Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 27.08.2013, 12:15   #16
schrauber
/// the machine
/// TB-Ausbilder
 

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



Logs in Stücke teilen und dann posten
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.08.2013, 12:17   #17
falte
 
windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



OK, dann FRIST Stück 1:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-08-2013 01
Ran by brieskorn (administrator) on 27-08-2013 08:06:44
Running from C:\Users\brieskorn\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BtStackServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Lenovo) C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe
(Lenovo.) C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
(Microsoft Corporation) C:\Windows\system32\msiexec.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2816848 2012-05-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12459112 2012-03-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [382528 2012-02-24] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [290160 2012-06-01] (Lenovo Group Limited)
HKLM-x32\...\RunOnce: [SymSilent] - "C:\Program Files (x86)\SymSilent\SymSilent.exe" /_spawn /service [762296 2011-05-08] (Symantec Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
MountPoints2: {6d91728d-fad9-11e2-b8ca-806e6f6e6963} - Q:\LenovoQDrive.exe
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [PWMTRV] - C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL [5941344 2012-05-15] (Lenovo Group Limited)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-06-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Lenovo Registration] - C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.)
HKLM-x32\...\Run: [Fastboot] - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1091376 2012-01-17] (Lenovo)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [156000 2012-05-25] (Lenovo)
HKU\Default\...\RunOnce: [] -  [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2011-12-15] ()
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [156000 2012-05-25] (Lenovo)
HKU\Default User\...\RunOnce: [] -  [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2011-12-15] ()
Lsa: [Notification Packages] scecli C:\Program Files\ThinkPad\Bluetooth Software\BtwProximityCP.dll C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {07C8531E-4A4A-4880-93CF-9478F25D9B09} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MALCJS
SearchScopes: HKLM - {07C8531E-4A4A-4880-93CF-9478F25D9B09} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MALCJS
SearchScopes: HKLM-x32 - DefaultScope {07C8531E-4A4A-4880-93CF-9478F25D9B09} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MALCJS
SearchScopes: HKLM-x32 - {07C8531E-4A4A-4880-93CF-9478F25D9B09} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE9TR&src=IE9TR&pc=MALCJS
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll (Symantec Corporation)
Tcpip\Parameters: [DhcpNameServer] 172.168.127.2

