Werden von meinem Rechner Dos Attacken gestartet?

Hagbard23 · 13.06.2013, 09:23

Hallo zusammen, ich weiß mittlerweile echt nicht mehr weiter. Habe folgendes Problem.

Seit kurzem ist mein Internet sehr langsam, Seiten bauen sich langsam auf, Youtube Videos dauern ewig zum laden und und und. Hatte mit eurer Hilfe mein System schon bereinigt. Hat aber nix genützt. Bin dann in meinem Protokoll des Routers (Netgear DGN2200B) auf folgende Einträge gestoßen:

[DOS Attack] : 48 [STORM] packets detected in last 20 seconds, source ip [87.170.181.218]
Mittwoch, Jun 12,2013 15:50:29
[DOS Attack] : 1 [STORM] packets detected in last 20 seconds, source ip [87.170.181.218]
Mittwoch, Jun 12,2013 15:50:02

Die IP Adresse die laut Router die Quelle sein soll ist meine IP Adresse die ich in diesem Moment von meinem Provider bekommen habe. Die Anzahl der Pakete pro Eintrag variiert immer wieder. Ich könnte die Liste unendlich fortsetzen. Da dachte ich mir na gut nützt nix, System neu aufsetzen. So das habe ich gestern gemacht und trotzdem sobald ich mit dem Internet verbunden bin geht das wieder los. Hab beide Platten (eine SSD auf der ich normalerweise mein Windows installiert hab, und eine normale Platte) formatiert und die Partitionen gelöscht. Danach den Rechner für ein paar Minuten vom Strom genommen und alles wieder installiert. Habe das bei beiden Platten gemacht und die jeweils andere in der Zwischenzeit abgesteckt. Habe keine externen Geräte oder USB Sticks angeschlossen. Und trotzdem bleibt das Problem. Wenn ich das ganze richtig verstehe bin ich Teil einer DOS Attacke, mein Rechner versucht sinnlos Pakete rauszuschicken ohne mein Wissen und mein Router blockt dann das ganze. Damit ist mein Router aber so beschäftigt das mein Internetspeed in die Knie geht.Habt ihr eine Idee?

*Update*

Gestern gab es über 6 Stunden keinen neuen Eintrag im Router Protokoll. Heute früh den Rechner neu gestartet, wieder sind 3 Einträge aufgetaucht, seit mittlerweile circa 3 Stunden gibt es auch heute keine neuen Einträge. Trotzdem ist mein Internet weiterhin sehr langsam. Mit den verschiedenen DSl Speed Test Seiten bekomme ich dauernd unterschiedliche Ergebnisse (von 400kb bis 8,5mb Downloadrate ist alles dabei). Kann mir jemand eine Seite oder ein Programm empfehlen wo ich es besser überprüfen kann?

schrauber · 13.06.2013, 10:08

Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Scan.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hagbard23 · 13.06.2013, 10:48

hier nun die Logfiles:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2013 04
Ran by *** (administrator) on 13-06-2013 11:40:54
Running from C:\Users\***\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\system32\LogonUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKCU\...\Run: [BrowserChoice] "C:\Windows\System32\browserchoice.exe" /run [294912 2010-02-23] (Microsoft Corporation)
MountPoints2: {21618d39-d35e-11e2-b89d-806e6f6e6963} - D:\Bin\assetup.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\uwl98bq3.default
FF Homepage: www.google.de
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

