:05 - 2015-10-08 21:05 - 00008842 _____ C:\WINDOWS\KB2632503-IE8.log
2015-10-08 21:05 - 2015-10-08 21:05 - 00008630 _____ C:\WINDOWS\KB2492386.log
2015-10-08 21:05 - 2015-10-08 21:05 - 00003490 _____ C:\WINDOWS\MSCompPackV1.log
2015-10-08 21:05 - 2015-10-08 21:05 - 00003437 _____ C:\WINDOWS\basecsp.log
2015-10-08 21:05 - 2015-10-08 21:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallwmp11$
2015-10-08 21:05 - 2015-10-08 21:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallMSCompPackV1$
2015-10-08 21:05 - 2015-10-08 21:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2808679$
2015-10-08 21:05 - 2015-10-08 21:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2492386$
2015-10-08 21:05 - 2015-10-08 21:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallbasecsp$
2015-10-08 21:05 - 2015-10-08 21:05 - 00000000 ____D C:\Programme\Windows Media Connect 2
2015-10-08 21:05 - 2014-01-19 07:04 - 00018808 ____N (Microsoft Corporation) C:\WINDOWS\system32\spmsg.dll
2015-10-08 21:04 - 2015-10-08 21:05 - 00017521 _____ C:\WINDOWS\wmp11.log
2015-10-08 21:04 - 2015-10-08 21:04 - 00029169 _____ C:\WINDOWS\WMFDist11.log
2015-10-08 21:04 - 2015-10-08 21:04 - 00010070 _____ C:\WINDOWS\Wudf01000Inst.log
2015-10-08 21:04 - 2015-10-08 21:04 - 00000000 __HDC C:\WINDOWS\$NtUninstallWudf01000$
2015-10-08 21:04 - 2015-10-08 21:04 - 00000000 __HDC C:\WINDOWS\$NtUninstallWMFDist11$
2015-10-08 21:04 - 2015-10-08 21:04 - 00000000 ____D C:\WINDOWS\system32\LogFiles
2015-10-08 21:03 - 2015-10-08 21:05 - 00009970 _____ C:\WINDOWS\KB2808679.log
2015-10-08 20:59 - 2015-10-08 20:59 - 00009867 _____ C:\WINDOWS\KB2510531-IE8.log
2015-10-08 20:58 - 2015-10-08 20:58 - 00014062 _____ C:\WINDOWS\KB2345886.log
2015-10-08 20:58 - 2015-10-08 20:58 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService\IETldCache
2015-10-08 20:58 - 2015-10-08 20:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB970430$
2015-10-08 20:58 - 2015-10-08 20:58 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2345886$
2015-10-08 20:57 - 2015-10-08 20:57 - 00007642 _____ C:\WINDOWS\WgaNotify.log
2015-10-08 20:56 - 2015-10-12 16:25 - 00000240 _____ C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2015-10-08 20:56 - 2015-10-08 21:00 - 00000234 _____ C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2015-10-08 20:56 - 2015-10-08 20:56 - 00000000 __SHD C:\Dokumente und Einstellungen\Zima Alexander\IETldCache
2015-10-08 20:44 - 2015-10-08 20:45 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-08 20:44 - 2015-10-08 20:44 - 00084798 _____ C:\WINDOWS\KB2929961.log
2015-10-08 20:44 - 2015-10-08 20:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2930275$
2015-10-08 20:44 - 2015-10-08 20:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2929961$
2015-10-08 20:44 - 2015-10-08 20:44 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2922229$
2015-10-08 20:43 - 2015-10-08 23:20 - 00012942 _____ C:\WINDOWS\system32\TZLog.log
2015-10-08 20:43 - 2015-10-08 20:44 - 00085004 _____ C:\WINDOWS\KB2934207.log
2015-10-08 20:43 - 2015-10-08 20:43 - 00084855 _____ C:\WINDOWS\KB2914368.log
2015-10-08 20:43 - 2015-10-08 20:43 - 00084685 _____ C:\WINDOWS\KB2904266.log
2015-10-08 20:43 - 2015-10-08 20:43 - 00082550 _____ C:\WINDOWS\KB2900986.log
2015-10-08 20:43 - 2015-10-08 20:43 - 00082501 _____ C:\WINDOWS\KB2862335.log
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2934207$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2916036$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2914368$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2909212$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2904266$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2879017$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2015-10-08 20:43 - 2015-10-08 20:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2015-10-08 20:42 - 2015-10-08 20:42 - 00084238 _____ C:\WINDOWS\KB2868038.log
2015-10-08 20:42 - 2015-10-08 20:42 - 00082763 _____ C:\WINDOWS\KB2807986.log
2015-10-08 20:42 - 2015-10-08 20:42 - 00082326 _____ C:\WINDOWS\KB2802968.log
2015-10-08 20:42 - 2015-10-08 20:42 - 00081397 _____ C:\WINDOWS\KB2803821-v2.log
2015-10-08 20:42 - 2015-10-08 20:42 - 00079847 _____ C:\WINDOWS\KB2834886.log
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834886$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2820917$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2813345$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2807986$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2802968$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2780091$
2015-10-08 20:42 - 2015-10-08 20:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2757638$
2015-10-08 20:41 - 2015-10-08 20:41 - 00082489 _____ C:\WINDOWS\KB2698365.log
2015-10-08 20:41 - 2015-10-08 20:41 - 00081301 _____ C:\WINDOWS\KB2723135-v2.log
2015-10-08 20:41 - 2015-10-08 20:41 - 00080881 _____ C:\WINDOWS\KB2719985.log
2015-10-08 20:41 - 2015-10-08 20:41 - 00079825 _____ C:\WINDOWS\KB2686509.log
2015-10-08 20:41 - 2015-10-08 20:41 - 00076921 _____ C:\WINDOWS\KB2659262.log
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2770660$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2749655$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2727528$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2723135-v2$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2719985$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2712808$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2705219-v2$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2698365$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2691442$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2686509$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2676562$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2659262$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2655992$
2015-10-08 20:41 - 2015-10-08 20:41 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2653956$
2015-10-08 20:40 - 2015-10-08 23:20 - 11087872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieframe.dll
2015-10-08 20:40 - 2015-10-08 23:20 - 02006528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
2015-10-08 20:40 - 2015-10-08 23:20 - 00743424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedvtool.dll
2015-10-08 20:40 - 2015-10-08 23:20 - 00630272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeeds.dll
2015-10-08 20:40 - 2015-10-08 23:20 - 00522240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsdbgui.dll
2015-10-08 20:40 - 2015-10-08 23:20 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieproxy.dll
2015-10-08 20:40 - 2015-10-08 23:20 - 00055296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2015-10-08 20:40 - 2015-10-08 23:20 - 00012800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpshims.dll
2015-10-08 20:40 - 2015-10-08 20:55 - 00065536 _____ C:\WINDOWS\system32\config\Internet.evt
2015-10-08 20:40 - 2015-10-08 20:41 - 00078162 _____ C:\WINDOWS\KB2661637.log
2015-10-08 20:40 - 2015-10-08 20:40 - 00100104 _____ C:\WINDOWS\KB982381-IE8.log
2015-10-08 20:40 - 2015-10-08 20:40 - 00094514 _____ C:\WINDOWS\ie8.log
2015-10-08 20:40 - 2015-10-08 20:40 - 00090928 _____ C:\WINDOWS\KB2909921-IE8.log
2015-10-08 20:40 - 2015-10-08 20:40 - 00083338 _____ C:\WINDOWS\KB2598845-IE8.log
2015-10-08 20:40 - 2015-10-08 20:40 - 00082696 _____ C:\WINDOWS\KB2467659.log
2015-10-08 20:40 - 2015-10-08 20:40 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iecompat.dll
2015-10-08 20:40 - 2015-10-08 20:40 - 00000000 __HDC C:\WINDOWS\ie8
2015-10-08 20:40 - 2015-10-08 20:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2661637$
2015-10-08 20:40 - 2015-10-08 20:40 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2467659$
2015-10-08 20:40 - 2015-10-08 20:40 - 00000000 ____D C:\WINDOWS\ie8updates
2015-10-08 20:38 - 2015-10-08 20:44 - 132039072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-08 20:37 - 2015-10-08 20:40 - 00066306 _____ C:\WINDOWS\ie8_main.log
2015-10-08 20:37 - 2015-10-08 20:37 - 00043165 _____ C:\WINDOWS\KB2603381.log
2015-10-08 20:37 - 2015-10-08 20:37 - 00041067 _____ C:\WINDOWS\KB2536276-v2.log
2015-10-08 20:37 - 2015-10-08 20:37 - 00040873 _____ C:\WINDOWS\KB2592799.log
2015-10-08 20:37 - 2015-10-08 20:37 - 00040622 _____ C:\WINDOWS\KB2566454.log
2015-10-08 20:37 - 2015-10-08 20:37 - 00040565 _____ C:\WINDOWS\KB2570947.log
2015-10-08 20:37 - 2015-10-08 20:37 - 00038181 _____ C:\WINDOWS\KB2564958.log
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2631813$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2620712$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2619339$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2603381$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2598479$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2592799$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2585542$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2584146$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2570947$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2566454$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2564958$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2544893-v2$
2015-10-08 20:37 - 2015-10-08 20:37 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2536276-v2$
2015-10-08 20:36 - 2015-10-08 20:36 - 00039133 _____ C:\WINDOWS\KB2535512.log
2015-10-08 20:36 - 2015-10-08 20:36 - 00038296 _____ C:\WINDOWS\KB2393802.log
2015-10-08 20:36 - 2015-10-08 20:36 - 00036419 _____ C:\WINDOWS\KB2485663.log
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971029$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2535512$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2510581$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2509553$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2508429$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2507938$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2506212$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2485663$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2483185$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2481109$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2479943$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2478971$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2478960$
2015-10-08 20:36 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2393802$
2015-10-08 20:35 - 2015-10-08 21:19 - 00031139 _____ C:\WINDOWS\KB2378111.log
2015-10-08 20:35 - 2015-10-08 21:19 - 00030580 _____ C:\WINDOWS\KB975558.log
2015-10-08 20:35 - 2015-10-08 21:15 - 00028245 _____ C:\WINDOWS\KB978695.log
2015-10-08 20:35 - 2015-10-08 20:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2419632$
2015-10-08 20:35 - 2015-10-08 20:35 - 00029547 _____ C:\WINDOWS\KB2387149.log
2015-10-08 20:35 - 2015-10-08 20:35 - 00029131 _____ C:\WINDOWS\KB2423089.log
2015-10-08 20:35 - 2015-10-08 20:35 - 00027071 _____ C:\WINDOWS\KB981997.log
2015-10-08 20:35 - 2015-10-08 20:35 - 00026816 _____ C:\WINDOWS\KB2296011.log
2015-10-08 20:35 - 2015-10-08 20:35 - 00026659 _____ C:\WINDOWS\KB2229593.log
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982665$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982132$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB981997$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979687$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979482$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978695_WM9$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978542$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975558_WM8$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2443105$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2423089$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2387149$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2378111_WM9$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2347290$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2296011$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2229593$
2015-10-08 20:35 - 2015-10-08 20:35 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2115168$
2015-10-08 20:34 - 2015-10-08 21:15 - 00031917 _____ C:\WINDOWS\KB952069.log
2015-10-08 20:34 - 2015-10-08 20:34 - 00026624 _____ C:\WINDOWS\KB973904.log
2015-10-08 20:34 - 2015-10-08 20:34 - 00026355 _____ C:\WINDOWS\KB979309.log
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB979309$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978706$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB978338$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB977914$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB977816$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975713$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975560$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975467$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974571$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974392$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974318$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB974112$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973904$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB972270$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB969059$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB968389$
2015-10-08 20:34 - 2015-10-08 20:34 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952069_WM9$
2015-10-08 20:33 - 2015-10-08 21:43 - 00011773 _____ C:\WINDOWS\spupdsvc.log
2015-10-08 20:33 - 2015-10-08 21:15 - 00022472 _____ C:\WINDOWS\KB954155.log
2015-10-08 20:33 - 2015-10-08 20:33 - 00022134 _____ C:\WINDOWS\KB956572.log
2015-10-08 20:33 - 2015-10-08 20:33 - 00021962 _____ C:\WINDOWS\KB956844.log
2015-10-08 20:33 - 2015-10-08 20:33 - 00020848 _____ C:\WINDOWS\KB973869.log
2015-10-08 20:33 - 2015-10-08 20:33 - 00016061 _____ C:\WINDOWS\KB923561.log
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB975025$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973869$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973815$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973540_WM9$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB973507$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB971657$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960859$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB960803$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB959426$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB956844$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB956572$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB954155_WM9$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952004$
2015-10-08 20:33 - 2015-10-08 20:33 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB923561$
2015-10-08 20:32 - 2015-10-08 23:20 - 00070731 _____ C:\WINDOWS\updspapi.log
2015-10-08 20:32 - 2015-10-08 20:32 - 00014084 _____ C:\WINDOWS\KB952287.log
2015-10-08 20:32 - 2015-10-08 20:32 - 00013330 _____ C:\WINDOWS\KB946648.log
2015-10-08 20:32 - 2015-10-08 20:32 - 00013062 _____ C:\WINDOWS\KB950762.log
2015-10-08 20:32 - 2015-10-08 20:32 - 00012711 _____ C:\WINDOWS\KB951376-v2.log
2015-10-08 20:32 - 2015-10-08 20:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952954$
2015-10-08 20:32 - 2015-10-08 20:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB952287$
2015-10-08 20:32 - 2015-10-08 20:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951978$
2015-10-08 20:32 - 2015-10-08 20:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951376-v2$
2015-10-08 20:32 - 2015-10-08 20:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB950974$
2015-10-08 20:32 - 2015-10-08 20:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB950762$
2015-10-08 20:32 - 2015-10-08 20:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB946648$
2015-10-08 20:30 - 2015-10-09 11:20 - 00000313 ___SH C:\boot.ini
2015-10-08 20:30 - 2015-10-08 20:44 - 00105037 _____ C:\WINDOWS\KB2922229.log
2015-10-08 20:30 - 2015-10-08 20:43 - 00095191 _____ C:\WINDOWS\KB2868626.log
2015-10-08 20:30 - 2015-10-08 20:41 - 00091635 _____ C:\WINDOWS\KB2712808.log
2015-10-08 20:30 - 2015-10-08 20:30 - 01089536 _____ C:\WINDOWS\system32\config\software.sav
2015-10-08 20:30 - 2015-10-08 20:30 - 00471040 _____ C:\WINDOWS\system32\config\system.sav
2015-10-08 20:30 - 2015-10-08 20:30 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2015-10-08 20:30 - 2015-10-08 20:30 - 00094208 _____ C:\WINDOWS\system32\config\default.sav
2015-10-08 20:30 - 2015-10-08 20:30 - 00001024 ____H C:\WINDOWS\system32\config\userdiff.LOG
2015-10-08 20:30 - 2015-10-08 20:30 - 00001024 ____H C:\WINDOWS\system32\config\TempKey.LOG
2015-10-08 20:29 - 2015-10-08 20:44 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe
2015-10-08 20:29 - 2015-10-08 20:44 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe
2015-10-08 20:29 - 2015-10-08 20:43 - 00104858 _____ C:\WINDOWS\KB2916036.log
2015-10-08 20:29 - 2015-10-08 20:43 - 00103953 _____ C:\WINDOWS\KB2898715.log
2015-10-08 20:29 - 2015-10-08 20:41 - 00098994 _____ C:\WINDOWS\KB2655992.log
2015-10-08 20:29 - 2015-10-08 20:41 - 00090515 _____ C:\WINDOWS\KB2691442.log
2015-10-08 20:29 - 2015-10-08 20:37 - 00456320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxsmb.sys
2015-10-08 20:29 - 2015-10-08 20:37 - 00054706 _____ C:\WINDOWS\KB2585542.log
2015-10-08 20:29 - 2015-10-08 20:37 - 00053509 _____ C:\WINDOWS\KB2631813.log
2015-10-08 20:29 - 2015-10-08 20:37 - 00052920 _____ C:\WINDOWS\KB2544893-v2.log
2015-10-08 20:29 - 2015-10-08 20:36 - 00047008 _____ C:\WINDOWS\KB2479943.log
2015-10-08 20:29 - 2015-10-08 20:36 - 00046801 _____ C:\WINDOWS\KB2478971.log
2015-10-08 20:29 - 2015-10-08 20:35 - 00036401 _____ C:\WINDOWS\KB2115168.log
2015-10-08 20:28 - 2015-10-08 23:14 - 02195840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2015-10-08 20:28 - 2015-10-08 23:14 - 02152448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2015-10-08 20:28 - 2015-10-08 23:14 - 02031104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2015-10-08 20:28 - 2015-10-08 20:44 - 00103332 _____ C:\WINDOWS\KB2930275.log
2015-10-08 20:28 - 2015-10-08 20:43 - 00103657 _____ C:\WINDOWS\KB2909212.log
2015-10-08 20:28 - 2015-10-08 20:43 - 00101554 _____ C:\WINDOWS\KB2862152.log
2015-10-08 20:28 - 2015-10-08 20:43 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2015-10-08 20:28 - 2015-10-08 20:43 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2015-10-08 20:28 - 2015-10-08 20:42 - 00100019 _____ C:\WINDOWS\KB2847311.log
2015-10-08 20:28 - 2015-10-08 20:42 - 00099720 _____ C:\WINDOWS\KB2780091.log
2015-10-08 20:28 - 2015-10-08 20:42 - 00098793 _____ C:\WINDOWS\KB2864063.log
2015-10-08 20:28 - 2015-10-08 20:37 - 00061949 _____ C:\WINDOWS\KB2598479.log
2015-10-08 20:28 - 2015-10-08 20:37 - 00048692 _____ C:\WINDOWS\KB2507938.log
2015-10-08 20:28 - 2015-10-08 20:36 - 00047686 _____ C:\WINDOWS\KB2510581.log
2015-10-08 20:28 - 2015-10-08 20:36 - 00047262 _____ C:\WINDOWS\KB2481109.log
2015-10-08 20:28 - 2015-10-08 20:35 - 00038558 _____ C:\WINDOWS\KB2443105.log
2015-10-08 20:28 - 2015-10-08 20:35 - 00037688 _____ C:\WINDOWS\KB982132.log
2015-10-08 20:28 - 2015-10-08 20:35 - 00035459 _____ C:\WINDOWS\KB978338.log
2015-10-08 20:28 - 2015-10-08 20:34 - 00035721 _____ C:\WINDOWS\KB975713.log
2015-10-08 20:28 - 2015-10-08 20:34 - 00034590 _____ C:\WINDOWS\KB974318.log
2015-10-08 20:28 - 2015-10-08 20:34 - 00031447 _____ C:\WINDOWS\KB969059.log
2015-10-08 20:28 - 2015-10-08 20:34 - 00030457 _____ C:\WINDOWS\KB974112.log
2015-10-08 20:28 - 2015-10-08 20:33 - 00030952 _____ C:\WINDOWS\KB960859.log
2015-10-08 20:28 - 2015-10-08 20:33 - 00030425 _____ C:\WINDOWS\KB971657.log
2015-10-08 20:28 - 2015-10-08 20:33 - 00030063 _____ C:\WINDOWS\KB959426.log
2015-10-08 20:28 - 2015-10-08 20:32 - 00022491 _____ C:\WINDOWS\KB950974.log
2015-10-08 20:28 - 2015-10-08 20:32 - 00021879 _____ C:\WINDOWS\KB952954.log
2015-10-08 20:27 - 2015-10-08 20:43 - 00100394 _____ C:\WINDOWS\KB2893294.log
2015-10-08 20:27 - 2015-10-08 20:43 - 00099430 _____ C:\WINDOWS\KB2876331.log
2015-10-08 20:27 - 2015-10-08 20:42 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2015-10-08 20:27 - 2015-10-08 20:42 - 00098771 _____ C:\WINDOWS\KB2859537.log
2015-10-08 20:27 - 2015-10-08 20:42 - 00098267 _____ C:\WINDOWS\KB2876217.log
2015-10-08 20:27 - 2015-10-08 20:42 - 00097647 _____ C:\WINDOWS\KB2850869.log
2015-10-08 20:27 - 2015-10-08 20:42 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2015-10-08 20:27 - 2015-10-08 20:42 - 00046848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys
2015-10-08 20:27 - 2015-10-08 20:42 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023x.sys
2015-10-08 20:27 - 2015-10-08 20:41 - 00098358 _____ C:\WINDOWS\KB2705219-v2.log
2015-10-08 20:27 - 2015-10-08 20:36 - 00044030 _____ C:\WINDOWS\KB2483185.log
2015-10-08 20:27 - 2015-10-08 20:35 - 00037264 _____ C:\WINDOWS\KB979687.log
2015-10-08 20:27 - 2015-10-08 20:34 - 00033605 _____ C:\WINDOWS\KB977816.log
2015-10-08 20:27 - 2015-10-08 20:34 - 00029968 _____ C:\WINDOWS\KB974571.log
2015-10-08 20:27 - 2015-10-08 20:33 - 00029378 _____ C:\WINDOWS\KB975025.log
2015-10-08 20:27 - 2015-10-08 20:33 - 00028587 _____ C:\WINDOWS\KB973507.log
2015-10-08 20:27 - 2015-10-08 20:33 - 00028221 _____ C:\WINDOWS\KB952004.log
2015-10-08 20:27 - 2015-10-08 20:32 - 00022242 _____ C:\WINDOWS\KB951978.log
2015-10-08 20:27 - 2008-06-14 19:32 - 00273024 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-10-08 20:27 - 2008-06-14 19:32 - 00273024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bthport.sys
2015-10-08 20:26 - 2015-10-08 20:43 - 00100298 _____ C:\WINDOWS\KB2879017.log
2015-10-08 20:26 - 2015-10-08 20:43 - 00099966 _____ C:\WINDOWS\KB2892075.log
2015-10-08 20:26 - 2015-10-08 20:42 - 00098696 _____ C:\WINDOWS\KB2820917.log
2015-10-08 20:26 - 2015-10-08 20:42 - 00098296 _____ C:\WINDOWS\KB2757638.log
2015-10-08 20:26 - 2015-10-08 20:41 - 00097171 _____ C:\WINDOWS\KB2727528.log
2015-10-08 20:26 - 2015-10-08 20:41 - 00097141 _____ C:\WINDOWS\KB2749655.log
2015-10-08 20:26 - 2015-10-08 20:36 - 00043269 _____ C:\WINDOWS\KB971029.log
2015-10-08 20:26 - 2015-10-08 20:35 - 00032749 _____ C:\WINDOWS\KB979482.log
2015-10-08 20:26 - 2015-10-08 20:34 - 00031893 _____ C:\WINDOWS\KB978706.log
2015-10-08 20:25 - 2015-10-08 20:41 - 00093606 _____ C:\WINDOWS\KB2653956.log
2015-10-08 20:25 - 2015-10-08 20:37 - 00057196 _____ C:\WINDOWS\KB2619339.log
2015-10-08 20:25 - 2015-10-08 20:36 - 00051977 _____ C:\WINDOWS\KB2508429.log
2015-10-08 20:25 - 2015-10-08 20:36 - 00051354 _____ C:\WINDOWS\KB2506212.log
2015-10-08 20:25 - 2015-10-08 20:36 - 00043171 _____ C:\WINDOWS\KB2419632.log
2015-10-08 20:25 - 2015-10-08 20:35 - 00032105 _____ C:\WINDOWS\KB978542.log
2015-10-08 20:25 - 2015-10-08 20:34 - 00033449 _____ C:\WINDOWS\KB977914.log
2015-10-08 20:25 - 2015-10-08 20:34 - 00031538 _____ C:\WINDOWS\KB974392.log
2015-10-08 20:25 - 2015-10-08 20:25 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Windows Genuine Advantage
2015-10-08 20:24 - 2015-10-11 14:17 - 00000000 ____D C:\WINDOWS\Cursors
2015-10-08 20:24 - 2015-10-08 22:38 - 00000000 ____D C:\WINDOWS\system
2015-10-08 20:24 - 2015-10-08 22:19 - 00000000 ____D C:\WINDOWS\security
2015-10-08 20:24 - 2015-10-08 22:15 - 00000000 ____D C:\WINDOWS\Driver Cache
2015-10-08 20:24 - 2015-10-08 21:47 - 00000000 ____D C:\WINDOWS\system32\de-de
2015-10-08 20:24 - 2015-10-08 21:43 - 00000000 ____D C:\WINDOWS\system32\mui
2015-10-08 20:24 - 2015-10-08 21:40 - 00000000 ____D C:\WINDOWS\Help
2015-10-08 20:24 - 2015-10-08 21:07 - 00000000 ____D C:\WINDOWS\system32\spool
2015-10-08 20:24 - 2015-10-08 21:06 - 00000000 ____D C:\WINDOWS\pchealth
2015-10-08 20:24 - 2015-10-08 20:40 - 00000000 ____D C:\WINDOWS\Media
2015-10-08 20:24 - 2015-10-08 20:30 - 00000000 ____D C:\WINDOWS\system32\usmt
2015-10-08 20:24 - 2015-10-08 20:30 - 00000000 ____D C:\WINDOWS\system32\1031
2015-10-08 20:24 - 2015-10-08 20:30 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-10-08 20:24 - 2015-10-08 20:29 - 00000000 ____D C:\WINDOWS\system32\npp
2015-10-08 20:24 - 2015-10-08 20:29 - 00000000 ____D C:\WINDOWS\system32\de
2015-10-08 20:24 - 2015-10-08 20:29 - 00000000 ____D C:\WINDOWS\PeerNet
2015-10-08 20:24 - 2015-10-08 20:29 - 00000000 ____D C:\WINDOWS\msagent
2015-10-08 20:24 - 2015-10-08 20:26 - 00000000 ____D C:\WINDOWS\twain_32
2015-10-08 20:24 - 2015-10-08 20:26 - 00000000 ____D C:\WINDOWS\system32\ras
2015-10-08 20:24 - 2015-10-08 20:26 - 00000000 ____D C:\WINDOWS\system32\icsxml
2015-10-08 20:24 - 2015-10-08 20:25 - 00000000 ____D C:\WINDOWS\system32\ias
2015-10-08 20:24 - 2015-10-08 20:25 - 00000000 ____D C:\WINDOWS\system32\1033
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\wins
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\ShellExt
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\export
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\Drivers\disdn
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\dhcp
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\3com_dmi
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\3076
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\2052
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\1054
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\1042
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\1041
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\1037
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\1028
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\system32\1025
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\Resources
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\repair
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\mui
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\java
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\Connection Wizard
2015-10-08 20:24 - 2015-10-08 20:24 - 00000000 ____D C:\WINDOWS\addins
2015-10-08 20:24 - 2015-10-08 18:39 - 00000000 ___RD C:\WINDOWS\Web
2015-10-08 20:24 - 2015-10-08 18:39 - 00000000 ____D C:\WINDOWS\ime
2015-10-08 20:23 - 2015-10-08 20:42 - 00098057 _____ C:\WINDOWS\KB2813345.log
2015-10-08 20:23 - 2015-10-08 20:33 - 00025382 _____ C:\WINDOWS\KB960803.log
2015-10-08 20:23 - 2015-10-08 20:23 - 00404640 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-10-08 20:22 - 2015-10-08 20:43 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2015-10-08 20:22 - 2015-10-08 20:43 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2015-10-08 20:22 - 2015-10-08 20:41 - 00097859 _____ C:\WINDOWS\KB2676562.log
2015-10-08 20:22 - 2015-10-08 20:41 - 00003072 ____N C:\WINDOWS\system32\iacenc.dll
2015-10-08 20:22 - 2015-10-08 20:41 - 00003072 ____C C:\WINDOWS\system32\dllcache\iacenc.dll
2015-10-08 20:22 - 2015-10-08 20:37 - 00056443 _____ C:\WINDOWS\KB2620712.log
2015-10-08 20:22 - 2015-10-08 20:37 - 00056064 _____ C:\WINDOWS\KB2584146.log
2015-10-08 20:22 - 2015-10-08 20:36 - 00053729 _____ C:\WINDOWS\KB2509553.log
2015-10-08 20:22 - 2015-10-08 20:35 - 00031405 _____ C:\WINDOWS\KB982665.log
2015-10-08 20:22 - 2015-10-08 20:34 - 00038551 _____ C:\WINDOWS\KB968389.log
2015-10-08 20:22 - 2015-10-08 20:34 - 00037475 _____ C:\WINDOWS\KB975467.log
2015-10-08 20:22 - 2015-10-08 20:33 - 00026357 _____ C:\WINDOWS\KB973815.log
2015-10-08 20:21 - 2015-10-08 21:05 - 00000000 ___HD C:\WINDOWS\$hf_mig$
2015-10-08 20:21 - 2015-10-08 20:37 - 00026144 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
2015-10-08 20:21 - 2015-10-08 20:21 - 00007003 _____ C:\WINDOWS\KB898461.log
2015-10-08 20:21 - 2015-10-08 20:21 - 00000000 __SHD C:\Dokumente und Einstellungen\Zima Alexander\UserData
2015-10-08 20:21 - 2015-10-08 20:21 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB898461$
2015-10-08 20:21 - 2015-10-08 20:21 - 00000000 ____D C:\WINDOWS\system32\PreInstall
2015-10-08 20:11 - 2015-10-12 19:14 - 00003918 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2015-10-08 20:11 - 2015-10-08 20:11 - 00318326 _____ C:\WINDOWS\system32\prfh0407.dat
2015-10-08 20:11 - 2015-10-08 20:11 - 00049362 _____ C:\WINDOWS\system32\prfc0407.dat
2015-10-08 20:11 - 2015-10-08 20:11 - 00000000 ___HD C:\VTRoot
2015-10-08 20:00 - 2015-10-08 20:00 - 00012984 _____ C:\WINDOWS\system32\wpa.bak
2015-10-08 19:57 - 2015-10-09 22:08 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2015-10-08 19:57 - 2015-10-09 21:33 - 00000712 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
2015-10-08 19:55 - 2015-10-12 00:30 - 00000000 ____D C:\temp
2015-10-08 19:55 - 2015-10-08 19:55 - 00000000 ____D C:\WINDOWS\Options
2015-10-08 19:55 - 2015-10-08 19:55 - 00000000 ____D C:\Programme\Atheros
2015-10-08 19:55 - 2015-10-08 19:55 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Atheros
2015-10-08 19:55 - 2009-04-19 12:54 - 00042724 _____ C:\WINDOWS\system32\netathw.cat
2015-10-08 19:55 - 2009-04-19 12:54 - 00042303 _____ C:\WINDOWS\system32\wsimdp.cat
2015-10-08 19:55 - 2009-04-19 12:54 - 00042301 _____ C:\WINDOWS\system32\wsimd.cat
2015-10-08 19:55 - 2009-03-27 15:43 - 01529600 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athw.sys
2015-10-08 19:55 - 2009-03-27 15:43 - 01529600 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\athw.sys
2015-10-08 19:55 - 2009-03-17 11:49 - 00058208 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\wsimd.sys
2015-10-08 19:53 - 2008-06-17 10:34 - 00256536 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
2015-10-08 19:53 - 2008-06-17 10:34 - 00170520 _____ (Intel Corporation) C:\WINDOWS\system32\igfxzoom.exe
2015-10-08 19:53 - 2008-06-17 10:34 - 00150040 _____ (Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
2015-10-08 19:53 - 2008-06-17 10:34 - 00141848 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
2015-10-08 19:53 - 2008-06-17 10:33 - 00920088 _____ (Intel® Corporation) C:\WINDOWS\system32\igxpun.exe
2015-10-08 19:53 - 2008-06-17 10:33 - 00637464 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcfg.exe
2015-10-08 19:53 - 2008-06-17 10:33 - 00174616 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe
2015-10-08 19:53 - 2008-06-17 10:33 - 00170520 _____ (Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
2015-10-08 19:53 - 2008-06-11 11:58 - 00029136 _____ C:\WINDOWS\system32\igxpxs32.vp
2015-10-08 19:53 - 2008-06-11 11:29 - 00147456 _____ C:\WINDOWS\system32\igfxCoIn_v4957.dll
2015-10-08 19:53 - 2008-06-11 11:15 - 06021184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igxpmp32.sys
2015-10-08 19:53 - 2008-06-11 11:15 - 03113472 _____ (Intel Corporation) C:\WINDOWS\system32\igxpdx32.dll
2015-10-08 19:53 - 2008-06-11 11:15 - 02144192 _____ (Intel Corporation) C:\WINDOWS\system32\igxpdv32.dll
2015-10-08 19:53 - 2008-06-11 11:15 - 01991464 _____ C:\WINDOWS\system32\igkrng500.bin
2015-10-08 19:53 - 2008-06-11 11:15 - 00432400 _____ C:\WINDOWS\system32\igcompkrng500.bin
2015-10-08 19:53 - 2008-06-11 11:15 - 00152064 _____ (Intel Corporation) C:\WINDOWS\system32\igxpgd32.dll
2015-10-08 19:53 - 2008-06-11 11:15 - 00057344 _____ (Intel Corporation) C:\WINDOWS\system32\igxprd32.dll
2015-10-08 19:53 - 2008-06-11 10:54 - 02412544 _____ (Intel Corporation) C:\WINDOWS\system32\ig4icd32.dll
2015-10-08 19:53 - 2008-06-11 10:54 - 02027520 _____ (Intel Corporation) C:\WINDOWS\system32\ig4dev32.dll
2015-10-08 19:53 - 2008-06-11 10:48 - 00278528 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrell.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00274432 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrita.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00274432 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdeu.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00270336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnld.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00270336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfra.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00270336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxresp.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00262144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrrus.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00262144 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptg.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00258048 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrptb.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00258048 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrplk.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00258048 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrhun.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00253952 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsve.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00253952 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrdan.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00253952 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcsy.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00249856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtrk.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00249856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrsky.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00249856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrnor.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00249856 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrfin.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00245760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrslv.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00233472 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrtha.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00225280 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrara.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00221184 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrheb.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00180224 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrjpn.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00176128 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrkor.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00151552 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrchs.lrc
2015-10-08 19:53 - 2008-06-11 10:48 - 00147456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrcht.lrc
2015-10-08 19:53 - 2008-06-11 10:44 - 00204800 _____ (Intel Corporation) C:\WINDOWS\system32\igfxpph.dll
2015-10-08 19:53 - 2008-06-11 10:44 - 00135168 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdo.dll
2015-10-08 19:53 - 2008-06-11 10:44 - 00126976 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcpl.cpl
2015-10-08 19:53 - 2008-06-11 10:44 - 00051712 _____ (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.dll
2015-10-08 19:53 - 2008-06-11 10:44 - 00024576 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll
2015-10-08 19:53 - 2008-06-11 10:43 - 05697536 _____ (Intel Corporation) C:\WINDOWS\system32\igfxress.dll
2015-10-08 19:53 - 2008-06-11 10:43 - 00245760 _____ (Intel Corporation) C:\WINDOWS\system32\igfxrenu.lrc
2015-10-08 19:53 - 2008-06-11 10:43 - 00212992 _____ (Intel Corporation) C:\WINDOWS\system32\igfxdev.dll
2015-10-08 19:53 - 2008-06-11 10:43 - 00106496 _____ (Intel Corporation) C:\WINDOWS\system32\hccutils.dll
2015-10-08 19:53 - 2008-06-11 10:37 - 00002096 _____ C:\WINDOWS\system32\igxpxk32.vp
2015-10-08 19:53 - 2006-11-10 09:25 - 00319456 _____ (Microsoft Corporation) C:\WINDOWS\system32\difxapi.dll
2015-10-08 19:50 - 2015-10-08 19:51 - 00000925 _____ C:\WINDOWS\SynInst.log
2015-10-08 19:50 - 2015-10-08 19:50 - 00000000 ____D C:\Programme\Synaptics
2015-10-08 19:50 - 2015-10-08 19:50 - 00000000 ____D C:\Programme\CONEXANT
2015-10-08 19:50 - 2007-09-07 12:56 - 00110592 _____ (Synaptics, Inc.) C:\WINDOWS\system32\SynTPCo4.dll
2015-10-08 19:50 - 2007-09-07 12:28 - 00147456 _____ (Synaptics, Inc.) C:\WINDOWS\system32\SynTPAPI.dll
2015-10-08 19:50 - 2007-09-07 12:20 - 00196608 _____ (Synaptics, Inc.) C:\WINDOWS\system32\SynCtrl.dll
2015-10-08 19:50 - 2007-09-07 12:19 - 00163840 _____ (Synaptics, Inc.) C:\WINDOWS\system32\SynCOM.dll
2015-10-08 19:50 - 2007-09-07 12:16 - 00215904 _____ (Synaptics, Inc.) C:\WINDOWS\system32\Drivers\SynTP.sys
2015-10-08 19:45 - 2015-10-08 19:47 - 00000000 ____D C:\Programme\ThinkVantage Fingerprint Software
2015-10-08 19:45 - 2015-10-08 19:45 - 00000000 ____D C:\SWTOOLS
2015-10-08 19:45 - 2015-10-08 19:45 - 00000000 ____D C:\Programme\Gemeinsame Dateien\SPBA
2015-10-08 19:45 - 2015-10-08 19:45 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ThinkVantage
2015-10-08 19:45 - 2015-10-08 19:45 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\UIB
2015-10-08 19:44 - 2015-10-08 19:44 - 00039138 _____ C:\WINDOWS\DPINST.LOG
2015-10-08 19:44 - 2015-10-08 19:44 - 00000000 ____D C:\WINDOWS\system32\SDA
2015-10-08 19:44 - 2015-10-08 19:44 - 00000000 ____D C:\Programme\O2Micro Flash Memory Card Driver
2015-10-08 19:44 - 2008-06-12 09:30 - 00043608 _____ (O2Micro ) C:\WINDOWS\system32\Drivers\o2sd.sys
2015-10-08 19:44 - 2008-06-12 09:29 - 00739160 _____ (O2Micro) C:\WINDOWS\system32\O2Icon.dll
2015-10-08 19:44 - 2008-05-13 12:49 - 00051288 _____ (O2Micro ) C:\WINDOWS\system32\Drivers\o2media.sys
2015-10-08 19:44 - 2008-05-13 12:48 - 00935768 _____ (O2Micro) C:\WINDOWS\system32\O2Icon_2.dll
2015-10-08 19:43 - 2015-10-08 19:43 - 00000000 ____D C:\WINDOWS\SUYIN NB Cam
2015-10-08 19:43 - 2015-10-08 19:43 - 00000000 ____D C:\Programme\Gemeinsame Dateien\SNP2UVC
2015-10-08 19:43 - 2015-10-08 19:43 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Anwendungsdaten\InstallShield
2015-10-08 19:43 - 2009-05-11 17:39 - 00000323 _____ C:\WINDOWS\PidList.ini
2015-10-08 19:43 - 2009-05-06 18:15 - 01759744 _____ () C:\WINDOWS\system32\Drivers\snp2uvc.sys
2015-10-08 19:43 - 2009-04-13 11:25 - 00307200 _____ (Sonix) C:\WINDOWS\system32\vsnp2uvc.dll
2015-10-08 19:43 - 2009-02-16 18:32 - 00196608 _____ ( ) C:\WINDOWS\system32\csnp2uvc.dll
2015-10-08 19:43 - 2008-12-29 17:13 - 00028544 _____ C:\WINDOWS\system32\Drivers\sncduvc.sys
2015-10-08 19:43 - 2008-12-11 19:51 - 00225280 _____ ( ) C:\WINDOWS\system32\rsnp2uvc.dll
2015-10-08 19:43 - 2008-07-03 15:58 - 00094208 _____ (sonix) C:\WINDOWS\PLFSetL.exe
2015-10-08 19:41 - 2015-10-08 19:53 - 00000000 ____D C:\WINDOWS\system32\Lang
2015-10-08 19:41 - 2015-10-08 19:41 - 00940794 _____ C:\WINDOWS\system32\LoopyMusic.wav
2015-10-08 19:41 - 2015-10-08 19:41 - 00146650 _____ C:\WINDOWS\system32\BuzzingBee.wav
2015-10-08 19:39 - 2015-10-10 16:01 - 00000000 ___HD C:\Programme\InstallShield Installation Information
2015-10-08 19:39 - 2015-10-08 19:50 - 00000000 ____D C:\Programme\Gemeinsame Dateien\InstallShield
2015-10-08 19:39 - 2015-10-08 19:39 - 00315392 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\HideWin.exe
2015-10-08 19:39 - 2015-10-08 19:39 - 00000000 ____D C:\WINDOWS\system32\RTCOM
2015-10-08 19:39 - 2015-10-08 19:39 - 00000000 ____D C:\Programme\Realtek
2015-10-08 19:39 - 2009-06-10 14:25 - 00000852 _____ C:\WINDOWS\system32\Drivers\RTKHDRC0.dat
2015-10-08 19:39 - 2009-04-23 16:17 - 00000520 _____ C:\WINDOWS\system32\Drivers\RTEQEX0.dat
2015-10-08 19:39 - 2008-06-13 17:11 - 04754944 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RtkHDAud.sys