==================== Services (Whitelisted) =================

R3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-05-15] (Lenovo.)
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-01-17] (Lenovo)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-29] (Intel Corporation)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [179568 2012-06-01] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe [138760 2011-08-10] (Symantec Corporation)
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-01-10] (Nitro PDF Software)
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [84080 2012-04-19] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20110819.004\BHDrvx64.sys [1151096 2011-08-19] (Symantec Corporation)
R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20110819.004\BHDrvx64.sys [1151096 2011-08-19] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1301000.01C\ccSetx64.sys [167048 2011-08-08] (Symantec Corporation)
R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [70416 2012-01-17] (Windows (R) Win 7 DDK provider)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20110726.001\IDSVia64.sys [488568 2011-07-20] (Symantec Corporation)
R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20110726.001\IDSVia64.sys [488568 2011-07-20] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\ENG64.SYS [117880 2011-08-10] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\ENG64.SYS [117880 2011-08-10] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\EX64.SYS [2048632 2011-08-10] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\EX64.SYS [2048632 2011-08-10] (Symantec Corporation)
R1 PHCORE; C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS [33344 2012-03-26] (Lenovo Group Limited)
S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [260712 2012-01-31] (Realtek Semiconductor Corp.)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSP64.SYS [729720 2011-08-02] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSPX64.SYS [37496 2011-08-02] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMDS64.SYS [451192 2011-07-25] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMEFA64.SYS [1084536 2011-07-28] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2013-08-01] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1301000.01C\Ironx64.SYS [189560 2011-07-25] (Symantec Corporation)
R3 SymNetS; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMNETS.SYS [401016 2011-07-25] (Symantec Corporation)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-07] (ThinkVantage Communications Utility)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-27 08:06 - 2013-08-27 08:03 - 01578852 _____ (Farbar) C:\Users\brieskorn\Desktop\FRST64.exe
2013-08-27 07:59 - 2013-08-27 08:00 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\LSC
2013-08-27 07:59 - 2013-08-27 07:59 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Nitro PDF
2013-08-27 07:59 - 2013-08-27 07:59 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\LSC
2013-08-27 07:59 - 2013-08-27 07:59 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Adobe
2013-08-26 14:14 - 2013-08-26 14:14 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\PwrMgr
2013-08-26 14:08 - 2013-08-26 14:09 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Lenovo
2013-08-26 14:08 - 2013-08-26 14:09 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\Lenovo
2013-08-26 14:08 - 2013-08-26 14:08 - 00000000 ____D C:\Users\brieskorn\Documents\Bluetooth-Exchange-Ordner
2013-08-26 14:08 - 2013-08-26 14:08 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Leadertech
2013-08-26 14:08 - 2013-08-26 14:08 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\Broadcom
2013-08-26 14:07 - 2013-08-26 14:07 - 00001450 _____ C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-26 14:07 - 2013-08-26 14:07 - 00001416 _____ C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-26 14:07 - 2013-08-26 14:07 - 00000000 ___RD C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-26 14:07 - 2013-08-26 14:07 - 00000000 ___RD C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-26 14:06 - 2013-08-26 14:06 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-26 14:05 - 2013-08-26 14:05 - 00070952 _____ C:\Users\BRIESK~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-26 14:05 - 2013-08-26 14:05 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\VirtualStore
2013-08-26 14:04 - 2013-08-26 14:07 - 00000000 ____D C:\Users\brieskorn
2013-08-26 14:04 - 2013-08-26 14:04 - 00000020 ___SH C:\Users\brieskorn\ntuser.ini
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Vorlagen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Startmenü
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Netzwerkumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Lokale Einstellungen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Eigene Dateien
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Druckumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\BRIESK~1\AppData\Local\Verlauf
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\BRIESK~1\AppData\Local\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Programme
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _____ C:\Windows\firstboot.dat
2013-08-26 14:04 - 2013-08-01 21:04 - 00002131 _____ C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2013-08-26 14:04 - 2013-08-01 20:53 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Macromedia
2013-08-26 14:04 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-08-26 14:04 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-08-02 07:45 - 2013-08-02 07:45 - 00000080 _____ C:\Windows\SYSINFO.TXT
2013-08-02 07:45 - 2013-08-02 07:45 - 00000029 _____ C:\Windows\000000A77036.SSW0A30311
2013-08-02 06:36 - 2013-08-02 06:36 - 17811968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 12320256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 10925568 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 09738240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-02 06:36 - 2013-08-02 06:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-02 06:36 - 2013-08-02 06:36 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 02144768 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01793024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-02 06:36 - 2013-08-02 06:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-02 06:36 - 2013-08-02 06:36 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01346048 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-02 06:36 - 2013-08-02 06:36 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-02 06:36 - 2013-08-02 06:36 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 03149824 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-08-02 06:35 - 2013-08-02 06:35 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-08-02 06:35 - 2013-08-02 06:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-08-02 06:32 - 2013-08-02 06:32 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 01914248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-02 06:32 - 2013-08-02 06:32 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-08-02 06:32 - 2013-08-02 06:32 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 01659760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-08-02 06:31 - 2013-08-02 06:31 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-08-02 06:31 - 2013-08-02 06:31 - 00288624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-08-02 06:31 - 2013-08-02 06:31 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-08-02 06:30 - 2013-08-02 06:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-08-02 06:30 - 2013-08-02 06:30 - 00420064 _____ C:\Windows\system32\locale.nls
2013-08-02 06:30 - 2013-08-02 06:30 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 05559664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 03968880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 03914096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-08-02 06:29 - 2013-08-02 06:29 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-08-02 06:29 - 2013-08-02 06:29 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-08-02 06:29 - 2013-08-02 06:29 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-08-02 06:28 - 2013-08-02 06:28 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 12873728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-08-02 06:27 - 2013-08-02 06:27 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-08-02 06:27 - 2013-08-02 06:27 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-08-02 06:26 - 2013-08-02 06:26 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 01159680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 01077248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-08-02 06:26 - 2013-08-02 06:26 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-08-02 06:26 - 2013-08-02 06:26 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00068864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2013-08-02 06:26 - 2013-08-02 06:26 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00151920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01731920 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01292080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-08-02 06:23 - 2013-08-02 06:23 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-08-02 06:23 - 2013-08-02 06:23 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-08-02 06:22 - 2013-08-02 06:22 - 00189047 _____ C:\Windows\IE90-DEU.log
2013-08-02 06:22 - 2013-08-02 06:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2013-08-02 06:21 - 2013-08-26 14:20 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-02 06:21 - 2013-08-26 14:20 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-02 06:21 - 2013-08-02 06:21 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-08-02 06:21 - 2013-08-02 06:21 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\SysWOW64\de
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\system32\de
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\system32\0407
2013-08-02 06:18 - 2013-08-02 06:22 - 10324827 _____ C:\Windows\de-de.log
2013-08-02 06:18 - 2012-05-22 17:32 - 00285008 _____ (ELAN Microelectronics Corp.) C:\Windows\system32\Drivers\ETD.sys
2013-08-02 06:18 - 2011-11-30 05:40 - 00568600 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys
2013-08-02 06:17 - 2012-02-29 08:15 - 00048704 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2013-08-02 06:17 - 2012-02-29 08:15 - 00041024 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2013-08-02 06:17 - 2012-02-29 08:14 - 00042312 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2013-08-02 06:17 - 2011-03-25 14:58 - 00001271 _____ C:\Windows\MFGCLEAN.CMD
2013-08-02 06:17 - 2007-09-20 00:41 - 00004096 _____ C:\Windows\system32\Thumbs.db
2013-08-01 21:10 - 2013-08-01 21:10 - 00000000 ____D C:\Windows\util
2013-08-01 21:09 - 2013-08-26 14:05 - 00000000 ____D C:\Windows\System32\Tasks\TVT
2013-08-01 21:09 - 2013-08-01 21:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-01 21:07 - 2013-08-01 21:07 - 00000000 ____D C:\Users\Public\Symantec
2013-08-01 21:07 - 2013-08-01 21:07 - 00000000 ____D C:\Program Files (x86)\SymSilent
2013-08-01 21:07 - 2013-08-01 21:07 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-08-01 21:06 - 2013-08-26 14:05 - 00000000 ____D C:\ProgramData\Norton
2013-08-01 21:06 - 2013-08-01 21:06 - 00174200 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-01 21:06 - 2013-08-01 21:06 - 00007530 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-01 21:06 - 2013-08-01 21:06 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Program Files\Symantec
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-01 21:06 - 2013-01-10 00:11 - 00029704 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon2.dll
2013-08-01 21:06 - 2013-01-10 00:11 - 00017928 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui2.dll
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Windows\de
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\ProgramData\Nitro
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files\Windows Live
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files\Common Files\Nitro
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files (x86)\Nitro
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-08-01 21:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-08-01 21:05 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-08-01 21:05 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-08-01 21:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-08-01 21:05 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-08-01 21:05 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-08-01 21:05 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-08-01 21:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-08-01 21:05 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-08-01 21:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-08-01 21:04 - 2013-08-01 21:04 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-08-01 21:04 - 2013-08-01 21:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SkyDrive