==================== Services (Whitelisted) =================


==================== Drivers (Whitelisted) ====================

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-13 11:40 - 2013-06-13 11:40 - 00000000 ____D C:\FRST
2013-06-13 11:37 - 2013-06-13 11:39 - 01920280 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-06-13 10:27 - 2013-06-13 10:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-06-13 08:01 - 2013-06-13 08:02 - 00000000 ____D C:\Users\***\AppData\Roaming\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Users\***\AppData\Local\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-13 07:30 - 2013-06-13 07:30 - 00001754 ____A C:\Users\Public\Desktop\Browserwahl.lnk
2013-06-12 21:55 - 2010-02-23 10:16 - 00294912 ____A (Microsoft Corporation) C:\Windows\System32\browserchoice.exe
2013-06-12 21:53 - 2012-12-16 19:11 - 00046080 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-06-12 21:53 - 2012-12-16 16:45 - 00367616 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-06-12 21:53 - 2012-12-16 16:13 - 00295424 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-06-12 21:53 - 2012-12-16 16:13 - 00034304 ____A (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-06-12 21:53 - 2010-09-30 12:41 - 00100864 ____A (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-06-12 21:53 - 2010-09-30 08:47 - 00070656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-06-12 21:52 - 2013-06-13 07:30 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-12 21:52 - 2013-06-12 21:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Vorlagen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Startmenü
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Netzwerkumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Lokale Einstellungen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Eigene Dateien
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Druckumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Musik
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Anwendungsdaten
2013-06-12 21:52 - 2013-01-18 17:00 - 06390048 ____A (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 03460896 ____A (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 02953448 ____A C:\Windows\System32\nvcoproc.bin
2013-06-12 21:52 - 2013-01-18 17:00 - 02558240 ____A (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 00884512 ____A (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
2013-06-12 21:52 - 2013-01-18 17:00 - 00118560 ____A (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 00063776 ____A (NVIDIA Corporation) C:\Windows\System32\nvshext.dll
2013-06-12 21:51 - 2013-06-12 21:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-12 21:51 - 2013-06-12 21:52 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 21:51 - 2013-06-12 21:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-12 21:51 - 2013-02-26 00:32 - 00061216 ____A (Khronos Group) C:\Windows\System32\OpenCL.dll
2013-06-12 21:51 - 2013-02-26 00:32 - 00053024 ____A (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-06-12 21:50 - 2012-03-01 08:46 - 00023408 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fs_rec.sys
2013-06-12 21:50 - 2012-03-01 08:33 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2013-06-12 21:50 - 2012-03-01 08:28 - 00005120 ____A (Microsoft Corporation) C:\Windows\System32\wmi.dll
2013-06-12 21:50 - 2012-03-01 07:33 - 00159232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-06-12 21:50 - 2012-03-01 07:29 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-06-12 20:21 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 20:21 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-06-12 20:21 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-06-12 20:21 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-06-12 20:21 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-06-12 20:21 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-06-12 20:21 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-06-12 20:21 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-12 20:21 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-06-12 20:21 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-06-12 20:21 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-06-12 20:21 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-12 20:21 - 2013-02-15 08:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-06-12 20:21 - 2013-02-15 08:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-06-12 20:21 - 2013-02-15 08:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-06-12 20:21 - 2013-02-15 06:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-06-12 20:21 - 2013-02-15 06:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-06-12 20:21 - 2013-02-15 05:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-06-12 20:21 - 2013-01-03 08:00 - 00288088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-06-12 20:21 - 2012-11-09 07:45 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-06-12 20:21 - 2012-11-09 06:42 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-06-12 20:21 - 2012-08-22 20:12 - 00376688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2013-06-12 20:21 - 2012-03-03 08:35 - 01544704 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-12 20:21 - 2012-03-03 07:31 - 01077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-12 20:21 - 2011-11-17 08:35 - 00395776 ____A (Microsoft Corporation) C:\Windows\System32\webio.dll
2013-06-12 20:21 - 2011-11-17 07:35 - 00314880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-06-12 20:21 - 2011-10-26 07:25 - 01572864 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll
2013-06-12 20:21 - 2011-10-26 07:25 - 00366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2013-06-12 20:21 - 2011-10-26 06:32 - 01328128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-06-12 20:21 - 2011-10-26 06:32 - 00514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-06-12 20:21 - 2011-07-09 04:46 - 00288768 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2013-06-12 20:21 - 2011-06-15 12:02 - 00212992 ____A (Microsoft Corporation) C:\Windows\System32\odbctrac.dll
2013-06-12 20:21 - 2011-06-15 12:02 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\odbccp32.dll
2013-06-12 20:21 - 2011-06-15 12:02 - 00106496 ____A (Microsoft Corporation) C:\Windows\System32\odbccu32.dll
2013-06-12 20:21 - 2011-06-15 12:02 - 00106496 ____A (Microsoft Corporation) C:\Windows\System32\odbccr32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00319488 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00122880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00086016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00081920 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-06-12 20:21 - 2011-04-27 04:40 - 00158208 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2013-06-12 20:21 - 2011-04-27 04:39 - 00128000 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2013-06-12 20:21 - 2011-04-09 08:58 - 00142336 ____A (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2013-06-12 20:21 - 2011-04-09 07:56 - 00123904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-06-12 20:21 - 2011-03-11 08:34 - 01395712 ____A (Microsoft Corporation) C:\Windows\System32\mfc42.dll
2013-06-12 20:21 - 2011-03-11 08:34 - 01359872 ____A (Microsoft Corporation) C:\Windows\System32\mfc42u.dll
2013-06-12 20:21 - 2011-03-11 07:33 - 01164288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-06-12 20:21 - 2011-03-11 07:33 - 01137664 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-06-12 20:21 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-06-12 20:21 - 2010-12-23 12:42 - 01118720 ____A (Microsoft Corporation) C:\Windows\System32\sbe.dll
2013-06-12 20:21 - 2010-12-23 12:42 - 00961024 ____A (Microsoft Corporation) C:\Windows\System32\CPFilters.dll
2013-06-12 20:21 - 2010-12-23 12:36 - 00259072 ____A (Microsoft Corporation) C:\Windows\System32\mpg2splt.ax
2013-06-12 20:21 - 2010-12-23 07:54 - 00850944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-06-12 20:21 - 2010-12-23 07:54 - 00642048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-06-12 20:21 - 2010-12-23 07:50 - 00199680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-06-12 20:20 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-06-12 20:20 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-06-12 20:20 - 2013-01-04 07:46 - 00215040 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-06-12 20:20 - 2013-01-04 06:51 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-06-12 20:20 - 2013-01-04 04:47 - 00025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-06-12 20:20 - 2013-01-04 04:47 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-06-12 20:20 - 2013-01-04 04:47 - 00007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-06-12 20:20 - 2013-01-04 04:47 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-06-12 20:20 - 2012-11-20 07:48 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-06-12 20:20 - 2012-11-20 06:51 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-06-12 20:20 - 2012-11-02 07:59 - 00478208 ____A (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-06-12 20:20 - 2012-11-02 07:11 - 00376832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-06-12 20:20 - 2012-11-01 07:43 - 02002432 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-06-12 20:20 - 2012-11-01 07:43 - 01882624 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-06-12 20:20 - 2012-11-01 06:47 - 01389568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-06-12 20:20 - 2012-11-01 06:47 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-06-12 20:20 - 2012-10-04 19:46 - 00362496 ____A (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-06-12 20:20 - 2012-10-04 19:46 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-06-12 20:20 - 2012-10-04 19:46 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-06-12 20:20 - 2012-10-04 19:43 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-06-12 20:20 - 2012-10-04 19:41 - 01161216 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-06-12 20:20 - 2012-10-04 19:41 - 00424960 ____A (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00005120 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:47 - 01114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-06-12 20:20 - 2012-10-04 18:47 - 00274944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00005120 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 17:21 - 00338432 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-06-12 20:20 - 2012-10-04 16:41 - 00006144 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 16:41 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 16:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 16:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-12 20:20 - 2012-08-24 20:05 - 00220160 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-06-12 20:20 - 2012-08-24 18:57 - 00172544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-06-12 20:20 - 2012-06-02 07:50 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-06-12 20:20 - 2012-06-02 07:48 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-06-12 20:20 - 2012-06-02 07:48 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2013-06-12 20:20 - 2012-06-02 07:45 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-06-12 20:20 - 2012-06-02 06:40 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-06-12 20:20 - 2012-06-02 06:40 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-06-12 20:20 - 2012-06-02 06:34 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-06-12 20:20 - 2012-04-26 07:41 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2013-06-12 20:20 - 2012-04-26 07:41 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2013-06-12 20:20 - 2012-04-26 07:34 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2013-06-12 20:20 - 2011-11-17 08:35 - 01447936 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-06-12 20:20 - 2011-11-17 08:35 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2013-06-12 20:20 - 2011-11-17 08:35 - 00029184 ____A (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2013-06-12 20:20 - 2011-11-17 08:35 - 00028160 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll
2013-06-12 20:20 - 2011-11-17 08:33 - 00031232 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe
2013-06-12 20:20 - 2011-03-03 08:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\System32\dnsapi.dll
2013-06-12 20:20 - 2011-03-03 08:24 - 00183296 ____A (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll
2013-06-12 20:20 - 2011-03-03 08:21 - 00030208 ____A (Microsoft Corporation) C:\Windows\System32\dnscacheugc.exe
2013-06-12 20:20 - 2011-03-03 07:38 - 00270336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-06-12 20:20 - 2011-03-03 07:36 - 00028672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-06-12 20:20 - 2010-06-26 05:55 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2013-06-12 20:20 - 2010-06-26 05:24 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-06-12 20:18 - 2012-04-28 05:55 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2013-06-12 20:18 - 2011-08-17 07:26 - 00613888 ____A (Microsoft Corporation) C:\Windows\System32\psisdecd.dll
2013-06-12 20:18 - 2011-08-17 07:25 - 00108032 ____A (Microsoft Corporation) C:\Windows\System32\psisrndr.ax
2013-06-12 20:18 - 2011-08-17 06:24 - 00465408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-06-12 20:18 - 2011-08-17 06:19 - 00075776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-06-12 20:18 - 2011-04-29 05:06 - 00467456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2013-06-12 20:18 - 2011-04-29 05:05 - 00410112 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2013-06-12 20:18 - 2011-04-29 05:05 - 00168448 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2013-06-12 20:13 - 2011-12-28 05:59 - 00498688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-06-12 20:12 - 2013-05-17 08:14 - 01188864 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 20:12 - 2013-05-17 08:13 - 01492992 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 20:12 - 2013-05-17 08:13 - 00134144 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-12 20:12 - 2013-05-17 08:10 - 09061376 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 20:12 - 2013-05-17 08:10 - 00735232 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 20:12 - 2013-05-17 08:10 - 00097792 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-12 20:12 - 2013-05-17 08:09 - 12294656 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 20:12 - 2013-05-17 08:09 - 02458112 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 20:12 - 2013-05-17 08:09 - 00247808 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 20:12 - 2013-05-17 08:09 - 00064512 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 20:12 - 2013-05-16 20:21 - 01231872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 20:12 - 2013-05-16 20:21 - 00981504 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 20:12 - 2013-05-16 20:21 - 00132096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-12 20:12 - 2013-05-16 20:18 - 06034432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 20:12 - 2013-05-16 20:18 - 00627712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 20:12 - 2013-05-16 20:18 - 00067584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-12 20:12 - 2013-05-16 20:17 - 11020800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 20:12 - 2013-05-16 20:17 - 02078208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 20:12 - 2013-05-16 20:17 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 20:12 - 2013-05-16 20:17 - 00048128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 20:12 - 2013-05-16 19:10 - 01638912 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 20:12 - 2013-05-16 18:44 - 01638912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 20:12 - 2012-09-26 00:47 - 00078336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-06-12 20:12 - 2012-09-26 00:46 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\synceng.dll
2013-06-12 20:12 - 2012-08-11 02:56 - 00715776 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2013-06-12 20:12 - 2012-08-11 01:56 - 00542208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-06-12 20:12 - 2012-06-16 07:16 - 00609792 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-12 20:12 - 2012-06-16 07:15 - 00911360 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 20:12 - 2012-06-16 06:26 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 20:12 - 2012-06-16 06:26 - 00428032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-12 20:12 - 2012-03-17 09:58 - 00075120 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2013-06-12 20:12 - 2011-02-05 19:10 - 00642944 ____A (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-06-12 20:12 - 2011-02-05 19:10 - 00020352 ____A (Microsoft Corporation) C:\Windows\System32\kdusb.dll
2013-06-12 20:12 - 2011-02-05 19:10 - 00019328 ____A (Microsoft Corporation) C:\Windows\System32\kd1394.dll
2013-06-12 20:12 - 2011-02-05 19:10 - 00017792 ____A (Microsoft Corporation) C:\Windows\System32\kdcom.dll
2013-06-12 20:12 - 2011-02-05 19:06 - 00605552 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-06-12 20:12 - 2011-02-05 19:06 - 00566208 ____A (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-06-12 20:12 - 2011-02-05 19:06 - 00518672 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-06-12 20:11 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 20:11 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 20:11 - 2012-11-23 05:13 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-06-12 20:11 - 2012-07-05 00:16 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\netapi32.dll
2013-06-12 20:11 - 2012-07-05 00:13 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\browser.dll
2013-06-12 20:11 - 2012-07-05 00:13 - 00059392 ____A (Microsoft Corporation) C:\Windows\System32\browcli.dll
2013-06-12 20:11 - 2012-07-04 23:16 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-06-12 20:11 - 2012-07-04 23:14 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-06-12 20:11 - 2011-05-24 13:42 - 00404480 ____A (Microsoft Corporation) C:\Windows\System32\umpnpmgr.dll
2013-06-12 20:11 - 2011-05-24 12:40 - 00064512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-06-12 20:11 - 2011-05-24 12:40 - 00044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-06-12 20:11 - 2011-05-24 12:39 - 00145920 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-06-12 20:11 - 2011-05-24 12:37 - 00252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-06-12 20:07 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 20:07 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 20:07 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 20:07 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 20:07 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 20:07 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 20:07 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 20:07 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 20:07 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 20:07 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 20:07 - 2012-05-14 07:26 - 00956928 ____A (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-06-12 20:07 - 2011-12-16 10:46 - 00634880 ____A (Microsoft Corporation) C:\Windows\System32\msvcrt.dll
2013-06-12 20:07 - 2011-12-16 09:52 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-06-12 20:07 - 2011-10-15 08:31 - 00723456 ____A (Microsoft Corporation) C:\Windows\System32\EncDec.dll
2013-06-12 20:07 - 2011-10-15 07:38 - 00534528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-06-12 20:07 - 2011-08-27 07:37 - 00861696 ____A (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2013-06-12 20:07 - 2011-08-27 07:37 - 00331776 ____A (Microsoft Corporation) C:\Windows\System32\oleacc.dll
2013-06-12 20:07 - 2011-08-27 06:26 - 00571904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-06-12 20:07 - 2011-08-27 06:26 - 00233472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-06-12 20:07 - 2011-05-03 07:29 - 00976896 ____A (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2013-06-12 20:07 - 2011-05-03 06:30 - 00741376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-06-12 20:07 - 2011-02-23 06:55 - 00090624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bowser.sys
2013-06-12 20:07 - 2011-02-12 13:34 - 00267776 ____A (Microsoft Corporation) C:\Windows\System32\FXSCOVER.exe
2013-06-12 20:06 - 2013-03-19 08:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 20:06 - 2013-03-19 07:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-06-12 20:06 - 2013-03-19 07:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-06-12 20:06 - 2013-03-19 07:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-06-12 20:06 - 2013-03-19 06:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-06-12 20:06 - 2013-03-19 05:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-06-12 20:05 - 2012-06-06 08:02 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2013-06-12 20:05 - 2012-06-06 07:03 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-06-12 20:05 - 2011-11-19 16:58 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll
2013-06-12 20:05 - 2011-11-19 16:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-06-12 20:05 - 2011-11-17 08:41 - 01731920 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-06-12 20:05 - 2011-11-17 07:38 - 01292080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\***\AppData\Roaming\Macromedia
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\***\AppData\Roaming\Adobe
2013-06-12 16:42 - 2013-06-12 16:42 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 16:42 - 2013-06-12 16:42 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-12 16:37 - 2013-06-12 16:43 - 00000000 ____D C:\Users\***\AppData\Local\Adobe
2013-06-12 15:48 - 2012-02-17 08:38 - 01031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2013-06-12 15:48 - 2012-02-17 07:34 - 00826880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-06-12 15:48 - 2012-02-17 06:57 - 00023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2013-06-12 15:45 - 2013-06-12 15:45 - 00000000 ____D C:\Program Files\INTERNET_EXPLORER
2013-06-12 15:45 - 2013-06-12 15:30 - 00000000 ____D C:\Windows\PANTHER
2013-06-12 15:42 - 2012-06-03 00:19 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-06-12 15:42 - 2012-06-03 00:19 - 00701976 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-06-12 15:42 - 2012-06-03 00:19 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-06-12 15:42 - 2012-06-03 00:19 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll
2013-06-12 15:42 - 2012-06-03 00:19 - 00038424 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll
2013-06-12 15:42 - 2012-06-03 00:15 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-06-12 15:42 - 2012-06-03 00:15 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-06-12 15:42 - 2012-06-02 15:19 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-06-12 15:42 - 2012-06-02 15:15 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-12 15:34 - 2011-06-10 08:34 - 00539240 ____A (Realtek                                            ) C:\Windows\System32\Drivers\Rt64win7.sys
2013-06-12 15:34 - 2011-06-10 08:34 - 00107552 ____A (Realtek Semiconductor Corporation) C:\Windows\System32\RTNUninst64.dll
2013-06-12 15:34 - 2011-06-10 08:34 - 00074272 ____A C:\Windows\System32\RtNicProp64.dll
2013-06-12 15:33 - 2013-06-12 15:34 - 00001769 ____A C:\Windows\Language_trs.ini
2013-06-12 15:33 - 2013-06-12 15:33 - 00028829 ____A C:\Windows\Ascd_tmp.ini
2013-06-12 15:31 - 2013-06-12 15:31 - 00000000 ____D C:\Users\***\AppData\Local\VirtualStore
2013-06-12 15:30 - 2013-06-13 07:33 - 01825197 ____A C:\Windows\WindowsUpdate.log
2013-06-12 15:30 - 2013-06-12 15:31 - 00000000 ____D C:\users\***
2013-06-12 15:30 - 2013-06-12 15:30 - 00000020 ___SH C:\Users\***\ntuser.ini
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Recovery
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Programme
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Favoriten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Dokumente
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Program Files\Gemeinsame Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Dokumente und Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-06-12 14:49 - 2013-06-12 14:49 - 00001355 ____A C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