Code:

ATTFilter

2015-10-08 19:39 - 2008-06-13 14:50 - 16871936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
2015-10-08 19:39 - 2008-04-14 00:49 - 00146048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\portcls.sys
2015-10-08 19:39 - 2008-04-14 00:49 - 00146048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2015-10-08 19:39 - 2008-04-14 00:47 - 00083072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wdmaud.sys
2015-10-08 19:39 - 2008-04-14 00:47 - 00083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wdmaud.sys
2015-10-08 19:39 - 2008-04-14 00:45 - 00060800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sysaudio.sys
2015-10-08 19:39 - 2008-04-14 00:45 - 00060800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sysaudio.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00172416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kmixer.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kmixer.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\drmk.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00060160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00056576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\swmidi.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00056576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\swmidi.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00052864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dmusic.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00052864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\DMusic.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00006272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\splitter.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00006272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\splitter.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00002944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\drmkaud.sys
2015-10-08 19:39 - 2008-04-14 00:15 - 00002944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2015-10-08 19:39 - 2008-04-13 22:09 - 00142592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aec.sys
2015-10-08 19:39 - 2008-04-13 22:09 - 00142592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\aec.sys
2015-10-08 19:39 - 2008-04-02 09:27 - 01196032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlUpd.exe
2015-10-08 19:39 - 2008-03-13 14:52 - 00266240 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSndMgr.cpl
2015-10-08 19:39 - 2008-03-05 18:07 - 00520192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
2015-10-08 19:39 - 2007-11-20 18:15 - 01826816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SkyTel.exe
2015-10-08 19:39 - 2007-11-14 15:18 - 00000553 _____ C:\WINDOWS\USetup.iss
2015-10-08 19:39 - 2007-07-13 14:11 - 00000008 _____ C:\WINDOWS\system32\Drivers\rtkhdaud.dat
2015-10-08 19:39 - 2007-06-28 16:44 - 02165760 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\MicCal.exe
2015-10-08 19:39 - 2007-03-23 19:19 - 09715200 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RTLCPL.exe
2015-10-08 19:39 - 2006-08-01 15:02 - 00049152 _____ C:\WINDOWS\system32\ChCfg.exe
2015-10-08 19:39 - 2006-07-21 16:14 - 00086016 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SoundMan.exe
2015-10-08 19:39 - 2006-05-04 16:26 - 02808832 _____ (RealTek Semicoductor Corp.) C:\WINDOWS\alcwzrd.exe
2015-10-08 19:39 - 2005-09-21 10:25 - 00299008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\ALSndMgr.cpl
2015-10-08 19:39 - 2005-06-27 05:29 - 00000520 _____ C:\WINDOWS\system32\Drivers\RTEQEX1.dat
2015-10-08 19:39 - 2005-05-03 18:43 - 00069632 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\Alcmtr.exe
2015-10-08 19:36 - 2015-10-10 16:01 - 00000000 ____D C:\Programme\Intel
2015-10-08 19:36 - 2015-10-08 22:37 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups
2015-10-08 19:36 - 2008-02-22 13:06 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\system32\CSVer.dll
2015-10-08 19:34 - 2015-10-08 19:34 - 00004996 _____ C:\WINDOWS\system32\pid.PNF
2015-10-08 19:33 - 2015-10-12 16:24 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-10-08 19:33 - 2008-04-14 08:53 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipsink.ax
2015-10-08 19:33 - 2008-04-14 01:16 - 00085248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NABTSFEC.sys
2015-10-08 19:33 - 2008-04-14 01:16 - 00019200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSTCODEC.SYS
2015-10-08 19:33 - 2008-04-14 01:16 - 00017024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\CCDECODE.sys
2015-10-08 19:33 - 2008-04-14 01:16 - 00015232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\StreamIP.sys
2015-10-08 19:33 - 2008-04-14 01:16 - 00011136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SLIP.sys
2015-10-08 19:33 - 2008-04-14 01:16 - 00010880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisIP.sys
2015-10-08 19:33 - 2008-04-14 01:09 - 00007552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSKSSRV.sys
2015-10-08 19:33 - 2008-04-14 01:09 - 00005504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSTEE.sys
2015-10-08 19:33 - 2008-04-14 01:09 - 00005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSPCLOCK.sys
2015-10-08 19:33 - 2008-04-14 01:09 - 00004992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MSPQM.sys
2015-10-08 19:33 - 2001-08-17 14:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\audstub.sys
2015-10-08 19:32 - 2015-10-12 16:24 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-10-08 19:32 - 2015-10-08 20:42 - 00123008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2015-10-08 19:32 - 2015-10-08 19:32 - 00000000 _____ C:\WINDOWS\Sti_Trace.log
2015-10-08 19:32 - 2008-04-14 08:53 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\dshowext.ax
2015-10-08 19:32 - 2008-04-14 08:22 - 00057728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\redbook.sys
2015-10-08 19:32 - 2008-04-14 08:22 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys
2015-10-08 19:32 - 2008-04-14 07:53 - 00129536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksproxy.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00091648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kswdmcap.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\kswdmcap.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kstvtune.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kstvtune.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00043008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksxbar.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksxbar.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vidcap.ax
2015-10-08 19:32 - 2008-04-14 07:53 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vidcap.ax
2015-10-08 19:32 - 2008-04-14 07:52 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbui.dll
2015-10-08 19:32 - 2008-04-14 07:52 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbui.dll
2015-10-08 19:32 - 2008-04-14 07:52 - 00054272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vfwwdm32.dll
2015-10-08 19:32 - 2008-04-14 07:52 - 00054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfwwdm32.dll
2015-10-08 19:32 - 2008-04-14 07:52 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksuser.dll
2015-10-08 19:32 - 2008-04-14 07:52 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksuser.dll
2015-10-08 19:32 - 2008-04-14 01:06 - 00013952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\CmBatt.sys
2015-10-08 19:32 - 2008-04-14 01:06 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\compbatt.sys
2015-10-08 19:32 - 2008-04-14 01:06 - 00008832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wmiacpi.sys
2015-10-08 19:31 - 2015-10-12 16:28 - 01148896 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-10-08 19:31 - 2015-10-12 16:18 - 00000000 ___RD C:\Programme
2015-10-08 19:31 - 2015-10-12 14:27 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2015-10-08 19:31 - 2015-10-11 13:58 - 00678612 _____ C:\WINDOWS\setupapi.log
2015-10-08 19:31 - 2015-10-11 13:57 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Microsoft Shared
2015-10-08 19:31 - 2015-10-11 13:19 - 01368762 _____ C:\WINDOWS\iis6.log
2015-10-08 19:31 - 2015-10-11 13:19 - 01197362 _____ C:\WINDOWS\FaxSetup.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00590750 _____ C:\WINDOWS\ocgen.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00555065 _____ C:\WINDOWS\tsoc.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00411622 _____ C:\WINDOWS\comsetup.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00380274 _____ C:\WINDOWS\msmqinst.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00248337 _____ C:\WINDOWS\ntdtcsetup.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00210721 _____ C:\WINDOWS\netfxocm.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00083444 _____ C:\WINDOWS\MedCtrOC.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00066750 _____ C:\WINDOWS\ocmsn.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00060653 _____ C:\WINDOWS\tabletoc.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00060361 _____ C:\WINDOWS\msgsocm.log
2015-10-08 19:31 - 2015-10-11 13:19 - 00001393 _____ C:\WINDOWS\imsins.log
2015-10-08 19:31 - 2015-10-11 05:05 - 00113376 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-10-08 19:31 - 2015-10-10 13:16 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü
2015-10-08 19:31 - 2015-10-09 16:02 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
2015-10-08 19:31 - 2015-10-09 15:17 - 00004696 _____ C:\WINDOWS\imsins.BAK
2015-10-08 19:31 - 2015-10-08 19:50 - 00196935 _____ C:\WINDOWS\setupact.log
2015-10-08 19:31 - 2015-10-08 19:31 - 00001348 _____ C:\WINDOWS\regopt.log
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ___SD C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Verlauf
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ___RD C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Autostart
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ___RD C:\Dokumente und Einstellungen\Default User\Startmenü
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\Default User\Netzwerkumgebung
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\Default User\Druckumgebung
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ____D C:\Programme\Gemeinsame Dateien\SpeechEngines
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ____D C:\Programme\Gemeinsame Dateien\ODBC
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 ____D C:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temp
2015-10-08 19:31 - 2015-10-08 19:31 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-10-08 19:31 - 2015-10-08 18:39 - 00004161 _____ C:\WINDOWS\ODBCINST.INI
2015-10-08 19:31 - 2015-10-08 18:39 - 00000000 ___RD C:\Dokumente und Einstellungen\Default User\Startmenü\Programme
2015-10-08 19:31 - 2015-10-08 18:37 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Dokumente
2015-10-08 19:31 - 2009-01-09 21:19 - 01089883 ____C C:\WINDOWS\system32\dllcache\ntprint.cat
2015-10-08 19:31 - 2008-08-21 14:00 - 02039179 ____C C:\WINDOWS\system32\dllcache\NT5.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 01685606 ____C C:\WINDOWS\system32\dllcache\sam.spd
2015-10-08 19:31 - 2008-08-21 14:00 - 01246463 ____R C:\WINDOWS\SET3.tmp
2015-10-08 19:31 - 2008-08-21 14:00 - 01246463 ____C C:\WINDOWS\system32\dllcache\SP3.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 01088840 ____R C:\WINDOWS\SET4.tmp
2015-10-08 19:31 - 2008-08-21 14:00 - 00817199 ____C C:\WINDOWS\system32\dllcache\NT5IIS.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00774144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spttseng.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00741376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapi.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00643717 ____C C:\WINDOWS\system32\dllcache\ltts1033.lxa
2015-10-08 19:31 - 2008-08-21 14:00 - 00631338 ____C C:\WINDOWS\system32\dllcache\NT5INF.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00605050 ____C C:\WINDOWS\system32\dllcache\r1033tts.lxa
2015-10-08 19:31 - 2008-08-21 14:00 - 00399645 ____C C:\WINDOWS\system32\dllcache\MAPIMIG.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00176157 ____C (Digi International, Inc.) C:\WINDOWS\system32\dllcache\dgrpsetu.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00176157 _____ (Digi International, Inc.) C:\WINDOWS\system32\dgrpsetu.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00159744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapi.cpl
2015-10-08 19:31 - 2008-08-21 14:00 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system\WINSPOOL.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00144484 ____C C:\WINDOWS\system32\dllcache\netfx.cat
2015-10-08 19:31 - 2008-08-21 14:00 - 00127104 _____ (Microsoft Corporation) C:\WINDOWS\system\MSVIDEO.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00109504 _____ (Microsoft Corporation) C:\WINDOWS\system\AVIFILE.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00105926 ____C C:\WINDOWS\system32\dllcache\tabletpc.cat
2015-10-08 19:31 - 2008-08-21 14:00 - 00103936 ____C (Equinox Systems Inc.) C:\WINDOWS\system32\dllcache\eqnclass.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00103936 _____ (Equinox Systems Inc.) C:\WINDOWS\system32\EqnClass.Dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00086556 ____C (Digi International) C:\WINDOWS\system32\dllcache\dgsetup.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00086556 _____ (Digi International) C:\WINDOWS\system32\dgsetup.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system\OLECLI.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spcommon.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00073760 _____ (Microsoft Corporation) C:\WINDOWS\system\MCIAVI.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00070368 _____ (Microsoft Corporation) C:\WINDOWS\system\AVICAP.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\NOTEPAD.EXE
2015-10-08 19:31 - 2008-08-21 14:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system\MMSYSTEM.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_869.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_866.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_857.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_855.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_852.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_737.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 _____ C:\WINDOWS\system32\c_869.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 _____ C:\WINDOWS\system32\c_866.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 _____ C:\WINDOWS\system32\c_857.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 _____ C:\WINDOWS\system32\c_855.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 _____ C:\WINDOWS\system32\c_852.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066594 _____ C:\WINDOWS\system32\c_737.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_875.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28603.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28599.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28597.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28595.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28594.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20127.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10082.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10081.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10029.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10017.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10010.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10007.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10006.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_875.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_28603.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_28599.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\C_28597.NLS
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\C_28595.NLS
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\C_28594.NLS
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_20127.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_10082.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_10081.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_10029.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_10017.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_10010.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_10007.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00066082 _____ C:\WINDOWS\system32\c_10006.nls
2015-10-08 19:31 - 2008-08-21 14:00 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spcplui.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00041270 ____C C:\WINDOWS\system32\dllcache\MW770.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sapisvr.exe
2015-10-08 19:31 - 2008-08-21 14:00 - 00034747 ____C C:\WINDOWS\system32\dllcache\mediactr.cat
2015-10-08 19:31 - 2008-08-21 14:00 - 00033765 ____C C:\WINDOWS\system32\dllcache\FP4.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00033744 _____ (Microsoft Corporation) C:\WINDOWS\system\COMMDLG.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system\MCIWAVE.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00025296 _____ (Microsoft Corporation) C:\WINDOWS\system\MCISEQ.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00024661 ____C (Perle Systems Ltd.) C:\WINDOWS\system32\dllcache\spxcoins.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00024661 _____ (Perle Systems Ltd.) C:\WINDOWS\system32\spxcoins.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system\OLESVR.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0408.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00021771 ____C C:\WINDOWS\system32\dllcache\msn7.cat
2015-10-08 19:31 - 2008-08-21 14:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt040e.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt041f.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0419.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0415.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0405.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00019200 _____ (Microsoft Corporation) C:\WINDOWS\system\TAPI.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00016825 ____R C:\WINDOWS\SET8.tmp
2015-10-08 19:31 - 2008-08-21 14:00 - 00016825 ____C C:\WINDOWS\system32\dllcache\IMS.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\taskman.exe
2015-10-08 19:31 - 2008-08-21 14:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\TASKMAN.EXE
2015-10-08 19:31 - 2008-08-21 14:00 - 00014433 ____C C:\WINDOWS\system32\dllcache\msn9.cat
2015-10-08 19:31 - 2008-08-21 14:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irclass.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\irclass.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00013600 _____ (Microsoft Corporation) C:\WINDOWS\system\WFWNET.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00013472 ____C C:\WINDOWS\system32\dllcache\HPCRDP.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00012363 ____C C:\WINDOWS\system32\dllcache\MSMSGS.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irenum.sys
2015-10-08 19:31 - 2008-08-21 14:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\irenum.sys
2015-10-08 19:31 - 2008-08-21 14:00 - 00010027 ____C C:\WINDOWS\system32\dllcache\MSTSWEB.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00009936 _____ (Microsoft Corporation) C:\WINDOWS\system\LZEXPAND.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00009200 _____ (Microsoft Corporation) C:\WINDOWS\system\VER.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\batt.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\batt.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00008574 ____C C:\WINDOWS\system32\dllcache\IASNT4.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00008192 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhept.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhept.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00007382 ____C C:\WINDOWS\system32\dllcache\OEMBIOS.CAT
2015-10-08 19:31 - 2008-08-21 14:00 - 00007334 ____C C:\WINDOWS\system32\dllcache\wmerrenu.cat
2015-10-08 19:31 - 2008-08-21 14:00 - 00007168 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdycl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdsl1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdsl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdpl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhu.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhela3.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz2.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcz1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdcr.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____R (Microsoft Corporation) C:\WINDOWS\system32\KBDAL.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdycl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsl1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdpl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhu.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhela3.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz2.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcz1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdcr.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdal.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtuq.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtuf.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlv1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlv.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhela2.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdgkl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdest.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtuq.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtuf.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlv1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlv.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhela2.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgkl.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdest.dll

Code:

ATTFilter

2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdycc.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbduzb.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdur.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdtat.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdru1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdru.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdro.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdpl1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdmon.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlt1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdlt.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdkyr.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdkaz.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhu1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe319.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe220.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdhe.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdbu.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdblr.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdazel.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____R (Microsoft Corporation) C:\WINDOWS\system32\kbdaze.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdycc.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbduzb.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdur.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdtat.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdru1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdru.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdro.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdpl1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdmon.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlt1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlt.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkyr.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdkaz.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhu1.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe319.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe220.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdhe.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdbu.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdblr.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdazel.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdaze.dll
2015-10-08 19:31 - 2008-08-21 14:00 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\system\SHELL.DLL
2015-10-08 19:31 - 2008-08-21 14:00 - 00004048 _____ (Microsoft Corporation) C:\WINDOWS\system\TIMER.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00003360 _____ (Microsoft Corporation) C:\WINDOWS\system\SYSTEM.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00002951 ____N C:\WINDOWS\system32\CONFIG.TMP
2015-10-08 19:31 - 2008-08-21 14:00 - 00002176 _____ (Microsoft Corporation) C:\WINDOWS\system\VGA.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00002032 _____ (Microsoft Corporation) C:\WINDOWS\system\MOUSE.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00002000 _____ (Microsoft Corporation) C:\WINDOWS\system\KEYBOARD.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00001806 _____ C:\WINDOWS\system32\AUTOEXEC.NT
2015-10-08 19:31 - 2008-08-21 14:00 - 00001744 _____ (Microsoft Corporation) C:\WINDOWS\system\SOUND.DRV
2015-10-08 19:31 - 2008-08-21 14:00 - 00001152 _____ (Microsoft Corporation) C:\WINDOWS\system\MMTASK.TSK
2015-10-08 19:31 - 2008-08-21 14:00 - 00000888 ____C C:\WINDOWS\system32\dllcache\sam.sdf
2015-10-08 19:31 - 2008-04-14 08:52 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\storprop.dll
2015-10-08 18:54 - 2015-10-11 04:03 - 00017144 _____ C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2015-10-08 18:53 - 2015-10-12 19:14 - 00000432 _____ C:\WINDOWS\Tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job
2015-10-08 18:53 - 2015-10-12 19:14 - 00000432 _____ C:\WINDOWS\Tasks\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}.job
2015-10-08 18:53 - 2015-10-12 19:14 - 00000432 _____ C:\WINDOWS\Tasks\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22}.job
2015-10-08 18:53 - 2015-10-12 19:14 - 00000432 _____ C:\WINDOWS\Tasks\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9}.job
2015-10-08 18:53 - 2015-10-12 19:13 - 01474832 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2015-10-08 18:53 - 2015-10-08 19:54 - 00065536 _____ C:\WINDOWS\system32\config\COMODO I.evt
2015-10-08 18:53 - 2015-10-08 18:53 - 00000000 ___SD C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Shared Space
2015-10-08 18:53 - 2015-10-08 18:53 - 00000000 ____D C:\Programme\COMODO
2015-10-08 18:53 - 2015-10-08 18:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\COMODO
2015-10-08 18:52 - 2015-10-08 18:52 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Comodo Downloader
2015-10-08 18:51 - 2015-10-08 18:53 - 00000000 ____D C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Comodo
2015-10-08 18:50 - 2015-10-08 18:50 - 00000000 ____D C:\Intel
2015-10-08 18:42 - 2015-10-12 19:17 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Temp
2015-10-08 18:42 - 2015-10-12 16:35 - 00000000 ____D C:\Dokumente und Einstellungen\Zima Alexander
2015-10-08 18:42 - 2015-10-12 16:23 - 00032432 _____ C:\WINDOWS\SchedLgU.Txt
2015-10-08 18:42 - 2015-10-12 16:23 - 00000190 ___SH C:\Dokumente und Einstellungen\Zima Alexander\ntuser.ini
2015-10-08 18:42 - 2015-10-12 16:23 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-08 18:42 - 2015-10-12 16:18 - 00000000 ___RD C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\Autostart
2015-10-08 18:42 - 2015-10-12 16:18 - 00000000 ___RD C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme
2015-10-08 18:42 - 2015-10-12 15:50 - 00000000 ___RD C:\Dokumente und Einstellungen\Zima Alexander\Startmenü
2015-10-08 18:42 - 2015-10-11 19:27 - 00000000 __SHD C:\Dokumente und Einstellungen\LocalService
2015-10-08 18:42 - 2015-10-10 19:22 - 00000778 _____ C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\Windows Media Player.lnk
2015-10-08 18:42 - 2015-10-10 16:35 - 00000000 ___HD C:\Dokumente und Einstellungen\Zima Alexander\Netzwerkumgebung
2015-10-08 18:42 - 2015-10-08 20:56 - 00000000 ___RD C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\Zubehör
2015-10-08 18:42 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\Zima Alexander\Druckumgebung
2015-10-08 18:42 - 2015-10-08 19:31 - 00000000 ___HD C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Verlauf
2015-10-08 18:42 - 2015-10-08 18:42 - 00000020 ___SH C:\Dokumente und Einstellungen\LocalService\ntuser.ini
2015-10-08 18:42 - 2015-10-08 18:42 - 00000000 __SHD C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Verlauf
2015-10-08 18:42 - 2015-10-08 18:42 - 00000000 ____D C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temp
2015-10-08 18:42 - 2015-10-08 18:39 - 00001599 _____ C:\Dokumente und Einstellungen\Zima Alexander\Startmenü\Programme\Remoteunterstützung.lnk
2015-10-08 18:41 - 2015-10-11 19:27 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService
2015-10-08 18:41 - 2015-10-08 19:31 - 00000000 __SHD C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Verlauf
2015-10-08 18:41 - 2015-10-08 18:41 - 00008192 _____ C:\WINDOWS\REGLOCS.OLD
2015-10-08 18:41 - 2015-10-08 18:41 - 00000020 ___SH C:\Dokumente und Einstellungen\NetworkService\ntuser.ini
2015-10-08 18:41 - 2015-10-08 18:41 - 00000000 ____D C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temp
2015-10-08 18:41 - 2008-08-21 14:00 - 00363008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svc.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winzm.ime
2015-10-08 18:41 - 2008-08-21 14:00 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winsp.ime
2015-10-08 18:41 - 2008-08-21 14:00 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winpy.ime
2015-10-08 18:41 - 2008-08-21 14:00 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winar30.ime
2015-10-08 18:41 - 2008-08-21 14:00 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wam51.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00074240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ext.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00072704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wingb.ime
2015-10-08 18:41 - 2008-08-21 14:00 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winime.ime
2015-10-08 18:41 - 2008-08-21 14:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamreg51.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00048256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w32.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00041600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00031360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\weitekp9.sys
2015-10-08 18:41 - 2008-08-21 14:00 - 00028288 ____C C:\WINDOWS\system32\dllcache\xjis.nls

Fortsetzung folgt...

netfreak · 12.10.2015, 19:18

fortsetzung...