2013-08-01 21:03 - 2013-08-01 21:03 - 00000000 ____D C:\Program Files (x86)\SugarSync
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____D C:\Program Files\Protector Suite
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____D C:\Program Files\Common Files\SPBA
2013-08-01 20:59 - 2013-08-26 14:07 - 00000000 ____D C:\swshare
2013-08-01 20:59 - 2013-08-01 21:00 - 00000000 ____D C:\Program Files\ThinkVantage Fingerprint Software
2013-08-01 20:59 - 2013-08-01 20:59 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-08-01 20:59 - 2013-08-01 20:59 - 00028704 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-08-01 20:58 - 2013-08-26 14:14 - 629145600 ___SH C:\Windows\lenovo_fastboot.img
2013-08-01 20:58 - 2013-08-01 20:58 - 00000000 ____D C:\ProgramData\InterVideo
2013-08-01 20:58 - 2012-01-17 08:55 - 00070416 ____N (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\Fastboot.sys
2013-08-01 20:56 - 2013-08-01 21:02 - 00000000 ____D C:\ProgramData\Ulead Systems
2013-08-01 20:55 - 2013-08-01 21:05 - 00199514 _____ C:\Windows\DirectX.log
2013-08-01 20:55 - 2013-08-01 20:55 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-08-01 20:55 - 2013-08-01 20:55 - 00000000 ____D C:\Program Files (x86)\Lenovo Registration
2013-08-01 20:55 - 2013-08-01 20:55 - 00000000 ____D C:\Program Files (x86)\Evernote
2013-08-01 20:55 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-08-01 20:55 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-08-01 20:55 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-08-01 20:55 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-08-01 20:55 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-08-01 20:55 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-08-01 20:55 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-08-01 20:55 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-08-01 20:55 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-08-01 20:55 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-08-01 20:55 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-08-01 20:55 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-08-01 20:55 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-08-01 20:55 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-08-01 20:55 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-08-01 20:55 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-08-01 20:55 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-08-01 20:55 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-08-01 20:55 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-08-01 20:55 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-08-01 20:55 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-08-01 20:55 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-08-01 20:55 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-08-01 20:55 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-08-01 20:55 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-08-01 20:55 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-08-01 20:55 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-08-01 20:55 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-08-01 20:55 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-08-01 20:55 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2013-08-01 20:55 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-08-01 20:55 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-08-01 20:55 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-08-01 20:55 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-08-01 20:55 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-08-01 20:55 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-08-01 20:55 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-08-01 20:55 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-08-01 20:55 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-08-01 20:55 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-08-01 20:55 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-08-01 20:55 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-08-01 20:55 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-08-01 20:55 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-08-01 20:55 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-08-01 20:55 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-08-01 20:55 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-08-01 20:55 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-08-01 20:55 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-08-01 20:55 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-08-01 20:55 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-08-01 20:55 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-08-01 20:55 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-08-01 20:55 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-08-01 20:55 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-08-01 20:55 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-08-01 20:55 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-08-01 20:55 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-08-01 20:55 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-08-01 20:55 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-08-01 20:55 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-08-01 20:55 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-08-01 20:55 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-08-01 20:55 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-08-01 20:55 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-08-01 20:55 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-08-01 20:55 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-08-01 20:55 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-08-01 20:55 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-08-01 20:55 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-08-01 20:55 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-08-01 20:55 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-08-01 20:55 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-08-01 20:55 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-08-01 20:55 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-08-01 20:55 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-08-01 20:55 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-08-01 20:54 - 2013-08-01 21:02 - 00000000 ____D C:\Program Files (x86)\Corel
2013-08-01 20:54 - 2013-08-01 20:54 - 00000000 ____D C:\ProgramData\Corel
2013-08-01 20:54 - 2013-08-01 20:54 - 00000000 ____D C:\Program Files\MLPS
2013-08-01 20:54 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-08-01 20:53 - 2013-08-26 14:09 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2013-08-01 20:53 - 2013-08-01 21:07 - 00000000 ____D C:\Windows\Downloaded Installations
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\ProgramData\Adobe
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-08-01 20:53 - 2011-12-07 18:59 - 00027432 _____ (ThinkVantage Communications Utility) C:\Windows\system32\Drivers\tvtvcamd.sys
2013-08-01 20:52 - 2013-08-01 20:52 - 00002958 _____ C:\Windows\System32\Tasks\PMTask
2013-08-01 20:52 - 2013-08-01 20:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2013-08-01 20:52 - 2013-08-01 20:52 - 00000000 ____D C:\Program Files (x86)\Dolby Advanced Audio v2
2013-08-01 20:52 - 2012-05-15 23:32 - 02806880 _____ (Lenovo Group Limited) C:\Windows\system32\PWMCP64V.cpl
2013-08-01 20:52 - 2012-05-15 23:32 - 02693728 ____N (Lenovo Group Limited) C:\Windows\PWMBTHLV.EXE
2013-08-01 20:52 - 2012-05-15 23:32 - 00029512 _____ (Lenovo.) C:\Windows\system32\Drivers\DZHDD64.SYS
2013-08-01 20:52 - 2012-05-15 23:32 - 00019784 _____ (Lenovo Group Limited) C:\Windows\system32\Drivers\TPPWR64V.SYS
2013-08-01 20:52 - 2012-02-27 12:01 - 00788760 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2013-08-01 20:52 - 2012-02-27 12:01 - 00356120 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2013-08-01 20:52 - 2012-02-27 12:01 - 00016152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2013-08-01 20:52 - 2012-02-27 12:00 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2013-08-01 20:52 - 2009-07-14 22:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2013-08-01 20:51 - 2013-08-01 20:52 - 00000000 ____D C:\Program Files (x86)\ThinkPad
2013-08-01 20:51 - 2013-08-01 20:51 - 00015402 _____ C:\Windows\system32\results.xml
2013-08-01 20:49 - 2013-08-01 20:49 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-08-01 20:49 - 2012-03-28 17:06 - 00509720 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2013-08-01 20:49 - 2012-03-28 17:06 - 00439064 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2013-08-01 20:49 - 2012-03-28 17:06 - 00398616 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2013-08-01 20:49 - 2012-03-28 17:06 - 00276248 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2013-08-01 20:49 - 2012-03-28 17:06 - 00250136 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2013-08-01 20:49 - 2012-03-28 17:06 - 00170264 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2013-08-01 20:49 - 2012-03-28 17:05 - 05888792 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe
2013-08-01 20:49 - 2012-03-28 17:05 - 00184600 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2013-08-01 20:49 - 2012-03-19 09:58 - 00018660 _____ C:\Windows\system32\iglhxs64.vp
2013-08-01 20:49 - 2012-03-19 09:42 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2696.dll
2013-08-01 20:49 - 2012-03-19 09:37 - 00755188 _____ C:\Windows\SysWOW64\igkrng700.bin
2013-08-01 20:49 - 2012-03-19 09:37 - 00755188 _____ C:\Windows\system32\igkrng700.bin
2013-08-01 20:49 - 2012-03-19 09:37 - 00561508 _____ C:\Windows\SysWOW64\igfcg700m.bin
2013-08-01 20:49 - 2012-03-19 09:37 - 00561508 _____ C:\Windows\system32\igfcg700m.bin
2013-08-01 20:49 - 2012-03-19 09:32 - 14745600 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2013-08-01 20:49 - 2012-03-19 09:31 - 08087040 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll
2013-08-01 20:49 - 2012-03-19 09:31 - 00079360 _____ C:\Windows\system32\igdde64.dll
2013-08-01 20:49 - 2012-03-19 09:26 - 06120960 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll
2013-08-01 20:49 - 2012-03-19 09:25 - 00058880 _____ C:\Windows\SysWOW64\igdde32.dll
2013-08-01 20:49 - 2012-03-19 09:22 - 09605632 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll
2013-08-01 20:49 - 2012-03-19 09:11 - 07795200 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll
2013-08-01 20:49 - 2012-03-19 09:03 - 03749888 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2013-08-01 20:49 - 2012-03-19 09:03 - 00591872 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2013-08-01 20:49 - 2012-03-19 09:03 - 00236544 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2013-08-01 20:49 - 2012-03-19 09:00 - 02866688 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2013-08-01 20:49 - 2012-03-19 09:00 - 00518144 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2013-08-01 20:49 - 2012-03-19 09:00 - 00188416 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2013-08-01 20:49 - 2012-03-19 08:55 - 28992000 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2013-08-01 20:49 - 2012-03-19 08:43 - 23460864 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2013-08-01 20:49 - 2012-03-19 08:33 - 17226240 _____ C:\Windows\system32\ig7icd64.dll
2013-08-01 20:49 - 2012-03-19 08:23 - 13024256 _____ C:\Windows\SysWOW64\ig7icd32.dll
2013-08-01 20:49 - 2012-03-19 08:19 - 00221877 _____ C:\Windows\system32\Gfxres.th-TH.resources
2013-08-01 20:49 - 2012-03-19 08:19 - 00144790 _____ C:\Windows\system32\Gfxres.ro-RO.resources
2013-08-01 20:49 - 2012-03-19 08:19 - 00143564 _____ C:\Windows\system32\Gfxres.tr-TR.resources
2013-08-01 20:49 - 2012-03-19 08:19 - 00139901 _____ C:\Windows\system32\Gfxres.hr-HR.resources
2013-08-01 20:49 - 2012-03-19 08:19 - 00125306 _____ C:\Windows\system32\Gfxres.zh-TW.resources