2013-06-13 11:40 - 2013-06-13 11:40 - 00000000 ____D C:\FRST
2013-06-13 11:39 - 2013-06-13 11:37 - 01920280 ____A (Farbar) C:\Users\***\Desktop\FRST64.exe
2013-06-13 11:28 - 2009-07-14 06:45 - 00020832 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-13 11:28 - 2009-07-14 06:45 - 00020832 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-13 10:28 - 2010-11-21 08:50 - 00643628 ____A C:\Windows\System32\perfh007.dat
2013-06-13 10:28 - 2010-11-21 08:50 - 00126188 ____A C:\Windows\System32\perfc007.dat
2013-06-13 10:28 - 2009-07-14 07:13 - 01472002 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-13 10:27 - 2013-06-13 10:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-06-13 10:27 - 2009-07-14 06:51 - 00023324 ____A C:\Windows\setupact.log
2013-06-13 10:13 - 2013-06-12 15:30 - 01825197 ____A C:\Windows\WindowsUpdate.log
2013-06-13 08:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-13 08:02 - 2013-06-13 08:01 - 00000000 ____D C:\Users\***\AppData\Roaming\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Users\***\AppData\Local\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-13 07:30 - 2013-06-13 07:30 - 00001754 ____A C:\Users\Public\Desktop\Browserwahl.lnk
2013-06-13 07:30 - 2013-06-12 21:52 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-13 07:29 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-13 07:29 - 2009-07-14 06:45 - 00274464 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-13 07:28 - 2010-11-21 09:00 - 00000000 ____D C:\Program Files\Windows Journal
2013-06-13 07:28 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-06-12 21:52 - 2013-06-12 21:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Vorlagen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Startmenü
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Netzwerkumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Lokale Einstellungen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Eigene Dateien
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Druckumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Musik
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Anwendungsdaten
2013-06-12 21:52 - 2013-06-12 21:51 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-12 21:52 - 2013-06-12 21:51 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 21:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-06-12 21:51 - 2013-06-12 21:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\***\AppData\Roaming\Macromedia
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\***\AppData\Roaming\Adobe
2013-06-12 16:43 - 2013-06-12 16:37 - 00000000 ____D C:\Users\***\AppData\Local\Adobe
2013-06-12 16:42 - 2013-06-12 16:42 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 16:42 - 2013-06-12 16:42 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-12 15:46 - 2009-07-14 07:38 - 00025600 __ASH C:\Windows\System32\config\BCD-Template.LOG
2013-06-12 15:46 - 2009-07-14 07:32 - 00028672 ____A C:\Windows\System32\config\BCD-Template
2013-06-12 15:45 - 2013-06-12 15:45 - 00000000 ____D C:\Program Files\INTERNET_EXPLORER
2013-06-12 15:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\oobe
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-12 15:34 - 2013-06-12 15:33 - 00001769 ____A C:\Windows\Language_trs.ini
2013-06-12 15:33 - 2013-06-12 15:33 - 00028829 ____A C:\Windows\Ascd_tmp.ini
2013-06-12 15:31 - 2013-06-12 15:31 - 00000000 ____D C:\Users\***\AppData\Local\VirtualStore
2013-06-12 15:31 - 2013-06-12 15:30 - 00000000 ____D C:\users\***
2013-06-12 15:30 - 2013-06-12 15:45 - 00000000 ____D C:\Windows\PANTHER
2013-06-12 15:30 - 2013-06-12 15:30 - 00000020 ___SH C:\Users\***\ntuser.ini
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\***\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Recovery
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Programme
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Favoriten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Dokumente
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Program Files\Gemeinsame Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Dokumente und Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-06-12 15:30 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\System32\restore
2013-06-12 15:30 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default
2013-06-12 15:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-06-12 14:49 - 2013-06-12 14:49 - 00001355 ____A C:\Windows\TSSysprep.log
2013-06-12 14:49 - 2009-07-14 06:46 - 00002790 ____A C:\Windows\DtcInstall.log
2013-06-12 14:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\sysprep
2013-05-17 08:14 - 2013-06-12 20:12 - 01188864 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-05-17 08:13 - 2013-06-12 20:12 - 01492992 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-05-17 08:13 - 2013-06-12 20:12 - 00134144 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-05-17 08:10 - 2013-06-12 20:12 - 09061376 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-05-17 08:10 - 2013-06-12 20:12 - 00735232 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-05-17 08:10 - 2013-06-12 20:12 - 00097792 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-05-17 08:09 - 2013-06-12 20:12 - 12294656 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-05-17 08:09 - 2013-06-12 20:12 - 02458112 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-05-17 08:09 - 2013-06-12 20:12 - 00247808 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-05-17 08:09 - 2013-06-12 20:12 - 00064512 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-05-16 20:21 - 2013-06-12 20:12 - 01231872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-05-16 20:21 - 2013-06-12 20:12 - 00981504 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-05-16 20:21 - 2013-06-12 20:12 - 00132096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-05-16 20:18 - 2013-06-12 20:12 - 06034432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-05-16 20:18 - 2013-06-12 20:12 - 00627712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-05-16 20:18 - 2013-06-12 20:12 - 00067584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-05-16 20:17 - 2013-06-12 20:12 - 11020800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-05-16 20:17 - 2013-06-12 20:12 - 02078208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-05-16 20:17 - 2013-06-12 20:12 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-05-16 20:17 - 2013-06-12 20:12 - 00048128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-05-16 19:10 - 2013-06-12 20:12 - 01638912 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-05-16 18:44 - 2013-06-12 20:12 - 01638912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-13 08:33

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-06-2013 04
Ran by *** at 2013-06-13 11:41:11 Run:
Running from C:\Users\***\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Mozilla Firefox 21.0 (x86 de) (Version: 21.0)
NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)
NVIDIA Grafiktreiber 311.06 (Version: 311.06)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.1106)
NVIDIA Systemsteuerung 311.06 (Version: 311.06)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
Realtek Ethernet Controller Driver (Version: 7.46.610.2011)

==================== Restore Points  =========================

12-06-2013 13:30:43 Microsoft Office 2010 wird installiert
12-06-2013 13:34:30 Installiert Realtek Ethernet Controller Driver
12-06-2013 13:42:12 Windows Update
12-06-2013 18:27:51 Windows Update
12-06-2013 19:48:50 Windows Update

==================== Faulty Device Manager Devices =============

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/13/2013 07:31:14 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/13/2013 07:28:50 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvSCPAPISvr.exe, Version: 7.17.13.1106, Zeitstempel: 0x50f9536b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x75226cdc
ID des fehlerhaften Prozesses: 0x2fc
Startzeit der fehlerhaften Anwendung: 0xnvSCPAPISvr.exe0
Pfad der fehlerhaften Anwendung: nvSCPAPISvr.exe1
Pfad des fehlerhaften Moduls: nvSCPAPISvr.exe2
Berichtskennung: nvSCPAPISvr.exe3

Error: (06/12/2013 03:39:34 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2013 03:27:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (06/13/2013 07:30:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet: 
%%16405

Error: (06/13/2013 07:28:51 AM) (Source: Service Control Manager) (User: )
Description: Dienst "NVIDIA Stereoscopic 3D Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (06/13/2013 07:31:14 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/13/2013 07:28:50 AM) (Source: Application Error)(User: )
Description: nvSCPAPISvr.exe7.17.13.110650f9536bunknown0.0.0.000000000c000000575226cdc2fc01ce67f6bd49f818C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exeunknown204bb7dc-d3ea-11e2-8338-14dae9b3caf0

Error: (06/12/2013 03:39:34 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/12/2013 03:27:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 15%
Total physical RAM: 8191.1 MB
Available physical RAM: 6902.56 MB
Total Pagefile: 16380.38 MB
Available Pagefile: 14810.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:901.64 GB) NTFS (Disk=0 Partition=2)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 668EB8A3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 13.06.2013, 10:55

Hi,

Router bitte auf Werkseinstellungen zurücksetzen. Daten zum Provider neu eingeben.

Hagbard23 · 13.06.2013, 11:17

Bist du der Meinung das es daran liegt oder kannst du das irgendwo in den Logfiles sehen?

schrauber · 13.06.2013, 11:18

Wenn Du die Kiste formatiert hast ist die sauber. Aber Router-Befall ist nicht so ungewöhnlich

Hagbard23 · 13.06.2013, 11:46

Na ja, ich kann nicht so richtig daran glauben das es am Router liegt. Hab noch die Möglichkeit mein Netbook bei meinem Router per W-Lan zu verbinden und der läuft sauber. Also wenn ich dort in den Router gehe, kommen diese Meldungen wegen DOS Attacken nicht. Also kann ich den Router ja eigentlich als Quelle ausschließen, oder?

schrauber · 13.06.2013, 18:46

Der Router dauert ca. 5 Minuten, und du bist sicher dass der Teil sauber ist.

Wir können aber auch gern Scannen bis zum Umfallen, ich hab nichts vor sonst

[indent]
Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)

Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)
Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST 32-Bit | FRST 64-Bit

Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.

Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:

Über den Boot Manager:
Starte den Rechner neu.

Während dem Hochfahren drücke mehrmals die F8 Taste

Wähle nun Computer reparieren.

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Mit Windows CD/DVD (auch bei Windows 8 möglich):
Lege die Windows CD in dein Laufwerk.

Starte den Rechner neu und starte von der CD.

Wähle die Spracheinstellungen und klicke "Weiter".

Klicke auf Computerreparaturoptionen !

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Wähle in den Reparaturoptionen: Eingabeaufforderung
Gib nun bitte notepad ein und drücke Enter.

Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.

Schließe Notepad wieder

Gib nun bitte folgenden Befehl ein.
e:\frst.exe bzw. e:\frst64.exe
Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.

Akzeptiere den Disclaimer mit Yes und klicke Scan

Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).

Hagbard23 · 16.06.2013, 07:06

Hallo Schrauber,

sorry das ich mich jetzt erst melde, aber ich hab mal verschiedene Sachen ausprobiert. Hab mir die Kaspersky Rescue Disk runtergeladen und selbst da treten diese DOS Attacken auf, was eigentlich nur einen Schluß zulässt. Entweder hat sich das Teil im Bios verschanzt oder im Lan Controller und da hilft mir nicht mal format c sondern eigentlich nur noch ein neukauf

schrauber · 16.06.2013, 07:10

Du wärst der Erste auf diesem Planeten mit Müll im LAN Controller, und ein BIOS Bootkit gibt es nur für Award Bios, und das wäre mit obigem Scan (den Du immer noch nicht gemacht hast) zu sehen.

Hagbard23 · 16.06.2013, 08:07

Sorry, hier nun das Logfile

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-06-2013 
Ran by SYSTEM on 16-06-2013 08:56:24
Running from F:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and an extra Addition.txt log.