Code:

ATTFilter

2015-10-08 18:41 - 2008-08-21 14:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamps51.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3svapi.dll
2015-10-08 18:41 - 2008-08-21 14:00 - 00004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\w3ctrs51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 13463552 ____C C:\WINDOWS\system32\dllcache\hwxjpn.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 10129408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxkor.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 10096640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hwxcht.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 02134528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpsnap.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 01875968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.lex
2015-10-08 18:40 - 2008-08-21 14:00 - 01677824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chsbrkr.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 01158818 ____C C:\WINDOWS\system32\dllcache\korwbrkr.lex
2015-10-08 18:40 - 2008-08-21 14:00 - 00838144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtbrkr.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00811064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81k.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00716856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcus.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00571392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlgnt.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00563200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsst.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00514587 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\edb500.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00482304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlgnt.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00480256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintsetp.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00471102 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskdic.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00465408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpsvc.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00455168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintsetp.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00451584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsapi.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00426041 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicepad.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00400896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsxp32.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00397312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxstiff.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00374784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asp51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00368696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpcic.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00358400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpincl.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00340023 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjp81.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00334848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aqueue.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00315455 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imskf.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00311359 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsv.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00307257 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00285184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscomex.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00274489 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputyc.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00268800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssvc.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00268288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpext.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00262200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjputy.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00259072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpcl.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00257024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infocomm.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00246272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxst30.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00236544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smi2smir.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00235520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscover.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00233527 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjprw.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00229439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\multibox.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00221696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\seo.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00218112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_g18030.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00208952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpmig.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00198656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintime.dll

Code:

ATTFilter

2015-10-08 18:40 - 2008-08-21 14:00 - 00196665 ____C C:\WINDOWS\system32\dllcache\imjpinst.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00195618 ____C C:\WINDOWS\system32\dllcache\c_10002.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00195584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxswzrd.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00189986 ____C C:\WINDOWS\system32\dllcache\c_1361.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00189952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpadm.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00188416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpsmir.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00187938 ____C C:\WINDOWS\system32\dllcache\c_20005.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00186402 ____C C:\WINDOWS\system32\dllcache\c_20001.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00185378 ____C C:\WINDOWS\system32\dllcache\c_20003.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\thawbrkr.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00180770 ____C C:\WINDOWS\system32\dllcache\c_20932.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00180258 ____C C:\WINDOWS\system32\dllcache\c_20004.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00180258 ____C C:\WINDOWS\system32\dllcache\c_20000.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00177698 ____C C:\WINDOWS\system32\dllcache\c_20949.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00177698 ____C C:\WINDOWS\system32\dllcache\c_10003.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00175104 ____C C:\WINDOWS\system32\dllcache\pintlcsa.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_20936.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_20002.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00173602 ____C C:\WINDOWS\system32\dllcache\c_10008.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00173568 ____C C:\WINDOWS\system32\dllcache\chtskf.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00162850 ____C C:\WINDOWS\system32\dllcache\c_10001.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00155705 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdsvr.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsui.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00145408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iische51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00143422 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\softkey.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00142848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclnt.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00139264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsclntr.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00134339 ____C C:\WINDOWS\system32\dllcache\imekr.lex
2015-10-08 18:40 - 2008-08-21 14:00 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxviceo.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00125952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsv251.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00119808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtstocom.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00112640 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscfgwz.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00110080 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\appconf.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00108827 ____C C:\WINDOWS\system32\dllcache\hanja.lex
2015-10-08 18:40 - 2008-08-21 14:00 - 00108032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntagnt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00106496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrcic.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00103936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uihelper.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00102463 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imepadsm.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00102456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imlang.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00101376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srusbusd.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00098304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msir3jp.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtmbx.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekr61.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00094208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntwin.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00092416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.sys
2015-10-08 18:40 - 2008-08-21 14:00 - 00092032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mga.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00086073 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\voicesub.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\metada51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmbx.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00083748 ____C C:\WINDOWS\system32\dllcache\prcp.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00083748 ____C C:\WINDOWS\system32\dllcache\prc.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00082172 ____C C:\WINDOWS\system32\dllcache\bopomofo.nls

Code:

ATTFilter

2015-10-08 18:40 - 2008-08-21 14:00 - 00081976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdct.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00081408 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia330.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00081408 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rwia001.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00079872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iislog51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00079360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\phon.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dayi.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00078336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chajei.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quick.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00076288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniime.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00072192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxscom.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\korwbrkr.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlphr.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmigrate.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00066728 ____C C:\WINDOWS\system32\dllcache\big5.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_864.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_862.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_858.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066594 ____C C:\WINDOWS\system32\dllcache\c_720.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_870.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_708.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_28596.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_21027.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_21025.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20924.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20880.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20871.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20838.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20833.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20424.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20423.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20420.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20297.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20290.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20285.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20284.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20280.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20278.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20277.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20273.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20269.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20108.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20107.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20106.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_20105.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1149.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1148.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1147.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1146.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1145.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1144.nls

Code:

ATTFilter

2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1143.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1142.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1141.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1140.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_1047.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10021.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10005.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00066082 ____C C:\WINDOWS\system32\dllcache\c_10004.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00065024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unicdime.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsevent.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpod51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisclex4.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imkrinst.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00059392 ____C C:\WINDOWS\system32\dllcache\imscinst.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00057856 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esuimgd.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00057399 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cplexe.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00057398 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpdadm.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00056832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\convlog.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chtskdic.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00054528 ____C (Philips Semiconductors GmbH) C:\WINDOWS\system32\dllcache\cap7146.sys
2015-10-08 18:40 - 2008-08-21 14:00 - 00053760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pintlcsd.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nextlink.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00050176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adrot.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00047066 ____C C:\WINDOWS\system32\dllcache\ksc.nls
2015-10-08 18:40 - 2008-08-21 14:00 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\svcext51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sspifilt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00045568 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esunid.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ssinc51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browscap.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00045109 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imjpuex.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nsepm.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tintlphr.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00044032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imekrmig.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00042496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\davcdata.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiregmv.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpthrd.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00039936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hostmib.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm9aw.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00037888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\md5filt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00036927 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs411.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iprip.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hanjadic.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tools.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lmmib2.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\controt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmp.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gzip.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00031744 ____C (SEIKO EPSON CORP.) C:\WINDOWS\system32\dllcache\esucmd.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smb6w.dll

Code:

ATTFilter

2015-10-08 18:40 - 2008-08-21 14:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sma3w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pagecnt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00031744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsroute.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm87w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm81w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admexs.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00029184 ____C (Ricoh Co., Ltd.) C:\WINDOWS\system32\dllcache\rw330ext.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8cw.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asptxn.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00027648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rw001ext.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm93w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm92w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mdsync.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iscomlog.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsdrv.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm90w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8dw.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm8aw.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm89w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\romanime.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\evntcmd.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00025856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\et4000.sys
2015-10-08 18:40 - 2008-08-21 14:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sm59w.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisadmin.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00024064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\compfilt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsmon.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsext32.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lpdsvc.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00022016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logscrpt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdipx.sys
2015-10-08 18:40 - 2008-08-21 14:00 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cintlgnt.ime
2015-10-08 18:40 - 2008-08-21 14:00 - 00020992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\permchk.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00020736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ramdisk.sys
2015-10-08 18:40 - 2008-08-21 14:00 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\counters.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lprmon.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cprofile.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00019464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdspx.sys
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\simptcp.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iiscrmap.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0804.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0412.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0411.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt040d.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0404.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\agt0401.dll

Code:

ATTFilter

2015-10-08 18:40 - 2008-08-21 14:00 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jupiw.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\status.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quser.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgport.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsm.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs404.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetin51.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs804.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\register.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\flattemp.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00014848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chgusr.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsprof.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\padrs412.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00014336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\exstrace.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chglogon.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lonsint.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00013192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdasync.sys
2015-10-08 18:40 - 2008-08-21 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxmcro.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxssend.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpapi.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00010752 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_iscii.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmigrate.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpstup.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\change.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aspperf.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rwnh.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecat.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iwrps.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00009216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\authfilt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmptrap.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoctrs.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsperf.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\staxmem.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpmb51.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pwsdata.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migregdb.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnecnt.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpctrs2.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wamregps.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdnec95.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdibm02.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isapips.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisfecnv.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fxsres.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\f3ahvoas.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41a.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iissync.exe
2015-10-08 18:40 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\c_is2022.dll

Code:

ATTFilter

2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\snmpmib.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pmxgl.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth3.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth2.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdlk41j.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinpun.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdax2.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd106n.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101a.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbd101.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpmib.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftlx041e.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admxprox.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smimsgif.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smierrsy.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdvntc.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdusa.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdurdu.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth1.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdth0.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr2.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdsyr1.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintel.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdintam.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinmar.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinkan.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinhin.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdinguj.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdindev.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdheb.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdfa.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv2.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbddiv1.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda3.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda2.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbda1.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdgeo.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarmw.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00005120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kbdarme.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rpcref.dll
2015-10-08 18:40 - 2008-08-21 14:00 - 00003584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismui.dll
2015-10-08 18:40 - 2003-03-24 16:52 - 00618605 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4autl.dll
2015-10-08 18:40 - 2003-03-24 16:52 - 00094208 ____C C:\WINDOWS\system32\dllcache\fpencode.dll

Code:

ATTFilter

2015-10-08 18:40 - 2003-03-24 16:52 - 00032827 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptest.exe
2015-10-08 18:40 - 2003-03-24 16:52 - 00024632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmcgi.exe
2015-10-08 18:40 - 2003-03-24 16:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpadmdll.dll
2015-10-08 18:40 - 2003-03-24 16:52 - 00020536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.dll
2015-10-08 18:40 - 2003-03-24 16:52 - 00016437 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shtml.exe
2015-10-08 18:40 - 2003-03-24 16:52 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcptsat.dll
2015-10-08 18:40 - 2001-08-18 04:55 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_regtrace.exe
2015-10-08 18:40 - 2001-08-18 04:54 - 00057856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_scripto.dll
2015-10-08 18:40 - 2001-08-18 04:54 - 00038912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_ntfsdrv.dll
2015-10-08 18:40 - 2001-08-18 04:54 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_seos.dll
2015-10-08 18:40 - 2001-08-18 04:54 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_smtpctrs.dll
2015-10-08 18:40 - 2001-08-18 04:54 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_snprfdll.dll
2015-10-08 18:40 - 2001-08-18 04:53 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_mailmsg.dll
2015-10-08 18:40 - 2001-08-18 04:53 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_aqadmin.dll
2015-10-08 18:40 - 2001-08-18 04:53 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_fcachdll.dll
2015-10-08 18:40 - 2001-08-18 04:52 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\EXCH_adsiisex.dll
2015-10-08 18:39 - 2015-10-12 17:28 - 01581585 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-08 18:39 - 2015-10-08 21:05 - 00023392 _____ C:\WINDOWS\system32\nscompat.tlb
2015-10-08 18:39 - 2015-10-08 21:05 - 00016832 _____ C:\WINDOWS\system32\amcompat.tlb
2015-10-08 18:39 - 2015-10-08 21:04 - 00000000 __SHD C:\Dokumente und Einstellungen\All Users\DRM
2015-10-08 18:39 - 2015-10-08 18:39 - 00316640 _____ C:\WINDOWS\WMSysPr9.prx
2015-10-08 18:39 - 2015-10-08 18:39 - 00002951 _____ C:\WINDOWS\system32\CONFIG.NT
2015-10-08 18:39 - 2015-10-08 18:39 - 00001607 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programmzugriff und -standards.lnk
2015-10-08 18:39 - 2015-10-08 18:39 - 00001599 _____ C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Remoteunterstützung.lnk
2015-10-08 18:39 - 2015-10-08 18:39 - 00001507 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Windows Update.lnk
2015-10-08 18:39 - 2015-10-08 18:39 - 00000772 _____ C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Windows Media Player.lnk
2015-10-08 18:39 - 2015-10-08 18:39 - 00000758 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Movie Maker.lnk
2015-10-08 18:39 - 2015-10-08 18:39 - 00000749 ___RH C:\WINDOWS\WindowsShell.Manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000749 ___RH C:\WINDOWS\system32\wuaucpl.cpl.manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000749 ___RH C:\WINDOWS\system32\sapi.cpl.manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000749 ___RH C:\WINDOWS\system32\nwc.cpl.manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000749 ___RH C:\WINDOWS\system32\ncpa.cpl.manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000749 ___RH C:\WINDOWS\system32\cdplayer.exe.manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000488 ___RH C:\WINDOWS\system32\WindowsLogon.manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000488 ___RH C:\WINDOWS\system32\logonui.exe.manifest
2015-10-08 18:39 - 2015-10-08 18:39 - 00000398 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Windows-Katalog.lnk
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 __RSH C:\MSDOS.SYS
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 __RSH C:\IO.SYS
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 ___RD C:\WINDOWS\Offline Web Pages
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 ___RD C:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Zubehör
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 ___HD C:\Programme\WindowsUpdate
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 ____D C:\WINDOWS\system32\xircom
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 ____D C:\Programme\xerox
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 ____D C:\Programme\Online-Dienste
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 ____D C:\Programme\microsoft frontpage
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 _____ C:\WINDOWS\control.ini
2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 _____ C:\CONFIG.SYS

Code:

ATTFilter

2015-10-08 18:39 - 2015-10-08 18:39 - 00000000 _____ C:\AUTOEXEC.BAT
2015-10-08 18:39 - 2008-08-21 14:00 - 04399505 ____C C:\WINDOWS\system32\dllcache\nls302en.lex
2015-10-08 18:39 - 2008-08-21 14:00 - 00847360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00290816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\adsiis51.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00282624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certwiz.ocx
2015-10-08 18:39 - 2008-08-21 14:00 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisui.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00133632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrtl.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00096768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\certmap.ocx
2015-10-08 18:39 - 2008-08-21 14:00 - 00078336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logui.ocx
2015-10-08 18:39 - 2008-08-21 14:00 - 00077312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cnfgprts.ocx
2015-10-08 18:39 - 2008-08-21 14:00 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isatq.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisext51.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00064512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iismap.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00047104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\coadmin.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admwprox.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstas.exe
2015-10-08 18:39 - 2008-08-21 14:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetsloc.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisreset.exe
2015-10-08 18:39 - 2008-08-21 14:00 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\infoadmn.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetmgr.exe
2015-10-08 18:39 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ftpsapi2.dll
2015-10-08 18:39 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iisrstap.dll
2015-10-08 18:39 - 2004-05-13 00:39 - 00876653 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awel.dll
2015-10-08 18:39 - 2004-05-13 00:39 - 00598071 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmc.dll
2015-10-08 18:39 - 2004-05-13 00:39 - 00184435 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4amsft.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00217088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpmmcsat.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00188494 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpcount.exe
2015-10-08 18:39 - 2003-03-24 16:52 - 00188480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cfgwiz.exe
2015-10-08 18:39 - 2003-03-24 16:52 - 00147513 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4apws.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00109328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98swin.exe
2015-10-08 18:39 - 2003-03-24 16:52 - 00102509 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4atxt.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00082035 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4anscp.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00049212 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4awebs.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00049210 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4areg.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00041020 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avnb.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00032826 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp4avss.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00020541 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpexedll.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00020540 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.dll
2015-10-08 18:39 - 2003-03-24 16:52 - 00020538 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fpremadm.exe
2015-10-08 18:39 - 2003-03-24 16:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\author.exe
2015-10-08 18:39 - 2003-03-24 16:52 - 00016439 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\admin.exe
2015-10-08 18:39 - 2003-03-24 16:52 - 00014608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fp98sadm.exe

Code:

ATTFilter

2015-10-08 18:38 - 2015-10-11 13:58 - 00000000 ____D C:\WINDOWS\system32\DirectX
2015-10-08 18:38 - 2015-10-08 23:20 - 00759296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vgx.dll
2015-10-08 18:38 - 2015-10-08 21:05 - 00243712 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mpvis.dll
2015-10-08 18:38 - 2015-10-08 21:05 - 00096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpband.dll
2015-10-08 18:38 - 2015-10-08 21:04 - 01678848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setup_wm.exe
2015-10-08 18:38 - 2015-10-08 21:04 - 00064000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmplayer.exe
2015-10-08 18:38 - 2015-10-08 20:35 - 03558912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\moviemk.exe
2015-10-08 18:38 - 2015-10-08 20:35 - 00000000 ____D C:\Programme\Movie Maker
2015-10-08 18:38 - 2015-10-08 18:39 - 00000000 ____D C:\WINDOWS\srchasst
2015-10-08 18:38 - 2015-10-08 18:38 - 00000000 ____D C:\WINDOWS\system32\Macromed
2015-10-08 18:38 - 2015-10-08 18:38 - 00000000 ____D C:\Programme\Gemeinsame Dateien\MSSoap
2015-10-08 18:38 - 2015-10-08 18:38 - 00000000 ____D C:\Programme\Gemeinsame Dateien\Dienste
2015-10-08 18:38 - 2012-06-02 15:19 - 01933848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaueng.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 01933848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00577048 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuapi.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00577048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00329240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wucltui.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00329240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltui.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00219160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaucpl.cpl
2015-10-08 18:38 - 2012-06-02 15:19 - 00219160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaucpl.cpl
2015-10-08 18:38 - 2012-06-02 15:19 - 00210968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuweb.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00210968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuweb.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00053784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauclt.exe
2015-10-08 18:38 - 2012-06-02 15:19 - 00053784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-10-08 18:38 - 2012-06-02 15:19 - 00035864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wups.dll
2015-10-08 18:38 - 2012-06-02 15:19 - 00035864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 04293632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2res.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 03166208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msgr3en.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00786432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\migrate.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00727614 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srchui.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00565760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobmain.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00502272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2fxa.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00409088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgr.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00402432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2filt.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00380416 ____C () C:\WINDOWS\system32\dllcache\msinfo.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00364544 ____C (Microsoft Corporation (written by Digital Renaissance Inc.)) C:\WINDOWS\system32\dllcache\npdsplay.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00325632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2fxb.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00235520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mssoap1.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00226816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npdrmv2.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00221184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpns.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00183808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuaueng1.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng1.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00168448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauclt1.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt1.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00167936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2ae.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00151040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uploadm.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00122368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobcomm.dll

Code:

ATTFilter

2015-10-08 18:38 - 2008-08-21 14:00 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg723.acm
2015-10-08 18:38 - 2008-08-21 14:00 - 00102912 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pchshell.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helphost.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00094208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieinfo5.ocx
2015-10-08 18:38 - 2008-08-21 14:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwtutor.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00070144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\acctres.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\acctres.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwres.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00058434 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srchctls.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00051712 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oobebaln.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00048680 ___SH C:\WINDOWS\winnt256.bmp
2015-10-08 18:38 - 2008-08-21 14:00 - 00048680 ___SH C:\WINDOWS\winnt.bmp
2015-10-08 18:38 - 2008-08-21 14:00 - 00047104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srdiag.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrslv.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrslv.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrcdlg.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\racpldlg.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrcdlg.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\trialoc.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00040448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msinfo32.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00038400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pchsvc.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\notiflag.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\custsat.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobshel.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00029696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\safrdm.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\safrdm.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00029184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoobe.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wisc10.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00023552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mssoapr.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00021504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\brpinfo.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobweb.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qmgrprxy.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgrprxy.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msobdl.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isignup.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icfgnt5.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfgnt5.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wb32.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmevtmsg.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cb32.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\nmevtmsg.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\atrace.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\atrace.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\npwmsdrm.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx2.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx2.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2ext.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hcappres.dll

Code:

ATTFilter

2015-10-08 18:38 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx4.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00007168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bitsprx3.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx4.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bitsprx3.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00006656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wuauserv.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauserv.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2res2.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00004639 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplayer2.exe
2015-10-08 18:38 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmm2eres.dll
2015-10-08 18:38 - 2008-08-21 14:00 - 00000984 ____C C:\WINDOWS\system32\dllcache\srframe.mmf
2015-10-08 18:37 - 2015-10-12 15:43 - 00000000 ____D C:\WINDOWS\system32\Restore
2015-10-08 18:37 - 2015-10-11 19:27 - 00000000 ____D C:\WINDOWS\Registration
2015-10-08 18:37 - 2015-10-10 19:22 - 00018574 _____ C:\WINDOWS\wmsetup.log
2015-10-08 18:37 - 2015-10-08 23:20 - 00639560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iexplore.exe
2015-10-08 18:37 - 2015-10-08 20:41 - 00536576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado15.dll
2015-10-08 18:37 - 2015-10-08 20:37 - 00692736 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcomm.dll
2015-10-08 18:37 - 2015-10-08 20:37 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-10-08 18:37 - 2015-10-08 20:36 - 00200704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadox.dll
2015-10-08 18:37 - 2015-10-08 20:36 - 00180224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadomd.dll
2015-10-08 18:37 - 2015-10-08 20:36 - 00143360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadco.dll
2015-10-08 18:37 - 2015-10-08 20:36 - 00102400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msjro.dll
2015-10-08 18:37 - 2015-10-08 20:35 - 01315328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoe.dll
2015-10-08 18:37 - 2015-10-08 20:35 - 00744448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helpsvc.exe
2015-10-08 18:37 - 2015-10-08 20:35 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\isign32.dll
2015-10-08 18:37 - 2015-10-08 20:35 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\isign32.dll
2015-10-08 18:37 - 2015-10-08 20:35 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab.exe
2015-10-08 18:37 - 2015-10-08 20:35 - 00000000 ____D C:\Programme\Outlook Express
2015-10-08 18:37 - 2015-10-08 20:33 - 00153088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\triedit.dll
2015-10-08 18:37 - 2015-10-08 20:33 - 00128512 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dhtmled.ocx
2015-10-08 18:37 - 2015-10-08 20:32 - 00331776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadce.dll
2015-10-08 18:37 - 2015-10-08 18:39 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Verwaltung
2015-10-08 18:37 - 2015-10-08 18:38 - 00000000 ____D C:\Programme\NetMeeting
2015-10-08 18:37 - 2015-10-08 18:37 - 00021740 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-10-08 18:37 - 2015-10-08 18:37 - 00002004 _____ C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\MSN.lnk
2015-10-08 18:37 - 2015-10-08 18:37 - 00001023 _____ C:\WINDOWS\sessmgr.setup.log
2015-10-08 18:37 - 2015-10-08 18:37 - 00000130 _____ C:\WINDOWS\DtcInstall.log
2015-10-08 18:37 - 2015-10-08 18:37 - 00000037 _____ C:\WINDOWS\vbaddin.ini
2015-10-08 18:37 - 2015-10-08 18:37 - 00000036 _____ C:\WINDOWS\vb.ini
2015-10-08 18:37 - 2015-10-08 18:37 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spiele
2015-10-08 18:37 - 2015-10-08 18:37 - 00000000 ____D C:\Programme\Online Services
2015-10-08 18:37 - 2015-10-08 18:37 - 00000000 ____D C:\Programme\MSN Gaming Zone
2015-10-08 18:37 - 2015-10-08 18:37 - 00000000 ____D C:\Programme\Gemeinsame Dateien\System
2015-10-08 18:37 - 2015-10-08 18:37 - 00000000 ____D C:\Programme\ComPlus Applications
2015-10-08 18:37 - 2010-11-08 14:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado27.tlb
2015-10-08 18:37 - 2010-11-08 14:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado26.tlb
2015-10-08 18:37 - 2010-11-08 14:41 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado25.tlb
2015-10-08 18:37 - 2010-11-08 14:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado21.tlb
2015-10-08 18:37 - 2010-11-08 14:41 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msado20.tlb
2015-10-08 18:37 - 2009-03-08 04:24 - 00068608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hmmapi.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 02532864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoeres.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 02178131 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvlres.dll

Code:

ATTFilter

2015-10-08 18:37 - 2008-08-21 14:00 - 01817687 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckgres.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 01175635 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtzres.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 01042515 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmnresm.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 01040384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\conf.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00781397 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkrres.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00769024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\helpctr.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00753236 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvseres.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00683520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\getuname.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00683520 _____ (Microsoft Corporation) C:\WINDOWS\system32\getuname.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00554008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dao360.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00510976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab32.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00487424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oledb32.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00385536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rstrui.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00385024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\callcont.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00315392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasql.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00282624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcfg.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcfg.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00280064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstask.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstask.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00274432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mst120.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00259072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wab32res.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00252928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoeacct.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoeacct.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00242176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srrstr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00242176 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00233472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaora.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00232960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avtapi.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\avtapi.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00229376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmas.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00221184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nac.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00218624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn1.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00217160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmnclim.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00217088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sqlxmlx.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00204800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaps.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00200704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaprst.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00193536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schedsvc.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msh261.drv
2015-10-08 18:37 - 2008-08-21 14:00 - 00188416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmwb.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00172544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msconfig.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmoldwb.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwhelp.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00171520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srsvc.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\srsvc.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmft.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadds.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00139776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sndvol32.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\sndvol32.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00129792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltmgr.sys
2015-10-08 18:37 - 2008-08-21 14:00 - 00129792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys

Code:

ATTFilter

2015-10-08 18:37 - 2008-08-21 14:00 - 00128000 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshearts.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshearts.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00120320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmine.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmine.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00118784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdarem.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00114688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\calc.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00113222 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zoneclim.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msoert2.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msoert2.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00104448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oeimport.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00094208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdatl3.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00093702 _____ C:\WINDOWS\system32\subrange.uce
2015-10-08 18:37 - 2008-08-21 14:00 - 00086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\directdb.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00086016 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn2.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabimp.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00082501 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckg.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmchat.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ils.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ils.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00080896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\charmap.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmcom.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00077824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaosp.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00074240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\setup50.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oledb32r.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00073728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwdial.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwdial.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00073472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sr.sys
2015-10-08 18:37 - 2008-08-21 14:00 - 00073472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sr.sys
2015-10-08 18:37 - 2008-08-21 14:00 - 00073216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avwav.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\avwav.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00069632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msconf.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msconf.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00067584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srclient.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srclient.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00066113 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvl.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00065978 _____ C:\WINDOWS\Seifenblase.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00065954 _____ C:\WINDOWS\Präriewind.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00065832 _____ C:\WINDOWS\Santa Fe-Stuck.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwphbk.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\icwphbk.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rrcm.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oemig50.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcf.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwconn.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00060458 _____ C:\WINDOWS\system32\ideograf.uce
2015-10-08 18:37 - 2008-08-21 14:00 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msimn.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00057409 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtz.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sol.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mst123.dll

Code:

ATTFilter

2015-10-08 18:37 - 2008-08-21 14:00 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadrh15.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msador15.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00057344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\h323cc.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\sol.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00055808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\freecell.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\freecell.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcs.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00051712 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetres.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetres.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00049152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwutil.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00048706 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvse.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00045056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\confmrsl.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00044544 _____ (Hilgraeve, Inc.) C:\WINDOWS\system32\hticons.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00042577 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\bckgzm.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00042575 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkrzm.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00042574 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rvsezm.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00042573 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shvlzm.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00042573 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hrtzzm.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00041029 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zcorem.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dcap32.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00040515 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\chkr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00036937 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zclientm.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00036864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdfmap.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00035840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winchat.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winchat.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oemiglib.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00034560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mnmdd.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00034560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmdd.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabfind.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mnmsrvc.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00032768 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwdl.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00032768 ____C (Intel Corporation) C:\WINDOWS\system32\dllcache\isrdbg32.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mnmsrvc.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00032768 _____ (Intel Corporation) C:\WINDOWS\system32\isrdbg32.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00032339 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\uniansi.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wabmig.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00029760 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\znetm.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmmkcert.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\nmasnt.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msader15.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\nmmkcert.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00027055 _____ C:\WINDOWS\system32\tslabels.ini
2015-10-08 18:37 - 2008-08-21 14:00 - 00026680 _____ C:\WINDOWS\Fächer.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00026582 _____ C:\WINDOWS\Granit.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msxactps.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msaddsr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icwrmind.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00024006 _____ C:\WINDOWS\system32\gb2312.uce
2015-10-08 18:37 - 2008-08-21 14:00 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltmc.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltMc.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00022984 _____ C:\WINDOWS\system32\bopomofo.uce