2013-08-01 20:49 - 2012-03-19 08:19 - 00123778 _____ C:\Windows\system32\Gfxres.zh-CN.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00430592 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2013-08-01 20:49 - 2012-03-19 08:18 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2013-08-01 20:49 - 2012-03-19 08:18 - 00386560 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2013-08-01 20:49 - 2012-03-19 08:18 - 00208522 _____ C:\Windows\system32\Gfxres.el-GR.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00192378 _____ C:\Windows\system32\Gfxres.ru-RU.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00164821 _____ C:\Windows\system32\Gfxres.ar-SA.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00162150 _____ C:\Windows\system32\Gfxres.ja-JP.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00157713 _____ C:\Windows\system32\Gfxres.he-IL.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00148461 _____ C:\Windows\system32\Gfxres.it-IT.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00147116 _____ C:\Windows\system32\Gfxres.ko-KR.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00146125 _____ C:\Windows\system32\Gfxres.es-ES.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00146008 _____ C:\Windows\system32\Gfxres.de-DE.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00144267 _____ C:\Windows\system32\Gfxres.fr-FR.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00143112 _____ C:\Windows\system32\Gfxres.pt-BR.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00142797 _____ C:\Windows\system32\Gfxres.nl-NL.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00142606 _____ C:\Windows\system32\Gfxres.hu-HU.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00142079 _____ C:\Windows\system32\Gfxres.pt-PT.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00141854 _____ C:\Windows\system32\Gfxres.sv-SE.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00141421 _____ C:\Windows\system32\Gfxres.pl-PL.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00141297 _____ C:\Windows\system32\Gfxres.cs-CZ.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00140949 _____ C:\Windows\system32\Gfxres.fi-FI.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00140548 _____ C:\Windows\system32\Gfxres.sk-SK.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00136850 _____ C:\Windows\system32\Gfxres.sl-SI.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00136778 _____ C:\Windows\system32\Gfxres.nb-NO.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00136261 _____ C:\Windows\system32\Gfxres.da-DK.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00131674 _____ C:\Windows\system32\Gfxres.en-US.resources
2013-08-01 20:49 - 2012-03-19 08:18 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2013-08-01 20:49 - 2012-03-19 08:17 - 00434688 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2013-08-01 20:49 - 2012-03-19 08:17 - 00172032 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2013-08-01 20:49 - 2012-03-19 08:17 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2013-08-01 20:49 - 2012-03-19 08:17 - 00063488 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2013-08-01 20:49 - 2012-03-19 08:17 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2013-08-01 20:49 - 2012-03-19 08:17 - 00009216 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2013-08-01 20:49 - 2012-03-19 08:16 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2013-08-01 20:49 - 2012-03-19 08:16 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2013-08-01 20:49 - 2012-03-19 08:16 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2013-08-01 20:49 - 2012-03-19 08:12 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2013-08-01 20:49 - 2012-03-19 08:11 - 00325120 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 02967040 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 02321408 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 01981696 _____ C:\Windows\system32\iglhxa64.cpa
2013-08-01 20:49 - 2012-03-19 08:09 - 00524800 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00519680 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00237056 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00213504 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00193024 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00177152 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00094208 _____ C:\Windows\system32\IccLibDll_x64.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00059425 _____ C:\Windows\system32\iglhxo64.vp
2013-08-01 20:49 - 2012-03-19 08:09 - 00059398 _____ C:\Windows\system32\iglhxg64.vp
2013-08-01 20:49 - 2012-03-19 08:09 - 00059230 _____ C:\Windows\system32\iglhxc64.vp
2013-08-01 20:49 - 2012-03-19 08:09 - 00059104 _____ C:\Windows\system32\iglhxc64_dev.vp
2013-08-01 20:49 - 2012-03-19 08:09 - 00058796 _____ C:\Windows\system32\iglhxg64_dev.vp
2013-08-01 20:49 - 2012-03-19 08:09 - 00058109 _____ C:\Windows\system32\iglhxo64_dev.vp
2013-08-01 20:49 - 2012-03-19 08:09 - 00052736 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00051200 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-08-01 20:49 - 2012-03-19 08:09 - 00001074 _____ C:\Windows\system32\iglhxa64.vp
2013-08-01 20:49 - 2011-12-05 21:23 - 00331264 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2013-08-01 20:49 - 2011-12-05 21:22 - 00014848 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll
2013-08-01 20:48 - 2013-08-01 20:48 - 00002280 _____ C:\RHDSetup.log
2013-08-01 20:48 - 2013-08-01 20:48 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-08-01 20:48 - 2013-08-01 20:48 - 00000000 ____D C:\Program Files\Realtek
2013-08-01 20:48 - 2012-06-06 10:11 - 00000008 _____ C:\Windows\system32\Drivers\RTKHDAUD.DAT
2013-08-01 20:48 - 2012-03-27 12:16 - 00272629 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2013-08-01 20:48 - 2012-03-27 10:03 - 04015592 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2013-08-01 20:48 - 2012-03-21 08:55 - 02886656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2013-08-01 20:48 - 2012-03-20 03:47 - 03608680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2013-08-01 20:48 - 2012-03-19 12:01 - 00102504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2013-08-01 20:48 - 2012-03-16 09:25 - 02670696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2013-08-01 20:48 - 2012-03-13 04:21 - 01251432 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2013-08-01 20:48 - 2012-03-08 04:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2013-08-01 20:48 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2013-08-01 20:48 - 2012-03-07 04:09 - 00824424 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2013-08-01 20:48 - 2012-03-02 10:51 - 00002412 _____ C:\Windows\system32\Drivers\SAMSFPA.DAT
2013-08-01 20:48 - 2012-02-21 12:45 - 02605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2013-08-01 20:48 - 2012-02-21 07:26 - 02528832 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2013-08-01 20:48 - 2012-01-30 04:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2013-08-01 20:48 - 2012-01-23 15:30 - 00537456 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2013-08-01 20:48 - 2012-01-23 15:30 - 00524656 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2013-08-01 20:48 - 2012-01-23 15:30 - 00449392 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2013-08-01 20:48 - 2012-01-10 03:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2013-08-01 20:48 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2013-08-01 20:48 - 2011-12-19 22:43 - 00220776 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2013-08-01 20:48 - 2011-12-15 06:16 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2013-08-01 20:48 - 2011-12-15 06:16 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2013-08-01 20:48 - 2011-12-15 06:16 - 00137056 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2013-08-01 20:48 - 2011-12-15 06:16 - 00120160 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2013-08-01 20:48 - 2011-12-15 06:16 - 00075104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2013-08-01 20:48 - 2011-12-13 09:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2013-08-01 20:48 - 2011-12-13 04:01 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2013-08-01 20:48 - 2011-11-24 09:02 - 00648808 _____ (Realtek                                            ) C:\Windows\system32\Drivers\Rt64win7.sys
2013-08-01 20:48 - 2011-11-24 09:02 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2013-08-01 20:48 - 2011-11-24 09:02 - 00074272 _____ C:\Windows\system32\RtNicProp64.dll
2013-08-01 20:48 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2013-08-01 20:48 - 2011-09-02 07:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2013-08-01 20:48 - 2011-09-02 07:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2013-08-01 20:48 - 2011-09-02 07:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2013-08-01 20:48 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2013-08-01 20:48 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2013-08-01 20:48 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2013-08-01 20:48 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2013-08-01 20:48 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2013-08-01 20:48 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2013-08-01 20:48 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2013-08-01 20:48 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2013-08-01 20:48 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2013-08-01 20:48 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2013-08-01 20:48 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2013-08-01 20:48 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2013-08-01 20:48 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2013-08-01 20:48 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2013-08-01 20:48 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2013-08-01 20:48 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2013-08-01 20:47 - 2013-08-01 21:10 - 00000000 ____D C:\ProgramData\Intel
2013-08-01 20:47 - 2013-08-01 21:08 - 00000000 ____D C:\Program Files (x86)\Lenovo
2013-08-01 20:47 - 2013-08-01 20:54 - 00000000 ____D C:\Program Files\Common Files\Lenovo
2013-08-01 20:47 - 2013-08-01 20:47 - 00000000 ____D C:\Program Files\Intel
2013-08-01 20:47 - 2012-02-21 21:10 - 00015128 _____ C:\Windows\system32\Drivers\IntelMEFWVer.dll
2013-08-01 20:47 - 2011-12-07 01:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2013-08-01 20:46 - 2013-08-01 21:07 - 00000000 ____D C:\Program Files\Lenovo
2013-08-01 20:46 - 2013-08-01 21:02 - 00000000 ____D C:\Program Files (x86)\Intel
2013-08-01 20:46 - 2013-08-01 20:49 - 00000000 ____D C:\Intel
2013-08-01 20:46 - 2013-08-01 20:48 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-08-01 20:46 - 2013-08-01 20:46 - 00000207 _____ C:\setup.log
2013-08-01 20:46 - 2013-08-01 20:46 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-08-01 20:46 - 2013-08-01 20:46 - 00000000 ____D C:\Program Files (x86)\Integrated Camera Driver
2013-08-01 20:46 - 2012-04-01 05:52 - 00594472 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwampfl.sys
2013-08-01 20:46 - 2012-02-16 16:19 - 00216064 _____ (Ricoh co.,Ltd.) C:\Windows\system32\Drivers\5U877.sys
2013-08-01 20:46 - 2012-02-07 16:15 - 00154112 _____ (Ricoh co.,Ltd.) C:\Windows\system32\5U877.dll
2013-08-01 20:46 - 2012-02-07 14:46 - 00184320 _____ (Ricoh co.,Ltd.) C:\Windows\system32\5U877.ax
2013-08-01 20:46 - 2012-02-07 14:46 - 00163840 _____ (Ricoh co.,Ltd.) C:\Windows\SysWOW64\5U877.ax
2013-08-01 20:46 - 2012-01-31 00:03 - 09888872 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsP2StorIcon.dll
2013-08-01 20:46 - 2012-01-31 00:03 - 00260712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsP2Stor.sys
2013-08-01 20:46 - 2011-11-10 10:04 - 00060184 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys
2013-08-01 20:45 - 2013-08-01 21:02 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-01 20:45 - 2013-08-01 20:51 - 00000000 ____D C:\Program Files\ThinkPad
2013-08-01 20:45 - 2013-08-01 20:45 - 00000000 ____D C:\Program Files (x86)\ThinkPad Wireless LAN Adapter Software
2013-08-01 20:45 - 2013-08-01 20:45 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-08-01 20:45 - 2012-04-01 05:52 - 00184872 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwaudio.sys
2013-08-01 20:45 - 2012-04-01 05:52 - 00163368 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\bcbtums.sys
2013-08-01 20:45 - 2012-03-09 02:26 - 00876136 _____ (Realtek Semiconductor Corporation                           ) C:\Windows\system32\Drivers\rtl8192ce.sys
2013-08-01 20:45 - 2012-03-05 14:29 - 00210984 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwavdt.sys
2013-08-01 20:45 - 2012-03-05 14:29 - 00021544 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwrchid.sys
2013-08-01 20:45 - 2012-01-18 10:42 - 00056646 _____ C:\Windows\system32\Drivers\BCM20702A1_001.002.014.0449.0462.hex
2013-08-01 20:45 - 2011-09-17 03:38 - 00039976 _____ (Broadcom Corporation.) C:\Windows\system32\Drivers\btwl2cap.sys
2013-08-01 20:44 - 2013-08-26 14:05 - 00000042 _____ C:\Windows\SysWOW64\Drivers\17AA_Lenovo_ThinkPad_L530_2481_52G.MRK
2013-08-01 20:41 - 2013-08-01 20:41 - 00011364 _____ C:\Windows\DPINST.LOG
2013-08-01 20:41 - 2013-08-01 20:41 - 00000000 ____D C:\Program Files\Elantech
2013-08-01 20:41 - 2013-08-01 20:41 - 00000000 ____D C:\Program Files\DIFX
2013-08-01 20:40 - 2013-08-27 07:59 - 00017685 _____ C:\Windows\WindowsUpdate.log
2013-08-01 20:38 - 2013-08-01 20:38 - 00000000 ____D C:\Windows\CSC
2013-08-01 14:14 - 2013-08-01 14:14 - 00000000 ____D C:\mfg
2013-08-01 14:13 - 2013-08-26 14:09 - 00000000 ____D C:\ProgramData\Lenovo
2013-08-01 14:06 - 2013-08-01 13:57 - 00000012 _____ C:\Windows\CSUP.TXT
         