==================== Registry (Whitelisted) ==================


==================== Services (Whitelisted) =================


==================== Drivers (Whitelisted) ====================

S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-15 18:55 - 2013-06-15 18:55 - 00903072 ____A (Oracle Corporation) C:\Users\Andy\Downloads\jxpiinstall.exe
2013-06-15 14:33 - 2013-06-15 17:26 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0
2013-06-15 12:26 - 2013-06-15 12:26 - 17824768 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 12329984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 10926080 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 09738752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-15 12:26 - 2013-06-15 12:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-15 12:26 - 2013-06-15 12:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-15 12:26 - 2013-06-15 12:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-15 12:26 - 2013-06-15 12:26 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 02147840 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-15 12:26 - 2013-06-15 12:26 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-15 12:26 - 2013-06-15 12:26 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01346560 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01104384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00729088 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00607744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00599040 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00534528 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00452608 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00448512 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-15 12:26 - 2013-06-15 12:26 - 00434176 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00420864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00403248 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00367104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-15 12:26 - 2013-06-15 12:26 - 00353792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00353584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00282112 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00267776 ____A (Microsoft Corporation) C:\Windows\System32\ieaksie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00249344 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00227840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00223232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00203776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00165888 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\ieakui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00162304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\ieakeng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00152064 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00145920 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00135168 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00130560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00123392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00118784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00114176 ____A (Microsoft Corporation) C:\Windows\System32\admparse.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00111616 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00101888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00091648 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00086528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00078848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-15 12:26 - 2013-06-15 12:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00074240 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00066048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00063488 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-15 12:26 - 2013-06-15 12:26 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00054272 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00049664 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00041472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00035840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00031744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00023552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00012288 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-15 12:17 - 2013-06-15 12:27 - 00003987 ____A C:\Windows\IE9_main.log
2013-06-14 16:19 - 2013-06-14 16:19 - 00057560 ____A C:\Users\Andy\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-13 17:38 - 2013-06-13 17:38 - 00000000 ____D C:\Users\Andy\AppData\Local\Macromedia
2013-06-13 10:40 - 2013-06-13 10:40 - 00000000 ____D C:\FRST
2013-06-13 09:27 - 2013-06-13 09:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-06-13 07:01 - 2013-06-13 07:02 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Mozilla
2013-06-13 07:01 - 2013-06-13 07:01 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-06-13 07:01 - 2013-06-13 07:01 - 00000000 ____D C:\Users\Andy\AppData\Local\Mozilla
2013-06-13 07:01 - 2013-06-13 07:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-13 06:30 - 2013-06-13 06:30 - 00001754 ____A C:\Users\Public\Desktop\Browserwahl.lnk
2013-06-12 20:55 - 2010-02-23 09:16 - 00294912 ____A (Microsoft Corporation) C:\Windows\System32\browserchoice.exe
2013-06-12 20:53 - 2012-12-16 18:11 - 00046080 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-06-12 20:53 - 2012-12-16 15:45 - 00367616 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-06-12 20:53 - 2012-12-16 15:13 - 00295424 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-06-12 20:53 - 2012-12-16 15:13 - 00034304 ____A (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-06-12 20:53 - 2010-09-30 11:41 - 00100864 ____A (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-06-12 20:53 - 2010-09-30 07:47 - 00070656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-06-12 20:52 - 2013-06-16 07:52 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-12 20:52 - 2013-06-12 20:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Vorlagen
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Startmenü
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Netzwerkumgebung
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Lokale Einstellungen
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Eigene Dateien
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Druckumgebung
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Musik
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Anwendungsdaten
2013-06-12 20:52 - 2013-01-18 16:00 - 06390048 ____A (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll
2013-06-12 20:52 - 2013-01-18 16:00 - 03460896 ____A (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll
2013-06-12 20:52 - 2013-01-18 16:00 - 02953448 ____A C:\Windows\System32\nvcoproc.bin
2013-06-12 20:52 - 2013-01-18 16:00 - 02558240 ____A (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll
2013-06-12 20:52 - 2013-01-18 16:00 - 00884512 ____A (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
2013-06-12 20:52 - 2013-01-18 16:00 - 00118560 ____A (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll
2013-06-12 20:52 - 2013-01-18 16:00 - 00063776 ____A (NVIDIA Corporation) C:\Windows\System32\nvshext.dll
2013-06-12 20:51 - 2013-06-12 20:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-12 20:51 - 2013-06-12 20:52 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 20:51 - 2013-06-12 20:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-12 20:51 - 2013-02-25 23:32 - 00061216 ____A (Khronos Group) C:\Windows\System32\OpenCL.dll
2013-06-12 20:51 - 2013-02-25 23:32 - 00053024 ____A (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-06-12 20:50 - 2012-03-01 07:46 - 00023408 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fs_rec.sys
2013-06-12 20:50 - 2012-03-01 07:33 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2013-06-12 20:50 - 2012-03-01 07:28 - 00005120 ____A (Microsoft Corporation) C:\Windows\System32\wmi.dll
2013-06-12 20:50 - 2012-03-01 06:33 - 00159232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-06-12 20:50 - 2012-03-01 06:29 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-06-12 19:21 - 2013-05-08 07:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 19:21 - 2013-04-12 15:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-06-12 19:21 - 2013-04-10 07:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-06-12 19:21 - 2013-04-10 07:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-06-12 19:21 - 2013-02-27 07:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-06-12 19:21 - 2013-02-27 06:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-06-12 19:21 - 2013-02-27 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-06-12 19:21 - 2013-02-27 06:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-12 19:21 - 2013-02-27 06:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-06-12 19:21 - 2013-02-27 05:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-06-12 19:21 - 2013-02-27 05:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-06-12 19:21 - 2013-02-27 05:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-12 19:21 - 2013-02-15 07:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-06-12 19:21 - 2013-02-15 07:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-06-12 19:21 - 2013-02-15 07:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-06-12 19:21 - 2013-02-15 05:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-06-12 19:21 - 2013-02-15 05:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-06-12 19:21 - 2013-02-15 04:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-06-12 19:21 - 2013-01-03 07:00 - 00288088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-06-12 19:21 - 2012-11-09 06:45 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-06-12 19:21 - 2012-11-09 05:42 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-06-12 19:21 - 2012-08-22 19:12 - 00376688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2013-06-12 19:21 - 2012-03-03 07:35 - 01544704 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-12 19:21 - 2012-03-03 06:31 - 01077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-12 19:21 - 2011-11-17 07:35 - 00395776 ____A (Microsoft Corporation) C:\Windows\System32\webio.dll
2013-06-12 19:21 - 2011-11-17 06:35 - 00314880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-06-12 19:21 - 2011-10-26 06:25 - 01572864 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll
2013-06-12 19:21 - 2011-10-26 06:25 - 00366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2013-06-12 19:21 - 2011-10-26 05:32 - 01328128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-06-12 19:21 - 2011-10-26 05:32 - 00514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-06-12 19:21 - 2011-07-09 03:46 - 00288768 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2013-06-12 19:21 - 2011-06-15 11:02 - 00212992 ____A (Microsoft Corporation) C:\Windows\System32\odbctrac.dll
2013-06-12 19:21 - 2011-06-15 11:02 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\odbccp32.dll
2013-06-12 19:21 - 2011-06-15 11:02 - 00106496 ____A (Microsoft Corporation) C:\Windows\System32\odbccu32.dll
2013-06-12 19:21 - 2011-06-15 11:02 - 00106496 ____A (Microsoft Corporation) C:\Windows\System32\odbccr32.dll
2013-06-12 19:21 - 2011-06-15 09:55 - 00319488 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-06-12 19:21 - 2011-06-15 09:55 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-06-12 19:21 - 2011-06-15 09:55 - 00122880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-06-12 19:21 - 2011-06-15 09:55 - 00086016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-06-12 19:21 - 2011-06-15 09:55 - 00081920 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-06-12 19:21 - 2011-04-27 03:40 - 00158208 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2013-06-12 19:21 - 2011-04-27 03:39 - 00128000 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2013-06-12 19:21 - 2011-04-09 07:58 - 00142336 ____A (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2013-06-12 19:21 - 2011-04-09 06:56 - 00123904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-06-12 19:21 - 2011-03-11 07:34 - 01395712 ____A (Microsoft Corporation) C:\Windows\System32\mfc42.dll
2013-06-12 19:21 - 2011-03-11 07:34 - 01359872 ____A (Microsoft Corporation) C:\Windows\System32\mfc42u.dll
2013-06-12 19:21 - 2011-03-11 06:33 - 01164288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-06-12 19:21 - 2011-03-11 06:33 - 01137664 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-06-12 19:21 - 2011-02-03 12:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-06-12 19:21 - 2010-12-23 11:42 - 01118720 ____A (Microsoft Corporation) C:\Windows\System32\sbe.dll
2013-06-12 19:21 - 2010-12-23 11:42 - 00961024 ____A (Microsoft Corporation) C:\Windows\System32\CPFilters.dll
2013-06-12 19:21 - 2010-12-23 11:36 - 00259072 ____A (Microsoft Corporation) C:\Windows\System32\mpg2splt.ax
2013-06-12 19:21 - 2010-12-23 06:54 - 00850944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-06-12 19:21 - 2010-12-23 06:54 - 00642048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-06-12 19:21 - 2010-12-23 06:50 - 00199680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-06-12 19:20 - 2013-04-10 04:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-06-12 19:20 - 2013-02-12 05:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-06-12 19:20 - 2013-01-04 06:46 - 00215040 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-06-12 19:20 - 2013-01-04 05:51 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-06-12 19:20 - 2013-01-04 03:47 - 00025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-06-12 19:20 - 2013-01-04 03:47 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-06-12 19:20 - 2013-01-04 03:47 - 00007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-06-12 19:20 - 2013-01-04 03:47 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-06-12 19:20 - 2012-11-20 06:48 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-06-12 19:20 - 2012-11-20 05:51 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-06-12 19:20 - 2012-11-02 06:59 - 00478208 ____A (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-06-12 19:20 - 2012-11-02 06:11 - 00376832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-06-12 19:20 - 2012-11-01 06:43 - 02002432 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-06-12 19:20 - 2012-11-01 06:43 - 01882624 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-06-12 19:20 - 2012-11-01 05:47 - 01389568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-06-12 19:20 - 2012-11-01 05:47 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-06-12 19:20 - 2012-10-04 18:46 - 00362496 ____A (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-06-12 19:20 - 2012-10-04 18:46 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-06-12 19:20 - 2012-10-04 18:46 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-06-12 19:20 - 2012-10-04 18:43 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-06-12 19:20 - 2012-10-04 18:41 - 01161216 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-06-12 19:20 - 2012-10-04 18:41 - 00424960 ____A (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00005120 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 18:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:47 - 01114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-06-12 19:20 - 2012-10-04 17:47 - 00274944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00005120 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 17:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 16:21 - 00338432 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-06-12 19:20 - 2012-10-04 15:41 - 00006144 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 15:41 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 15:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-12 19:20 - 2012-10-04 15:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-12 19:20 - 2012-08-24 19:05 - 00220160 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-06-12 19:20 - 2012-08-24 17:57 - 00172544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-06-12 19:20 - 2012-06-02 06:50 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-06-12 19:20 - 2012-06-02 06:48 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-06-12 19:20 - 2012-06-02 06:48 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2013-06-12 19:20 - 2012-06-02 06:45 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-06-12 19:20 - 2012-06-02 05:40 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-06-12 19:20 - 2012-06-02 05:40 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-06-12 19:20 - 2012-06-02 05:34 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-06-12 19:20 - 2012-04-26 06:41 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2013-06-12 19:20 - 2012-04-26 06:41 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2013-06-12 19:20 - 2012-04-26 06:34 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2013-06-12 19:20 - 2011-11-17 07:35 - 01447936 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-06-12 19:20 - 2011-11-17 07:35 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2013-06-12 19:20 - 2011-11-17 07:35 - 00029184 ____A (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2013-06-12 19:20 - 2011-11-17 07:35 - 00028160 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll
2013-06-12 19:20 - 2011-11-17 07:33 - 00031232 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe
2013-06-12 19:20 - 2011-03-03 07:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\System32\dnsapi.dll
2013-06-12 19:20 - 2011-03-03 07:24 - 00183296 ____A (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll
2013-06-12 19:20 - 2011-03-03 07:21 - 00030208 ____A (Microsoft Corporation) C:\Windows\System32\dnscacheugc.exe
2013-06-12 19:20 - 2011-03-03 06:38 - 00270336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-06-12 19:20 - 2011-03-03 06:36 - 00028672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-06-12 19:20 - 2010-06-26 04:55 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2013-06-12 19:20 - 2010-06-26 04:24 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-06-12 19:18 - 2012-04-28 04:55 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2013-06-12 19:18 - 2011-08-17 06:26 - 00613888 ____A (Microsoft Corporation) C:\Windows\System32\psisdecd.dll
2013-06-12 19:18 - 2011-08-17 06:25 - 00108032 ____A (Microsoft Corporation) C:\Windows\System32\psisrndr.ax
2013-06-12 19:18 - 2011-08-17 05:24 - 00465408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-06-12 19:18 - 2011-08-17 05:19 - 00075776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-06-12 19:18 - 2011-04-29 04:06 - 00467456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2013-06-12 19:18 - 2011-04-29 04:05 - 00410112 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2013-06-12 19:18 - 2011-04-29 04:05 - 00168448 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2013-06-12 19:13 - 2011-12-28 04:59 - 00498688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-06-12 19:12 - 2012-09-25 23:47 - 00078336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-06-12 19:12 - 2012-09-25 23:46 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\synceng.dll
2013-06-12 19:12 - 2012-08-11 01:56 - 00715776 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2013-06-12 19:12 - 2012-08-11 00:56 - 00542208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-06-12 19:12 - 2012-03-17 08:58 - 00075120 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2013-06-12 19:12 - 2011-02-05 18:10 - 00642944 ____A (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-06-12 19:12 - 2011-02-05 18:10 - 00020352 ____A (Microsoft Corporation) C:\Windows\System32\kdusb.dll
2013-06-12 19:12 - 2011-02-05 18:10 - 00019328 ____A (Microsoft Corporation) C:\Windows\System32\kd1394.dll
2013-06-12 19:12 - 2011-02-05 18:10 - 00017792 ____A (Microsoft Corporation) C:\Windows\System32\kdcom.dll
2013-06-12 19:12 - 2011-02-05 18:06 - 00605552 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-06-12 19:12 - 2011-02-05 18:06 - 00566208 ____A (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-06-12 19:12 - 2011-02-05 18:06 - 00518672 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-06-12 19:11 - 2013-04-26 06:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 19:11 - 2013-04-26 05:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 19:11 - 2012-11-23 04:13 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-06-12 19:11 - 2012-07-04 23:16 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\netapi32.dll
2013-06-12 19:11 - 2012-07-04 23:13 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\browser.dll
2013-06-12 19:11 - 2012-07-04 23:13 - 00059392 ____A (Microsoft Corporation) C:\Windows\System32\browcli.dll
2013-06-12 19:11 - 2012-07-04 22:16 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-06-12 19:11 - 2012-07-04 22:14 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-06-12 19:11 - 2011-05-24 12:42 - 00404480 ____A (Microsoft Corporation) C:\Windows\System32\umpnpmgr.dll
2013-06-12 19:11 - 2011-05-24 11:40 - 00064512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-06-12 19:11 - 2011-05-24 11:40 - 00044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-06-12 19:11 - 2011-05-24 11:39 - 00145920 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-06-12 19:11 - 2011-05-24 11:37 - 00252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-06-12 19:07 - 2013-05-13 06:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 19:07 - 2013-05-13 06:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 19:07 - 2013-05-13 06:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 19:07 - 2013-05-13 06:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 19:07 - 2013-05-13 05:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 19:07 - 2013-05-13 05:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 19:07 - 2013-05-13 05:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 19:07 - 2013-05-13 04:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 19:07 - 2013-05-13 04:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 19:07 - 2013-05-13 04:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 19:07 - 2012-05-14 06:26 - 00956928 ____A (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-06-12 19:07 - 2011-12-16 09:46 - 00634880 ____A (Microsoft Corporation) C:\Windows\System32\msvcrt.dll
2013-06-12 19:07 - 2011-12-16 08:52 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-06-12 19:07 - 2011-10-15 07:31 - 00723456 ____A (Microsoft Corporation) C:\Windows\System32\EncDec.dll
2013-06-12 19:07 - 2011-10-15 06:38 - 00534528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-06-12 19:07 - 2011-08-27 06:37 - 00861696 ____A (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2013-06-12 19:07 - 2011-08-27 06:37 - 00331776 ____A (Microsoft Corporation) C:\Windows\System32\oleacc.dll
2013-06-12 19:07 - 2011-08-27 05:26 - 00571904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-06-12 19:07 - 2011-08-27 05:26 - 00233472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-06-12 19:07 - 2011-05-03 06:29 - 00976896 ____A (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2013-06-12 19:07 - 2011-05-03 05:30 - 00741376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-06-12 19:07 - 2011-02-23 05:55 - 00090624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bowser.sys
2013-06-12 19:07 - 2011-02-12 12:34 - 00267776 ____A (Microsoft Corporation) C:\Windows\System32\FXSCOVER.exe
2013-06-12 19:06 - 2013-03-19 07:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 19:06 - 2013-03-19 06:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-06-12 19:06 - 2013-03-19 06:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-06-12 19:06 - 2013-03-19 06:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-06-12 19:06 - 2013-03-19 05:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-06-12 19:06 - 2013-03-19 04:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-06-12 19:05 - 2012-06-06 07:02 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2013-06-12 19:05 - 2012-06-06 06:03 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-06-12 19:05 - 2011-11-19 15:58 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll
2013-06-12 19:05 - 2011-11-19 15:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-06-12 19:05 - 2011-11-17 07:41 - 01731920 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-06-12 19:05 - 2011-11-17 06:38 - 01292080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-06-12 15:43 - 2013-06-12 15:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Macromedia
2013-06-12 15:43 - 2013-06-12 15:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Adobe
2013-06-12 15:42 - 2013-06-13 17:36 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 15:42 - 2013-06-13 17:36 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 15:42 - 2013-06-12 15:42 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-12 15:42 - 2013-06-12 15:42 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-12 15:37 - 2013-06-13 17:38 - 00000000 ____D C:\Users\Andy\AppData\Local\Adobe
2013-06-12 14:48 - 2012-02-17 07:38 - 01031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2013-06-12 14:48 - 2012-02-17 06:34 - 00826880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-06-12 14:48 - 2012-02-17 05:57 - 00023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2013-06-12 14:45 - 2013-06-12 14:45 - 00000000 ____D C:\Program Files\INTERNET_EXPLORER
2013-06-12 14:45 - 2013-06-12 14:30 - 00000000 ____D C:\Windows\PANTHER
2013-06-12 14:42 - 2012-06-02 23:19 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-06-12 14:42 - 2012-06-02 23:19 - 00701976 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-06-12 14:42 - 2012-06-02 23:19 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-06-12 14:42 - 2012-06-02 23:19 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll
2013-06-12 14:42 - 2012-06-02 23:19 - 00038424 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll
2013-06-12 14:42 - 2012-06-02 23:15 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-06-12 14:42 - 2012-06-02 23:15 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-06-12 14:42 - 2012-06-02 14:19 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-06-12 14:42 - 2012-06-02 14:15 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-06-12 14:34 - 2013-06-12 14:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-12 14:34 - 2013-06-12 14:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-12 14:34 - 2011-06-10 07:34 - 00539240 ____A (Realtek                                            ) C:\Windows\System32\Drivers\Rt64win7.sys
2013-06-12 14:34 - 2011-06-10 07:34 - 00107552 ____A (Realtek Semiconductor Corporation) C:\Windows\System32\RTNUninst64.dll
2013-06-12 14:34 - 2011-06-10 07:34 - 00074272 ____A C:\Windows\System32\RtNicProp64.dll
2013-06-12 14:33 - 2013-06-12 14:34 - 00001769 ____A C:\Windows\Language_trs.ini
2013-06-12 14:33 - 2013-06-12 14:33 - 00028829 ____A C:\Windows\Ascd_tmp.ini
2013-06-12 14:31 - 2013-06-12 14:31 - 00000000 ____D C:\Users\Andy\AppData\Local\VirtualStore
2013-06-12 14:30 - 2013-06-16 07:51 - 01460758 ____A C:\Windows\WindowsUpdate.log
2013-06-12 14:30 - 2013-06-12 14:31 - 00000000 ____D C:\users\Andy
2013-06-12 14:30 - 2013-06-12 14:30 - 00000020 ___SH C:\Users\Andy\ntuser.ini
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Vorlagen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Startmenü
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Netzwerkumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Lokale Einstellungen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Eigene Dateien
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Druckumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Verlauf
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Verlauf
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Vorlagen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Startmenü
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Netzwerkumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Lokale Einstellungen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Eigene Dateien
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Druckumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Verlauf
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Recovery
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Programme
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Vorlagen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Startmenü
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Favoriten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Dokumente
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Program Files\Gemeinsame Dateien
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Dokumente und Einstellungen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-06-12 13:49 - 2013-06-12 13:49 - 00001355 ____A C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