Code:

ATTFilter

2015-10-08 18:37 - 2008-08-21 14:00 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdatt.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcer.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetwiz.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedw.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00018432 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hscupd.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00017920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsshutdn.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsshutdn.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00017362 _____ C:\WINDOWS\Rhododendron.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00017336 _____ C:\WINDOWS\Angler.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00017062 _____ C:\WINDOWS\Kaffeetasse.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fltlib.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fltlib.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016740 _____ C:\WINDOWS\system32\shiftjis.uce
2015-10-08 18:37 - 2008-08-21 14:00 - 00016730 _____ C:\WINDOWS\Feder.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tskill.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasqlr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaremr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaprsr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaorar.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcor.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msadcfr.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avmeter.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tskill.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\avmeter.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsdiscon.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tscon.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00015360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shadow.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsdiscon.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscon.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shadow.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00013894 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zonelibm.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00013312 ____C (Hilgraeve, Inc.) C:\WINDOWS\system32\dllcache\htrn_jis.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00012876 _____ C:\WINDOWS\system32\korean.uce
2015-10-08 18:37 - 2008-08-21 14:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstinit.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstinit.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00010240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\reset.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\reset.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00009522 _____ C:\WINDOWS\Zapotek.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00008484 _____ C:\WINDOWS\system32\kanji_2.uce
2015-10-08 18:37 - 2008-08-21 14:00 - 00006948 _____ C:\WINDOWS\system32\kanji_1.uce
2015-10-08 18:37 - 2008-08-21 14:00 - 00005632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\write.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\write.exe
2015-10-08 18:37 - 2008-08-21 14:00 - 00004677 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\zeeverm.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaurl.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdasc.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaer.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdaenum.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdadc.dll
2015-10-08 18:37 - 2008-08-21 14:00 - 00003286 _____ C:\WINDOWS\system32\tslabels.h
2015-10-08 18:37 - 2008-08-21 14:00 - 00001272 _____ C:\WINDOWS\Blaue Spitzen 16.bmp
2015-10-08 18:37 - 2008-08-21 14:00 - 00001237 _____ C:\WINDOWS\system32\usrlogon.cmd

Code:

ATTFilter

2015-10-08 18:36 - 2015-10-08 21:40 - 00000000 ___RD C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Zubehör
2015-10-08 18:36 - 2015-10-08 20:42 - 02067456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lhmstscx.dll
2015-10-08 18:36 - 2015-10-08 20:42 - 02067456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2015-10-08 18:36 - 2015-10-08 20:41 - 00139784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwd.sys
2015-10-08 18:36 - 2015-10-08 20:41 - 00139784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpwd.sys
2015-10-08 18:36 - 2015-10-08 20:33 - 00956928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtctm.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00956928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00473600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastprox.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00453120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvsd.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00428032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtcprx.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00227840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprvse.exe
2015-10-08 18:36 - 2015-10-08 20:33 - 00161792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtcuiu.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00091648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxoci.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtclog.dll
2015-10-08 18:36 - 2015-10-08 20:33 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtclog.dll
2015-10-08 18:36 - 2015-10-08 20:30 - 00677888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lhmstsc.exe
2015-10-08 18:36 - 2015-10-08 20:30 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2015-10-08 18:36 - 2015-10-08 20:30 - 00220160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wordpad.exe
2015-10-08 18:36 - 2015-10-08 20:29 - 00346624 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspaint.exe
2015-10-08 18:36 - 2015-10-08 20:29 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2015-10-08 18:36 - 2015-10-08 18:37 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2015-10-08 18:36 - 2015-10-08 18:37 - 00000000 ____D C:\WINDOWS\system32\Com
2015-10-08 18:36 - 2015-10-08 18:37 - 00000000 ____D C:\Programme\Windows NT
2015-10-08 18:36 - 2015-10-08 18:36 - 00000200 _____ C:\WINDOWS\cmsetacl.log
2015-10-08 18:36 - 2015-10-08 18:36 - 00000000 ____D C:\Programme\MSN
2015-10-08 18:36 - 2008-08-21 14:00 - 01359360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cimwin32.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 01267200 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comsvcs.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 01267200 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00625664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrvut.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00545280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dialer.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00539648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comuid.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\comuid.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00539136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spider.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\spider.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00531456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcore.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00498688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clbcatq.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00370176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmic.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00356352 _____ (Hilgraeve, Inc.) C:\WINDOWS\system32\hypertrm.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00297472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\termsrv.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00290304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rhttpaa.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\rhttpaa.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00282624 ____C (Cinematronics) C:\WINDOWS\system32\dllcache\pinball.exe

Code:

ATTFilter

2015-10-08 18:36 - 2008-08-21 14:00 - 00273920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemess.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00273920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00247808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\esscli.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00237056 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\provthrd.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00226304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrv.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00214528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcomn.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00212992 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntevt.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00201216 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcntl.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00197120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemupgd.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00196608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiadap.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00195072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comadmin.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00189440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cmprops.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmprops.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00188928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\accwiz.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\accwiz.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00185344 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\framedyn.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00178176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemdisp.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00178176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\repdrvfs.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00167424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comsnap.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsnap.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00156672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipcima.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00147968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdchost.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdchost.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00145408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmisvc.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00144896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00143360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sessmgr.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\sessmgr.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00140800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmidcprv.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00136192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aaclient.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aaclient.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00133120 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sndrec32.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\sndrec32.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipdskq.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00131584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\viewprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00126464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiapsrv.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00124928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mplay32.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mplay32.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00124416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mofd.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00120320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemtest.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00120320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dsprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00116224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\updprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00110592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clbcatex.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatex.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00104448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\clipbrd.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\clipbrd.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiutils.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00097792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrepl.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\comrepl.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00094720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tscfgwmi.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll

Code:

ATTFilter

2015-10-08 18:36 - 2008-08-21 14:00 - 00092672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\policman.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00088576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiaprpl.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00087176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpwsx.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00087176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpwsx.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\stdprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\catsrvps.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00076800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipicmp.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00071680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemcons.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00070656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\access.cpl
2015-10-08 18:36 - 2008-08-21 14:00 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\access.cpl
2015-10-08 18:36 - 2008-08-21 14:00 - 00067072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdshost.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdshost.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00063488 _____ C:\WINDOWS\system32\wmimgmt.msc
2015-10-08 18:36 - 2008-08-21 14:00 - 00062976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpclip.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00062464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipjobj.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipiprt.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tmplprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmimsg.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00061440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\remotepg.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotepg.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00060928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmicookr.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00060416 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\colbact.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\colbact.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemdisp.tlb
2015-10-08 18:36 - 2008-08-21 14:00 - 00059904 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\trnsprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00059392 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\stclient.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\stclient.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licwmi.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\licwmi.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00056320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\servdeps.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\servdeps.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsgqec.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fwdprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00052224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmitimep.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00047104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ncprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmi2xml.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemsvc.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00041472 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmipsess.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\smtpcons.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00039424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cfgbkend.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00036352 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scrcons.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00034304 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxlegih.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxlegih.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\regini.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\regini.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00031232 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemads.tlb
2015-10-08 18:36 - 2008-08-21 14:00 - 00030720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxdm.dll

Code:

ATTFilter

2015-10-08 18:36 - 2008-08-21 14:00 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxdm.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00028160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comaddin.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comaddin.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00024576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\krnlprov.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00022528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qwinsta.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00022528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msg.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\qwinsta.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00021896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdtcp.sys
2015-10-08 18:36 - 2008-08-21 14:00 - 00021896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdtcp.sys
2015-10-08 18:36 - 2008-08-21 14:00 - 00020480 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qprocess.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qprocess.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00019968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpsnd.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsnd.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtsadmin.tlb
2015-10-08 18:36 - 2008-08-21 14:00 - 00018944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemprox.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00017920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmgmtr.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00017920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mmfutil.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmfutil.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00017408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qappsrv.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\qappsrv.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unsecapp.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00016896 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mofcomp.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00016384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rwinsta.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rwinsta.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logoff.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00015872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdmodem.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoff.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdmodem.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmgmt.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00013824 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdsaddin.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsaddin.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00012288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wbemads.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00012040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tdpipe.sys
2015-10-08 18:36 - 2008-08-21 14:00 - 00012040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdpipe.sys
2015-10-08 18:36 - 2008-08-21 14:00 - 00011776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xolehlp.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\icaapi.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\icaapi.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00009728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrepl.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00007680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmiapres.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msdtc.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dcomcnfg.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00006144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\comrereg.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomcnfg.exe
2015-10-08 18:36 - 2008-08-21 14:00 - 00004608 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rdpcfgex.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcfgex.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxex.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxex.dll
2015-10-08 18:36 - 2008-08-21 14:00 - 00003999 _____ C:\WINDOWS\system32\msdtcprf.ini

Code:

ATTFilter

2015-10-08 18:36 - 2008-08-21 14:00 - 00000768 _____ C:\WINDOWS\system32\msdtcprf.h
2015-10-08 18:36 - 2008-04-14 07:53 - 00040840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\termdd.sys
2015-10-08 18:36 - 2008-04-14 00:02 - 00196224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-12 19:15 - 2013-02-22 17:05 - 00157696 _____ C:\WINDOWS\ERUNT.exe
2015-10-12 16:36 - 2008-08-21 14:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2015-10-11 13:36 - 2015-08-26 23:04 - 04587520 _____ (Google Inc.) C:\WINDOWS\system32\GPhotos.scr
2015-10-11 13:19 - 2011-05-10 00:48 - 00922112 ____N (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2015-10-11 13:19 - 2011-05-10 00:48 - 00922112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imapi2fs.dll
2015-10-11 13:19 - 2011-05-10 00:48 - 00426496 ____N (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2015-10-11 13:19 - 2011-05-10 00:48 - 00426496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\imapi2.dll
2015-10-11 13:19 - 2011-05-10 00:48 - 00062592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cdrom.sys
2015-10-10 15:39 - 2009-08-09 23:25 - 00029696 _____ (Elaborate Bytes AG) C:\WINDOWS\system32\Drivers\VClone.sys
2015-10-09 23:00 - 2012-06-04 17:35 - 00222448 _____ (Microsoft Corporation) C:\WINDOWS\system32\muweb.dll
2015-10-09 10:58 - 2008-08-21 14:00 - 00552448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oleaut32.dll
2015-10-09 10:58 - 2008-08-21 14:00 - 00552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 06013952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtml.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 04470784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msi.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 04470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 01895424 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32k.sys
2015-10-08 23:20 - 2008-08-21 14:00 - 01895424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-10-08 23:20 - 2008-08-21 14:00 - 01469440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\inetcpl.cpl
2015-10-08 23:20 - 2008-08-21 14:00 - 01469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-10-08 23:20 - 2008-08-21 14:00 - 01447936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msxml6.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 01290240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ole32.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 01217536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\urlmon.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 01176064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msxml3.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00920064 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wininet.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00729600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jscript.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00630784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstime.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00421888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\vbscript.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00387584 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iedkcs32.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00348160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dxtmsft.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00332800 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msihnd.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00294656 ____C (Adobe Systems Incorporated) C:\WINDOWS\system32\dllcache\atmfd.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00236544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\webcheck.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00216576 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dxtrans.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00206848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\occache.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\occache.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00193536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msrating.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00184320 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iepeers.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00174592 ____N (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-10-08 23:20 - 2008-08-21 14:00 - 00174592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ie4uinit.exe

fortsetzung folgt...

netfreak · 12.10.2015, 19:24

fortsetzung...

Code:

ATTFilter

2015-10-08 23:20 - 2008-08-21 14:00 - 00105984 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\url.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00067072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshtmled.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzchange.exe
2015-10-08 23:20 - 2008-08-21 14:00 - 00043520 ____N (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00043520 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\licmgr10.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00025600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jsproxy.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00019456 ____N (Microsoft Corporation) C:\WINDOWS\system32\corpol.dll
2015-10-08 23:20 - 2008-08-21 14:00 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll
2015-10-08 23:19 - 2008-08-21 14:00 - 10841088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmp.dll
2015-10-08 23:19 - 2008-08-21 14:00 - 10841088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-10-08 23:19 - 2008-08-21 14:00 - 00288256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\gdi32.dll
2015-10-08 23:19 - 2008-08-21 14:00 - 00229376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cewmdm.dll
2015-10-08 23:19 - 2008-08-21 14:00 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\cewmdm.dll
2015-10-08 23:19 - 2008-08-21 14:00 - 00153088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\schannel.dll
2015-10-08 23:14 - 2009-02-10 19:03 - 02072448 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2015-10-08 23:14 - 2008-08-21 14:00 - 08504832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shell32.dll
2015-10-08 23:14 - 2008-08-21 14:00 - 02195840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-08 23:14 - 2008-08-21 14:00 - 00737792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\userenv.dll
2015-10-08 23:14 - 2008-08-21 14:00 - 00328704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scesrv.dll
2015-10-08 23:14 - 2008-08-21 14:00 - 00301568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kerberos.dll
2015-10-08 23:14 - 2008-08-21 14:00 - 00300032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msctf.dll
2015-10-08 23:14 - 2008-08-21 14:00 - 00179968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mrxdav.sys
2015-10-08 23:14 - 2008-08-21 14:00 - 00179968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-10-08 23:14 - 2008-08-21 14:00 - 00092928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ksecdd.sys
2015-10-08 23:14 - 2008-08-21 14:00 - 00092928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2015-10-08 23:14 - 2008-04-14 09:30 - 02072448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntkrnlpa.exe
2015-10-08 23:13 - 2008-08-21 14:00 - 00662528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mqqm.dll
2015-10-08 23:13 - 2008-08-21 14:00 - 00361600 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip.sys
2015-10-08 23:13 - 2008-08-21 14:00 - 00361600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2015-10-08 23:13 - 2008-08-21 14:00 - 00226880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tcpip6.sys
2015-10-08 23:13 - 2008-08-21 14:00 - 00226880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip6.sys
2015-10-08 23:13 - 2008-08-21 14:00 - 00143744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\fastfat.sys
2015-10-08 23:13 - 2008-08-21 14:00 - 00143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2015-10-08 23:13 - 2008-08-21 14:00 - 00092544 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mqac.sys
2015-10-08 23:06 - 2008-08-21 14:00 - 00406528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usp10.dll
2015-10-08 23:06 - 2008-08-21 14:00 - 00138496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\afd.sys
2015-10-08 23:06 - 2008-08-21 14:00 - 00138496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-10-08 23:02 - 2008-08-21 14:00 - 00476160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shlwapi.dll
2015-10-08 23:02 - 2008-08-21 14:00 - 00096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msiexec.exe
2015-10-08 23:02 - 2008-08-21 14:00 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-10-08 23:00 - 2008-08-21 14:00 - 00082944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tlntsess.exe
2015-10-08 23:00 - 2008-08-21 14:00 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tlntsess.exe
2015-10-08 22:37 - 2007-02-08 22:50 - 00208896 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\UCI32M17.dll
2015-10-08 22:37 - 2006-12-22 11:56 - 00988032 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\Drivers\HSF_DPV.sys
2015-10-08 22:37 - 2006-12-22 11:56 - 00210688 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\Drivers\HSFHWAZL.sys
2015-10-08 22:37 - 2006-12-22 11:55 - 00731136 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\Drivers\HSF_CNXT.sys
2015-10-08 22:37 - 2006-06-19 14:26 - 00094208 _____ (Conexant) C:\WINDOWS\system32\mdmxsdk.dll
2015-10-08 22:37 - 2006-06-19 14:26 - 00012672 _____ (Conexant) C:\WINDOWS\system32\Drivers\mdmxsdk.sys
2015-10-08 22:14 - 2006-12-20 17:37 - 00176128 _____ (Conexant Systems, Inc.) C:\WINDOWS\system32\UCI32M16.dll
2015-10-08 22:11 - 2008-03-19 14:26 - 00175104 ____C (Broadcom Corporation) C:\WINDOWS\system32\dllcache\b57xp32.sys

Code:

ATTFilter

2015-10-08 22:11 - 2008-03-19 14:26 - 00175104 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\b57xp32.sys
2015-10-08 21:40 - 2009-10-09 16:04 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2015-10-08 21:40 - 2009-10-09 16:04 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll
2015-10-08 21:40 - 2009-10-09 16:04 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtfwd.dll
2015-10-08 21:40 - 2009-10-09 16:04 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\pwrshplugin.dll
2015-10-08 21:40 - 2009-10-09 14:56 - 00233984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrscmd.dll
2015-10-08 21:40 - 2009-10-09 14:56 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2015-10-08 21:40 - 2009-10-09 14:56 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll
2015-10-08 21:40 - 2009-10-09 14:56 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrmprov.dll
2015-10-08 21:40 - 2009-10-09 14:56 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll
2015-10-08 21:40 - 2009-10-09 14:56 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrssrv.dll
2015-10-08 21:40 - 2009-10-09 14:56 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winrsmgr.dll
2015-10-08 21:39 - 2009-10-09 16:04 - 00072192 ____N (Microsoft Corporation) C:\WINDOWS\system32\winrs.exe
2015-10-08 21:39 - 2009-10-09 14:56 - 00225280 ____N (Microsoft Corporation) C:\WINDOWS\system32\wsmanhttpconfig.exe
2015-10-08 21:39 - 2009-10-09 14:56 - 00022528 ____N (Microsoft Corporation) C:\WINDOWS\system32\winrshost.exe
2015-10-08 21:39 - 2009-10-09 14:56 - 00014848 ____N (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe
2015-10-08 21:39 - 2009-07-31 23:27 - 00201184 ____N C:\WINDOWS\system32\winrm.vbs
2015-10-08 21:39 - 2009-07-16 10:30 - 00000035 ____N C:\WINDOWS\system32\winrm.cmd
2015-10-08 21:19 - 2010-03-31 00:10 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationHost.exe
2015-10-08 21:19 - 2010-03-30 12:24 - 00317440 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mp4sdecd.dll
2015-10-08 21:19 - 2006-10-18 21:47 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mp4sdecd.dll
2015-10-08 21:15 - 2008-08-21 14:00 - 00414720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msscp.dll
2015-10-08 21:15 - 2008-08-21 14:00 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscp.dll
2015-10-08 21:15 - 2008-08-21 14:00 - 00286208 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpdxm.dll
2015-10-08 21:15 - 2008-08-21 14:00 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2015-10-08 21:12 - 2008-08-21 14:00 - 00318464 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\unregmp2.exe
2015-10-08 21:07 - 2008-07-29 21:10 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-10-08 21:07 - 2008-07-29 19:24 - 00622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\icardagt.exe
2015-10-08 21:05 - 2008-08-21 14:00 - 08282112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmploc.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 08282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00471552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\aclayers.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00275968 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmerror.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmerror.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00242688 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpasf.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpasf.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmpshell.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00008192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asferror.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\asferror.dll
2015-10-08 21:05 - 2008-08-21 14:00 - 00000507 _____ C:\WINDOWS\win.ini
2015-10-08 21:05 - 2006-10-18 21:47 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-10-08 21:05 - 2006-10-18 21:47 - 00204288 ____N (Microsoft Corporation) C:\WINDOWS\system32\wmpsrcwp.dll
2015-10-08 21:05 - 2006-10-18 21:47 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2015-10-08 21:05 - 2006-10-18 20:05 - 00232448 ____N (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecp.acm
2015-10-08 21:05 - 2006-10-02 15:28 - 00312128 ____N (Microsoft Corporation) C:\WINDOWS\system32\msdelta.dll
2015-10-08 21:05 - 2005-10-29 00:50 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcsprsrc.dll
2015-10-08 21:05 - 2005-10-29 00:25 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifxcardm.dll
2015-10-08 21:05 - 2005-10-29 00:25 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\axaltocm.dll
2015-10-08 21:05 - 2005-10-28 16:40 - 00096792 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 01329152 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\WMSPDMOE.dll

Code:

ATTFilter

2015-10-08 21:04 - 2008-08-21 14:00 - 01329152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 01117696 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\WMADMOE.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 01117696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00991744 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\drmv2clt.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00991744 _____ (Microsoft Corporation) C:\WINDOWS\system32\drmv2clt.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00757248 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\WMADMOD.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00542720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\blackbox.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\blackbox.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00321536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mswmdm.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00211456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qasf.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\qasf.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00179712 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msnetobj.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msnetobj.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00175616 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspmsp.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspmsp.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00157184 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmidx.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmdmps.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmps.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00033792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmdmlog.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdmlog.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00027136 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mspmsnsv.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\LAPRXY.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LAPRXY.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmvdmoe2.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmvdmod.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmsdmoe2.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wmsdmod.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\MPG4DMOD.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\MP4SDMOD.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\MP43DMOD.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmvdmoe2.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmvdmod.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsdmoe2.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsdmod.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DMOD.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDMOD.dll
2015-10-08 21:04 - 2008-08-21 14:00 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DMOD.dll
2015-10-08 21:04 - 2006-11-02 11:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshextres.dll
2015-10-08 21:04 - 2006-10-18 21:58 - 00008704 ____N (Microsoft Corporation) C:\WINDOWS\system32\wdfmgr.exe
2015-10-08 21:04 - 2006-10-18 21:58 - 00008704 ____N (Microsoft Corporation) C:\WINDOWS\system32\uwdf.exe
2015-10-08 21:04 - 2006-10-18 21:47 - 02603008 ____N (Microsoft Corporation) C:\WINDOWS\system32\WpdShext.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 01661440 ____N (Microsoft Corporation) C:\WINDOWS\system32\wmpencen.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 01574912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00656896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00629760 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmsdk.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmdev.dll

Code:

ATTFilter

2015-10-08 21:04 - 2006-10-18 21:47 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdsp.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmdrmnet.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00284160 ____N (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceApi.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodev.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPLAT.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceTypes.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00154624 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpdmtp.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPDShServiceObj.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00101888 ____N (Microsoft Corporation) C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00063488 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpdmtpus.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00035840 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpdconns.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVADVE.DLL
2015-10-08 21:04 - 2006-10-18 21:47 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVADVD.dll
2015-10-08 21:04 - 2006-10-18 21:47 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdfapi.dll
2015-10-08 21:04 - 2006-10-18 20:00 - 00249856 ____N (Microsoft Corporation) C:\WINDOWS\system32\drmupgds.exe
2015-10-08 21:04 - 2006-10-18 20:00 - 00038528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpdusb.sys
2015-10-08 21:04 - 2006-10-18 20:00 - 00017408 ____N (Microsoft Corporation) C:\WINDOWS\system32\wpdshextautoplay.exe
2015-10-08 21:04 - 2006-09-28 20:13 - 00095344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFCoinstaller.dll
2015-10-08 21:04 - 2006-09-28 19:00 - 00082944 ____N (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WudfRd.sys
2015-10-08 21:04 - 2006-09-28 18:56 - 00316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFx.dll
2015-10-08 21:04 - 2006-09-28 18:56 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfPlatform.dll
2015-10-08 21:04 - 2006-09-28 18:56 - 00146432 ____N (Microsoft Corporation) C:\WINDOWS\system32\WudfHost.exe
2015-10-08 21:04 - 2006-09-28 18:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WudfSvc.dll
2015-10-08 21:04 - 2006-09-28 18:55 - 00077568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WudfPf.sys
2015-10-08 21:03 - 2005-10-29 00:50 - 00086016 ____N (Microsoft Corporation) C:\WINDOWS\system32\pintool.exe
2015-10-08 20:58 - 2009-10-20 18:20 - 00265728 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\http.sys
2015-10-08 20:58 - 2008-08-21 14:00 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-10-08 20:58 - 2008-08-21 14:00 - 00099840 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\srvsvc.dll
2015-10-08 20:58 - 2008-08-21 14:00 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2015-10-08 20:58 - 2008-08-21 14:00 - 00075776 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\strmfilt.dll
2015-10-08 20:58 - 2008-08-21 14:00 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\httpapi.dll
2015-10-08 20:57 - 2009-03-10 22:18 - 00970632 ____N (Microsoft Corporation) C:\WINDOWS\system32\WgaTray.exe
2015-10-08 20:57 - 2009-03-10 22:18 - 00970632 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\WgaTray.exe
2015-10-08 20:44 - 2008-08-21 14:00 - 01067008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\kernel32.dll
2015-10-08 20:44 - 2008-08-21 14:00 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2015-10-08 20:44 - 2008-08-21 14:00 - 00563712 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qedit.dll
2015-10-08 20:44 - 2008-08-21 14:00 - 00563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2015-10-08 20:43 - 2013-09-23 09:39 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ieencode.dll
2015-10-08 20:43 - 2013-09-23 09:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieencode.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 01510400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shdocvw.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 01025024 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browseui.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 00608256 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\crypt32.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 00591360 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rpcrt4.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 00279552 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\oakley.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 00172032 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scrrun.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2015-10-08 20:43 - 2008-08-21 14:00 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys

Code:

ATTFilter

2015-10-08 20:43 - 2008-08-21 14:00 - 00144128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2015-10-08 20:43 - 2008-08-21 14:00 - 00040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndproxy.sys
2015-10-08 20:43 - 2008-08-21 14:00 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2015-10-08 20:43 - 2008-08-21 14:00 - 00032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2015-10-08 20:43 - 2008-08-21 14:00 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2015-10-08 20:43 - 2008-08-21 14:00 - 00030336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2015-10-08 20:43 - 2008-08-21 14:00 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2015-10-08 20:43 - 2008-08-21 14:00 - 00005376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2015-10-08 20:42 - 2008-08-21 14:00 - 01297920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\quartz.dll
2015-10-08 20:42 - 2008-08-21 14:00 - 01297920 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2015-10-08 20:42 - 2008-08-21 14:00 - 00390656 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\themeui.dll
2015-10-08 20:42 - 2008-08-21 14:00 - 00293888 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winsrv.dll
2015-10-08 20:42 - 2008-08-21 14:00 - 00148992 ____C C:\WINDOWS\system32\dllcache\mpg2splt.ax
2015-10-08 20:42 - 2008-08-21 14:00 - 00148992 _____ C:\WINDOWS\system32\mpg2splt.ax
2015-10-08 20:42 - 2008-08-21 14:00 - 00012928 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usb8023.sys
2015-10-08 20:42 - 2008-08-21 14:00 - 00012928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-10-08 20:41 - 2008-08-21 14:00 - 00375296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dpnet.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00348160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\localspl.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00337920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\netapi32.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00177664 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wintrust.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00078336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\browser.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00058368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\synceng.dll
2015-10-08 20:41 - 2008-08-21 14:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll
2015-10-08 20:40 - 2009-03-08 14:29 - 01302528 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll.mui
2015-10-08 20:40 - 2009-03-08 14:29 - 00057344 ____N (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll.mui
2015-10-08 20:40 - 2009-03-08 14:28 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe.mui
2015-10-08 20:40 - 2009-03-08 14:27 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll.mui
2015-10-08 20:40 - 2009-03-08 14:27 - 00012288 ____N (Microsoft Corporation) C:\WINDOWS\system32\advpack.dll.mui
2015-10-08 20:40 - 2009-03-08 14:27 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe.mui
2015-10-08 20:40 - 2009-03-08 04:31 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\icardie.dll
2015-10-08 20:40 - 2009-03-08 04:22 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-10-08 20:40 - 2009-03-08 04:11 - 00445952 ____N (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-10-08 20:40 - 2009-01-07 18:20 - 00265720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdbg2.dll
2015-10-08 20:40 - 2009-01-07 18:20 - 00134144 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sqmapi.dll
2015-10-08 20:40 - 2009-01-07 18:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\idndl.dll
2015-10-08 20:40 - 2009-01-07 18:20 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlsdl.dll
2015-10-08 20:40 - 2009-01-07 18:20 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\normaliz.dll
2015-10-08 20:40 - 2008-08-21 14:00 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2015-10-08 20:37 - 2009-03-08 04:34 - 00208384 ____N (Microsoft Corporation) C:\WINDOWS\system32\WinFXDocObj.exe
2015-10-08 20:37 - 2009-03-08 04:32 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieudinit.exe
2015-10-08 20:37 - 2009-03-08 04:31 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2015-10-08 20:37 - 2008-08-21 14:00 - 00456320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-10-08 20:37 - 2008-08-21 14:00 - 00387072 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\qdvd.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00354816 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winhttp.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00186880 ____C C:\WINDOWS\system32\dllcache\encdec.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00186880 _____ C:\WINDOWS\system32\encdec.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00178176 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\winmm.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00046592 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pngfilt.dll

Code:

ATTFilter

2015-10-08 20:37 - 2008-08-21 14:00 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\pngfilt.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mshta.exe
2015-10-08 20:37 - 2008-08-21 14:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshta.exe
2015-10-08 20:37 - 2008-08-21 14:00 - 00033280 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\csrsrv.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mciseq.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2015-10-08 20:37 - 2008-08-21 14:00 - 00010496 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ndistapi.sys
2015-10-08 20:37 - 2008-08-21 14:00 - 00010496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2015-10-08 20:36 - 2008-08-21 14:00 - 00978944 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mfc42.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00978944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00974848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mfc42u.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00743936 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ntdll.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00737792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\lsasrv.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00737792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00440832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shimgvw.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimgvw.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00270848 ____C C:\WINDOWS\system32\dllcache\sbe.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00270848 _____ C:\WINDOWS\system32\sbe.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00249856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\odbc32.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00247296 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mswsock.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00149504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dnsapi.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00135680 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\shsvcs.dll
2015-10-08 20:36 - 2008-08-21 14:00 - 00045568 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\dnsrslvr.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00954368 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mfc40.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc40.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00953856 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mfc40u.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00953856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc40u.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00143422 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecx.ax
2015-10-08 20:35 - 2008-08-21 14:00 - 00119808 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\t2embed.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00100864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\6to4svc.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\6to4svc.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00080384 _____ (Radius Inc.) C:\WINDOWS\system32\iccvid.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00065536 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\asycfilt.dll
2015-10-08 20:35 - 2008-08-21 14:00 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 01441792 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\query.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\query.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00247326 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\strmdll.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00247326 _____ (Microsoft Corporation) C:\WINDOWS\system32\strmdll.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00150528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rastls.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00136192 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msv1_0.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00086528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cabview.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cabview.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00085504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\avifil32.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\avifil32.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00079872 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\raschap.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msasn1.dll

Code:

ATTFilter

2015-10-08 20:34 - 2008-08-21 14:00 - 00056832 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\secur32.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00054272 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wdigest.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00028672 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msvidc32.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvidc32.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00011264 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msrle32.dll
2015-10-08 20:34 - 2008-08-21 14:00 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrle32.dll
2015-10-08 20:34 - 2008-04-14 09:52 - 00048128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iyuv_32.dll
2015-10-08 20:34 - 2008-04-14 09:52 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\iyuv_32.dll
2015-10-08 20:34 - 2008-04-14 09:52 - 00017920 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msyuv.dll
2015-10-08 20:34 - 2008-04-14 09:52 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\msyuv.dll
2015-10-08 20:34 - 2001-08-18 06:54 - 00008704 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\tsbyuv.dll
2015-10-08 20:34 - 2001-08-18 06:54 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsbyuv.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00678400 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\advapi32.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00401408 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\rpcss.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00286720 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\pdh.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00206336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mswebdvd.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswebdvd.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00132096 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wkssvc.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00111104 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\services.exe
2015-10-08 20:33 - 2008-08-21 14:00 - 00111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-10-08 20:33 - 2008-08-21 14:00 - 00066560 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mtxclu.dll
2015-10-08 20:33 - 2008-08-21 14:00 - 00035328 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\sc.exe
2015-10-08 20:33 - 2008-08-21 14:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sc.exe
2015-10-08 20:32 - 2008-08-21 14:00 - 00180224 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\scrobj.dll
2015-10-08 20:32 - 2008-08-21 14:00 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2015-10-08 20:32 - 2008-08-21 14:00 - 00135168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wshom.ocx
2015-10-08 20:32 - 2008-08-21 14:00 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2015-10-08 20:32 - 2008-08-21 14:00 - 00090112 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wshext.dll
2015-10-08 20:32 - 2008-08-21 14:00 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshext.dll
2015-10-08 20:32 - 2008-08-21 14:00 - 00074240 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mscms.dll
2015-10-08 20:30 - 2008-08-21 14:00 - 00058880 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\spoolsv.exe
2015-10-08 20:30 - 2008-08-21 14:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2015-10-08 20:29 - 2011-09-26 11:41 - 00614912 ____N (Microsoft Corporation) C:\WINDOWS\system32\uiautomationcore.dll
2015-10-08 20:28 - 2008-08-21 14:00 - 00155648 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\wscript.exe
2015-10-08 20:28 - 2008-08-21 14:00 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2015-10-08 20:28 - 2008-08-21 14:00 - 00135168 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\cscript.exe
2015-10-08 20:28 - 2008-08-21 14:00 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2015-10-08 20:28 - 2008-08-21 14:00 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\telnet.exe
2015-10-08 20:28 - 2008-08-21 14:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\telnet.exe
2015-10-08 20:28 - 2008-08-21 14:00 - 00061952 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\packager.exe
2015-10-08 20:28 - 2008-08-21 14:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\packager.exe
2015-10-08 20:25 - 2008-08-21 14:00 - 00100864 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\logagent.exe
2015-10-08 20:25 - 2008-08-21 14:00 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\logagent.exe
2015-10-08 19:31 - 2008-08-21 14:00 - 00000231 _____ C:\WINDOWS\system.ini

Code:

ATTFilter

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-10-09 12:09 - 2015-10-11 16:10 - 0027648 _____ () C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Einige Dateien in TEMP:
====================
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temp\RtkBtMnt.exe
C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Temp\mysms-setup.exe
C:\Dokumente und Einstellungen\Zima Alexander\Lokale Einstellungen\Temp\RtkBtMnt.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

==================== Ende vom FRST.txt ============================

Fertig!

schrauber · 13.10.2015, 18:11

hi,

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

netfreak · 14.10.2015, 12:27

mbar - Logfile

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.10.14.03
  rootkit: v2015.10.06.01

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Zima Alexander :: SLIDER [administrator]

14.10.2015 12:59:55
mbar-log-2015-10-14 (12-59-55).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 467324
Time elapsed: 9 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

TDSSKiller - Logfile

Code:

ATTFilter

13:14:33.0640 0x0a78  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
13:14:54.0437 0x0a78  ============================================================
13:14:54.0437 0x0a78  Current date / time: 2015/10/14 13:14:54.0437
13:14:54.0437 0x0a78  SystemInfo:
13:14:54.0437 0x0a78  
13:14:54.0437 0x0a78  OS Version: 5.1.2600 ServicePack: 3.0
13:14:54.0437 0x0a78  Product type: Workstation
13:14:54.0437 0x0a78  ComputerName: SLIDER
13:14:54.0437 0x0a78  UserName: Zima Alexander
13:14:54.0437 0x0a78  Windows directory: C:\WINDOWS
13:14:54.0437 0x0a78  System windows directory: C:\WINDOWS
13:14:54.0437 0x0a78  Processor architecture: Intel x86
13:14:54.0437 0x0a78  Number of processors: 1
13:14:54.0437 0x0a78  Page size: 0x1000
13:14:54.0437 0x0a78  Boot type: Normal boot
13:14:54.0437 0x0a78  ============================================================
13:14:54.0687 0x0a78  KLMD registered as C:\WINDOWS\system32\drivers\33241895.sys
13:14:54.0890 0x0a78  System UUID: {D95E8E17-7DFF-A69E-78FF-901DBC1EE0F0}
13:14:55.0609 0x0a78  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
13:14:55.0609 0x0a78  ============================================================
13:14:55.0609 0x0a78  \Device\Harddisk0\DR0:
13:14:55.0609 0x0a78  MBR partitions:
13:14:55.0609 0x0a78  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC803400
13:14:55.0609 0x0a78  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xC80347E, BlocksNum 0x3E8009F8
13:14:55.0609 0x0a78  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x4B003EB5, BlocksNum 0x1CEFE6CD
13:14:55.0609 0x0a78  \Device\Harddisk0\DR0\Partition4: MBR, Type 0x7, StartLBA 0x67F025C1, BlocksNum 0xC803400
13:14:55.0609 0x0a78  ============================================================
13:14:55.0609 0x0a78  C: <-> \Device\Harddisk0\DR0\Partition1
13:14:55.0609 0x0a78  R: <-> \Device\Harddisk0\DR0\Partition4
13:14:55.0609 0x0a78  D: <-> \Device\Harddisk0\DR0\Partition2
13:14:55.0609 0x0a78  H: <-> \Device\Harddisk0\DR0\Partition3
13:14:55.0609 0x0a78  ============================================================
13:14:55.0609 0x0a78  Initialize success
13:14:55.0609 0x0a78  ============================================================
13:16:53.0218 0x038c  ============================================================
13:16:53.0218 0x038c  Scan started
13:16:53.0218 0x038c  Mode: Manual; SigCheck; TDLFS; 
13:16:53.0218 0x038c  ============================================================
13:16:53.0218 0x038c  KSN ping started
13:16:53.0828 0x038c  KSN ping finished: true
13:16:54.0109 0x038c  ================ Scan system memory ========================
13:16:54.0125 0x038c  System memory - ok
13:16:54.0125 0x038c  ================ Scan services =============================
13:16:54.0156 0x038c  Abiosdsk - ok
13:16:54.0171 0x038c  abp480n5 - ok
13:16:54.0187 0x038c  [ AC407F1A62C3A300B4F2B5A9F1D55B2C, 31F5FC61B37E22100B3A52A590295A7E827FFC581FA9960C64B9032452AAECED ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:16:54.0437 0x038c  ACPI - ok
13:16:54.0453 0x038c  [ 9E1CA3160DAFB159CA14F83B1E317F75, 13B3E897B0E819BF734449416D9EC6EBCAC89538EC69BF48C068593B82D57004 ] ACPIEC          C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
13:16:54.0531 0x038c  ACPIEC - ok
13:16:54.0546 0x038c  [ CF16937C4F653D131056F50012A8C8E7, 05B136F85B613960B098A6DFB5CA1B9DFE3705DFB8306BF8BECC266D7686A4F0 ] AcrSch2Svc      C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
13:16:54.0578 0x038c  AcrSch2Svc - ok
13:16:54.0609 0x038c  adpu160m - ok
13:16:54.0625 0x038c  [ 8BED39E3C35D6A489438B8141717A557, 1B5796E56B0927360CE0759641B1151828BC0A9E45620D2B2D880491F5CE33D0 ] aec             C:\WINDOWS\system32\drivers\aec.sys
13:16:54.0703 0x038c  aec - ok
13:16:54.0718 0x038c  [ D80ED631D3AFD47C27311B0614AFA89F, 4099EB4400DA342AD327C400A1B58A4E8D1E1992970D757FD35DF5FA4C2BF178 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
13:16:54.0828 0x038c  AFD - ok
13:16:54.0828 0x038c  Aha154x - ok
13:16:54.0843 0x038c  aic78u2 - ok
13:16:54.0843 0x038c  aic78xx - ok
13:16:54.0859 0x038c  [ 738D80CC01D7BC7584BE917B7F544394, DCC17AAEF5CDDF52FAAC3CC6904EF421CD595F66318A2370BEE261D5C3A8E340 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
13:16:54.0953 0x038c  Alerter - ok
13:16:54.0968 0x038c  [ 190CD73D4984F94D823F9444980513E5, 93A32C2495CCA094F768BA707C74DA5C00B8A88A9236DD1A297439A7C2E6C6FA ] ALG             C:\WINDOWS\System32\alg.exe
13:16:55.0015 0x038c  ALG - ok
13:16:55.0015 0x038c  AliIde - ok
13:16:55.0031 0x038c  amsint - ok
13:16:55.0046 0x038c  [ 40DC9657AA9A31C76AF36CA66BF18C8F, 7D9C19D4920A8A9B2527FA50A8EE951A1087DF30325D49B849DFC68AA8E50DB8 ] AnyDVD          C:\WINDOWS\system32\Drivers\AnyDVD.sys
13:16:55.0078 0x038c  AnyDVD - ok
13:16:55.0093 0x038c  [ D45960BE52C3C610D361977057F98C54, 9186589B502F46B47672CFB8EBD558D51B0F3CBFE4E0DDBA625A4265236518CE ] AppMgmt         C:\WINDOWS\System32\appmgmts.dll
13:16:55.0140 0x038c  AppMgmt - ok
13:16:55.0187 0x038c  [ D3E782AD9DCA4D6215222A43345F43B0, 3910F105485CAAB04CAAAF7C578C3BAC2DE14B37B9BE506B36FC14FEB49230D6 ] AR5416          C:\WINDOWS\system32\DRIVERS\athw.sys
13:16:55.0281 0x038c  AR5416 - ok
13:16:55.0296 0x038c  asc - ok
13:16:55.0296 0x038c  asc3350p - ok
13:16:55.0296 0x038c  asc3550 - ok
13:16:55.0312 0x038c  [ 0E5E4957549056E2BF2C49F4F6B601AD, F7F19FDC906B719A3516D30A9B4A2262C8CC5B36B94E3D4195C345EC4610FF2B ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
13:16:55.0328 0x038c  aspnet_state - ok
13:16:55.0328 0x038c  [ B153AFFAC761E7F5FCFA822B9C4E97BC, 7E60F572A6B3C6219E3C86225AA37243AFFD74337DB7F108B04778042E5CC959 ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:16:55.0453 0x038c  AsyncMac - ok
13:16:55.0468 0x038c  [ 9F3A2F5AA6875C72BF062C712CFA2674, B4DF1D2C56A593C6B54DE57395E3B51D288F547842893B32B0F59228A0CF70B9 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
13:16:55.0562 0x038c  atapi - ok
13:16:55.0562 0x038c  Atdisk - ok
13:16:55.0578 0x038c  [ 9916C1225104BA14794209CFA8012159, 5D6F05F715C52A16D05CAE15C3DFE77A139A7F27F7AE710EC9A10F9EE05115A1 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:16:55.0671 0x038c  Atmarpc - ok
13:16:55.0671 0x038c  [ 58ED0D5452DF7BE732193E7999C6B9A4, 254E2ECF592DDA2E3E6CA9F6F3E77926E2265586A7937BA95199ED47BCDE69A3 ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
13:16:55.0750 0x038c  AudioSrv - ok
13:16:55.0765 0x038c  [ D9F724AA26C010A217C97606B160ED68, 329B5118F2409731D06FDAE85B6ADD64A048292801BCB3546651CEB303111695 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
13:16:55.0843 0x038c  audstub - ok
13:16:55.0859 0x038c  [ 559DDDA2C88459478056174247706DEB, 8B69255228B78BC7C788ABBA691769CCF26C2EA336ED8C12DB89BDF43F99223E ] b57w2k          C:\WINDOWS\system32\DRIVERS\b57xp32.sys
13:16:55.0875 0x038c  b57w2k - ok
13:16:55.0890 0x038c  [ DA1F27D85E0D1525F6621372E7B685E9, 5A81A46A3BDD19DAFC6C87D277267A5D44F3A1B5302F2CC1111D84B7BAD5610D ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
13:16:55.0984 0x038c  Beep - ok
13:16:56.0000 0x038c  [ D6F603772A789BB3228F310D650B8BD1, A539025C70FD998A9B8703DE05CAE5E99BC721D8852EA561EBC2DD20CB371D2E ] BITS            C:\WINDOWS\system32\qmgr.dll
13:16:56.0109 0x038c  BITS - ok
13:16:56.0140 0x038c  [ B71549F23736ADF83A571061C47777FD, A1D0320736EE777030A543DCA086367EB5A5B6F95088B9C22D8E09326C3A39A9 ] Browser         C:\WINDOWS\System32\browser.dll
13:16:56.0234 0x038c  Browser - ok
13:16:56.0281 0x038c  [ 90A673FC8E12A79AFBED2576F6A7AAF9, BDE7858A3457DB979FEDD8577FA6321BF72848E4A7BF9F173C78A6A10CBB3EBE ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
13:16:56.0484 0x038c  cbidf2k - ok
13:16:56.0500 0x038c  [ 0BE5AEF125BE881C4F854C554F2B025C, 1770DD70B3F115A0EF460907DEDC1E4B7241C08615A98F194D61A49C3E2BAA54 ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
13:16:56.0593 0x038c  CCDECODE - ok
13:16:56.0593 0x038c  cd20xrnt - ok
13:16:56.0593 0x038c  [ C1B486A7658353D33A10CC15211A873B, AA4DD9E7AAE5AAB1146B360B17001F975D2F29A1281CF7B13E7136480410F347 ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
13:16:56.0687 0x038c  Cdaudio - ok
13:16:56.0687 0x038c  [ C885B02847F5D2FD45A24E219ED93B32, B26B2F8E3A831E2B65EB0C5195B0645CD50E22615CE79C9B0B391CD563B121DB ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
13:16:56.0953 0x038c  Cdfs - ok
13:16:56.0953 0x038c  [ 1F4260CC5B42272D71F79E570A27A4FE, B51C2A3ED3C309953D0EA45869C8E464C10F2533DADE9E0286AF674979098D1D ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:16:57.0078 0x038c  Cdrom - ok
13:16:57.0078 0x038c  Changer - ok
13:16:57.0078 0x038c  [ 28E3040D1F1CA2008CD6B29DFEBC9A5E, ACB458E8A11AA2143734A5A0281973D95158E6402A6453F98F9832D1E19B01F9 ] CiSvc           C:\WINDOWS\system32\cisvc.exe
13:16:57.0171 0x038c  CiSvc - ok
13:16:57.0187 0x038c  [ 778A30ED3C134EB7E406AFC407E9997D, 3E6AD115AB2596EB001BC21AEADDBC75F27C42DB90C986B7AD17743CE631234E ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
13:16:57.0421 0x038c  ClipSrv - ok
13:16:57.0437 0x038c  [ D87ACAED61E417BBA546CED5E7E36D9C, 14AC6034A5BC0FB2A1AFDAD42BEF4DE641556E54AD30D0C46765660A4BE55462 ] clr_optimization_v2.0.50727_32 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:16:57.0468 0x038c  clr_optimization_v2.0.50727_32 - ok
13:16:57.0515 0x038c  [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
13:16:57.0593 0x038c  clr_optimization_v4.0.30319_32 - ok
13:16:57.0593 0x038c  [ 0F6C187D38D98F8DF904589A5F94D411, DB987093446216CEE913AC27503BF7E23E5A62DF169B355730285DAB64F6ED28 ] CmBatt          C:\WINDOWS\system32\DRIVERS\CmBatt.sys
13:16:57.0703 0x038c  CmBatt - ok
13:16:57.0812 0x038c  [ 92DCE258EA152FE12669A6950E04C54F, 2B0EA66ABE9AC3F74DFA425451037042CAA3C369E4E31BAE0280DB4874030AC5 ] CmdAgent        C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe
13:16:58.0000 0x038c  CmdAgent - ok
13:16:58.0015 0x038c  [ 2252425C16BA473175A32F02082621D5, 123673C030BEF26EB57B8714055DAF0803FDDBB2A7B9097FDF360658DFADE6C1 ] cmderd          C:\WINDOWS\system32\DRIVERS\cmderd.sys
13:16:58.0031 0x038c  cmderd - ok
13:16:58.0046 0x038c  [ 0F0A18679F395854242E4714A5795088, E5639FA2026D1CE0B3CF6A608A713D614B421A6BFCD4191F4F745EA0F9A37D51 ] cmdGuard        C:\WINDOWS\system32\DRIVERS\cmdguard.sys
13:16:58.0078 0x038c  cmdGuard - ok
13:16:58.0078 0x038c  [ 2B88BDF8D0C31E941CED180D964F3B88, 82CCF7A11AD4ECA95E258648113658CF10FA520C5716D420894B29C981FA6048 ] cmdHlp          C:\WINDOWS\system32\DRIVERS\cmdhlp.sys
13:16:58.0093 0x038c  cmdHlp - ok
13:16:58.0093 0x038c  CmdIde - ok
13:16:58.0140 0x038c  [ 30405046646F209675ACF0193B76D8E0, 34E8D0D91617F8476B18F57053EC1AC0214482686B4C69334CEF4D689D9309C8 ] cmdvirth        C:\Programme\COMODO\COMODO Internet Security\cmdvirth.exe
13:16:58.0421 0x038c  cmdvirth - ok
13:16:58.0437 0x038c  [ 6E4C9F21F0FAE8940661144F41B13203, 731202A0DD021FCF9287FEA631212603AAAC23F9E7F76B2882F913B18A971F1C ] Compbatt        C:\WINDOWS\system32\DRIVERS\compbatt.sys
13:16:58.0609 0x038c  Compbatt - ok
13:16:58.0609 0x038c  COMSysApp - ok
13:16:58.0625 0x038c  Cpqarray - ok
13:16:58.0640 0x038c  [ 611F824E5C703A5A899F84C5F1699E4D, 9EFA5612FE58E9974E4CC13D39D91D7B5DEA3ED66BEFBED3AAE6D2800FD8162A ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
13:16:58.0718 0x038c  CryptSvc - ok
13:16:58.0718 0x038c  dac2w2k - ok
13:16:58.0734 0x038c  dac960nt - ok
13:16:58.0750 0x038c  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B, ECFBACE3CBF2384948EA1C445BDA3955EB4F44A9874286E6537C67DC1283E5B0 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
13:16:58.0765 0x038c  DcomLaunch - ok
13:16:58.0781 0x038c  [ C29A1C9B75BA38FA37F8C44405DEC360, 7476D8BC4380CDE56764B2034AF3741DA4ED00F315E41C9A02B5EAD04374F241 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
13:16:58.0875 0x038c  Dhcp - ok
13:16:58.0875 0x038c  [ 044452051F3E02E7963599FC8F4F3E25, 584BDDB074618BE76454CF90E74829CFF588B5B5FAEB793E2F7AAD26352DD689 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
13:16:58.0968 0x038c  Disk - ok
13:16:58.0968 0x038c  dmadmin - ok
13:16:59.0000 0x038c  [ 0DCFC8395A99FECBB1EF771CEC7FE4EA, 89B0AEE5BE01B9FE4FF2989FF16DB6121721ACDFCE6D9655C0ACD321D8C308BE ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
13:16:59.0109 0x038c  dmboot - ok
13:16:59.0125 0x038c  [ 53720AB12B48719D00E327DA470A619A, 800264866A6267C9000A85D00095D57908D059D737E5F28C9C4049B884C46228 ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
13:16:59.0203 0x038c  dmio - ok
13:16:59.0203 0x038c  [ E9317282A63CA4D188C0DF5E09C6AC5F, D41E002F555FE9015EF620975255F58BB79198CA1FF0E09EC950CB450FF77CF7 ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
13:16:59.0281 0x038c  dmload - ok
13:16:59.0281 0x038c  [ 25C83FFBBA13B554EB6D59A9B2E2EE78, 9FBD655ED3E9163AE11EC207F283E387EFBA5A23108EC790BAE4846B35E66F16 ] dmserver        C:\WINDOWS\System32\dmserver.dll
13:16:59.0375 0x038c  dmserver - ok
13:16:59.0375 0x038c  [ 8A208DFCF89792A484E76C40E5F50B45, 4E40E2EB38C6254E7CAA488200E89EE7DEBBBA773890BC6A84313CC68178D54F ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
13:16:59.0453 0x038c  DMusic - ok
13:16:59.0468 0x038c  [ 407F3227AC618FD1CA54B335B083DE07, 96B8E734648FE9A4EBA59C096C8779BD1A11A93A6303AFD438A406C8122D36C6 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
13:16:59.0484 0x038c  Dnscache - ok
13:16:59.0484 0x038c  [ 676E36C4FF5BCEA1900F44182B9723E6, 740CF18BD40E00FEA26CF0E6340C5D18F7D0B4390055FAEEC258B3AA790C4AE9 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
13:16:59.0718 0x038c  Dot3svc - ok
13:16:59.0750 0x038c  dpti2o - ok
13:16:59.0750 0x038c  [ 8F5FCFF8E8848AFAC920905FBD9D33C8, C8C6FB97AB0871C8C88A2201525A5CF10D5131CB6980D32692ED7A8F58399AD5 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
13:16:59.0921 0x038c  drmkaud - ok
13:16:59.0937 0x038c  [ 4E4F2FDDAB0A0736D7671134DCCE91FB, 8E2C57D1A006856C47CBDD5765A9DD317DB205B26DA8BFC70555A506257A1CD9 ] EapHost         C:\WINDOWS\System32\eapsvc.dll
13:17:00.0031 0x038c  EapHost - ok
13:17:00.0031 0x038c  [ 72753D5CC94A90F5CFC6C00ECC47163F, 824EEDCB94334912D8C44BC9626723F142DA95E9494C4B7D2F6EC7899CFF1DD2 ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
13:17:00.0046 0x038c  ElbyCDIO - ok
13:17:00.0046 0x038c  [ 877C18558D70587AA7823A1A308AC96B, 6B336A62112988D855513F45153F73F8470C41A448E9B7438B4A8EC1813AABF1 ] ERSvc           C:\WINDOWS\System32\ersvc.dll
13:17:00.0125 0x038c  ERSvc - ok
13:17:00.0140 0x038c  [ A3EDBE9053889FB24AB22492472B39DC, 6F2ED6E04BDE2FCA2A8BF9BD2D1D6923DE6EAECB46F582B6C0BD1CF364D65C9E ] Eventlog        C:\WINDOWS\system32\services.exe
13:17:00.0156 0x038c  Eventlog - ok
13:17:00.0171 0x038c  [ AF4F6B5739D18CA7972AB53E091CBC74, A399E2CC026730D3A429727AAB48093B9F1E5DD8EB6336519C7F16182FDB3905 ] EventSystem     C:\WINDOWS\system32\es.dll
13:17:00.0203 0x038c  EventSystem - ok
13:17:00.0203 0x038c  [ B2336BF17761662133F7646B503E3BE0, 7A28A203393B6C28FB62A471B2E928C3B8CFB694CC62F714A00781AA0684B872 ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
13:17:00.0281 0x038c  Fastfat - ok
13:17:00.0296 0x038c  [ 2DB7D303C36DDD055215052F118E8E75, BE6E7BBE12A7A4EDF1F1C2935350603970C7426BBCA7A1A6644BB8999123AF17 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
13:17:00.0312 0x038c  FastUserSwitchingCompatibility - ok
13:17:00.0328 0x038c  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81, 8307A532AB4D05CBBCE206DC2759497708BF5AAA880BD00F0E4F281D8578A1F5 ] Fdc             C:\WINDOWS\system32\drivers\Fdc.sys
13:17:00.0406 0x038c  Fdc - ok
13:17:00.0406 0x038c  [ B0678A548587C5F1967B0D70BACAD6C1, 7E49910212ED87313F926E4800EA8D34809C287A686CA69B82B79C1A6451F88C ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
13:17:00.0484 0x038c  Fips - ok
13:17:00.0484 0x038c  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0, 69C271AD5BCEBFD8AE5A769BDD7EC51256DA3A8ADAD5D12E5C0D13F4E82D8805 ] Flpydisk        C:\WINDOWS\system32\drivers\Flpydisk.sys
13:17:00.0562 0x038c  Flpydisk - ok
13:17:00.0609 0x038c  [ B2CF4B0786F8212CB92ED2B50C6DB6B0, 280F5CF8A90F7BEDE73ADD0DD0F8952088133A7CA9A3D3B7041957E33B36845D ] FltMgr          C:\WINDOWS\system32\DRIVERS\fltMgr.sys
13:17:00.0718 0x038c  FltMgr - ok
13:17:00.0718 0x038c  [ 8BA7C024070F2B7FDD98ED8A4BA41789, 47585006F86B2C6016EC54250A416794792D1E4024FF229C120BC25B684AF66A ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
13:17:00.0734 0x038c  FontCache3.0.0.0 - ok
13:17:00.0750 0x038c  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A, EC635E071201A766845D48973772CBE0958942B4162F3F5F70660D114CC877E0 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:17:00.0828 0x038c  Fs_Rec - ok
13:17:00.0843 0x038c  [ 8F1955CE42E1484714B542F341647778, 8EB3F99625F409D3032561E8AB44BEFBFBFBA4EC873C2151C92A5CAAF7F2AA55 ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:17:00.0921 0x038c  Ftdisk - ok
13:17:00.0937 0x038c  [ 0A02C63C8B144BD8C86B103DEE7C86A2, 7A3235DD3E1995DD72B212FAEB3ECA2A974434DE9BF6D269EA11BA65A80E7E50 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:17:01.0015 0x038c  Gpc - ok
13:17:01.0031 0x038c  [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc           C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
13:17:01.0046 0x038c  gusvc - ok
13:17:01.0062 0x038c  [ 573C7D0A32852B48F3058CFD8026F511, BC384BBA394AFDCDA1A9ABC858C692AA84A1F0A31AF3DDF7F38D120C027927FB ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
13:17:01.0171 0x038c  HDAudBus - ok
13:17:01.0187 0x038c  [ CB66BF85BF599BEFD6C6A57C2E20357F, 55D3A0F9279FF316766F42548FCB61C452942B08A37590C4892DF110BE4E53C6 ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
13:17:01.0296 0x038c  helpsvc - ok
13:17:01.0312 0x038c  HidServ - ok
13:17:01.0312 0x038c  [ CCF82C5EC8A7326C3066DE870C06DAF1, 93395FA4C26B2E82DC8B7025ED3BCF583885E5D8C5F60CD6EEAA6335D6A126EC ] hidusb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
13:17:01.0421 0x038c  hidusb - ok
13:17:01.0437 0x038c  [ ED29F14101523A6E0E808107405D452C, B8FA987637787BEECC2EB06D36293DAC355523392B49A8C5A9491EEE961917E9 ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
13:17:01.0546 0x038c  hkmsvc - ok
13:17:01.0562 0x038c  hpn - ok
13:17:01.0578 0x038c  [ 7D33D2B81BD8B4BC51B536B113295D51, 0F3EB5509D257C37C22DA6D54A0F4DEF944BFC8CCF9008E2EC0800254D4A267D ] HSFHWAZL        C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
13:17:01.0718 0x038c  HSFHWAZL - ok
13:17:01.0750 0x038c  [ FB6AD8A16E22C91D5978B26E0300A331, FF5898ACA9831A76EC4BAD31FF993D0E3E361F5CF6671BAE49E71BB1D3E933B3 ] HSF_DPV         C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
13:17:01.0937 0x038c  HSF_DPV - ok
13:17:01.0968 0x038c  [ F80A415EF82CD06FFAF0D971528EAD38, 524D9E9201572929522F6805011783711B7C0F76308B924C89CF75F4B7A1FDF3 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
13:17:01.0984 0x038c  HTTP - ok
13:17:01.0984 0x038c  [ 9E4ADB854CEBCFB81A4B36718FEECD16, 677AB64460775686F8366D6BF35D420A2486C3F07338A00A7C2788A5142B9F08 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
13:17:02.0078 0x038c  HTTPFilter - ok
13:17:02.0078 0x038c  i2omgmt - ok
13:17:02.0078 0x038c  i2omp - ok
13:17:02.0093 0x038c  [ E283B97CFBEB86C1D86BAED5F7846A92, 7664F791D08C80DF1E52B34BE69F073AA645610C4BD975F498254807602374AB ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:17:02.0171 0x038c  i8042prt - ok
13:17:02.0343 0x038c  [ B2768350BB50469AEB1AFE694372B613, 7FBF31F52D66EE16306F454E637E6CDB68C8E2F7530810BB54086CEBD234CC52 ] ialm            C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
13:17:02.0593 0x038c  ialm - ok
13:17:02.0625 0x038c  [ C01AC32DC5C03076CFB852CB5DA5229C, A4D7749220B5BC965D96A267F1E02FE8284A230BA249109207BD4B9EA8DFAC96 ] idsvc           c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
13:17:02.0687 0x038c  idsvc - ok
13:17:02.0687 0x038c  [ 083A052659F5310DD8B6A6CB05EDCF8E, 48D39B03FFB6FAA1529B774443BA12618AE3982D9F65A7B9D18F2269F78B31F4 ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
13:17:02.0765 0x038c  Imapi - ok
13:17:02.0765 0x038c  [ D4B413AA210C21E46AEDD2BA5B68D38E, 2309622867AA8FC832A729FA78F48742D4BD6CA0DAFBFB9DDB0772D671E1ED75 ] ImapiService    C:\WINDOWS\system32\imapi.exe
13:17:02.0843 0x038c  ImapiService - ok
13:17:02.0859 0x038c  ini910u - ok
13:17:02.0859 0x038c  [ EECDBB99AC070AE64F690906F9D7DDC7, 89B8932AF811A76A0DB80D0099E2CF75A44D6587C3D996EEA17C9122901B1540 ] Inspect         C:\WINDOWS\system32\DRIVERS\inspect.sys
13:17:02.0875 0x038c  Inspect - ok
13:17:03.0031 0x038c  [ 74B482F8B2A9EBE8473381A7A58F801D, 2A6A71413F038FE0B4D7593651F73C31F05C7D1365B044329FA888D5D6D3DA39 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
13:17:03.0234 0x038c  IntcAzAudAddService - ok
13:17:03.0250 0x038c  IntelIde - ok
13:17:03.0250 0x038c  [ 4C7D2750158ED6E7AD642D97BFFAE351, C05E4799752F090DCB632F07F62ADE38D31534621064D269AD535CA0BDFED448 ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
13:17:03.0328 0x038c  intelppm - ok
13:17:03.0328 0x038c  [ 3BB22519A194418D5FEC05D800A19AD0, F6662F440950596DC1382DD1DB5D7891CCEA30A6062BEA942C18445B5F0D8B16 ] Ip6Fw           C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
13:17:03.0406 0x038c  Ip6Fw - ok
13:17:03.0406 0x038c  [ 731F22BA402EE4B62748ADAF6363C182, 5C3BEBD008A5BE4DC2F92076FF41A10DDC01E10EC7E6552213CFA11970811848 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:17:03.0500 0x038c  IpFilterDriver - ok
13:17:03.0500 0x038c  [ B87AB476DCF76E72010632B5550955F5, E6E74D3A86A7917A8BAED44F8E97CCD2EB171E4E4B27E9907F60D1523FAF319A ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:17:03.0578 0x038c  IpInIp - ok
13:17:03.0593 0x038c  [ CC748EA12C6EFFDE940EE98098BF96BB, AF523E21C25D9A1715EFEA573E4F52AF5D4FC9F28A2D613F5DB629C186C439E0 ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:17:03.0671 0x038c  IpNat - ok
13:17:03.0671 0x038c  [ 23C74D75E36E7158768DD63D92789A91, 394D296F38E7D8EFD91A6EEC301D9CE6AF910E35EB9819F1A9E3363863AEDFDC ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:17:03.0750 0x038c  IPSec - ok
13:17:03.0750 0x038c  [ C93C9FF7B04D772627A3646D89F7BF89, 805FA48E7A46D4F10240BF880A2468F53DEA36E83004399228AB70DB7D20544A ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
13:17:03.0796 0x038c  IRENUM - ok
13:17:03.0796 0x038c  [ 6DFB88F64135C525433E87648BDA30DE, 8233EEFBEF36AAA152F2C55D23D7118F0DE40C9C22EB5D9793405A4770889540 ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:17:03.0875 0x038c  isapnp - ok
13:17:03.0890 0x038c  [ 1704D8C4C8807B889E43C649B478A452, E854C90CD301F42BE2520CEDAD35E49DF2D43606CF4EEED861B74882118D04D1 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:17:03.0968 0x038c  Kbdclass - ok
13:17:03.0984 0x038c  [ 692BCF44383D056AED41B045A323D378, 1A99DEE83FFAF64E73067FC049C0A4CE07D94E4AE31EFA17B38CEFA9E41D67DC ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
13:17:04.0062 0x038c  kmixer - ok
13:17:04.0078 0x038c  [ F37A4B1F159578A554A9CE66E5BD5194, 813C39DCE36847E7A892B40A9F4DB279893A56E1336DC012EFF3EE44983E3E8B ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
13:17:04.0140 0x038c  KSecDD - ok
13:17:04.0156 0x038c  [ 2BBDCB79900990F0716DFCB714E72DE7, 6283789201164A9254632D9A3C8A54FE697717D5F8D5A37804D924DC2B70C8E3 ] LanmanServer    C:\WINDOWS\System32\srvsvc.dll
13:17:04.0171 0x038c  LanmanServer - ok
13:17:04.0187 0x038c  [ 1869B14B06B44B44AF70548E1EA3303F, 4D63B4DAF580C86F86837C7D1753E2105B4C52E26D4CA0CAAFE83755EFF7AFBE ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
13:17:04.0234 0x038c  lanmanworkstation - ok
13:17:04.0250 0x038c  lbrtfdc - ok
13:17:04.0265 0x038c  [ 636714B7D43C8D0C80449123FD266920, F06F6C7DC49B26EFCAC3570C67BA9BD934F62C6F382DA4DD2AB302C7B970F414 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
13:17:04.0343 0x038c  LmHosts - ok
13:17:04.0343 0x038c  [ 5D53C705C1155530ECFD0AB749DDD852, 40486551E7161626AA30A332CB2B1C652849C994F3A07B0119A8458D356FE44F ] mbamchameleon   C:\WINDOWS\system32\drivers\mbamchameleon.sys
13:17:04.0359 0x038c  mbamchameleon - ok
13:17:04.0359 0x038c  [ 0CEA2D0D3FA284B85ED5B68365114F76, E6FF0EC98FDC3F628438B613C356C237E68686E3B5B17A58A60C16F4B9A2B968 ] mdmxsdk         C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
13:17:04.0375 0x038c  mdmxsdk - ok
13:17:04.0375 0x038c  [ B7550A7107281D170CE85524B1488C98, A3854B16A65436BEF6BEDE918B43B3BE8F00D303660DB5831DD376271DC43239 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
13:17:04.0453 0x038c  Messenger - ok
13:17:04.0468 0x038c  [ 4AE068242760A1FB6E1A44BF4E16AFA6, 1FB771162B96AAF787AC24867B818DF8511F0780BB094FA9A38C11D8DBFE68BC ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
13:17:04.0546 0x038c  mnmdd - ok
13:17:04.0546 0x038c  [ C2F1D365FD96791B037EE504868065D3, 87BD87E08FD00D115524B049F1A3A719AB86557D68968E7090CD0F271F985CAF ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
13:17:04.0640 0x038c  mnmsrvc - ok
13:17:04.0640 0x038c  [ 6FB74EBD4EC57A6F1781DE3852CC3362, 0454509D9A31E0202C08AE17294E2682F227D177A3C73B303E4C8332757AFCA1 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
13:17:04.0734 0x038c  Modem - ok
13:17:04.0734 0x038c  [ B24CE8005DEAB254C0251E15CB71D802, 6804A8ABDAD5EC846E7F8077D1EE9BA45D6226ACFF42C70BE3DE7C8980EF9EC4 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:17:04.0843 0x038c  Mouclass - ok
13:17:04.0859 0x038c  [ 66A6F73C74E1791464160A7065CE711A, 3C570FA1E8EF976B83759220FE95BAC9D7D48D607F91B113EDE4790D34ACBD46 ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
13:17:04.0953 0x038c  mouhid - ok
13:17:04.0953 0x038c  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD, 2A5E15ED2C24C6C65EF2F7E1FD93374774076C9D8D451E4422561F4D269C012F ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
13:17:05.0031 0x038c  MountMgr - ok
13:17:05.0046 0x038c  [ E226CC1323D7D13E8292320099A5A3F1, CC3695F7F29CA0DD10B378E763B1DAEFA796C552E98F5A69089C66A14CB83FE5 ] MozillaMaintenance C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
13:17:05.0062 0x038c  MozillaMaintenance - ok
13:17:05.0078 0x038c  mraid35x - ok
13:17:05.0078 0x038c  [ C134BAAB6E262E44B45B71E99FB6C2F9, ACA696E63729C15B78C9B69D6D4795DF381D647A90C2BF3E6BF87D6F249CB77B ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:17:05.0171 0x038c  MRxDAV - ok
13:17:05.0187 0x038c  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0, DB9B186F7076D7B94F45041AF7B77C1AD2CAB504D683B459C6CB1C22840ED170 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:17:05.0218 0x038c  MRxSmb - ok
13:17:05.0234 0x038c  [ 35A031AF38C55F92D28AA03EE9F12CC9, 97245D204C886EE8DCCC2DEAC80A0E358A7E0C1982F77389DA50DCF091FC9DDC ] MSDTC           C:\WINDOWS\system32\msdtc.exe
13:17:05.0296 0x038c  MSDTC - ok
13:17:05.0312 0x038c  [ C941EA2454BA8350021D774DAF0F1027, C940E978C7B66A713A0FDAB54B5F995DF59D089AFCD96221DD3222948CD49BBD ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
13:17:05.0390 0x038c  Msfs - ok
13:17:05.0390 0x038c  MSIServer - ok
13:17:05.0390 0x038c  [ D1575E71568F4D9E14CA56B7B0453BF1, 4ABE0E24786C0D39FA2B885447E56204CA6942FB175E534DCE675D7BCF0B176A ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
13:17:05.0468 0x038c  MSKSSRV - ok
13:17:05.0750 0x038c  [ 325BB26842FC7CCC1FCCE2C457317F3E, C07BE560513B1FB91D756494F0BA4AEEB2E1998DE0E1C21EE83DB1183B0CEE91 ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
13:17:05.0843 0x038c  MSPCLOCK - ok
13:17:05.0843 0x038c  [ BAD59648BA099DA4A17680B39730CB3D, 9AD4C7C94C186C8815D0BC75DCAFB962158DA6935A244BA243EDDDEB33F9816C ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
13:17:05.0937 0x038c  MSPQM - ok
13:17:05.0937 0x038c  [ AF5F4F3F14A8EA2C26DE30F7A1E17136, AC93A1E4ABB0D038B772E429015567E44CC2EDB66C54DBE23A5F98176FAC1520 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:17:06.0015 0x038c  mssmbios - ok
13:17:06.0015 0x038c  [ E53736A9E30C45FA9E7B5EAC55056D1D, 38602F280BF69EBA3706AD175AFC1AEB561A8302B4B61E3FECB3C27D7A9BDB41 ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
13:17:06.0093 0x038c  MSTEE - ok
13:17:06.0109 0x038c  [ DE6A75F5C270E756C5508D94B6CF68F5, FCC972DDC36C2C44D836913F10004C2C33B11C54DEFFF0C63E0FDF901D2F9261 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
13:17:06.0125 0x038c  Mup - ok
13:17:06.0140 0x038c  [ 5B50F1B2A2ED47D560577B221DA734DB, C16A554B6E1A7F5F98C94DFA88163E0F7426506BF2F51FD351B1A05FC0DB3BC5 ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
13:17:06.0250 0x038c  NABTSFEC - ok
13:17:06.0250 0x038c  [ 46BB15AE2AC7D025D6D2567B876817BD, 102A101B96D1078C98FA0F871C801A9A8538E20E5686AB0C7680B2F6C92B3165 ] napagent        C:\WINDOWS\System32\qagentrt.dll
13:17:06.0359 0x038c  napagent - ok
13:17:06.0375 0x038c  [ 9D1CCE440552500DED3A62F9D779CDB4, C6B3B1C891A8BA3F91CC1EC21919C4F80F4C9CAF88971AB6CA11F09820601EBD ] NAUpdate        C:\Programme\Nero\Update\NASvc.exe
13:17:06.0406 0x038c  NAUpdate - ok
13:17:06.0406 0x038c  [ 1DF7F42665C94B825322FAE71721130D, FE0DCB728471465B39A42A7511F4133021FBA5DF88F88BCB5FE2FF34CFD713F9 ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
13:17:06.0484 0x038c  NDIS - ok
13:17:06.0500 0x038c  [ 7FF1F1FD8609C149AA432F95A8163D97, 18CD1FF5AC1EF8A38D1EC53014F2BADD28D9CDF4ECE2EBC2313D08903776F323 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
13:17:06.0578 0x038c  NdisIP - ok
13:17:06.0578 0x038c  [ 0109C4F3850DFBAB279542515386AE22, 4F6DB1E499AC853FD36FD603FBB6D3AC9BDCEB298C7FE1FB59A9236CB46729B2 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:17:06.0593 0x038c  NdisTapi - ok
13:17:06.0593 0x038c  [ F927A4434C5028758A842943EF1A3849, B1AA3AF150C05307461774925901789456B0CCCD03A5E71ADA4AB58455962BEE ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:17:06.0671 0x038c  Ndisuio - ok
13:17:06.0671 0x038c  [ EDC1531A49C80614B2CFDA43CA8659AB, 494042F790F33721328B4451E79842E21919681CC421A4F9633EC4D383E06097 ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:17:06.0750 0x038c  NdisWan - ok
13:17:06.0765 0x038c  [ 2F597BB467E05B1FE3830EABD821B8E0, 141497F5A49D47CCE3C9289644F4BD838DCB238F6D8E847FC006652E21FE02AC ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
13:17:06.0781 0x038c  NDProxy - ok
13:17:06.0781 0x038c  [ 5D81CF9A2F1A3A756B66CF684911CDF0, 7989C36607CAEA17AFA2C1C9904145CA0714A54B9F712D9D4C1AB140D0B2CC0C ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
13:17:06.0859 0x038c  NetBIOS - ok
13:17:06.0859 0x038c  [ 74B2B2F5BEA5E9A3DC021D685551BD3D, 7932B71F98B4122BE88F576BF6D745A757AE378A48924B7F4358837B75640A82 ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
13:17:07.0015 0x038c  NetBT - ok
13:17:07.0015 0x038c  [ 8ACE4251BFFD09CE75679FE940E996CC, 81969521B5EAEA09ECA63058BE9697BB69AF2596339CA9DF0CFEDC031DCFDC7E ] NetDDE          C:\WINDOWS\system32\netdde.exe
13:17:07.0125 0x038c  NetDDE - ok
13:17:07.0140 0x038c  [ 8ACE4251BFFD09CE75679FE940E996CC, 81969521B5EAEA09ECA63058BE9697BB69AF2596339CA9DF0CFEDC031DCFDC7E ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
13:17:07.0234 0x038c  NetDDEdsdm - ok
13:17:07.0234 0x038c  [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] Netlogon        C:\WINDOWS\system32\lsass.exe
13:17:07.0312 0x038c  Netlogon - ok
13:17:07.0328 0x038c  [ E6D88F1F6745BF00B57E7855A2AB696C, 12A5EDD853600FF5EBF91E127077745AE1E61E66DBC1D4D4306570F171AF4A39 ] Netman          C:\WINDOWS\System32\netman.dll
13:17:07.0406 0x038c  Netman - ok
13:17:07.0421 0x038c  [ 562E15CE8A98282F241E03829657E344, 76AC4652F4942226427F5C5D9150F8600A47F240571E2C728C8B41994E6668D1 ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
13:17:07.0500 0x038c  NetTcpPortSharing - ok
13:17:07.0515 0x038c  [ F1B67B6B0751AE0E6E964B02821206A3, 3D5A7593ABDEE2047C5738671C85DC8B95A4ECF58D5D7B04EEE13A689839A540 ] Nla             C:\WINDOWS\System32\mswsock.dll
13:17:07.0546 0x038c  Nla - ok
13:17:07.0546 0x038c  [ 3182D64AE053D6FB034F44B6DEF8034A, 4ADFC76965BA2A5F488E71789A4E4EA702A74AF42725F72130D1CA919406CF19 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
13:17:07.0687 0x038c  Npfs - ok
13:17:07.0703 0x038c  [ 78A08DD6A8D65E697C18E1DB01C5CDCA, E0E6F3ED05068E32F1D5C2D2B38CDEF4536B8656DB6756C66CF6B40B60C8F3DA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
13:17:07.0859 0x038c  Ntfs - ok
13:17:07.0859 0x038c  [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
13:17:08.0000 0x038c  NtLmSsp - ok
13:17:08.0015 0x038c  [ 56AF4064996FA5BAC9C449B1514B4770, 154602EFEC22728503D4ABA025DF711B0F2CFC983F5E3BF25F2A4BCD1AE250EC ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
13:17:08.0125 0x038c  NtmsSvc - ok
13:17:08.0125 0x038c  [ 73C1E1F395918BC2C6DD67AF7591A3AD, B21133A75253EC15E2DFF66D3B480AB1A7E1A2360476C810E7AA55D0F0EB08D4 ] Null            C:\WINDOWS\system32\drivers\Null.sys
13:17:08.0265 0x038c  Null - ok
13:17:08.0281 0x038c  [ B305F3FAD35083837EF46A0BBCE2FC57, 9D0E0E666D652D0FC9EAB97280A5D67AAF61D6B21929DF7CF8ED72A367720464 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:17:08.0406 0x038c  NwlnkFlt - ok
13:17:08.0421 0x038c  [ C99B3415198D1AAB7227F2C88FD664B9, DD8DA4B5E804F134AB9233859544C025062902DFC3E8FB8A09A67337A4E73F55 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:17:08.0500 0x038c  NwlnkFwd - ok
13:17:08.0515 0x038c  [ D955D5DE998DB2476BF0892BE3A96C26, 3828FC1D4A4F9CD685E6D938B92370A602B84A3ACE2C9A674B3B59E633B0AE07 ] o2flash         C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe
13:17:08.0531 0x038c  o2flash - detected UnsignedFile.Multi.Generic ( 1 )
13:17:09.0109 0x038c  Detect skipped due to KSN trusted
13:17:09.0109 0x038c  o2flash - ok
13:17:09.0125 0x038c  [ F1072A203FB1E246BE62D736A5B88DFD, FB55F8DEBBF889E5F841638B49DAB529C7DFFE0236A2AC0E5A8E023F1ABE952D ] O2MDRDR         C:\WINDOWS\system32\DRIVERS\o2media.sys
13:17:09.0140 0x038c  O2MDRDR - ok