__________________


Alt 27.08.2013, 12:20   #18
falte
 
windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



und hier FRST, Teil 2:
Code:
ATTFilter
==================== One Month Modified Files and Folders =======

2013-08-27 08:06 - 2013-08-27 08:06 - 00000000 ____D C:\FRST
2013-08-27 08:05 - 2009-07-14 06:51 - 00047236 _____ C:\Windows\setupact.log
2013-08-27 08:03 - 2013-08-27 08:06 - 01578852 _____ (Farbar) C:\Users\brieskorn\Desktop\FRST64.exe
2013-08-27 08:01 - 2009-07-14 06:45 - 00034208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-27 08:01 - 2009-07-14 06:45 - 00034208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-27 08:00 - 2013-08-27 07:59 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\LSC
2013-08-27 07:59 - 2013-08-27 07:59 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Nitro PDF
2013-08-27 07:59 - 2013-08-27 07:59 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\LSC
2013-08-27 07:59 - 2013-08-27 07:59 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Adobe
2013-08-27 07:59 - 2013-08-01 20:40 - 00017685 _____ C:\Windows\WindowsUpdate.log
2013-08-26 21:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-26 21:02 - 2011-02-24 19:03 - 00000000 ____D C:\Windows\Panther
2013-08-26 14:20 - 2013-08-02 06:21 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-26 14:20 - 2013-08-02 06:21 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-26 14:20 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 14:16 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-26 14:14 - 2013-08-26 14:14 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\PwrMgr
2013-08-26 14:14 - 2013-08-01 20:58 - 629145600 ___SH C:\Windows\lenovo_fastboot.img
2013-08-26 14:13 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioDatabase
2013-08-26 14:09 - 2013-08-26 14:08 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Lenovo
2013-08-26 14:09 - 2013-08-26 14:08 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\Lenovo
2013-08-26 14:09 - 2013-08-01 20:53 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2013-08-26 14:09 - 2013-08-01 14:13 - 00000000 ____D C:\ProgramData\Lenovo
2013-08-26 14:08 - 2013-08-26 14:08 - 00000000 ____D C:\Users\brieskorn\Documents\Bluetooth-Exchange-Ordner
2013-08-26 14:08 - 2013-08-26 14:08 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Leadertech
2013-08-26 14:08 - 2013-08-26 14:08 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\Broadcom
2013-08-26 14:07 - 2013-08-26 14:07 - 00001450 _____ C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-26 14:07 - 2013-08-26 14:07 - 00001416 _____ C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-08-26 14:07 - 2013-08-26 14:07 - 00000000 ___RD C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-26 14:07 - 2013-08-26 14:07 - 00000000 ___RD C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-26 14:07 - 2013-08-26 14:04 - 00000000 ____D C:\Users\brieskorn
2013-08-26 14:07 - 2013-08-01 20:59 - 00000000 ____D C:\swshare
2013-08-26 14:06 - 2013-08-26 14:06 - 00000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2013-08-26 14:05 - 2013-08-26 14:05 - 00070952 _____ C:\Users\BRIESK~1\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-26 14:05 - 2013-08-26 14:05 - 00000000 ____D C:\Users\BRIESK~1\AppData\Local\VirtualStore
2013-08-26 14:05 - 2013-08-01 21:09 - 00000000 ____D C:\Windows\System32\Tasks\TVT
2013-08-26 14:05 - 2013-08-01 21:06 - 00000000 ____D C:\ProgramData\Norton
2013-08-26 14:05 - 2013-08-01 20:44 - 00000042 _____ C:\Windows\SysWOW64\Drivers\17AA_Lenovo_ThinkPad_L530_2481_52G.MRK
2013-08-26 14:05 - 2011-02-24 19:03 - 00000000 ____D C:\SWTOOLS
2013-08-26 14:04 - 2013-08-26 14:04 - 00000020 ___SH C:\Users\brieskorn\ntuser.ini
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Vorlagen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Startmenü
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Netzwerkumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Lokale Einstellungen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Eigene Dateien
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Druckumgebung
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Documents\Eigene Musik
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Documents\Eigene Bilder
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\brieskorn\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\BRIESK~1\AppData\Local\Verlauf
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Users\BRIESK~1\AppData\Local\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Programme
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-08-26 14:04 - 2013-08-26 14:04 - 00000000 _____ C:\Windows\firstboot.dat
2013-08-26 14:04 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-08-26 14:04 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-08-02 07:45 - 2013-08-02 07:45 - 00000080 _____ C:\Windows\SYSINFO.TXT
2013-08-02 07:45 - 2013-08-02 07:45 - 00000029 _____ C:\Windows\000000A77036.SSW0A30311
2013-08-02 06:36 - 2013-08-02 06:36 - 17811968 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 12320256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 10925568 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 09738240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-02 06:36 - 2013-08-02 06:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-02 06:36 - 2013-08-02 06:36 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 02144768 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01793024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-02 06:36 - 2013-08-02 06:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-02 06:36 - 2013-08-02 06:36 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01346048 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 01103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-02 06:36 - 2013-08-02 06:36 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-02 06:36 - 2013-08-02 06:36 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-02 06:36 - 2013-08-02 06:36 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 03149824 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-08-02 06:35 - 2013-08-02 06:35 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-08-02 06:35 - 2013-08-02 06:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-02 06:35 - 2013-08-02 06:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2013-08-02 06:34 - 2013-08-02 06:34 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-08-02 06:34 - 2013-08-02 06:34 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-08-02 06:32 - 2013-08-02 06:32 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 01914248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-02 06:32 - 2013-08-02 06:32 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-08-02 06:32 - 2013-08-02 06:32 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2013-08-02 06:32 - 2013-08-02 06:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2013-08-02 06:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-08-02 06:31 - 2013-08-02 06:31 - 01659760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-08-02 06:31 - 2013-08-02 06:31 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-08-02 06:31 - 2013-08-02 06:31 - 00288624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-08-02 06:31 - 2013-08-02 06:31 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-02 06:31 - 2013-08-02 06:31 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2013-08-02 06:30 - 2013-08-02 06:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00420064 _____ C:\Windows\SysWOW64\locale.nls
2013-08-02 06:30 - 2013-08-02 06:30 - 00420064 _____ C:\Windows\system32\locale.nls
2013-08-02 06:30 - 2013-08-02 06:30 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-02 06:30 - 2013-08-02 06:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-08-02 06:30 - 2013-08-02 06:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 05559664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 03968880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 03914096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-02 06:29 - 2013-08-02 06:29 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-08-02 06:29 - 2013-08-02 06:29 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-08-02 06:29 - 2013-08-02 06:29 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-08-02 06:29 - 2013-08-02 06:29 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-08-02 06:28 - 2013-08-02 06:28 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 12873728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-08-02 06:28 - 2013-08-02 06:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-08-02 06:27 - 2013-08-02 06:27 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-08-02 06:27 - 2013-08-02 06:27 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-08-02 06:26 - 2013-08-02 06:26 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 01159680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 01077248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-08-02 06:26 - 2013-08-02 06:26 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-08-02 06:26 - 2013-08-02 06:26 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-08-02 06:26 - 2013-08-02 06:26 - 00068864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2013-08-02 06:26 - 2013-08-02 06:26 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00458704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00151920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-08-02 06:25 - 2013-08-02 06:25 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-08-02 06:25 - 2013-08-02 06:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-08-02 06:25 - 2013-08-02 06:25 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01731920 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 01292080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-08-02 06:24 - 2013-08-02 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-08-02 06:23 - 2013-08-02 06:23 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-08-02 06:23 - 2013-08-02 06:23 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-08-02 06:23 - 2013-08-02 06:23 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-08-02 06:23 - 2013-08-02 06:23 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-08-02 06:22 - 2013-08-02 06:22 - 00189047 _____ C:\Windows\IE90-DEU.log