2013-06-16 07:52 - 2013-06-12 20:52 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-16 07:52 - 2009-07-14 06:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-16 07:52 - 2009-07-14 05:51 - 00024959 ____A C:\Windows\setupact.log
2013-06-16 07:51 - 2013-06-12 14:30 - 01460758 ____A C:\Windows\WindowsUpdate.log
2013-06-16 07:51 - 2010-11-21 07:50 - 00643628 ____A C:\Windows\System32\perfh007.dat
2013-06-16 07:51 - 2010-11-21 07:50 - 00126188 ____A C:\Windows\System32\perfc007.dat
2013-06-16 07:51 - 2009-07-14 06:13 - 01472002 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-16 07:51 - 2009-07-14 05:45 - 00021840 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-16 07:51 - 2009-07-14 05:45 - 00021840 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-15 18:55 - 2013-06-15 18:55 - 00903072 ____A (Oracle Corporation) C:\Users\Andy\Downloads\jxpiinstall.exe
2013-06-15 17:26 - 2013-06-15 14:33 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0
2013-06-15 16:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-06-15 15:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-15 12:27 - 2013-06-15 12:17 - 00003987 ____A C:\Windows\IE9_main.log
2013-06-15 12:26 - 2013-06-15 12:26 - 17824768 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 12329984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 10926080 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 09738752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-15 12:26 - 2013-06-15 12:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-15 12:26 - 2013-06-15 12:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-15 12:26 - 2013-06-15 12:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-15 12:26 - 2013-06-15 12:26 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 02147840 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-15 12:26 - 2013-06-15 12:26 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-15 12:26 - 2013-06-15 12:26 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01346560 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 01104384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00729088 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00607744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00599040 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00534528 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00452608 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00448512 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-15 12:26 - 2013-06-15 12:26 - 00434176 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00420864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00403248 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00367104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-15 12:26 - 2013-06-15 12:26 - 00353792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00353584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00282112 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00267776 ____A (Microsoft Corporation) C:\Windows\System32\ieaksie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00249344 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00227840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00223232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00203776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00165888 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\ieakui.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00162304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\ieakeng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00152064 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00145920 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00135168 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00130560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00123392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00118784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00114176 ____A (Microsoft Corporation) C:\Windows\System32\admparse.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00111616 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00101888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00091648 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00086528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00078848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-15 12:26 - 2013-06-15 12:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00074240 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00066048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00063488 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-15 12:26 - 2013-06-15 12:26 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00054272 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00049664 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00041472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00035840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00031744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00023552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-15 12:26 - 2013-06-15 12:26 - 00012288 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-15 12:26 - 2013-06-15 12:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-14 16:19 - 2013-06-14 16:19 - 00057560 ____A C:\Users\Andy\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-13 17:38 - 2013-06-13 17:38 - 00000000 ____D C:\Users\Andy\AppData\Local\Macromedia
2013-06-13 17:38 - 2013-06-12 15:37 - 00000000 ____D C:\Users\Andy\AppData\Local\Adobe
2013-06-13 17:36 - 2013-06-12 15:42 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-13 17:36 - 2013-06-12 15:42 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-13 10:40 - 2013-06-13 10:40 - 00000000 ____D C:\FRST
2013-06-13 09:27 - 2013-06-13 09:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-06-13 07:02 - 2013-06-13 07:01 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Mozilla
2013-06-13 07:01 - 2013-06-13 07:01 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-06-13 07:01 - 2013-06-13 07:01 - 00000000 ____D C:\Users\Andy\AppData\Local\Mozilla
2013-06-13 07:01 - 2013-06-13 07:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-13 06:30 - 2013-06-13 06:30 - 00001754 ____A C:\Users\Public\Desktop\Browserwahl.lnk
2013-06-13 06:29 - 2009-07-14 05:45 - 00274464 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-13 06:28 - 2010-11-21 08:00 - 00000000 ____D C:\Program Files\Windows Journal
2013-06-13 06:28 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-06-12 20:52 - 2013-06-12 20:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Vorlagen
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Startmenü
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Netzwerkumgebung
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Lokale Einstellungen
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Eigene Dateien
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Druckumgebung
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Musik
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-06-12 20:52 - 2013-06-12 20:52 - 00000000 __SHD C:\Users\UpdatusUser\Anwendungsdaten
2013-06-12 20:52 - 2013-06-12 20:51 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-12 20:52 - 2013-06-12 20:51 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 20:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2013-06-12 20:51 - 2013-06-12 20:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-12 15:43 - 2013-06-12 15:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Macromedia
2013-06-12 15:43 - 2013-06-12 15:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Adobe
2013-06-12 15:42 - 2013-06-12 15:42 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-12 15:42 - 2013-06-12 15:42 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-12 14:46 - 2009-07-14 06:38 - 00025600 __ASH C:\Windows\System32\config\BCD-Template.LOG
2013-06-12 14:46 - 2009-07-14 06:32 - 00028672 ____A C:\Windows\System32\config\BCD-Template
2013-06-12 14:45 - 2013-06-12 14:45 - 00000000 ____D C:\Program Files\INTERNET_EXPLORER
2013-06-12 14:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\oobe
2013-06-12 14:34 - 2013-06-12 14:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-12 14:34 - 2013-06-12 14:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-12 14:34 - 2013-06-12 14:33 - 00001769 ____A C:\Windows\Language_trs.ini
2013-06-12 14:33 - 2013-06-12 14:33 - 00028829 ____A C:\Windows\Ascd_tmp.ini
2013-06-12 14:31 - 2013-06-12 14:31 - 00000000 ____D C:\Users\Andy\AppData\Local\VirtualStore
2013-06-12 14:31 - 2013-06-12 14:30 - 00000000 ____D C:\users\Andy
2013-06-12 14:30 - 2013-06-12 14:45 - 00000000 ____D C:\Windows\PANTHER
2013-06-12 14:30 - 2013-06-12 14:30 - 00000020 ___SH C:\Users\Andy\ntuser.ini
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Vorlagen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Startmenü
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Netzwerkumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Lokale Einstellungen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Eigene Dateien
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Druckumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Verlauf
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Verlauf
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Vorlagen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Startmenü
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Netzwerkumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Lokale Einstellungen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Eigene Dateien
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Druckumgebung
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Musik
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Bilder
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Verlauf
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Users\Andy\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Recovery
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Programme
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Vorlagen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Startmenü
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Favoriten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Dokumente
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\ProgramData\Anwendungsdaten
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Program Files\Gemeinsame Dateien
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 __SHD C:\Dokumente und Einstellungen
2013-06-12 14:30 - 2013-06-12 14:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-06-12 14:30 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\System32\restore
2013-06-12 14:30 - 2009-07-14 04:20 - 00000000 __RHD C:\users\Default
2013-06-12 14:30 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2013-06-12 13:49 - 2013-06-12 13:49 - 00001355 ____A C:\Windows\TSSysprep.log
2013-06-12 13:49 - 2009-07-14 05:46 - 00002790 ____A C:\Windows\DtcInstall.log
2013-06-12 13:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\System32\sysprep