13:17:09.0140 0x038c  [ 5472C48F44B49F07B16B421899E550F8, 3BDD11FD4F5C5F8547AF3AC112BB4D60231382609C29FCBE6F817CF57357FA1D ] O2SDRDR         C:\WINDOWS\system32\DRIVERS\o2sd.sys
13:17:09.0156 0x038c  O2SDRDR - ok
13:17:09.0218 0x038c  [ 2037ADD28254EEB404F3375F7AEF7802, 8D9A27E08F702FD2A4EC6B4F96244F4F662A4CF8471271F3D3C51EE8E9C18B8C ] OS Selector     C:\Programme\Acronis\DiskDirector\OSS\reinstall_svc.exe
13:17:09.0296 0x038c  OS Selector - ok
13:17:09.0312 0x038c  [ F84785660305B9B903FB3BCA8BA29837, BDBDE61076800415D98759077E9E039C80B55DBE68E31F8BF44A909C6C3D3276 ] Parport         C:\WINDOWS\system32\drivers\Parport.sys
13:17:09.0375 0x038c  Parport - ok
13:17:09.0390 0x038c  [ BEB3BA25197665D82EC7065B724171C6, 7E71C13BA30CD95CEE8A9CC85E6F48A01F30EDEAADEE69D80AE828BF97E5A5CA ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
13:17:09.0453 0x038c  PartMgr - ok
13:17:09.0468 0x038c  [ C2BF987829099A3EAA2CA6A0A90ECB4F, 1DF21EA8E43875CFEECD869407429F82FB449707CFB845718499468E699BAAAA ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
13:17:09.0531 0x038c  ParVdm - ok
13:17:09.0546 0x038c  [ 387E8DEDC343AA2D1EFBC30580273ACD, 5F3E642BDB759777E570ED5B22AC7E93CDCD362708F281657AD7BAB44EDEC802 ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
13:17:09.0625 0x038c  PCI - ok
13:17:09.0625 0x038c  PCIDump - ok
13:17:09.0625 0x038c  [ 59BA86D9A61CBCF4DF8E598C331F5B82, 822D11C5CE77BFD7B2F25350CCBF92B0B9388EEA6D86ED220B768C720976D839 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
13:17:09.0703 0x038c  PCIIde - ok
13:17:09.0718 0x038c  [ A2A966B77D61847D61A3051DF87C8C97, 6CED7CA26DC62B0AAFC83A2E07336DAD25954491201BB8E06103971F3F0B8B51 ] Pcmcia          C:\WINDOWS\system32\DRIVERS\pcmcia.sys
13:17:09.0796 0x038c  Pcmcia - ok
13:17:09.0812 0x038c  PDCOMP - ok
13:17:09.0812 0x038c  PDFRAME - ok
13:17:09.0828 0x038c  PDRELI - ok
13:17:09.0828 0x038c  PDRFRAME - ok
13:17:09.0828 0x038c  perc2 - ok
13:17:09.0843 0x038c  perc2hib - ok
13:17:09.0875 0x038c  [ A3EDBE9053889FB24AB22492472B39DC, 6F2ED6E04BDE2FCA2A8BF9BD2D1D6923DE6EAECB46F582B6C0BD1CF364D65C9E ] PlugPlay        C:\WINDOWS\system32\services.exe
13:17:09.0890 0x038c  PlugPlay - ok
13:17:09.0890 0x038c  [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
13:17:09.0984 0x038c  PolicyAgent - ok
13:17:10.0000 0x038c  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99, C5F0C8C66A3AF7E7BB04CEDE4AC5306F8387AB384A2107DC5BE413AAE968EFF1 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:17:10.0078 0x038c  PptpMiniport - ok
13:17:10.0078 0x038c  [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
13:17:10.0156 0x038c  ProtectedStorage - ok
13:17:10.0171 0x038c  [ 09298EC810B07E5D582CB3A3F9255424, 35473A1BE25AC289474090EB0806AC6B3035DC33D1F3DF97A14BF1E361AC6AC3 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
13:17:10.0265 0x038c  PSched - ok
13:17:10.0281 0x038c  [ 80D317BD1C3DBC5D4FE7B1678C60CADD, DA76804B55D0CAB3DDD01EFC06673764AE4860693375C658B6063FB14AF7F12C ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:17:10.0359 0x038c  Ptilink - ok
13:17:10.0375 0x038c  ql1080 - ok
13:17:10.0375 0x038c  Ql10wnt - ok
13:17:10.0390 0x038c  ql12160 - ok
13:17:10.0390 0x038c  ql1240 - ok
13:17:10.0390 0x038c  ql1280 - ok
13:17:10.0406 0x038c  [ FE0D99D6F31E4FAD8159F690D68DED9C, 998685622ABE631984B7E4DBF91AB3594B1F574378D75EB9F6265F4650470692 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:17:10.0468 0x038c  RasAcd - ok
13:17:10.0484 0x038c  [ F5BA6CACCDB66C8F048E867563203246, AFEAD8FC02313F7EBC8F9F39E7ED2868852B480BE3902FA7BD0AFD81492AB243 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
13:17:10.0562 0x038c  RasAuto - ok
13:17:10.0562 0x038c  [ 11B4A627BC9614B885C4969BFA5FF8A6, EAE0A412A2B0F68919C32A96B3A08CC1A06585E4998819F5C9051745F63FF5AD ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:17:10.0656 0x038c  Rasl2tp - ok
13:17:10.0671 0x038c  [ F9A7B66EA345726EDB5862A46B1ECCD5, 5D35429D394D36A1692A7E219BA1A85CD8096FEAE0F90BFE036A63118FEDBF57 ] RasMan          C:\WINDOWS\System32\rasmans.dll
13:17:10.0750 0x038c  RasMan - ok
13:17:10.0765 0x038c  [ 5BC962F2654137C9909C3D4603587DEE, A5CE5653D0105240F5E86CFAAB89E7917D42D939E2F27A5A7D6979289CA651B8 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:17:10.0843 0x038c  RasPppoe - ok
13:17:10.0843 0x038c  [ FDBB1D60066FCFBB7452FD8F9829B242, 10A2DACF944BD000032EBA8C095CB3D879CC55B28C377ADF6E52E508E47444DB ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
13:17:10.0937 0x038c  Raspti - ok
13:17:10.0953 0x038c  [ 7AD224AD1A1437FE28D89CF22B17780A, 6645235CA27D671954E3557FA37082881C3D7D47492C71264CD8CB8D108EC801 ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:17:11.0031 0x038c  Rdbss - ok
13:17:11.0031 0x038c  [ 4912D5B403614CE99C28420F75353332, 975341ECD660209987B5E5171B8315E032439E408CBE8A5986E67AF767F373BB ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:17:11.0109 0x038c  RDPCDD - ok
13:17:11.0125 0x038c  [ 15CABD0F7C00C47C70124907916AF3F1, 66B5C978B7FB6359AD8BAC9F568FE9D469E358FEAB07B1F129BA9E85F1DF723E ] rdpdr           C:\WINDOWS\system32\DRIVERS\rdpdr.sys
13:17:11.0218 0x038c  rdpdr - ok
13:17:11.0250 0x038c  [ 43AF5212BD8FB5BA6EED9754358BD8F7, AF330F61CECA4AFA359CEABC5EB3227E6B56A9A2DCE50701381D665122D7356D ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
13:17:11.0343 0x038c  RDPWD - ok
13:17:11.0343 0x038c  [ 263AF18AF0F3DB99F574C95F284CCEC9, 2BFA9952E97EFEB386FC56EC2C125080CD12DAC078DBE43C395CB4D9F22165D3 ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
13:17:11.0421 0x038c  RDSessMgr - ok
13:17:11.0437 0x038c  [ ED761D453856F795A7FE056E42C36365, EF026585B33415D8FCE94A9F27D7A4396C7C35C88E06A4CF0FEA702401E8597A ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
13:17:11.0515 0x038c  redbook - ok
13:17:11.0515 0x038c  [ 0E97EC96D6942CEEC2D188CC2EB69A01, D4253B4420BEF19451A55AB91E4834482181A31A31134F6E2AFE05C8E20C81A5 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
13:17:11.0609 0x038c  RemoteAccess - ok
13:17:11.0609 0x038c  [ E4CD1F3D84E1C2CA0B8CF7501E201593, 649CC0B04F94D407EB6B4C7FDE2C6E4D2B1531307BC67C5775E44D66EF2E4F8A ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
13:17:11.0687 0x038c  RemoteRegistry - ok
13:17:11.0703 0x038c  [ 2A02E21867497DF20B8FC95631395169, D89E2D17ED4E1C727847C0E92D2DF68AEB70BF0B956BD2FE024ED70A961759D2 ] RpcLocator      C:\WINDOWS\system32\locator.exe
13:17:11.0781 0x038c  RpcLocator - ok
13:17:11.0796 0x038c  [ 3127AFBF2C1ED0AB14A1BBB7AAECB85B, ECFBACE3CBF2384948EA1C445BDA3955EB4F44A9874286E6537C67DC1283E5B0 ] RpcSs           C:\WINDOWS\system32\rpcss.dll
13:17:11.0828 0x038c  RpcSs - ok
13:17:11.0843 0x038c  [ 4BDD71B4B521521499DFD14735C4F398, 7B1498D3C67E56D05B58B7DA319ECB0117C37963AABB0E59B42831C087469DA1 ] RSVP            C:\WINDOWS\system32\rsvp.exe
13:17:11.0937 0x038c  RSVP - ok
13:17:11.0937 0x038c  [ AFB8261B56CBA0D86AEB6DF682AF9785, 104D96F1F19DD4CE492064ACC9634406A019EAE20B42D03198E400E661897127 ] SamSs           C:\WINDOWS\system32\lsass.exe
13:17:12.0031 0x038c  SamSs - ok
13:17:12.0031 0x038c  [ DCEC079FAD95D36C8DD5CB6D779DFE32, F8546552D939A225853A0CE4913701A93738DF02C999D16E141E9A828814BBC6 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
13:17:12.0125 0x038c  SCardSvr - ok
13:17:12.0125 0x038c  [ A050194A44D7FA8D7186ED2F4E8367AE, BCDF56D5A2F9E202DC67E7FE4BCC617BCC0BDFF2D221A621020068B17B2855BB ] Schedule        C:\WINDOWS\system32\schedsvc.dll
13:17:12.0234 0x038c  Schedule - ok
13:17:12.0234 0x038c  [ 8D04819A3CE51B9EB47E5689B44D43C4, B0588AF967A7611F05BC8A8AD0C945DBB7BF995D7DA5C28FD0D007E33BF1F502 ] sdbus           C:\WINDOWS\system32\DRIVERS\sdbus.sys
13:17:12.0328 0x038c  sdbus - ok
13:17:12.0343 0x038c  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:17:12.0375 0x038c  Secdrv - ok
13:17:12.0375 0x038c  [ BEE4CFD1D48C23B44CF4B974B0B79B2B, DF3B02D713F8A4602BE75F004074D5DF79AFF2D58FF37110B2A6AC29F680758B ] seclogon        C:\WINDOWS\System32\seclogon.dll
13:17:12.0468 0x038c  seclogon - ok
13:17:12.0468 0x038c  [ 2AAC9B6ED9EDDFFB721D6452E34D67E3, 95D83F054A6610328D56E56CD948A6618C590231853E56FC20E7557DB61384A4 ] SENS            C:\WINDOWS\system32\sens.dll
13:17:12.0546 0x038c  SENS - ok
13:17:12.0562 0x038c  [ CF24EB4F0412C82BCD1F4F35A025E31D, B74CB094126F5C23F601C34D53B2DF5BE3E5918230AC9DCFCFFA8E66B3A0FA25 ] Serial          C:\WINDOWS\system32\drivers\Serial.sys
13:17:12.0625 0x038c  Serial - ok
13:17:12.0656 0x038c  [ 8E6B8C671615D126FDC553D1E2DE5562, CEEC0067514555D5CA489F50E3D7562FCA8DB8E952C3C878604C9277FC77959F ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
13:17:12.0734 0x038c  Sfloppy - ok
13:17:12.0750 0x038c  [ CAD058D5F8B889A87CA3EB3CF624DCEF, A7CDCF44261D1F4D820927253EA8EBB63714B7BAFF8B08DE073507D9A7EEA5BB ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
13:17:12.0843 0x038c  SharedAccess - ok
13:17:12.0859 0x038c  [ 2DB7D303C36DDD055215052F118E8E75, BE6E7BBE12A7A4EDF1F1C2935350603970C7426BBCA7A1A6644BB8999123AF17 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
13:17:12.0875 0x038c  ShellHWDetection - ok
13:17:12.0875 0x038c  Simbad - ok
13:17:12.0890 0x038c  [ 866D538EBE33709A5C9F5C62B73B7D14, BC94BEB7C17B4FCAC8B5D0D5006A203BC209E0504EECE149651D8691935696CD ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
13:17:12.0968 0x038c  SLIP - ok
13:17:12.0984 0x038c  [ 3C4A61CCB2CF32ED6E09F559B4ADB6CF, DF499E3C6311349167A2D90F0B6AEC189B5BCFB9E4DE3DBE8F0E64BCBF5DBFF9 ] smihlp          C:\Programme\ThinkVantage Fingerprint Software\smihlp.sys
13:17:12.0984 0x038c  smihlp - ok
13:17:13.0000 0x038c  [ C6DAFC9AF23D54CA0E222B215D5E8378, 13269951F2A41D032C5EBA1BD0ED59B2E3053A4C2EB2F438B4BB404F5B807E9A ] snapman         C:\WINDOWS\system32\DRIVERS\snapman.sys
13:17:13.0078 0x038c  snapman - ok
13:17:13.0093 0x038c  [ 793F65AAC52E5ECCB83E6D9DE054C865, 505D2F5FA767DC738558D5FAD6DD4070957C33BB8CC658509D0921C9B970D05A ] snapman378      C:\WINDOWS\system32\DRIVERS\snman378.sys
13:17:13.0171 0x038c  snapman378 - ok
13:17:13.0218 0x038c  [ C792610F7D2009352721C1AE38DA0619, 6391F31D49BE300E19340BC110BAA17CF3EE1FCAF96F845E4B49779331033B9E ] SNP2UVC         C:\WINDOWS\system32\DRIVERS\snp2uvc.sys
13:17:13.0296 0x038c  SNP2UVC - ok
13:17:13.0312 0x038c  Sparrow - ok
13:17:13.0312 0x038c  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F, DD17733CBB370FCA08F0296704D7CBEACA3C8F76D0ABE4761C3B1FFDF7481D9E ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
13:17:13.0390 0x038c  splitter - ok
13:17:13.0390 0x038c  [ 60784F891563FB1B767F70117FC2428F, E0B07F08E60FFBAD36C2E58180F4B2A16DCA47716044CBE0213DF7B74D742F1F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
13:17:13.0406 0x038c  Spooler - ok
13:17:13.0421 0x038c  [ 50FA898F8C032796D3B1B9951BB5A90F, 1C86273EC19EB96D6DB9CE6670C00683B77C99C42CC2F7E75BC50872B93446B1 ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
13:17:13.0453 0x038c  sr - ok
13:17:13.0468 0x038c  [ FE77A85495065F3AD59C5C65B6C54182, EB4BAF992F961B2FD5D24BFCB6BCB2142BC32933139A818835FEAB190E4283BB ] srservice       C:\WINDOWS\system32\srsvc.dll
13:17:13.0515 0x038c  srservice - ok
13:17:13.0531 0x038c  [ DC9A6DCF6CBB2BF50CD5967C3C584454, D7360BF3D36E3B68663F5BC4D6DC85D278A3446CD18D03D438396E169A46114A ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
13:17:13.0562 0x038c  Srv - ok
13:17:13.0578 0x038c  [ 4DF5B05DFAEC29E13E1ED6F6EE12C500, 2971D7D45D6942D310D47DBD19B9680D2D29527E79B86133C72217FD29259465 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
13:17:13.0625 0x038c  SSDPSRV - ok
13:17:13.0640 0x038c  [ 9DA3B55B17B54789AFB8C657D4ACE4D7, 5E4599E682327E3B8097A88A69ED73F96254A29054744D5DFB782054863F131E ] ss_conn_service C:\Programme\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
13:17:13.0687 0x038c  ss_conn_service - ok
13:17:13.0703 0x038c  [ BC2C5985611C5356B24AEB370953DED9, 15CBAB8166827DC098E2B16AB6F49A1441A4CB52AF3588F0AD964CAB596DFE10 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
13:17:13.0796 0x038c  stisvc - ok
13:17:13.0796 0x038c  [ 77813007BA6265C4B6098187E6ED79D2, 93939120E803C46FBFD577C8FC2E6C7E71C0460E01D25CB29579490640AB50C7 ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
13:17:13.0875 0x038c  streamip - ok
13:17:13.0875 0x038c  [ 3941D127AEF12E93ADDF6FE6EE027E0F, EA1F0E32E1C5E90FA4AAC421DEBBE086512340758D3217A6334E886BCE638B51 ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
13:17:13.0968 0x038c  swenum - ok
13:17:13.0984 0x038c  [ 8CE882BCC6CF8A62F2B2323D95CB3D01, B408550A581F3DA222355964AFA4E976AD8471F0AA37573C42C4948AE5A23A3B ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
13:17:14.0046 0x038c  swmidi - ok
13:17:14.0046 0x038c  SwPrv - ok
13:17:14.0062 0x038c  symc810 - ok
13:17:14.0062 0x038c  symc8xx - ok
13:17:14.0078 0x038c  sym_hi - ok
13:17:14.0078 0x038c  sym_u3 - ok
13:17:14.0093 0x038c  [ CC5DA243CFDAC58FC0408F7CE24084C5, 49B5D7D486468C412D32D9D7F1CA026C248CBD93CA71C2499DF9D4D8F2E8DFC8 ] SynTP           C:\WINDOWS\system32\DRIVERS\SynTP.sys
13:17:14.0109 0x038c  SynTP - ok
13:17:14.0125 0x038c  [ 8B83F3ED0F1688B4958F77CD6D2BF290, 546D3602183702B4F53E84413CFA2C933D64C8540378E54A8DCD148F3F36A2DA ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
13:17:14.0203 0x038c  sysaudio - ok
13:17:14.0218 0x038c  [ 2903FFFA2523926D6219428040DCE6B9, 4F13181931B0499F6C3F08138054DBCD1F84CB9806999A9172B80DE79D446F62 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
13:17:14.0328 0x038c  SysmonLog - ok
13:17:14.0343 0x038c  [ 05903CAC4B98908D55EA5774775B382E, AC3666CBD894D737874A5998DC7F46A0A51A7B23B1835FC735B9AD503A2191CC ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
13:17:14.0437 0x038c  TapiSrv - ok
13:17:14.0453 0x038c  [ 406A54311ABD7AF52F8E42E13AA2339A, 09E13C804BCEC93A355F1128D9595C95E9926D2B6D70B380C0A1CA7670A3012B ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:17:14.0546 0x038c  Tcpip - ok
13:17:14.0562 0x038c  [ 8AD9B543758DAC2CB2A6940FDBFD5468, 505D6D6C72E6103D2DA98C339A665EF9091B4881E57F6E9176609E40B25253F8 ] TcUsb           C:\WINDOWS\system32\Drivers\tcusb.sys
13:17:14.0562 0x038c  TcUsb - ok
13:17:14.0578 0x038c  [ 6471A66807F5E104E4885F5B67349397, F35CBFFB8BB235CCE30EF94A5273333900DD49FD506BF9D55D99A320B8A53A5A ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
13:17:14.0640 0x038c  TDPIPE - ok
13:17:14.0671 0x038c  [ 1C66BD6C1C2463514635CDD9443EB0E9, F87E2B9BB9330064FE7BAEDBD447269EC8440EAF73B1296808F3C0BB6459E7D0 ] tdrpman124      C:\WINDOWS\system32\DRIVERS\tdrpm124.sys
13:17:14.0796 0x038c  tdrpman124 - ok
13:17:14.0796 0x038c  [ C56B6D0402371CF3700EB322EF3AAF61, 7743FA4C734BCE38EFB1CA69BC17364D8421E2CD172F856F7E38E7AE1EE93F2F ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
13:17:14.0875 0x038c  TDTCP - ok
13:17:14.0875 0x038c  [ 88155247177638048422893737429D9E, B6D4E8691917946332C2208D01F8C8281978C1AD1E9951C5D99DF0D49AC34B3B ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
13:17:14.0953 0x038c  TermDD - ok
13:17:14.0984 0x038c  [ B7DE02C863D8F5A005A7BF375375A6A4, 6DE05A7B28CA5A78D58536347FC47F15883EEDBEF487CEA0117CC280FC582DCC ] TermService     C:\WINDOWS\System32\termsrv.dll
13:17:15.0062 0x038c  TermService - ok
13:17:15.0062 0x038c  [ 2DB7D303C36DDD055215052F118E8E75, BE6E7BBE12A7A4EDF1F1C2935350603970C7426BBCA7A1A6644BB8999123AF17 ] Themes          C:\WINDOWS\System32\shsvcs.dll
13:17:15.0078 0x038c  Themes - ok
13:17:15.0093 0x038c  [ D28AAF9A30B4B1A43310DCBDB4FD13BF, 51E32E37ED8CC87091B924E1D2FF2257711F0BDF708758C0ECBE8075564C45B2 ] tifsfilter      C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
13:17:15.0140 0x038c  tifsfilter - ok
13:17:15.0156 0x038c  [ 4362215C82A3ABE14EBB409289136A8B, A8B6FFB90476736F0560234D6D03BEBB24ECF5778347E52CB8011DE69A25C817 ] timounter       C:\WINDOWS\system32\DRIVERS\timntr.sys
13:17:15.0187 0x038c  timounter - ok
13:17:15.0187 0x038c  [ 03681A1CE77F51586903869A5AB1DEAB, E2EC0A481412166B654682C2F3D953E96E757466135CBD2D813B967EDB13C721 ] TlntSvr         C:\WINDOWS\system32\tlntsvr.exe
13:17:15.0250 0x038c  TlntSvr - ok
13:17:15.0250 0x038c  TosIde - ok
13:17:15.0265 0x038c  [ 626504572B175867F30F3215C04B3E2F, 47E87CE9BC666D5CB5953C5D497DC00A7CC28F8EC0A064B3E47700279C5C4B91 ] TrkWks          C:\WINDOWS\system32\trkwks.dll
13:17:15.0328 0x038c  TrkWks - ok
13:17:15.0359 0x038c  [ BFAABA2AA01053E6396079C1901EB2B7, F73D652A0C662EBEFFD829337A941EF30F5EF71772E6739FE602FFB24D4C3707 ] TuneUp.Defrag   C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe
13:17:15.0437 0x038c  TuneUp.Defrag - ok
13:17:15.0484 0x038c  [ 3CACC28E1152D41B7BFE712D0C8177E5, 78885DD041F23BE48BB4429AB6CEE22E43BEBAD4AEC3FC212A2D328EE1C2A91F ] TuneUp.UtilitiesSvc C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
13:17:15.0515 0x038c  TuneUp.UtilitiesSvc - ok
13:17:15.0531 0x038c  [ F2107C9D85EC0DF116939CCCE06AE697, 4608E3D0CA0B252130B4DF2505DB4D89635C327A343B470FCB81B8B02CD9FA44 ] TuneUpUtilitiesDrv C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
13:17:15.0531 0x038c  TuneUpUtilitiesDrv - ok
13:17:15.0546 0x038c  [ 5787B80C2E3C5E2F56C2A233D91FA2C9, 3774905CF77954DFCECDA5BCC7CDE3D0ED72712BFAAD85ADAE5246306447E46C ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
13:17:15.0625 0x038c  Udfs - ok
13:17:15.0625 0x038c  UIUSys - ok
13:17:15.0640 0x038c  ultra - ok
13:17:15.0656 0x038c  [ 402DDC88356B1BAC0EE3DD1580C76A31, 32A686595710336A6BFD54C03F552AE39439611662F84EF5D24193AE5665C6F3 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
13:17:15.0734 0x038c  Update - ok
13:17:15.0750 0x038c  [ 1DFD8975D8C89214B98D9387C1125B49, 0B6B268487C8E45E9B86BF4A0A9DB669E0E45D600DE3C82B63F9986CA9E01082 ] upnphost        C:\WINDOWS\System32\upnphost.dll
13:17:15.0812 0x038c  upnphost - ok
13:17:15.0812 0x038c  [ 9B11E6118958E63E1FEF129466E2BDA7, 97168BCE3F4A9BB9E6500F05E34851FB957B219C598944FADC28AC0011C0503B ] UPS             C:\WINDOWS\System32\ups.exe
13:17:15.0890 0x038c  UPS - ok
13:17:15.0890 0x038c  [ 1B611611C28D2DF25BC057D79C6F13FC, B0D86F63E44B40413BBAE6402CC088046CFAE082D41BBC2ED5A916293356B846 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:17:15.0906 0x038c  usbccgp - ok
13:17:15.0906 0x038c  [ 4BAC8DF07F1D8434FC640E677A62204E, 76C1351AF6752224BF59DEEE0F8665FE699F3DFD679F5BCD01C7D9383E6402A4 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:17:15.0968 0x038c  usbehci - ok
13:17:15.0984 0x038c  [ 1AB3CDDE553B6E064D2E754EFE20285C, A99C4528C4227B1E96847614745AAFACD3C5F1BDFE435214DBF78740FFB300FE ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:17:16.0062 0x038c  usbhub - ok
13:17:16.0062 0x038c  [ A32426D9B14A089EAA1D922E0C5801A9, ED1DC52EE45F8EAD3AEC4B1F817BB25634141CF48295494C5947DCE6CF7A9817 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:17:16.0140 0x038c  USBSTOR - ok
13:17:16.0140 0x038c  [ 26496F9DEE2D787FC3E61AD54821FFE6, 8BE7FF647470B9A951CBB478FAF83D657A15CC78037F42348A6B738F21D523DA ] usbuhci         C:\WINDOWS\system32\DRIVERS\usbuhci.sys
13:17:16.0234 0x038c  usbuhci - ok
13:17:16.0234 0x038c  [ 813236B1183CFCF289E367BD5DE6E29E, 167FE18A96F330AEEC1A4C419770C15EFEB536D43838285E51E7A62E95DF4674 ] usbvideo        C:\WINDOWS\system32\Drivers\usbvideo.sys
13:17:16.0281 0x038c  usbvideo - ok
13:17:16.0281 0x038c  [ 243C10752DC0EB01613C53437886ADAE, 3F8C6F4342F8C08837951F89BFC42D6FD6489832D6E029E7F03FEDFCEE0FFF21 ] UxTuneUp        C:\WINDOWS\System32\uxtuneup.dll
13:17:16.0296 0x038c  UxTuneUp - ok
13:17:16.0296 0x038c  [ 94D73B62E458FB56C9CE60AA96D914F9, EF0FAC91A1207DA28600000141C26686A7BD6B70EE05F5B78459D3D615454151 ] VClone          C:\WINDOWS\system32\DRIVERS\VClone.sys
13:17:16.0312 0x038c  VClone - detected UnsignedFile.Multi.Generic ( 1 )
13:17:16.0593 0x038c  Detect skipped due to KSN trusted
13:17:16.0593 0x038c  VClone - ok
13:17:16.0593 0x038c  [ 0D3A8FAFCEACD8B7625CD549757A7DF1, B9CFDEFCD66AA139F3DC2F967B184669532922563AD5A71769BABDC4370D065E ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
13:17:16.0671 0x038c  VgaSave - ok
13:17:16.0671 0x038c  ViaIde - ok
13:17:16.0671 0x038c  [ A5A712F4E880874A477AF790B5186E1D, FE885ED04C3EAFC379787F836738A2769E43D07CF52DD917D90C38E001957A5E ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
13:17:16.0765 0x038c  VolSnap - ok
13:17:16.0781 0x038c  [ 68F106273BE29E7B7EF8266977268E78, 1488AB7A654EBC94C73E1D494067189ACB95BC233980110CAC4C0297CDC4115A ] VSS             C:\WINDOWS\System32\vssvc.exe
13:17:16.0859 0x038c  VSS - ok
13:17:16.0875 0x038c  [ 7B353059E665F8B7AD2BBEAEF597CF45, 84A4311F18A4B8DCB364741DEA7D18E2363F19564B2EF25214965DC729527068 ] W32Time         C:\WINDOWS\system32\w32time.dll
13:17:16.0968 0x038c  W32Time - ok
13:17:16.0968 0x038c  [ E20B95BAEDB550F32DD489265C1DA1F6, 5589B2067E6C9FBA290D8C5EADDC198EBAF39C50C3CD7D2BC5CDA7CBFBC445E5 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:17:17.0046 0x038c  Wanarp - ok
13:17:17.0046 0x038c  WDICA - ok
13:17:17.0062 0x038c  [ 6768ACF64B18196494413695F0C3A00F, 3A8F8586F1D997D19A8478345338D2AECD785AEABDB61531DD3F92003D3230A5 ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
13:17:17.0140 0x038c  wdmaud - ok
13:17:17.0140 0x038c  [ 81727C9873E3905A2FFC1EBD07265002, 6AC2383A1DCBB7FA3DB90FBB874C8E1819F5B7492717FF41E303EFC7BF72F93E ] WebClient       C:\WINDOWS\System32\webclnt.dll
13:17:17.0218 0x038c  WebClient - ok
13:17:17.0250 0x038c  [ 9692AB8BA2DCD649A86B1B9B81154278, A2CD4A545FB91B2451859EC01CC7F5EFEAA1565BAE4CF980CD1C950BEA2F384B ] winachsf        C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
13:17:17.0359 0x038c  winachsf - ok
13:17:17.0359 0x038c  [ 6F3F3973D97714CC5F906A19FE883729, 7817118BE94D0F6FAE0F9CE48AD70FFE0AEF886CCE09C666768FAB61047F992F ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
13:17:17.0437 0x038c  winmgmt - ok
13:17:17.0484 0x038c  [ F10075C2EC96D2EB118012E78ECE2FC2, EE29CAE50098517654E8A79152F8A37B15A03F55524CE82DDAACBC74E1FAB2F8 ] WinRM           C:\WINDOWS\system32\WsmSvc.dll
13:17:17.0609 0x038c  WinRM - ok
13:17:17.0625 0x038c  [ C51B4A5C05A5475708E3C81C7765B71D, F776D2680BD3407307B7072626F78460361FC5BC38623C9E16F394D300AB25DE ] WmdmPmSN        C:\WINDOWS\system32\MsPMSNSv.dll
13:17:17.0640 0x038c  WmdmPmSN - ok
13:17:17.0656 0x038c  [ FFA4D901D46D07A5BAB2D8307FBB51A6, 53C6D04D111EDF774C7F7EEB8D032B372E6244774D56B1B34CF1236027EC9450 ] Wmi             C:\WINDOWS\System32\advapi32.dll
13:17:17.0703 0x038c  Wmi - ok
13:17:17.0703 0x038c  [ C42584FD66CE9E17403AEBCA199F7BDB, E3F2E1066F36AE5D33D4482239B2E556BE0C137923C9A120DFB36EC82F2E77B0 ] WmiAcpi         C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
13:17:17.0781 0x038c  WmiAcpi - ok
13:17:17.0796 0x038c  [ 93908111BA57A6E60EC2FA2DE202105C, F395F25F18D15C6B9FEDB45FD31E10295FFE5517E2BC86ACAC11904EA0664BE2 ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
13:17:17.0875 0x038c  WmiApSrv - ok
13:17:17.0906 0x038c  [ BF05650BB7DF5E9EBDD25974E22403BB, AF173D89B768CFC7AB03DFADD4F049CAC40AC59A0C9208AF5AB92CB368983077 ] WMPNetworkSvc   C:\Programme\Windows Media Player\WMPNetwk.exe
13:17:18.0046 0x038c  WMPNetworkSvc - ok
13:17:18.0078 0x038c  [ 15673BD0B86150CB8E27766059C72A9B, 56C23289A8BFF4945EE532CF6D62D3EC81B827CA15A359F30A327789F9FE9CAF ] WPFFontCache_v0400 c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
13:17:18.0125 0x038c  WPFFontCache_v0400 - ok
13:17:18.0140 0x038c  [ 300B3E84FAF1A5C1F791C159BA28035D, 0194856BDF94C1F274AF70AD558290ACDACDDEA331BD66FEB8E167ABD1E36786 ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
13:17:18.0234 0x038c  wscsvc - ok
13:17:18.0234 0x038c  [ C98B39829C2BBD34E454150633C62C78, 71B60EA3AD0E2637917D528C6A9E7ECF2949E3E5E91036AA5BBADA95BD725511 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
13:17:18.0328 0x038c  WSTCODEC - ok
13:17:18.0343 0x038c  [ 7B4FE05202AA6BF9F4DFD0E6A0D8A085, A1DB8909FA73337DB613D01824945485186654364A4DF129B8CB913CF87D1D2E ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
13:17:18.0421 0x038c  wuauserv - ok
13:17:18.0421 0x038c  [ F15FEAFFFBB3644CCC80C5DA584E6311, 79B3E9AF35976CE49921E9BEA3BA3B4A8AF762FD3F284B62954038B5FFB32471 ] WudfPf          C:\WINDOWS\system32\DRIVERS\WudfPf.sys
13:17:18.0437 0x038c  WudfPf - ok
13:17:18.0453 0x038c  [ 28B524262BCE6DE1F7EF9F510BA3985B, AEFF02B899801A63CBB262757C3D4369E38BFF0690BD085DE60E873DFBE3C3F4 ] WudfRd          C:\WINDOWS\system32\DRIVERS\wudfrd.sys
13:17:18.0468 0x038c  WudfRd - ok
13:17:18.0468 0x038c  [ 05231C04253C5BC30B26CBAAE680ED89, 5C03C2D7E0B573646D32F4093E2FF2C3BA391C39F5BA37D67F69D38E357FCC3D ] WudfSvc         C:\WINDOWS\System32\WUDFSvc.dll
13:17:18.0484 0x038c  WudfSvc - ok
13:17:18.0500 0x038c  [ C4F109C005F6725162D2D12CA751E4A7, AC996B44338328BDD4442FE48406F286A64526F0EC77BE00A19FA7FDB0407CFE ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
13:17:18.0593 0x038c  WZCSVC - ok
13:17:18.0609 0x038c  [ 0ADA34871A2E1CD2CAAFED1237A47750, 45BEF8649078BD74C1A347B5F2D3A1958E5A7DCD6C6BA8A2E0CAD277A929C64E ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
13:17:18.0687 0x038c  xmlprov - ok
13:17:18.0703 0x038c  ================ Scan global ===============================
13:17:18.0703 0x038c  [ 2C60091CA5F67C3032EAB3B30390C27F, 9E205C8E67F4B61FCFA2A82AA1968D522C3B6410D7075BE813F7F1564D61632E ] C:\WINDOWS\system32\basesrv.dll
13:17:18.0718 0x038c  [ E62178BC21EAC63A3B9A2DBD46C1B505, CAA5480CC4DAA37758F0CF445F865FD6F4630080B044EF2E606C2F62DAA4061A ] C:\WINDOWS\system32\winsrv.dll
13:17:18.0750 0x038c  [ E62178BC21EAC63A3B9A2DBD46C1B505, CAA5480CC4DAA37758F0CF445F865FD6F4630080B044EF2E606C2F62DAA4061A ] C:\WINDOWS\system32\winsrv.dll
13:17:18.0765 0x038c  [ A3EDBE9053889FB24AB22492472B39DC, 6F2ED6E04BDE2FCA2A8BF9BD2D1D6923DE6EAECB46F582B6C0BD1CF364D65C9E ] C:\WINDOWS\system32\services.exe
13:17:18.0765 0x038c  [ Global ] - ok
13:17:18.0765 0x038c  ================ Scan MBR ==================================
13:17:18.0781 0x038c  [ 7B42708705B6B73036AE0E2A41024A40 ] \Device\Harddisk0\DR0
13:17:18.0828 0x038c  \Device\Harddisk0\DR0 - ok
13:17:18.0843 0x038c  ================ Scan VBR ==================================
13:17:18.0843 0x038c  [ BB3B4F2429DAB284FCFE97996B5754AF ] \Device\Harddisk0\DR0\Partition1
13:17:18.0843 0x038c  \Device\Harddisk0\DR0\Partition1 - ok
13:17:18.0843 0x038c  [ 70281960E4AB5367F1D79AD687CCA645 ] \Device\Harddisk0\DR0\Partition2
13:17:18.0843 0x038c  \Device\Harddisk0\DR0\Partition2 - ok
13:17:18.0859 0x038c  [ AD0EA627EE784BCA801A0DE8185189D5 ] \Device\Harddisk0\DR0\Partition3
13:17:18.0859 0x038c  \Device\Harddisk0\DR0\Partition3 - ok
13:17:18.0859 0x038c  [ F3AFA07B8D088FE311833BB373BEAEBA ] \Device\Harddisk0\DR0\Partition4
13:17:18.0859 0x038c  \Device\Harddisk0\DR0\Partition4 - ok
13:17:18.0859 0x038c  ================ Scan generic autorun ======================
13:17:18.0906 0x038c  [ 03373C2C6EF2DA0AC68F89C7BA33C16A, 892A70BED26D8A1F18D4349627363B9354F81B7DB1C8837C22AE61A54A8C702F ] C:\Programme\COMODO\COMODO Internet Security\cistray.exe
13:17:18.0968 0x038c  COMODO Internet Security - ok
13:17:19.0421 0x038c  [ 7315846D5D2BC82C37E27E82767F7DB5, F479B5CC6E58BFF186E183D66E86C451FF80E12075D414BE2301C91ADDD158E6 ] C:\WINDOWS\RTHDCPL.EXE
13:17:20.0125 0x038c  RTHDCPL - ok
13:17:20.0187 0x038c  [ 8B4CBBA1EA526830C7F97E7822E2493A, 1DFD05B1C0050DB44F5B4293E5574BFC292AF804A63FC0A70131BB498C326977 ] C:\WINDOWS\ALCMTR.EXE
13:17:20.0218 0x038c  Alcmtr - ok
13:17:20.0234 0x038c  [ FFD2FD19CEFD6F0DB95D8153A6A70272, 70293631141CDAB5961A7FE27DD21266F5CF5BF2B65A79CE5A13B45DA4C17AF7 ] C:\Programme\Realtek\Audio\InstallShield\AzMixerSel.exe
13:17:20.0250 0x038c  AzMixerSel - detected UnsignedFile.Multi.Generic ( 1 )
13:17:21.0890 0x038c  Detect skipped due to KSN trusted
13:17:21.0890 0x038c  AzMixerSel - ok
13:17:21.0890 0x038c  [ 51FDB84B862BE121189F63D03FACA33C, F8A50A83418EB3D60034FC91AB1F0611538306897F583E8B26741E289AF6F9E9 ] C:\WINDOWS\PLFSetL.exe
13:17:21.0906 0x038c  PLFSetL - ok
13:17:21.0906 0x038c  [ 51064EEA7915FBEC31C2F26CE0F115A3, 0F606DBB1C9BB962D49DD0A13DB6ED16FCD474247B0D593E2D7C098F3D17BAE9 ] C:\Programme\ThinkVantage Fingerprint Software\launcher.exe
13:17:21.0921 0x038c  PSQLLauncher - ok
13:17:21.0921 0x038c  [ EED2120454E74AA5C257947986B4D068, 1E68F6DF831941B8F3C5F2B0A67AB5F9A9C94901DD37B31654D91DE38110B9E0 ] C:\Programme\Synaptics\SynTP\SynTPStart.exe
13:17:21.0937 0x038c  SynTPStart - ok
13:17:21.0968 0x038c  [ 3E44C43666E1E1B8CDDF8C9463120244, 9D2B285092550F1B2A8AA43731C69E152A10E6151857377D395ABD11A14C6C46 ] C:\WINDOWS\system32\igfxtray.exe
13:17:21.0984 0x038c  IgfxTray - ok
13:17:22.0000 0x038c  [ AB6F6ECCC267A62F30F15E2ED5176C95, BB94F11E5ED52B74FBC4E94EAF55DC58369DA50029D8A31EC7D2E48E69C6C90F ] C:\WINDOWS\system32\hkcmd.exe
13:17:22.0000 0x038c  HotKeysCmds - ok
13:17:22.0015 0x038c  [ 474035230682F30C2280198CEF417057, 7FD7244191D54DA0788A1225A38CBF9736F3AE9F5FA47399097890E16197DB40 ] C:\WINDOWS\system32\igfxpers.exe
13:17:22.0031 0x038c  Persistence - ok
13:17:22.0062 0x038c  [ C880EF37016EE8AF0FB22B066EF4C1B7, 9A05709C4FAB68FE1D8C92CDF48ACC8A8DC69337FED05CF4C52EF8109ED1B9A7 ] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
13:17:22.0093 0x038c  AcronisTimounterMonitor - ok
13:17:22.0093 0x038c  [ F40E80C04475731C6ED5D19C48E45E3C, 40BB48DD37D6DFD61A68BA7891C4C453665561F7C74C5DA1BC7D7B36A0190DAA ] C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
13:17:22.0109 0x038c  VirtualCloneDrive - ok
13:17:22.0125 0x038c  [ 01B4E6E990B6C5EA8856D96C7FD044B2, 2266296FD3C8E0DFA657F21406EE4E494477870DFAF7C65BEBCB6FBA8CADC7C6 ] C:\WINDOWS\system32\CTFMON.EXE
13:17:22.0203 0x038c  CTFMON.EXE - ok
13:17:22.0234 0x038c  [ 9707AF49E331A2BD5050B33C3D1FA3E9, B2875BC55B5B8CBBFD1E37BFE7E3902ED39604D3DA1266ACFAA6B7F65C6AB4E7 ] C:\Programme\BatteryInfo\Suite\BICmd.exe
13:17:22.0312 0x038c  TBP - detected UnsignedFile.Multi.Generic ( 1 )
13:17:22.0609 0x038c  TBP ( UnsignedFile.Multi.Generic ) - warning
13:17:22.0843 0x038c  [ 01B4E6E990B6C5EA8856D96C7FD044B2, 2266296FD3C8E0DFA657F21406EE4E494477870DFAF7C65BEBCB6FBA8CADC7C6 ] C:\WINDOWS\system32\CTFMON.EXE
13:17:22.0906 0x038c  CTFMON.EXE - ok
13:17:22.0953 0x038c  [ 9707AF49E331A2BD5050B33C3D1FA3E9, B2875BC55B5B8CBBFD1E37BFE7E3902ED39604D3DA1266ACFAA6B7F65C6AB4E7 ] C:\Programme\BatteryInfo\Suite\BICmd.exe
13:17:23.0015 0x038c  TBP - detected UnsignedFile.Multi.Generic ( 1 )
13:17:23.0015 0x038c  TBP ( UnsignedFile.Multi.Generic ) - warning
13:17:23.0156 0x038c  [ 01B4E6E990B6C5EA8856D96C7FD044B2, 2266296FD3C8E0DFA657F21406EE4E494477870DFAF7C65BEBCB6FBA8CADC7C6 ] C:\WINDOWS\system32\ctfmon.exe
13:17:23.0234 0x038c  CTFMON.EXE - ok
13:17:23.0296 0x038c  [ 390679F7A217A5E73D756276C40AE887, 3EDFB645B2F58864E653C66516D6D48C4F9D691CFD51D91D4D88E316EE7B7177 ] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
13:17:23.0390 0x038c  SpybotSD TeaTimer - detected UnsignedFile.Multi.Generic ( 1 )
13:17:23.0828 0x038c  Detect skipped due to KSN trusted
13:17:23.0828 0x038c  SpybotSD TeaTimer - ok
13:17:23.0859 0x038c  [ D399878276B32DF716D9C6150616F4D8, 1D249C12F82A613E2DE0CDE04F1C7D73144DCBC12FAB4EFBF415934446B5FC9E ] C:\PROGRA~1\CKSOFT~1\CKPOPU~1\pkill.exe
13:17:23.0921 0x038c  CK POPUP KILLER - detected UnsignedFile.Multi.Generic ( 1 )
13:17:24.0937 0x0f84  Object required for P2P: [ 7315846D5D2BC82C37E27E82767F7DB5 ] C:\WINDOWS\RTHDCPL.EXE
13:17:25.0453 0x0f84  Object send P2P result: true
13:17:26.0015 0x038c  CK POPUP KILLER ( UnsignedFile.Multi.Generic ) - warning
13:17:26.0406 0x038c  [ 6A7F0556E9114843EC8BE95A1FA12665, 42D07B2E43EFD378ED56B2989C1BAF3D4115C78C56E58C2EAB9FC14BBCF13730 ] C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe
13:17:26.0734 0x038c  AnyDVD - ok
13:17:26.0765 0x038c  [ 1EA41328CEC403E3D11AE67300C90714, DD19F037653B931982AF477B4214FC556754E75E88481FED50AE39A92C570989 ] C:\Programme\TClock Light\Zima Alexander\tclock.exe
13:17:26.0765 0x038c  TClock Light - detected UnsignedFile.Multi.Generic ( 1 )
13:17:27.0015 0x038c  Detect skipped due to KSN trusted
13:17:27.0015 0x038c  TClock Light - ok
13:17:27.0046 0x038c  [ 9707AF49E331A2BD5050B33C3D1FA3E9, B2875BC55B5B8CBBFD1E37BFE7E3902ED39604D3DA1266ACFAA6B7F65C6AB4E7 ] C:\Programme\BatteryInfo\Suite\bicmd.exe
13:17:27.0093 0x038c  TBP - detected UnsignedFile.Multi.Generic ( 1 )
13:17:27.0093 0x038c  TBP ( UnsignedFile.Multi.Generic ) - warning
13:17:27.0250 0x038c  [ 01B4E6E990B6C5EA8856D96C7FD044B2, 2266296FD3C8E0DFA657F21406EE4E494477870DFAF7C65BEBCB6FBA8CADC7C6 ] C:\WINDOWS\system32\ctfmon.exe
13:17:27.0312 0x038c  CTFMON.EXE - ok
13:17:27.0312 0x038c  Waiting for KSN requests completion. In queue: 1
13:17:28.0359 0x038c  AV detected via SS1: COMODO Antivirus, 6.0, enabled, updated
13:17:28.0359 0x038c  FW detected via SS1: COMODO Firewall, 6.0, enabled
13:17:28.0484 0x038c  ============================================================
13:17:28.0484 0x038c  Scan finished
13:17:28.0484 0x038c  ============================================================
13:17:28.0500 0x0fc4  Detected object count: 4
13:17:28.0500 0x0fc4  Actual detected object count: 4
13:20:24.0468 0x0fc4  TBP ( UnsignedFile.Multi.Generic ) - skipped by user
13:20:24.0468 0x0fc4  TBP ( UnsignedFile.Multi.Generic ) - User select action: Skip 
13:20:24.0468 0x0fc4  TBP ( UnsignedFile.Multi.Generic ) - skipped by user
13:20:24.0468 0x0fc4  TBP ( UnsignedFile.Multi.Generic ) - User select action: Skip 
13:20:24.0468 0x0fc4  CK POPUP KILLER ( UnsignedFile.Multi.Generic ) - skipped by user
13:20:24.0468 0x0fc4  CK POPUP KILLER ( UnsignedFile.Multi.Generic ) - User select action: Skip 
13:20:24.0468 0x0fc4  TBP ( UnsignedFile.Multi.Generic ) - skipped by user
13:20:24.0468 0x0fc4  TBP ( UnsignedFile.Multi.Generic ) - User select action: Skip