2013-08-02 06:22 - 2013-08-02 06:22 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2013-08-02 06:22 - 2013-08-02 06:18 - 10324827 _____ C:\Windows\de-de.log
2013-08-02 06:21 - 2013-08-02 06:21 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-08-02 06:21 - 2013-08-02 06:21 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\SysWOW64\de
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\system32\de
2013-08-02 06:21 - 2013-08-02 06:21 - 00000000 ____D C:\Windows\system32\0407
2013-08-02 06:21 - 2011-12-08 22:43 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr
2013-08-02 06:21 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-08-02 06:21 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-08-02 06:21 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-08-02 06:21 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-08-02 06:21 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-02 06:21 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-08-02 06:21 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-08-02 06:21 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-08-02 06:21 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME
2013-08-02 06:21 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-02 06:17 - 2009-07-14 06:45 - 00000000 ____D C:\Windows\Setup
2013-08-01 21:11 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-08-01 21:10 - 2013-08-01 21:10 - 00000000 ____D C:\Windows\util
2013-08-01 21:10 - 2013-08-01 20:47 - 00000000 ____D C:\ProgramData\Intel
2013-08-01 21:10 - 2009-07-14 06:46 - 00005075 _____ C:\Windows\DtcInstall.log
2013-08-01 21:09 - 2013-08-01 21:09 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-01 21:08 - 2013-08-01 20:47 - 00000000 ____D C:\Program Files (x86)\Lenovo
2013-08-01 21:07 - 2013-08-01 21:07 - 00000000 ____D C:\Users\Public\Symantec
2013-08-01 21:07 - 2013-08-01 21:07 - 00000000 ____D C:\Program Files (x86)\SymSilent
2013-08-01 21:07 - 2013-08-01 21:07 - 00000000 ____D C:\Program Files (x86)\Symantec
2013-08-01 21:07 - 2013-08-01 20:53 - 00000000 ____D C:\Windows\Downloaded Installations
2013-08-01 21:07 - 2013-08-01 20:46 - 00000000 ____D C:\Program Files\Lenovo
2013-08-01 21:06 - 2013-08-01 21:06 - 00174200 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2013-08-01 21:06 - 2013-08-01 21:06 - 00007530 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2013-08-01 21:06 - 2013-08-01 21:06 - 00003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Windows\system32\Drivers\NISx64
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Program Files\Symantec
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-08-01 21:06 - 2013-08-01 21:06 - 00000000 ____D C:\Program Files (x86)\Norton Internet Security
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Windows\de
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\ProgramData\Nitro
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files\Windows Live
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files\Common Files\Nitro
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files (x86)\Nitro
2013-08-01 21:05 - 2013-08-01 21:05 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-08-01 21:05 - 2013-08-01 20:55 - 00199514 _____ C:\Windows\DirectX.log
2013-08-01 21:05 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-01 21:04 - 2013-08-26 14:04 - 00002131 _____ C:\Users\brieskorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2013-08-01 21:04 - 2013-08-01 21:04 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-08-01 21:04 - 2013-08-01 21:04 - 00000000 ____D C:\Program Files (x86)\Microsoft SkyDrive
2013-08-01 21:03 - 2013-08-01 21:03 - 00000000 ____D C:\Program Files (x86)\SugarSync
2013-08-01 21:02 - 2013-08-01 20:56 - 00000000 ____D C:\ProgramData\Ulead Systems
2013-08-01 21:02 - 2013-08-01 20:54 - 00000000 ____D C:\Program Files (x86)\Corel
2013-08-01 21:02 - 2013-08-01 20:46 - 00000000 ____D C:\Program Files (x86)\Intel
2013-08-01 21:02 - 2013-08-01 20:45 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-01 21:01 - 2009-07-14 06:45 - 00293840 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____D C:\Program Files\Protector Suite
2013-08-01 21:00 - 2013-08-01 21:00 - 00000000 ____D C:\Program Files\Common Files\SPBA
2013-08-01 21:00 - 2013-08-01 20:59 - 00000000 ____D C:\Program Files\ThinkVantage Fingerprint Software
2013-08-01 21:00 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-08-01 20:59 - 2013-08-01 20:59 - 00196608 _____ C:\Windows\ocsetup_install_OEMHelpCustomization.etl
2013-08-01 20:59 - 2013-08-01 20:59 - 00028704 _____ C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt
2013-08-01 20:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-08-01 20:58 - 2013-08-01 20:58 - 00000000 ____D C:\ProgramData\InterVideo
2013-08-01 20:55 - 2013-08-01 20:55 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-08-01 20:55 - 2013-08-01 20:55 - 00000000 ____D C:\Program Files (x86)\Lenovo Registration
2013-08-01 20:55 - 2013-08-01 20:55 - 00000000 ____D C:\Program Files (x86)\Evernote
2013-08-01 20:54 - 2013-08-01 20:54 - 00000000 ____D C:\ProgramData\Corel
2013-08-01 20:54 - 2013-08-01 20:54 - 00000000 ____D C:\Program Files\MLPS
2013-08-01 20:54 - 2013-08-01 20:47 - 00000000 ____D C:\Program Files\Common Files\Lenovo
2013-08-01 20:53 - 2013-08-26 14:04 - 00000000 ____D C:\Users\brieskorn\AppData\Roaming\Macromedia
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\ProgramData\Adobe
2013-08-01 20:53 - 2013-08-01 20:53 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-08-01 20:52 - 2013-08-01 20:52 - 00002958 _____ C:\Windows\System32\Tasks\PMTask
2013-08-01 20:52 - 2013-08-01 20:52 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2013-08-01 20:52 - 2013-08-01 20:52 - 00000000 ____D C:\Program Files (x86)\Dolby Advanced Audio v2
2013-08-01 20:52 - 2013-08-01 20:51 - 00000000 ____D C:\Program Files (x86)\ThinkPad
2013-08-01 20:52 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media
2013-08-01 20:51 - 2013-08-01 20:51 - 00015402 _____ C:\Windows\system32\results.xml
2013-08-01 20:51 - 2013-08-01 20:45 - 00000000 ____D C:\Program Files\ThinkPad
2013-08-01 20:50 - 2010-11-21 05:47 - 00004986 _____ C:\Windows\PFRO.log
2013-08-01 20:49 - 2013-08-01 20:49 - 00000000 ____D C:\Program Files\Common Files\Intel
2013-08-01 20:49 - 2013-08-01 20:46 - 00000000 ____D C:\Intel
2013-08-01 20:48 - 2013-08-01 20:48 - 00002280 _____ C:\RHDSetup.log
2013-08-01 20:48 - 2013-08-01 20:48 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-08-01 20:48 - 2013-08-01 20:48 - 00000000 ____D C:\Program Files\Realtek
2013-08-01 20:48 - 2013-08-01 20:46 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-08-01 20:47 - 2013-08-01 20:47 - 00000000 ____D C:\Program Files\Intel
2013-08-01 20:46 - 2013-08-01 20:46 - 00000207 _____ C:\setup.log
2013-08-01 20:46 - 2013-08-01 20:46 - 00000000 ____D C:\Windows\SysWOW64\sda
2013-08-01 20:46 - 2013-08-01 20:46 - 00000000 ____D C:\Program Files (x86)\Integrated Camera Driver
2013-08-01 20:45 - 2013-08-01 20:45 - 00000000 ____D C:\Program Files (x86)\ThinkPad Wireless LAN Adapter Software
2013-08-01 20:45 - 2013-08-01 20:45 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-08-01 20:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-08-01 20:41 - 2013-08-01 20:41 - 00011364 _____ C:\Windows\DPINST.LOG
2013-08-01 20:41 - 2013-08-01 20:41 - 00000000 ____D C:\Program Files\Elantech
2013-08-01 20:41 - 2013-08-01 20:41 - 00000000 ____D C:\Program Files\DIFX
2013-08-01 20:40 - 2011-02-24 19:05 - 00005949 _____ C:\Windows\TSSysprep.log
2013-08-01 20:38 - 2013-08-01 20:38 - 00000000 ____D C:\Windows\CSC
2013-08-01 14:14 - 2013-08-01 14:14 - 00000000 ____D C:\mfg
2013-08-01 14:06 - 2009-07-14 07:32 - 00032768 _____ C:\Windows\system32\config\BCD-Template
2013-08-01 13:57 - 2013-08-01 14:06 - 00000012 _____ C:\Windows\CSUP.TXT