==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2013-06-12 14:30:48
Restore point made on: 2013-06-12 14:34:33
Restore point made on: 2013-06-12 14:42:17
Restore point made on: 2013-06-12 19:27:54
Restore point made on: 2013-06-12 20:48:53
Restore point made on: 2013-06-13 22:17:00
Restore point made on: 2013-06-15 12:17:03

==================== Memory info =========================== 

Percentage of memory in use: 9%
Total physical RAM: 8191.1 MB
Available physical RAM: 7380.67 MB
Total Pagefile: 8189.3 MB
Available Pagefile: 7369.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:899.93 GB) NTFS (Disk=0 Partition=2)
Drive e: (GRMCULXFREO_DE_DVD) (CDROM) (Total:4.11 GB) (Free:0 GB) UDF
Drive f: () (Removable) (Total:7.5 GB) (Free:7.5 GB) FAT32 (Disk=1 Partition=1)
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
Drive y: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS (Disk=0 Partition=1) ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 668EB8A3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 8 GB) (Disk ID: 6E652072)
Partition 1: (Not Active) - (Size=811 GB) - (Type=6E)
Partition 2: (Not Active) - (Size=468 GB) - (Type=FF)
Partition 3: (Not Active) - (Size=80 GB) - (Type=74)
Partition 4: (Not Active) - (Size=26 MB) - (Type=00)


LastRegBack: 2013-06-13 07:33

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 16.06.2013, 08:15

Nüscht, alles sauber. FRST vom Stick auf den Desktop schieben, vom Desktop nochmal scannen lassen, Log posten.

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Hagbard23 · 17.06.2013, 09:00

Hallo, hier der scan vom Desktop und der von mbar.

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-06-2013 
Ran by Andy (administrator) on 17-06-2013 09:14:31
Running from C:\Users\Andy\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

MountPoints2: {21618d39-d35e-11e2-b89d-806e6f6e6963} - D:\setup.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Andy\AppData\Roaming\Mozilla\Firefox\Profiles\uwl98bq3.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