schrauber · 14.10.2015, 19:44

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Combofix wird überprüfen, ob die Microsoft Windows Wiederherstellungskonsole installiert ist.
Ist diese nicht installiert, erlaube Combofix diese herunter zu laden und zu installieren. Folge dazu einfach den Anweisungen und aktzeptiere die Endbenutzer-Lizenz.
Bei heutiger Malware ist dies sehr empfehlenswert, da diese uns eine Möglichkeit bietet, dein System zu reparieren, falls etwas schief geht.
Bestätige die Information, dass die Wiederherstellungskonsole installiert wurde mit Ja.
Hinweis: Ist diese bereits installiert, wird Combofix mit der Malwareentfernung fortfahren.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es eine Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

netfreak · 15.10.2015, 13:52

Code:

ATTFilter

ComboFix 15-10-15.01 - Zima Alexander 15.10.2015  14:17:18.1.1 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.49.1031.18.3001.2453 [GMT 2:00]
ausgeführt von:: h:\desktop\Zima Alexander\ComboFix.exe
AV: COMODO Antivirus *Disabled/Updated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
.
Achtung - Auf diesem PC ist keine Wiederherstellungskonsole installiert !!
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokumente und einstellungen\Zima Alexander\WINDOWS
c:\windows\msxml4-KB954430-enu.LOG
c:\windows\msxml4-KB973688-enu.LOG
c:\windows\unin0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-09-15 bis 2015-10-15  ))))))))))))))))))))))))))))))
.
.
2015-10-12 17:15 . 2015-10-12 17:23	--------	d-----w-	C:\FRST
2015-10-09 09:18 . 2015-10-09 09:18	--------	d-----w-	C:\ATIH
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-10-14 00:50 . 2008-08-21 12:00	19456	------w-	c:\windows\system32\corpol.dll
2015-10-14 00:50 . 2008-08-21 12:00	43520	------w-	c:\windows\system32\licmgr10.dll
2015-10-14 00:50 . 2008-08-21 12:00	1469440	----a-w-	c:\windows\system32\inetcpl.cpl
2015-10-14 00:50 . 2008-08-21 12:00	421888	----a-w-	c:\windows\system32\vbscript.dll
2015-10-12 17:15 . 2013-02-22 15:05	157696	----a-w-	c:\windows\ERUNT.exe
2015-10-11 11:36 . 2015-08-26 21:04	4587520	----a-w-	c:\windows\system32\GPhotos.scr
2015-10-11 11:19 . 2011-05-09 22:48	922112	------w-	c:\windows\system32\imapi2fs.dll
2015-10-11 11:19 . 2011-05-09 22:48	426496	------w-	c:\windows\system32\imapi2.dll
2015-10-10 13:39 . 2009-08-09 21:25	29696	----a-w-	c:\windows\system32\drivers\VClone.sys
2015-10-09 21:00 . 2012-06-04 15:35	222448	----a-w-	c:\windows\system32\muweb.dll
2015-10-09 08:58 . 2008-08-21 12:00	552448	----a-w-	c:\windows\system32\oleaut32.dll
2015-10-08 21:20 . 2008-08-21 12:00	1895424	----a-w-	c:\windows\system32\win32k.sys
2015-10-08 21:20 . 2008-08-21 12:00	4470784	----a-w-	c:\windows\system32\msi.dll
2015-10-08 21:20 . 2008-08-21 12:00	332800	----a-w-	c:\windows\system32\msihnd.dll
2015-10-08 21:19 . 2008-08-21 12:00	229376	----a-w-	c:\windows\system32\cewmdm.dll
2015-10-08 21:14 . 2008-08-21 12:00	2195840	----a-w-	c:\windows\system32\ntoskrnl.exe
2015-10-08 21:14 . 2008-04-14 07:30	2072448	----a-w-	c:\windows\system32\ntkrnlpa.exe
2015-10-08 21:14 . 2008-08-21 12:00	92928	----a-w-	c:\windows\system32\drivers\ksecdd.sys
2015-10-08 21:14 . 2008-08-21 12:00	179968	----a-w-	c:\windows\system32\drivers\mrxdav.sys
2015-10-08 21:13 . 2008-08-21 12:00	361600	----a-w-	c:\windows\system32\drivers\tcpip.sys
2015-10-08 21:13 . 2008-08-21 12:00	226880	----a-w-	c:\windows\system32\drivers\tcpip6.sys
2015-10-08 21:13 . 2008-08-21 12:00	143744	----a-w-	c:\windows\system32\drivers\fastfat.sys
2015-10-08 21:06 . 2008-08-21 12:00	138496	----a-w-	c:\windows\system32\drivers\afd.sys
2015-10-08 21:02 . 2008-08-21 12:00	96256	----a-w-	c:\windows\system32\msiexec.exe
2015-10-08 21:00 . 2008-08-21 12:00	82944	----a-w-	c:\windows\system32\tlntsess.exe
2015-10-08 20:37 . 2007-02-08 20:50	208896	----a-w-	c:\windows\system32\UCI32M17.dll
2015-10-08 20:37 . 2006-12-22 09:56	988032	----a-w-	c:\windows\system32\drivers\HSF_DPV.sys
2015-10-08 20:37 . 2006-12-22 09:56	210688	----a-w-	c:\windows\system32\drivers\HSFHWAZL.sys
2015-10-08 20:37 . 2006-12-22 09:55	731136	----a-w-	c:\windows\system32\drivers\HSF_CNXT.sys
2015-10-08 20:37 . 2006-06-19 12:26	12672	----a-w-	c:\windows\system32\drivers\mdmxsdk.sys
2015-10-08 20:37 . 2006-06-19 12:26	94208	----a-w-	c:\windows\system32\mdmxsdk.dll
2015-10-08 20:14 . 2006-12-20 15:37	176128	----a-w-	c:\windows\system32\UCI32M16.dll
2015-10-08 20:11 . 2008-03-19 12:26	175104	----a-w-	c:\windows\system32\drivers\b57xp32.sys
2015-10-08 19:40 . 2009-10-09 14:04	43008	----a-w-	c:\windows\system32\pwrshplugin.dll
2015-10-08 19:40 . 2009-10-09 14:04	1107456	----a-w-	c:\windows\system32\WsmSvc.dll
2015-10-08 19:40 . 2009-10-09 14:04	178688	----a-w-	c:\windows\system32\wevtfwd.dll
2015-10-08 19:40 . 2009-10-09 14:04	433152	----a-w-	c:\windows\system32\WsmRes.dll
2015-10-08 19:40 . 2009-10-09 12:56	209408	----a-w-	c:\windows\system32\WsmWmiPl.dll
2015-10-08 19:40 . 2009-10-09 12:56	25088	----a-w-	c:\windows\system32\winrmprov.dll
2015-10-08 19:40 . 2009-10-09 12:56	12288	----a-w-	c:\windows\system32\wsmplpxy.dll
2015-10-08 19:40 . 2009-10-09 12:56	2048	----a-w-	c:\windows\system32\winrsmgr.dll
2015-10-08 19:40 . 2009-10-09 12:56	233984	----a-w-	c:\windows\system32\winrscmd.dll
2015-10-08 19:40 . 2009-10-09 12:56	12288	----a-w-	c:\windows\system32\winrssrv.dll
2015-10-08 19:40 . 2009-10-09 12:56	139776	----a-w-	c:\windows\system32\WsmAuto.dll
2015-10-08 19:39 . 2009-10-09 14:04	72192	------w-	c:\windows\system32\winrs.exe
2015-10-08 19:39 . 2009-10-09 12:56	14848	------w-	c:\windows\system32\wsmprovhost.exe
2015-10-08 19:39 . 2009-10-09 12:56	22528	------w-	c:\windows\system32\winrshost.exe
2015-10-08 19:39 . 2009-10-09 12:56	225280	------w-	c:\windows\system32\wsmanhttpconfig.exe
2015-10-08 19:39 . 2009-07-31 21:27	201184	------w-	c:\windows\system32\winrm.vbs
2015-10-08 19:39 . 2009-07-16 08:30	35	------w-	c:\windows\system32\winrm.cmd
2015-10-08 19:19 . 2006-10-18 19:47	317440	----a-w-	c:\windows\system32\mp4sdecd.dll
2015-10-08 19:19 . 2010-03-30 22:10	295264	----a-w-	c:\windows\system32\PresentationHost.exe
2015-10-08 19:15 . 2008-08-21 12:00	286208	----a-w-	c:\windows\system32\wmpdxm.dll
2015-10-08 19:15 . 2008-08-21 12:00	414720	----a-w-	c:\windows\system32\msscp.dll
2015-10-08 19:07 . 2008-07-29 17:24	622080	----a-w-	c:\windows\system32\icardagt.exe
2015-10-08 19:07 . 2008-07-29 19:10	26112	----a-w-	c:\windows\system32\TsWpfWrp.exe
2015-10-08 19:05 . 2005-10-28 22:50	26112	----a-w-	c:\windows\system32\bcsprsrc.dll
2015-10-08 19:05 . 2005-10-28 22:25	151552	----a-w-	c:\windows\system32\ifxcardm.dll
2015-10-08 19:05 . 2005-10-28 22:25	133120	----a-w-	c:\windows\system32\axaltocm.dll
2015-10-08 19:05 . 2005-10-28 14:40	96792	----a-w-	c:\windows\system32\basecsp.dll
2015-10-08 19:05 . 2006-10-02 13:28	312128	------w-	c:\windows\system32\msdelta.dll
2015-10-08 19:05 . 2006-10-18 19:47	613376	----a-w-	c:\windows\system32\wmpmde.dll
2015-10-08 19:05 . 2006-10-18 19:47	130048	----a-w-	c:\windows\system32\wmpps.dll
2015-10-08 19:05 . 2008-08-21 12:00	99840	----a-w-	c:\windows\system32\wmpshell.dll
2015-10-08 19:05 . 2008-08-21 12:00	8282112	----a-w-	c:\windows\system32\wmploc.dll
2015-10-08 19:05 . 2008-08-21 12:00	8192	----a-w-	c:\windows\system32\asferror.dll
2015-10-08 19:05 . 2008-08-21 12:00	275968	----a-w-	c:\windows\system32\wmerror.dll
2015-10-08 19:05 . 2008-08-21 12:00	242688	----a-w-	c:\windows\system32\wmpasf.dll
2015-10-08 19:05 . 2006-10-18 19:47	204288	------w-	c:\windows\system32\wmpsrcwp.dll
2015-10-08 19:05 . 2006-10-18 18:05	232448	------w-	c:\windows\system32\l3codecp.acm
2015-10-08 19:04 . 2006-10-18 19:47	1661440	------w-	c:\windows\system32\wmpencen.dll
2015-10-08 19:04 . 2006-11-02 09:51	43008	----a-w-	c:\windows\system32\wpdshextres.dll
2015-10-08 19:04 . 2006-10-18 19:47	356352	----a-w-	c:\windows\system32\wpdsp.dll
2015-10-08 19:04 . 2006-10-18 19:47	133632	----a-w-	c:\windows\system32\WPDShServiceObj.dll
2015-10-08 19:04 . 2008-08-21 12:00	991744	----a-w-	c:\windows\system32\drmv2clt.dll
2015-10-08 19:04 . 2008-08-21 12:00	757248	----a-w-	c:\windows\system32\WMADMOD.dll
2015-10-08 19:04 . 2008-08-21 12:00	542720	----a-w-	c:\windows\system32\blackbox.dll
2015-10-08 19:04 . 2008-08-21 12:00	4096	----a-w-	c:\windows\system32\wmvdmoe2.dll
2015-10-08 19:04 . 2008-08-21 12:00	4096	----a-w-	c:\windows\system32\wmvdmod.dll
2015-10-08 19:04 . 2008-08-21 12:00	4096	----a-w-	c:\windows\system32\wmsdmoe2.dll
2015-10-08 19:04 . 2008-08-21 12:00	4096	----a-w-	c:\windows\system32\wmsdmod.dll
2015-10-08 19:04 . 2008-08-21 12:00	4096	----a-w-	c:\windows\system32\MPG4DMOD.dll
2015-10-08 19:04 . 2008-08-21 12:00	4096	----a-w-	c:\windows\system32\MP4SDMOD.dll
2015-10-08 19:04 . 2008-08-21 12:00	4096	----a-w-	c:\windows\system32\MP43DMOD.dll
2015-10-08 19:04 . 2008-08-21 12:00	37376	----a-w-	c:\windows\system32\wmdmps.dll
2015-10-08 19:04 . 2008-08-21 12:00	33792	----a-w-	c:\windows\system32\wmdmlog.dll
2015-10-08 19:04 . 2008-08-21 12:00	321536	----a-w-	c:\windows\system32\mswmdm.dll
2015-10-08 19:04 . 2008-08-21 12:00	211456	----a-w-	c:\windows\system32\qasf.dll
2015-10-08 19:04 . 2008-08-21 12:00	179712	----a-w-	c:\windows\system32\msnetobj.dll
2015-10-08 19:04 . 2008-08-21 12:00	175616	----a-w-	c:\windows\system32\mspmsp.dll
2015-10-08 19:04 . 2008-08-21 12:00	157184	----a-w-	c:\windows\system32\wmidx.dll
2015-10-08 19:04 . 2008-08-21 12:00	1329152	----a-w-	c:\windows\system32\WMSPDMOE.dll
2015-10-08 19:04 . 2008-08-21 12:00	11264	----a-w-	c:\windows\system32\LAPRXY.dll
2015-10-08 19:04 . 2008-08-21 12:00	1117696	----a-w-	c:\windows\system32\WMADMOE.dll
2015-10-08 19:04 . 2006-10-18 19:47	767488	----a-w-	c:\windows\system32\WMVSENCD.dll
2015-10-08 19:04 . 2006-10-18 19:47	671232	----a-w-	c:\windows\system32\drivers\UMDF\wpdmtpdr.dll
2015-10-08 19:04 . 2006-10-18 19:47	656896	----a-w-	c:\windows\system32\WMVXENCD.dll
2015-10-08 19:04 . 2006-10-18 19:47	63488	------w-	c:\windows\system32\wpdmtpus.dll
2015-10-08 19:04 . 2006-10-18 19:47	629760	------w-	c:\windows\system32\wpd_ci.dll
2015-10-08 19:04 . 2006-10-18 19:47	4096	----a-w-	c:\windows\system32\WMVADVE.DLL
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\programme\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"CK POPUP KILLER"="c:\progra~1\CKSOFT~1\CKPOPU~1\pkill.exe" [2015-10-09 1241088]
"AnyDVD"="c:\programme\SlySoft\AnyDVD\AnyDVDtray.exe" [2015-10-10 9337768]
"TClock Light"="c:\programme\TClock Light\Zima Alexander\tclock.exe" [2015-10-11 44544]
"TBP"="c:\programme\BatteryInfo\Suite\bicmd.exe" [2015-10-11 1246208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"="c:\programme\COMODO\COMODO Internet Security\cistray.exe" [2015-08-05 1361088]
"RTHDCPL"="RTHDCPL.EXE" [2008-06-13 16871936]
"AzMixerSel"="c:\programme\Realtek\Audio\InstallShield\AzMixerSel.exe" [2006-07-17 53248]
"PLFSetL"="c:\windows\PLFSetL.exe" [2008-07-03 94208]
"PSQLLauncher"="c:\programme\ThinkVantage Fingerprint Software\launcher.exe" [2012-09-27 55656]
"SynTPStart"="c:\programme\Synaptics\SynTP\SynTPStart.exe" [2007-09-07 102400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-06-17 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-06-17 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-06-17 141848]
"AcronisTimounterMonitor"="c:\programme\Acronis\TrueImageHome\TimounterMonitor.exe" [2015-10-09 962456]
"VirtualCloneDrive"="c:\programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2015-10-10 85160]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-08-21 15360]
"TBP"="c:\programme\BatteryInfo\Suite\BICmd.exe" [2015-10-11 1246208]
.
c:\dokumente und einstellungen\Zima Alexander\Startmenü\Programme\Autostart\
ac'tivAid.lnk - c:\programme\ac'tivAid\ac'tivAid.ahk [2015-10-9 495612]
DeskPins.lnk - c:\programme\DeskPins\DeskPins.exe [2004-5-2 62464]
Rainlendar.lnk - c:\programme\Rainlendar\Rainlendar.exe [2015-10-12 118784]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2012-09-27 12:27	100712	----a-w-	c:\programme\ThinkVantage Fingerprint Software\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli c:\programme\ThinkVantage Fingerprint Software\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"TrueImageMonitor.exe"=c:\programme\Acronis\TrueImageHome\TrueImageMonitor.exe
"Acronis Scheduler2 Service"="c:\programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
"NBAgent"="c:\programme\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Windows-Remoteverwaltung 
.
R0 snapman378;Acronis Snapshots Manager (Build 378);c:\windows\system32\drivers\snman378.sys [09.10.2015 12:51 134272]
R0 tdrpman124;Acronis Try&Decide and Restore Points filter (build 124);c:\windows\system32\drivers\tdrpm124.sys [09.10.2015 12:51 950848]
R1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\drivers\cmderd.sys [25.03.2014 20:22 15808]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [25.03.2014 20:22 631872]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [25.03.2014 20:22 30144]
R2 NAUpdate;@c:\programme\Nero\Update\NASvc.exe,-200;c:\programme\Nero\Update\NASvc.exe [04.05.2010 12:07 503080]
R2 OS Selector;Acronis OS Selector Activator;c:\programme\Acronis\DiskDirector\OSS\reinstall_svc.exe [25.05.2010 19:53 2155848]
R2 smihlp;SMI Helper Driver (smihlp);c:\programme\ThinkVantage Fingerprint Software\smihlp.sys [30.05.2011 18:21 11976]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service;c:\programme\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [10.10.2015 15:37 743688]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [31.05.2011 20:19 1052480]
R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [08.10.2015 19:44 51288]
R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [08.10.2015 19:44 43608]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\programme\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14.10.2009 08:24 10064]
S3 cmdvirth;COMODO Virtual Service Manager;c:\programme\COMODO\COMODO Internet Security\cmdvirth.exe [25.03.2014 20:22 1664704]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2015-10-15 c:\windows\Tasks\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9}.job
- c:\programme\COMODO\COMODO Internet Security\cfpconfg.exe [2014-03-31 00:24]
.
2015-10-15 c:\windows\Tasks\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22}.job
- c:\programme\COMODO\COMODO Internet Security\cfpconfg.exe [2014-03-31 00:24]
.
2015-10-15 c:\windows\Tasks\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}.job
- c:\programme\COMODO\COMODO Internet Security\cfpconfg.exe [2014-03-31 00:24]
.
2015-10-15 c:\windows\Tasks\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}.job
- c:\programme\COMODO\COMODO Internet Security\cfpconfg.exe [2014-03-31 00:24]
.
2015-10-15 c:\windows\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
- c:\windows\system32\xp_eos.exe [2015-10-08 18:44]
.
2015-10-08 c:\windows\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
- c:\windows\system32\xp_eos.exe [2015-10-08 18:44]
.
.
------- Zusätzlicher Suchlauf -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
FF - ProfilePath - c:\dokumente und einstellungen\Zima Alexander\Anwendungsdaten\Mozilla\Firefox\Profiles\cvklvbru.default\
FF - user.js: extensions.blocklist.enabled - false
FF - user.js: app.update.auto - false
FF - user.js: security.mixed_content.block_active_content - false
FF - user.js: security.mixed_content.block_display_content - false
FF - user.js: app.update.staging.enabled - true
FF - user.js: app.update.interval - 31536000
FF - user.js: app.update.idletime - 31536000
FF - user.js: browser.search.update - false
FF - user.js: browser.search.update.interval - 31536000
FF - user.js: app.update.channel - default
FF - user.js: extensions.getAddons.cache.enabled - false
FF - user.js: app.update.download.backgroundInterval - 31536000
FF - user.js: browser.safebrowsing.appRepURL - 
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
c:\dokumente und einstellungen\Zima Alexander\Startmenü\Programme\Autostart\verbinden mit POLIZEI - DE.lnk - (no file)
AddRemove-CK Popup Killer - c:\windows\unin0407.exe
AddRemove-01_Simmental - c:\programme\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\programme\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\programme\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\programme\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\programme\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\programme\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\programme\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\programme\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\programme\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\programme\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\programme\SAMSUNG\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2015-10-15 14:26
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwClose
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\software\COMODO\CIS\Installer\Sym_Cam\CIS]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\CmdAgent\Mode\Configurations]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\CmdAgent\Mode\Data]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\CmdAgent\Mode\Options]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\System\Software\COMODO\Cam]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(936)
c:\programme\ThinkVantage Fingerprint Software\psqlpwd.dll
c:\programme\ThinkVantage Fingerprint Software\homefus2.dll
c:\programme\ThinkVantage Fingerprint Software\infql2.dll
c:\programme\ThinkVantage Fingerprint Software\homepass.dll
c:\programme\ThinkVantage Fingerprint Software\bio.dll
c:\programme\ThinkVantage Fingerprint Software\qlbase.dll
c:\programme\ThinkVantage Fingerprint Software\ps2css.dll
.
- - - - - - - > 'lsass.exe'(1000)
c:\windows\system32\guard32.dll
c:\programme\ThinkVantage Fingerprint Software\psqlpwd.dll
c:\programme\ThinkVantage Fingerprint Software\homefus2.dll
c:\programme\ThinkVantage Fingerprint Software\infql2.dll
c:\windows\system32\mswsock.dll
c:\windows\System32\wshtcpip.dll
.
- - - - - - - > 'csrss.exe'(900)
c:\windows\system32\cmdcsr.dll
.
Zeit der Fertigstellung: 2015-10-15  14:30:31
ComboFix-quarantined-files.txt  2015-10-15 12:30
.
Vor Suchlauf: 9 Verzeichnis(se), 79.272.161.280 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 83.396.771.840 Bytes frei
.
- - End Of File - - 1F3243DCEBEABDB9C4060C0F266B892F
7B42708705B6B73036AE0E2A41024A40

Zusatzinfo:

Nach dem mbar.exe und TDSSKiller.exe Vorgang habe ich den Laptop neu gestartet. Da kam eine Fehlermeldung nach dem ich neu starten klickte.

So eine Meldung wie "Fehler beim lesen ... konnte nicht auf Speicher ... " oderso.

Dann habe ich eben deine letzte Anweisung befolgt.

Als ich Combofix.exe startete wurde gemeldet das Die Wiederherstellungskonsolle nicht installiert sei. Ich soll eine Internetverbindung herstellen um diese von Microsoft runterzuladen.
Das habe ich versucht. Nach kurzen warten kam die Meldung:
"Runterladen Fehlgeschlagen" Also die Konsole wurde offensichtlich aus irgendeinen Grund nicht installiert.

netfreak · 15.10.2015, 15:09

...

Wollte nun Manuell die Wiederherstellungskonsole mit der Original WIN XP SP3 CD Nachinstallieren.

Beim Setup kommt folgende Meldung:
$HKLM\System\CCS\Services\Tcpip\... - Eintrag kommt immer wieder!-screenshot-379-windows-setup.jpg$

Nachtrag:
Wiederherstellungskonsole nun installiert. Hat über Punkt 2 von der CD aus installiert.

netfreak · 15.10.2015, 16:11

...

Diese Meldung popt immer auf, nachdem ich Neustarten oder Runterfahren wählte.

$HKLM\System\CCS\Services\Tcpip\... - Eintrag kommt immer wieder!-meldung.jpg$

Nachtrag:
Meldung taucht erst auf seit dem ich mbar.exe und TDSSKiller.exe ausgeführt hatte und danach einen Neustart machte.

netfreak · 15.10.2015, 22:25

...
$HKLM\System\CCS\Services\Tcpip\... - Eintrag kommt immer wieder!-screenshot-380-explorer.exe-fehler-anwendung.jpg$

schrauber · 16.10.2015, 19:29

Bitte Windows Repair laufen lassen:
Windows reparieren - so geht's - Anleitungen

netfreak · 19.10.2015, 18:31

Immer noch alles wie zuvor.

Der Eintrag wird immer beim LOGIN eingetragen sofern Internet Verbindung steht.

Die Fehlermeldung nach Neustarten klicken oder Runterfahren popt immer noch auf.

HiJackThis Logfile:

Code:

ATTFilter

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:33:16, on 19.10.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.23750)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\Nero\Update\NASvc.exe
C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe
C:\Programme\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Programme\Acronis\DiskDirector\OSS\reinstall_svc.exe
C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\COMODO\COMODO Internet Security\cistray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\CKSOFT~1\CKPOPU~1\pkill.exe
C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Programme\TClock Light\Zima Alexander\tclock.exe
C:\Programme\AutoHotkey\AutoHotkey.exe
C:\Programme\DeskPins\DeskPins.exe
C:\Programme\Rainlendar\Rainlendar.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\DOKUME~1\ZIMAAL~1\LOKALE~1\Temp\RtkBtMnt.exe
C:\Programme\COMODO\COMODO Internet Security\cis.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [COMODO Internet Security] C:\Programme\COMODO\COMODO Internet Security\cistray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Programme\Realtek\Audio\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Programme\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [SynTPStart] C:\Programme\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [CK POPUP KILLER] C:\PROGRA~1\CKSOFT~1\CKPOPU~1\pkill.exe -hide
O4 - HKCU\..\Run: [AnyDVD] C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [TClock Light] C:\Programme\TClock Light\Zima Alexander\tclock.exe
O4 - HKCU\..\Run: [TBP] C:\Programme\BatteryInfo\Suite\bicmd.exe /showtbpanel
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [TBP] C:\Programme\BatteryInfo\Suite\BICmd.exe /showtbpanel (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: ac'tivAid.lnk = C:\Programme\ac'tivAid\ac'tivAid.ahk
O4 - Startup: DeskPins.lnk = C:\Programme\DeskPins\DeskPins.exe
O4 - Startup: Rainlendar.lnk = C:\Programme\Rainlendar\Rainlendar.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\vsocklib.dll' missing
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1444424446640
O17 - HKLM\System\CCS\Services\Tcpip\..\{99A53946-CEA5-4897-9563-1C013177EF1A}: NameServer = 91.109.20.197 91.109.20.198
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Programme\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Programme\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @C:\Programme\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Programme\Nero\Update\NASvc.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Acronis OS Selector Activator (OS Selector) - Unknown owner - C:\Programme\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Programme\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: TuneUp Drive Defrag-Dienst (TuneUp.Defrag) - TuneUp Software - C:\Programme\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Programme\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 7097 bytes

HKLM\System\CCS\Services\Tcpip\... - Eintrag kommt immer wieder!

Log-Analyse und Auswertung: HKLM\System\CCS\Services\Tcpip\... - Eintrag kommt immer wieder!