Files to move or delete:
====================
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\ff8ab9ad\002fa379_733acd01\DisplayBrightnessApi.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\fd3504c5\00eed299_733acd01\LenovoSolutionCenter.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\cf6bfc3a\00a2979e_733acd01\MessageCenterPlus.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\c9831beb\002fa379_733acd01\CoreAudioApi.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\be71e0b2\006afb81_733acd01\ScreenRotate.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\b8f1b098\0048359c_733acd01\LenovoTV.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\8a4601d9\00b37a91_733acd01\Flickr.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\87775c01\00fcf9a0_733acd01\Wikipedia.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\71a6e729\00b5955e_d6d9cc01\AccuWeatherTile.resources.DLL
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\7139444d\00a5538a_733acd01\AccuWeatherTile.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\6e5eda8c\00671b6a_cde0cc01\NewsTile.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\6a3c39ab\001777a3_e9d9cc01\SugarSync.SimpleTapAddons.FileManager.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\5b47f53a\00782289_733acd01\EvernoteLauncher.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\4b600c4f\003a0e95_733acd01\Kayak.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\4b3d1707\003a0e95_733acd01\Groupon.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\36722bcd\00b5955e_d6d9cc01\AccuWeatherTile.resources.DLL
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\36659d5a\00673f96_733acd01\LenovoMusic.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\28280a61\00f18e85_733acd01\DefaultTheme.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\154e6263\00a5538a_733acd01\PriceGrabber.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\14fc1fe4\00fcf9a0_733acd01\Skype.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\10e4922c\00cfc89f_733acd01\MSOffice.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\0f0977c2\005cd47a_733acd01\WirelessApi.dll
C:\Users\BRIESK~1\AppData\Local\Temp\SimpleTap\assembly\dl3\0644d59e\00d2848b_733acd01\SimpleTapAppStoreAddon.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2011-02-24 19:04

==================== End Of Log ============================
         
jetzt die Additionteile?
__________________

Alt 27.08.2013, 14:37   #19
schrauber
/// the machine
/// TB-Ausbilder
 

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



genau
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.08.2013, 15:47   #20
falte
 
windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



OK, dann hier der Teil 1:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-08-2013 01
Ran by brieskorn at 2013-08-27 08:07:22
Running from C:\Users\brieskorn\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Adobe AIR (x32 Version: 3.2.0.2070)
Adobe Flash Player 10 ActiveX (x32 Version: 10.0.32.18)
Adobe Reader X (10.1.0) MUI (x32 Version: 10.1.0)
Anzeige am Bildschirm (Version: 6.72.00)
Burn.Now 4.5 (x32 Version: 4.5.0)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
Corel Burn.Now Lenovo Edition (x32 Version: 4.5.0)
Corel DVD MovieFactory 7 (x32 Version: 7.0.0)
Corel DVD MovieFactory Lenovo Edition (x32 Version: 7.0.0)
Corel WinDVD (x32 Version: 10.0.6.385)
Create Recovery Media (x32 Version: 1.20.0.00)
D3DX10 (x32 Version: 15.4.2368.0902)
Direct DiscRecorder (x32 Version: 1.00.0000)
Disable AMT Profile Synchronization Pop-up for Windows XP/Vista/7 (Version: 1.00)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.7)
dows-Treiberpaket - ELAN (ETD) Mouse  (05/16/2012 10.4.8.3) (Version: 05/16/2012 10.4.8.3)
Energie-Manager (x32 Version: 6.32)
Evernote v. 4.2.3 (x32 Version: 4.2.3.15)
Fotogalerie (x32 Version: 16.4.3505.0912)
Integrated Camera Driver Installer Package Ver.1.2.1.16 (x32 Version: 1.2.1.16)
Intel AppUp(SM) center (x32 Version: 3.6.1.33057.10)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 8.0.3.1427)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2696)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.4.220)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Junk Mail filter update (x32 Version: 16.4.3505.0912)
Lenovo Auto Scroll Utility (Version: 1.11)
Lenovo Patch Utility (x32 Version: 1.3.0.9)
Lenovo Patch Utility 64 bit (Version: 1.3.0.9)
Lenovo Registration (x32 Version: 1.0.3)
Lenovo SimpleTap (Version: 3.2.0005.00)
Lenovo Solution Center (Version: 1.1.007.00)
Lenovo User Guide (x32 Version: 1.0.0009.00)
Lenovo Warranty Information (x32 Version: 1.0.0005.00)
Lenovo Welcome (x32 Version: 3.1.0020.00)
Message Center Plus (Version: 3.1.0004.00)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office (x32 Version: 15.0.4420.1017)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3505.0912)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
Nitro Pro 8 (Version: 8.0.10.9)
Norton Internet Security (x32 Version: 19.1.0.28)
Photo Gallery (x32 Version: 16.4.3505.0912)
RapidBoot HDD Accelerator (x32 Version: 1.00.0802)
RapidBoot Shield (Version: 1.23)
Realtek Ethernet Controller Driver (x32 Version: 7.50.1123.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6602)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.29011)
Registry Patch to Enable Maximum Power Saving on WiFi Adapters for Windows 7 (Version: 1.00)
SugarSync Manager (x32 Version: 1.9.61.90905)
System Update (x32 Version: 4.03.0017)
ThinkPad Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.2700)
ThinkPad Power Management Driver (Version: 1.65.05.20)
ThinkPad UltraNav Driver (Version: 10.4.8.3)
ThinkPad Wireless LAN Adapter Software (x32 Version: 1.00.0031.1)
ThinkVantage Communications Utility (Version: 3.0.34.0)
ThinkVantage Fingerprint Software (Version: 5.9.6.7084)
ThinkVantage System für aktiven Festplattenschutz (Version: 1.76)
VIP Access (x32 Version: 2.0.5.13)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Mail (x32 Version: 16.4.3505.0912)
Windows Live Messenger (x32 Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Live Writer (x32 Version: 16.4.3505.0912)
Windows Live Writer Resources (x32 Version: 16.4.3505.0912)
Windows-Treiberpaket - Intel (iaStor) hdc  (11/29/2011 11.0.0.1032) (Version: 11/29/2011 11.0.0.1032)
Windows-Treiberpaket - Lenovo 1.65.05.20 (02/29/2012 1.65.05.20) (Version: 02/29/2012 1.65.05.20)