==================== Services (Whitelisted) =================


==================== Drivers (Whitelisted) ====================

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-17 09:13 - 2013-06-16 08:25 - 01920546 ____A (Farbar) C:\Users\Andy\Desktop\FRST64.exe
2013-06-15 19:55 - 2013-06-15 19:55 - 00903072 ____A (Oracle Corporation) C:\Users\Andy\Downloads\jxpiinstall.exe
2013-06-15 15:33 - 2013-06-15 18:26 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0
2013-06-15 13:26 - 2013-06-15 13:26 - 17824768 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 12329984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 10926080 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 09738752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-15 13:26 - 2013-06-15 13:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-15 13:26 - 2013-06-15 13:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-15 13:26 - 2013-06-15 13:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-15 13:26 - 2013-06-15 13:26 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 02147840 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-15 13:26 - 2013-06-15 13:26 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-15 13:26 - 2013-06-15 13:26 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01346560 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01104384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00729088 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00607744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00599040 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00534528 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00452608 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00448512 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-15 13:26 - 2013-06-15 13:26 - 00434176 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00420864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00403248 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00367104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-15 13:26 - 2013-06-15 13:26 - 00353792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00353584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00282112 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00267776 ____A (Microsoft Corporation) C:\Windows\System32\ieaksie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00249344 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00227840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00223232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00203776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00165888 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\ieakui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00162304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\ieakeng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00152064 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00145920 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00135168 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00130560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00123392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00118784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00114176 ____A (Microsoft Corporation) C:\Windows\System32\admparse.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00111616 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00101888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00091648 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00086528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00078848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-15 13:26 - 2013-06-15 13:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00074240 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00066048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00063488 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-15 13:26 - 2013-06-15 13:26 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00054272 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00049664 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00041472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00035840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00031744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00023552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00012288 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-15 13:17 - 2013-06-15 13:27 - 00003987 ____A C:\Windows\IE9_main.log
2013-06-14 17:19 - 2013-06-14 17:19 - 00057560 ____A C:\Users\Andy\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-13 18:38 - 2013-06-13 18:38 - 00000000 ____D C:\Users\Andy\AppData\Local\Macromedia
2013-06-13 11:40 - 2013-06-13 11:40 - 00000000 ____D C:\FRST
2013-06-13 10:27 - 2013-06-13 10:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-06-13 08:01 - 2013-06-13 08:02 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Users\Andy\AppData\Local\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-13 07:30 - 2013-06-13 07:30 - 00001754 ____A C:\Users\Public\Desktop\Browserwahl.lnk
2013-06-12 21:55 - 2010-02-23 10:16 - 00294912 ____A (Microsoft Corporation) C:\Windows\System32\browserchoice.exe
2013-06-12 21:53 - 2012-12-16 19:11 - 00046080 ____A (Adobe Systems) C:\Windows\System32\atmlib.dll
2013-06-12 21:53 - 2012-12-16 16:45 - 00367616 ____A (Adobe Systems Incorporated) C:\Windows\System32\atmfd.dll
2013-06-12 21:53 - 2012-12-16 16:13 - 00295424 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-06-12 21:53 - 2012-12-16 16:13 - 00034304 ____A (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-06-12 21:53 - 2010-09-30 12:41 - 00100864 ____A (Microsoft Corporation) C:\Windows\System32\fontsub.dll
2013-06-12 21:53 - 2010-09-30 08:47 - 00070656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-06-12 21:52 - 2013-06-17 09:04 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-12 21:52 - 2013-06-12 21:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Vorlagen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Startmenü
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Netzwerkumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Lokale Einstellungen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Eigene Dateien
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Druckumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Musik
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Anwendungsdaten
2013-06-12 21:52 - 2013-01-18 17:00 - 06390048 ____A (NVIDIA Corporation) C:\Windows\System32\nvcpl.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 03460896 ____A (NVIDIA Corporation) C:\Windows\System32\nvsvc64.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 02953448 ____A C:\Windows\System32\nvcoproc.bin
2013-06-12 21:52 - 2013-01-18 17:00 - 02558240 ____A (NVIDIA Corporation) C:\Windows\System32\nvsvcr.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 00884512 ____A (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
2013-06-12 21:52 - 2013-01-18 17:00 - 00118560 ____A (NVIDIA Corporation) C:\Windows\System32\nvmctray.dll
2013-06-12 21:52 - 2013-01-18 17:00 - 00063776 ____A (NVIDIA Corporation) C:\Windows\System32\nvshext.dll
2013-06-12 21:51 - 2013-06-12 21:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-12 21:51 - 2013-06-12 21:52 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 21:51 - 2013-06-12 21:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-12 21:51 - 2013-02-26 00:32 - 00061216 ____A (Khronos Group) C:\Windows\System32\OpenCL.dll
2013-06-12 21:51 - 2013-02-26 00:32 - 00053024 ____A (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-06-12 21:50 - 2012-03-01 08:46 - 00023408 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fs_rec.sys
2013-06-12 21:50 - 2012-03-01 08:33 - 00081408 ____A (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2013-06-12 21:50 - 2012-03-01 08:28 - 00005120 ____A (Microsoft Corporation) C:\Windows\System32\wmi.dll
2013-06-12 21:50 - 2012-03-01 07:33 - 00159232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-06-12 21:50 - 2012-03-01 07:29 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-06-12 20:21 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 20:21 - 2013-04-12 16:45 - 01656680 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ntfs.sys
2013-06-12 20:21 - 2013-04-10 08:01 - 00983400 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-06-12 20:21 - 2013-04-10 08:01 - 00265064 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-06-12 20:21 - 2013-02-27 08:02 - 00111448 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-06-12 20:21 - 2013-02-27 07:52 - 14172672 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-06-12 20:21 - 2013-02-27 07:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-06-12 20:21 - 2013-02-27 07:48 - 01930752 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-06-12 20:21 - 2013-02-27 07:47 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll
2013-06-12 20:21 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-06-12 20:21 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-06-12 20:21 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-06-12 20:21 - 2013-02-15 08:08 - 00044032 ____A (Microsoft Corporation) C:\Windows\System32\tsgqec.dll
2013-06-12 20:21 - 2013-02-15 08:06 - 03717632 ____A (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2013-06-12 20:21 - 2013-02-15 08:02 - 00158720 ____A (Microsoft Corporation) C:\Windows\System32\aaclient.dll
2013-06-12 20:21 - 2013-02-15 06:37 - 03217408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-06-12 20:21 - 2013-02-15 06:34 - 00131584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-06-12 20:21 - 2013-02-15 05:25 - 00036864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-06-12 20:21 - 2013-01-03 08:00 - 00288088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\FWPKCLNT.SYS
2013-06-12 20:21 - 2012-11-09 07:45 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2013-06-12 20:21 - 2012-11-09 06:42 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-06-12 20:21 - 2012-08-22 20:12 - 00376688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\netio.sys
2013-06-12 20:21 - 2012-03-03 08:35 - 01544704 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2013-06-12 20:21 - 2012-03-03 07:31 - 01077248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-06-12 20:21 - 2011-11-17 08:35 - 00395776 ____A (Microsoft Corporation) C:\Windows\System32\webio.dll
2013-06-12 20:21 - 2011-11-17 07:35 - 00314880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-06-12 20:21 - 2011-10-26 07:25 - 01572864 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll
2013-06-12 20:21 - 2011-10-26 07:25 - 00366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2013-06-12 20:21 - 2011-10-26 06:32 - 01328128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-06-12 20:21 - 2011-10-26 06:32 - 00514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-06-12 20:21 - 2011-07-09 04:46 - 00288768 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb10.sys
2013-06-12 20:21 - 2011-06-15 12:02 - 00212992 ____A (Microsoft Corporation) C:\Windows\System32\odbctrac.dll
2013-06-12 20:21 - 2011-06-15 12:02 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\odbccp32.dll
2013-06-12 20:21 - 2011-06-15 12:02 - 00106496 ____A (Microsoft Corporation) C:\Windows\System32\odbccu32.dll
2013-06-12 20:21 - 2011-06-15 12:02 - 00106496 ____A (Microsoft Corporation) C:\Windows\System32\odbccr32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00319488 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00122880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00086016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-06-12 20:21 - 2011-06-15 10:55 - 00081920 ____A (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-06-12 20:21 - 2011-04-27 04:40 - 00158208 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb.sys
2013-06-12 20:21 - 2011-04-27 04:39 - 00128000 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\mrxsmb20.sys
2013-06-12 20:21 - 2011-04-09 08:58 - 00142336 ____A (Microsoft Corporation) C:\Windows\System32\poqexec.exe
2013-06-12 20:21 - 2011-04-09 07:56 - 00123904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-06-12 20:21 - 2011-03-11 08:34 - 01395712 ____A (Microsoft Corporation) C:\Windows\System32\mfc42.dll
2013-06-12 20:21 - 2011-03-11 08:34 - 01359872 ____A (Microsoft Corporation) C:\Windows\System32\mfc42u.dll
2013-06-12 20:21 - 2011-03-11 07:33 - 01164288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-06-12 20:21 - 2011-03-11 07:33 - 01137664 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-06-12 20:21 - 2011-02-03 13:25 - 00144384 ____A (Microsoft Corporation) C:\Windows\System32\cdd.dll
2013-06-12 20:21 - 2010-12-23 12:42 - 01118720 ____A (Microsoft Corporation) C:\Windows\System32\sbe.dll
2013-06-12 20:21 - 2010-12-23 12:42 - 00961024 ____A (Microsoft Corporation) C:\Windows\System32\CPFilters.dll
2013-06-12 20:21 - 2010-12-23 12:36 - 00259072 ____A (Microsoft Corporation) C:\Windows\System32\mpg2splt.ax
2013-06-12 20:21 - 2010-12-23 07:54 - 00850944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-06-12 20:21 - 2010-12-23 07:54 - 00642048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-06-12 20:21 - 2010-12-23 07:50 - 00199680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-06-12 20:20 - 2013-04-10 05:30 - 03153920 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-06-12 20:20 - 2013-02-12 06:12 - 00019968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\usb8023.sys
2013-06-12 20:20 - 2013-01-04 07:46 - 00215040 ____A (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-06-12 20:20 - 2013-01-04 06:51 - 00005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-06-12 20:20 - 2013-01-04 04:47 - 00025600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-06-12 20:20 - 2013-01-04 04:47 - 00014336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-06-12 20:20 - 2013-01-04 04:47 - 00007680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-06-12 20:20 - 2013-01-04 04:47 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-06-12 20:20 - 2012-11-20 07:48 - 00307200 ____A (Microsoft Corporation) C:\Windows\System32\ncrypt.dll
2013-06-12 20:20 - 2012-11-20 06:51 - 00220160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-06-12 20:20 - 2012-11-02 07:59 - 00478208 ____A (Microsoft Corporation) C:\Windows\System32\dpnet.dll
2013-06-12 20:20 - 2012-11-02 07:11 - 00376832 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-06-12 20:20 - 2012-11-01 07:43 - 02002432 ____A (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2013-06-12 20:20 - 2012-11-01 07:43 - 01882624 ____A (Microsoft Corporation) C:\Windows\System32\msxml3.dll
2013-06-12 20:20 - 2012-11-01 06:47 - 01389568 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-06-12 20:20 - 2012-11-01 06:47 - 01236992 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-06-12 20:20 - 2012-10-04 19:46 - 00362496 ____A (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-06-12 20:20 - 2012-10-04 19:46 - 00243200 ____A (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-06-12 20:20 - 2012-10-04 19:46 - 00013312 ____A (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-06-12 20:20 - 2012-10-04 19:43 - 00016384 ____A (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-06-12 20:20 - 2012-10-04 19:41 - 01161216 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-06-12 20:20 - 2012-10-04 19:41 - 00424960 ____A (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00006144 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00005120 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004608 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00004096 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003584 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 19:38 - 00003072 ___AH (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:47 - 01114112 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-06-12 20:20 - 2012-10-04 18:47 - 00274944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00005120 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00004096 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 18:40 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 17:21 - 00338432 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-06-12 20:20 - 2012-10-04 16:41 - 00006144 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 16:41 - 00004608 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 16:41 - 00003584 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-06-12 20:20 - 2012-10-04 16:41 - 00003072 ___AH (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-06-12 20:20 - 2012-08-24 20:05 - 00220160 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2013-06-12 20:20 - 2012-08-24 18:57 - 00172544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-06-12 20:20 - 2012-06-02 07:50 - 00458704 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2013-06-12 20:20 - 2012-06-02 07:48 - 00151920 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2013-06-12 20:20 - 2012-06-02 07:48 - 00095600 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2013-06-12 20:20 - 2012-06-02 07:45 - 00340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-06-12 20:20 - 2012-06-02 06:40 - 00225280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-06-12 20:20 - 2012-06-02 06:40 - 00022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-06-12 20:20 - 2012-06-02 06:34 - 00096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-06-12 20:20 - 2012-04-26 07:41 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2013-06-12 20:20 - 2012-04-26 07:41 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2013-06-12 20:20 - 2012-04-26 07:34 - 00009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2013-06-12 20:20 - 2011-11-17 08:35 - 01447936 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2013-06-12 20:20 - 2011-11-17 08:35 - 00136192 ____A (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2013-06-12 20:20 - 2011-11-17 08:35 - 00029184 ____A (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2013-06-12 20:20 - 2011-11-17 08:35 - 00028160 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll
2013-06-12 20:20 - 2011-11-17 08:33 - 00031232 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe
2013-06-12 20:20 - 2011-03-03 08:24 - 00357888 ____A (Microsoft Corporation) C:\Windows\System32\dnsapi.dll
2013-06-12 20:20 - 2011-03-03 08:24 - 00183296 ____A (Microsoft Corporation) C:\Windows\System32\dnsrslvr.dll
2013-06-12 20:20 - 2011-03-03 08:21 - 00030208 ____A (Microsoft Corporation) C:\Windows\System32\dnscacheugc.exe
2013-06-12 20:20 - 2011-03-03 07:38 - 00270336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-06-12 20:20 - 2011-03-03 07:36 - 00028672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-06-12 20:20 - 2010-06-26 05:55 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\msxml3r.dll
2013-06-12 20:20 - 2010-06-26 05:24 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-06-12 20:18 - 2012-04-28 05:55 - 00210944 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2013-06-12 20:18 - 2011-08-17 07:26 - 00613888 ____A (Microsoft Corporation) C:\Windows\System32\psisdecd.dll
2013-06-12 20:18 - 2011-08-17 07:25 - 00108032 ____A (Microsoft Corporation) C:\Windows\System32\psisrndr.ax
2013-06-12 20:18 - 2011-08-17 06:24 - 00465408 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-06-12 20:18 - 2011-08-17 06:19 - 00075776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-06-12 20:18 - 2011-04-29 05:06 - 00467456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv.sys
2013-06-12 20:18 - 2011-04-29 05:05 - 00410112 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys
2013-06-12 20:18 - 2011-04-29 05:05 - 00168448 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys
2013-06-12 20:13 - 2011-12-28 05:59 - 00498688 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-06-12 20:12 - 2012-09-26 00:47 - 00078336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-06-12 20:12 - 2012-09-26 00:46 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\synceng.dll
2013-06-12 20:12 - 2012-08-11 02:56 - 00715776 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll
2013-06-12 20:12 - 2012-08-11 01:56 - 00542208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-06-12 20:12 - 2012-03-17 09:58 - 00075120 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\partmgr.sys
2013-06-12 20:12 - 2011-02-05 19:10 - 00642944 ____A (Microsoft Corporation) C:\Windows\System32\winload.efi
2013-06-12 20:12 - 2011-02-05 19:10 - 00020352 ____A (Microsoft Corporation) C:\Windows\System32\kdusb.dll
2013-06-12 20:12 - 2011-02-05 19:10 - 00019328 ____A (Microsoft Corporation) C:\Windows\System32\kd1394.dll
2013-06-12 20:12 - 2011-02-05 19:10 - 00017792 ____A (Microsoft Corporation) C:\Windows\System32\kdcom.dll
2013-06-12 20:12 - 2011-02-05 19:06 - 00605552 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe
2013-06-12 20:12 - 2011-02-05 19:06 - 00566208 ____A (Microsoft Corporation) C:\Windows\System32\winresume.efi
2013-06-12 20:12 - 2011-02-05 19:06 - 00518672 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe
2013-06-12 20:11 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 20:11 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 20:11 - 2012-11-23 05:13 - 00068608 ____A (Microsoft Corporation) C:\Windows\System32\taskhost.exe
2013-06-12 20:11 - 2012-07-05 00:16 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\netapi32.dll
2013-06-12 20:11 - 2012-07-05 00:13 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\browser.dll
2013-06-12 20:11 - 2012-07-05 00:13 - 00059392 ____A (Microsoft Corporation) C:\Windows\System32\browcli.dll
2013-06-12 20:11 - 2012-07-04 23:16 - 00057344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-06-12 20:11 - 2012-07-04 23:14 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-06-12 20:11 - 2011-05-24 13:42 - 00404480 ____A (Microsoft Corporation) C:\Windows\System32\umpnpmgr.dll
2013-06-12 20:11 - 2011-05-24 12:40 - 00064512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-06-12 20:11 - 2011-05-24 12:40 - 00044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-06-12 20:11 - 2011-05-24 12:39 - 00145920 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-06-12 20:11 - 2011-05-24 12:37 - 00252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-06-12 20:07 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 20:07 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 20:07 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 20:07 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 20:07 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 20:07 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 20:07 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 20:07 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 20:07 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 20:07 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 20:07 - 2012-05-14 07:26 - 00956928 ____A (Microsoft Corporation) C:\Windows\System32\localspl.dll
2013-06-12 20:07 - 2011-12-16 10:46 - 00634880 ____A (Microsoft Corporation) C:\Windows\System32\msvcrt.dll
2013-06-12 20:07 - 2011-12-16 09:52 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-06-12 20:07 - 2011-10-15 08:31 - 00723456 ____A (Microsoft Corporation) C:\Windows\System32\EncDec.dll
2013-06-12 20:07 - 2011-10-15 07:38 - 00534528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-06-12 20:07 - 2011-08-27 07:37 - 00861696 ____A (Microsoft Corporation) C:\Windows\System32\oleaut32.dll
2013-06-12 20:07 - 2011-08-27 07:37 - 00331776 ____A (Microsoft Corporation) C:\Windows\System32\oleacc.dll
2013-06-12 20:07 - 2011-08-27 06:26 - 00571904 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-06-12 20:07 - 2011-08-27 06:26 - 00233472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-06-12 20:07 - 2011-05-03 07:29 - 00976896 ____A (Microsoft Corporation) C:\Windows\System32\inetcomm.dll
2013-06-12 20:07 - 2011-05-03 06:30 - 00741376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-06-12 20:07 - 2011-02-23 06:55 - 00090624 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\bowser.sys
2013-06-12 20:07 - 2011-02-12 13:34 - 00267776 ____A (Microsoft Corporation) C:\Windows\System32\FXSCOVER.exe
2013-06-12 20:06 - 2013-03-19 08:04 - 05550424 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 20:06 - 2013-03-19 07:46 - 00043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-06-12 20:06 - 2013-03-19 07:04 - 03968856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-06-12 20:06 - 2013-03-19 07:04 - 03913560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-06-12 20:06 - 2013-03-19 06:47 - 00006656 ____A (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-06-12 20:06 - 2013-03-19 05:06 - 00112640 ____A (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-06-12 20:05 - 2012-06-06 08:02 - 01133568 ____A (Microsoft Corporation) C:\Windows\System32\cdosys.dll
2013-06-12 20:05 - 2012-06-06 07:03 - 00805376 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-06-12 20:05 - 2011-11-19 16:58 - 00077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll
2013-06-12 20:05 - 2011-11-19 16:01 - 00067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-06-12 20:05 - 2011-11-17 08:41 - 01731920 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-06-12 20:05 - 2011-11-17 07:38 - 01292080 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Macromedia
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Adobe
2013-06-12 16:42 - 2013-06-13 18:36 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 16:42 - 2013-06-13 18:36 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-12 16:37 - 2013-06-13 18:38 - 00000000 ____D C:\Users\Andy\AppData\Local\Adobe
2013-06-12 15:48 - 2012-02-17 08:38 - 01031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2013-06-12 15:48 - 2012-02-17 07:34 - 00826880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-06-12 15:48 - 2012-02-17 06:57 - 00023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2013-06-12 15:45 - 2013-06-12 15:45 - 00000000 ____D C:\Program Files\INTERNET_EXPLORER
2013-06-12 15:45 - 2013-06-12 15:30 - 00000000 ____D C:\Windows\PANTHER
2013-06-12 15:42 - 2012-06-03 00:19 - 02428952 ____A (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2013-06-12 15:42 - 2012-06-03 00:19 - 00701976 ____A (Microsoft Corporation) C:\Windows\System32\wuapi.dll
2013-06-12 15:42 - 2012-06-03 00:19 - 00057880 ____A (Microsoft Corporation) C:\Windows\System32\wuauclt.exe
2013-06-12 15:42 - 2012-06-03 00:19 - 00044056 ____A (Microsoft Corporation) C:\Windows\System32\wups2.dll
2013-06-12 15:42 - 2012-06-03 00:19 - 00038424 ____A (Microsoft Corporation) C:\Windows\System32\wups.dll
2013-06-12 15:42 - 2012-06-03 00:15 - 02622464 ____A (Microsoft Corporation) C:\Windows\System32\wucltux.dll
2013-06-12 15:42 - 2012-06-03 00:15 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wudriver.dll
2013-06-12 15:42 - 2012-06-02 15:19 - 00186752 ____A (Microsoft Corporation) C:\Windows\System32\wuwebv.dll
2013-06-12 15:42 - 2012-06-02 15:15 - 00036864 ____A (Microsoft Corporation) C:\Windows\System32\wuapp.exe
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-12 15:34 - 2011-06-10 08:34 - 00539240 ____A (Realtek                                            ) C:\Windows\System32\Drivers\Rt64win7.sys
2013-06-12 15:34 - 2011-06-10 08:34 - 00107552 ____A (Realtek Semiconductor Corporation) C:\Windows\System32\RTNUninst64.dll
2013-06-12 15:34 - 2011-06-10 08:34 - 00074272 ____A C:\Windows\System32\RtNicProp64.dll
2013-06-12 15:33 - 2013-06-12 15:34 - 00001769 ____A C:\Windows\Language_trs.ini
2013-06-12 15:33 - 2013-06-12 15:33 - 00028829 ____A C:\Windows\Ascd_tmp.ini
2013-06-12 15:31 - 2013-06-12 15:31 - 00000000 ____D C:\Users\Andy\AppData\Local\VirtualStore
2013-06-12 15:30 - 2013-06-16 10:44 - 01516178 ____A C:\Windows\WindowsUpdate.log
2013-06-12 15:30 - 2013-06-12 15:31 - 00000000 ____D C:\users\Andy
2013-06-12 15:30 - 2013-06-12 15:30 - 00000020 ___SH C:\Users\Andy\ntuser.ini
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Recovery
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Programme
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Favoriten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Dokumente
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Program Files\Gemeinsame Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Dokumente und Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-06-12 14:49 - 2013-06-12 14:49 - 00001355 ____A C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