==================== Restore Points  =========================
         
und noch Teil 2:
Code:
ATTFilter
==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {1E8371D9-A4FD-49C4-8631-94F59AB49E9E} - System32\Tasks\TVT\TVSUUpdateTask_gf_brieskorn => C:\Program Files (x86)\Lenovo\System Update\tvsu.exe [2012-06-05] ()
Task: {267D4973-DD07-4944-BF51-A7D43BBFDCAF} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe [2011-08-11] (Symantec Corporation)
Task: {2DADC7CA-4350-4D26-B26B-B0B3834D374C} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {33BA281C-6EA2-4AD9-97F2-257276595D8D} - System32\Tasks\PMTask => C:\PROGRA~2\ThinkPad\UTILIT~1\PwmIdTsv.exe [2012-05-15] (Lenovo Group Limited)
Task: {3A68DC04-54A7-46E3-AB51-FDD6C990EBC2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {87C79B70-CFC6-4FB9-ABF2-889DBF295DB1} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2012-05-16] (Lenovo)
Task: {905A1E62-3702-484E-8358-6118568B09CB} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2012-05-15] (Lenovo)
Task: {9CC747DB-F83A-436A-8897-93F8B784F92A} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for gf.brieskorn => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2012-05-25] (Lenovo)
Task: {AD58436D-648E-4909-8173-23E940FC0A88} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2012-05-16] ()
Task: {C5A0E389-5DFD-4E1B-805F-F38EDEFFB5F6} - System32\Tasks\TVT\TVSUUpdateTask_WIN-S5H4HR4KU2Q_Administrator => C:\Program Files (x86)\Lenovo\System Update\tvsu.exe [2012-06-05] ()
Task: {CA489087-E6D1-401B-9B37-1C2ABB152A1E} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe [2011-08-11] (Symantec Corporation)
Task: {E73E4817-0217-4ABB-B175-9E57ED2C98C0} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\WSCStub.exe [2011-08-13] (Symantec Corporation)
Task: {EC9E40F3-BC1A-43FD-9FD3-D3FF403B6C5B} - System32\Tasks\Lenovo\Run TVSU Once => C:\SWTOOLS\DRIVERS\utils\TVSUHook.exe [2012-06-05] ()
Task: {F24C6F6D-5BC1-40A8-90F2-573369D2D457} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2012-05-16] ()


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/26/2013 02:17:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (08/26/2013 02:16:23 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126


Microsoft Office Sessions:
=========================
Error: (08/26/2013 02:17:04 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 3671.87 MB
Available physical RAM: 2291.29 MB
Total Pagefile: 7341.93 MB
Available Pagefile: 5809.51 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (Windows7_OS) (Fixed) (Total:450.62 GB) (Free:421.65 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: () (Removable) (Total:7.45 GB) (Free:7.45 GB) FAT32
Drive q: (Lenovo_Recovery) (Fixed) (Total:13.67 GB) (Free:3.58 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 12419DEE)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=451 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=14 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 0280110E)
Partition 1: (Active) - (Size=7 GB) - (Type=0B)

==================== End Of Log ============================
         
jetzt bin ich allerdings wieder off...


Alt 27.08.2013, 21:15   #21
schrauber
/// the machine
/// TB-Ausbilder
 

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



Sorry hatte Stress. Was ich deinstallieren würde wenn es meiner wäre:

Norton Internet Security (x32 Version: 19.1.0.28)
SugarSync Manager (x32 Version: 1.9.61.90905)
System Update (x32 Version: 4.03.0017)


Alles von Lenovo was drauf ist würd ich drauf lassen, für die Garantie und Diagnose.
__________________
--> windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?

Alt 28.08.2013, 09:41   #22
falte
 
windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



kannst du mir nochmal einen tipp bzgl. des WIN-Keys geben?

Alt 28.08.2013, 10:44   #23
schrauber
/// the machine
/// TB-Ausbilder
 

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Standard

windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?



Was genau meinst Du?

Computer > Rechtsklick > Eigenschaften

in dem neuen Fenster runter scrollen, dort steht der aktuelle Key.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?
betriebssystem, daten, datenträger, gen, lenovo, neuaufsetzen, rechner, richtig, schlechte, sitze, thinkpad, win, win 7, windows, windows 8



Ähnliche Themen: windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?


  1. BlueScreen nach Windows neuaufsetzen
    Netzwerk und Hardware - 12.10.2015 (8)
  2. Windows 7: System wird langsam, Rechner bleibt beim Herunterfahren manchmal hängen
    Log-Analyse und Auswertung - 24.06.2015 (13)
  3. Problem beim Neuaufsetzen von Windows 7
    Alles rund um Windows - 16.02.2015 (5)
  4. Festplatte kaputt oder Fehler beim Neuaufsetzen?
    Netzwerk und Hardware - 24.01.2015 (10)
  5. Windows 7, Seitenaufbau mit Chrome erst beim 2. oder 3. Versuch
    Log-Analyse und Auswertung - 01.09.2014 (11)
  6. System neuaufsetzen [WINDOWS 7]
    Alles rund um Windows - 27.07.2014 (33)
  7. Windows 7 Rechner nach mehrmaligem Neuaufsetzen evt. immer noch im Botnetz
    Plagegeister aller Art und deren Bekämpfung - 20.01.2014 (9)
  8. Windows XP bleiben, oder doch Windows Vista oder Windows 7?
    Alles rund um Windows - 12.01.2014 (7)
  9. Windows 2003 Server - Mindestens ein Dienst oder Treiber wurde beim Systemstart nicht gestartet
    Alles rund um Windows - 10.08.2012 (7)
  10. Frage zum Neuaufsetzen (windows updates)
    Diskussionsforum - 20.06.2012 (2)
  11. Windows security meldung beim surfen im internet , 100 euro oder 24 stunden alles gelöscht
    Plagegeister aller Art und deren Bekämpfung - 04.02.2012 (9)
  12. Windows 7 Neuaufsetzen - Anleitung
    Anleitungen, FAQs & Links - 18.09.2011 (0)
  13. Windows XP Neuaufsetzen - Anleitung
    Anleitungen, FAQs & Links - 11.09.2011 (0)
  14. Fehlermeldung beim Start von Windows 7 - Rechner langsam - HiJackThis Log Auswertung
    Log-Analyse und Auswertung - 11.09.2010 (5)
  15. windows stottert beim öffnen von audios videos oder spielen
    Log-Analyse und Auswertung - 15.08.2009 (4)
  16. Neuaufsetzen von windows
    Alles rund um Windows - 19.07.2009 (5)
  17. Neuaufsetzen des Systems (Windows XP)
    Log-Analyse und Auswertung - 07.10.2007 (15)

Zum Thema windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? - Logs in Stücke teilen und dann posten - windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner?...
Archiv
Du betrachtest: windows 8 oder 7 beim neuaufsetzen von windows bei nagelneuem rechner? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.