2013-06-17 09:11 - 2009-07-14 06:45 - 00021840 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-17 09:11 - 2009-07-14 06:45 - 00021840 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-17 09:08 - 2013-06-12 15:30 - 01516178 ____A C:\Windows\WindowsUpdate.log
2013-06-17 09:08 - 2010-11-21 08:50 - 00643628 ____A C:\Windows\System32\perfh007.dat
2013-06-17 09:08 - 2010-11-21 08:50 - 00126188 ____A C:\Windows\System32\perfc007.dat
2013-06-17 09:08 - 2009-07-14 07:13 - 01472002 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-17 09:04 - 2013-06-12 21:52 - 00000000 ____D C:\ProgramData\NVIDIA
2013-06-17 09:04 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-17 09:04 - 2009-07-14 06:51 - 00025071 ____A C:\Windows\setupact.log
2013-06-16 08:25 - 2013-06-17 09:13 - 01920546 ____A (Farbar) C:\Users\Andy\Desktop\FRST64.exe
2013-06-15 19:55 - 2013-06-15 19:55 - 00903072 ____A (Oracle Corporation) C:\Users\Andy\Downloads\jxpiinstall.exe
2013-06-15 18:26 - 2013-06-15 15:33 - 00000000 ___AD C:\Kaspersky Rescue Disk 10.0
2013-06-15 17:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-15 16:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-06-15 13:27 - 2013-06-15 13:17 - 00003987 ____A C:\Windows\IE9_main.log
2013-06-15 13:26 - 2013-06-15 13:26 - 17824768 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 12329984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 10926080 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 09738752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-06-15 13:26 - 2013-06-15 13:26 - 03695416 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dat
2013-06-15 13:26 - 2013-06-15 13:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-15 13:26 - 2013-06-15 13:26 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-15 13:26 - 2013-06-15 13:26 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 02147840 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-15 13:26 - 2013-06-15 13:26 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-06-15 13:26 - 2013-06-15 13:26 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01346560 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 01104384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00729088 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00607744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00599040 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00534528 ____A (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00452608 ____A (Microsoft Corporation) C:\Windows\System32\dxtmsft.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00448512 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2013-06-15 13:26 - 2013-06-15 13:26 - 00434176 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00420864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00403248 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00367104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-06-15 13:26 - 2013-06-15 13:26 - 00353792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00353584 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00282112 ____A (Microsoft Corporation) C:\Windows\System32\dxtrans.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00267776 ____A (Microsoft Corporation) C:\Windows\System32\ieaksie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00249344 ____A (Microsoft Corporation) C:\Windows\System32\webcheck.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00227840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00223232 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\msls31.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00203776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\msrating.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00165888 ____A (Microsoft Corporation) C:\Windows\System32\iexpress.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00163840 ____A (Microsoft Corporation) C:\Windows\System32\ieakui.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00162304 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\wextract.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00160256 ____A (Microsoft Corporation) C:\Windows\System32\ieakeng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00152064 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00150528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00149504 ____A (Microsoft Corporation) C:\Windows\System32\occache.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00145920 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00135168 ____A (Microsoft Corporation) C:\Windows\System32\IEAdvpack.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00130560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00123392 ____A (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00118784 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00114176 ____A (Microsoft Corporation) C:\Windows\System32\admparse.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00111616 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00110592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\inseng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00101888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00091648 ____A (Microsoft Corporation) C:\Windows\System32\SetIEInstalledDate.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00089088 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00086528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00082432 ____A (Microsoft Corporation) C:\Windows\System32\icardie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00078848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00076800 ____A (Microsoft Corporation) C:\Windows\System32\tdc.ocx
2013-06-15 13:26 - 2013-06-15 13:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00074752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00074240 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00066048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\pngfilt.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00063488 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-06-15 13:26 - 2013-06-15 13:26 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00054272 ____A (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00049664 ____A (Microsoft Corporation) C:\Windows\System32\imgutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00048640 ____A (Microsoft Corporation) C:\Windows\System32\mshtmler.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00041472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00035840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00031744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00023552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-06-15 13:26 - 2013-06-15 13:26 - 00012288 ____A (Microsoft Corporation) C:\Windows\System32\mshta.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00011776 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-06-15 13:26 - 2013-06-15 13:26 - 00010752 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2013-06-14 17:19 - 2013-06-14 17:19 - 00057560 ____A C:\Users\Andy\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-13 18:38 - 2013-06-13 18:38 - 00000000 ____D C:\Users\Andy\AppData\Local\Macromedia
2013-06-13 18:38 - 2013-06-12 16:37 - 00000000 ____D C:\Users\Andy\AppData\Local\Adobe
2013-06-13 18:36 - 2013-06-12 16:42 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-13 18:36 - 2013-06-12 16:42 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-13 11:40 - 2013-06-13 11:40 - 00000000 ____D C:\FRST
2013-06-13 10:27 - 2013-06-13 10:27 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-06-13 08:02 - 2013-06-13 08:01 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00001151 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Users\Andy\AppData\Local\Mozilla
2013-06-13 08:01 - 2013-06-13 08:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-13 07:30 - 2013-06-13 07:30 - 00001754 ____A C:\Users\Public\Desktop\Browserwahl.lnk
2013-06-13 07:29 - 2009-07-14 06:45 - 00274464 ____A C:\Windows\System32\FNTCACHE.DAT
2013-06-13 07:28 - 2010-11-21 09:00 - 00000000 ____D C:\Program Files\Windows Journal
2013-06-13 07:28 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-06-12 21:52 - 2013-06-12 21:52 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Vorlagen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Startmenü
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Netzwerkumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Lokale Einstellungen
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Eigene Dateien
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Druckumgebung
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Musik
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-06-12 21:52 - 2013-06-12 21:52 - 00000000 __SHD C:\Users\UpdatusUser\Anwendungsdaten
2013-06-12 21:52 - 2013-06-12 21:51 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-06-12 21:52 - 2013-06-12 21:51 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-06-12 21:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-06-12 21:51 - 2013-06-12 21:51 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Macromedia
2013-06-12 16:43 - 2013-06-12 16:43 - 00000000 ____D C:\Users\Andy\AppData\Roaming\Adobe
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-06-12 16:42 - 2013-06-12 16:42 - 00000000 ____D C:\Windows\System32\Macromed
2013-06-12 15:46 - 2009-07-14 07:38 - 00025600 __ASH C:\Windows\System32\config\BCD-Template.LOG
2013-06-12 15:46 - 2009-07-14 07:32 - 00028672 ____A C:\Windows\System32\config\BCD-Template
2013-06-12 15:45 - 2013-06-12 15:45 - 00000000 ____D C:\Program Files\INTERNET_EXPLORER
2013-06-12 15:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\oobe
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-12 15:34 - 2013-06-12 15:34 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-06-12 15:34 - 2013-06-12 15:33 - 00001769 ____A C:\Windows\Language_trs.ini
2013-06-12 15:33 - 2013-06-12 15:33 - 00028829 ____A C:\Windows\Ascd_tmp.ini
2013-06-12 15:31 - 2013-06-12 15:31 - 00000000 ____D C:\Users\Andy\AppData\Local\VirtualStore
2013-06-12 15:31 - 2013-06-12 15:30 - 00000000 ____D C:\users\Andy
2013-06-12 15:30 - 2013-06-12 15:45 - 00000000 ____D C:\Windows\PANTHER
2013-06-12 15:30 - 2013-06-12 15:30 - 00000020 ___SH C:\Users\Andy\ntuser.ini
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Public\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Netzwerkumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Lokale Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Eigene Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Druckumgebung
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Musik
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Documents\Eigene Bilder
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Verlauf
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\AppData\Local\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Users\Andy\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Recovery
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Programme
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Vorlagen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Startmenü
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Favoriten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Dokumente
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\ProgramData\Anwendungsdaten
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Program Files\Gemeinsame Dateien
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 __SHD C:\Dokumente und Einstellungen
2013-06-12 15:30 - 2013-06-12 15:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-06-12 15:30 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\System32\restore
2013-06-12 15:30 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default
2013-06-12 15:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-06-12 14:49 - 2013-06-12 14:49 - 00001355 ____A C:\Windows\TSSysprep.log
2013-06-12 14:49 - 2009-07-14 06:46 - 00002790 ____A C:\Windows\DtcInstall.log
2013-06-12 14:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\sysprep

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-13 08:33

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.06.0.1003
www.malwarebytes.org

Database version: v2013.06.17.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Andy :: ANDY-PC [administrator]

17.06.2013 09:45:28
mbar-log-2013-06-17 (09-45-28).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUM | P2P
Scan options disabled: Deep Anti-Rootkit Scan | PUP
Objects scanned: 232570
Time elapsed: 4 minute(s), 32 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

schrauber · 17.06.2013, 09:33

Immer noch nichts. Alles sauber. Was ich nicht ganz verstehe:

Du gehst von deinem Rechner auf den Router, schaust dir das Ereignis-Log an, DOS-Attacken.

Du gehst von einem andern Rechner auf den Router, schaust dir das gleiche Ereignis-Log an, sauber?

Hagbard23 · 17.06.2013, 11:28

ja ich geh per lan kabel mit meinem pc in den router und wenn ich das lan kabel abziehe und übers netbook mit w-lan in den router gehe kommt nix. verstehst du wie ich das meine?

13.06.2013, 10:55	#4
schrauber /// the machine /// TB-Ausbilder	Werden von meinem Rechner Dos Attacken gestartet? Hi, Router bitte auf Werkseinstellungen zurücksetzen. Daten zum Provider neu eingeben. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

13.06.2013, 11:18	#6
schrauber /// the machine /// TB-Ausbilder	Werden von meinem Rechner Dos Attacken gestartet? Wenn Du die Kiste formatiert hast ist die sauber. Aber Router-Befall ist nicht so ungewöhnlich __________________ --> Werden von meinem Rechner Dos Attacken gestartet?

Werden von meinem Rechner Dos Attacken gestartet?

Plagegeister aller Art und deren Bekämpfung: Werden von meinem Rechner Dos Attacken gestartet?