Hallo liebe Community! Ich bin ganz neu hier , aber mir wurde empfohlen falls man nicht weiter weiß das man hier die beste Hilfe bekommt!

Zu meinen Problem!

Ich habe diese Woche echt merkwürdige ereignisse auf meinen Rechner festgestellt!

Ich hatte 0 Viren bzw. schädliche Programme auf meiner Platte!

Trotzdem gelang es jemadnem auf meine Emailkonten zuzugreifen , Passwörter zu ändern sogar als ich das Passwort resetted hatte per mail , wurde es nach 1h gleich wieder verändert !

Z.B bekam ich in LEague of Legends (F2P MOBA GAME) eine sehr lustige meldung die folgt : Ein anderer Computer hatt sich auf ihren Account eingeloggt , der client schließt sich jetzt! Alles schon mit dem support team geregelt gehabt , neue email erstellt , nach 2h das gleiche problem wieder!


Update : neue emailadresse wurde geändert , mein LoL account weider futsch ! keinen plan mehr , echt ich bin voller wut!

Mail passwort von der neuen Mailadresse wurde verändert!

Der LoL Account auch (email und Passwort)

Zu meiner Frage!

Ich habe die komplette platte formatiert! Und dennoch das gleiche Problem! Ich bin echt ratlos und weiß nicht mehr weiter was ich noch tun soll!

Ich besitze Eset Nod32 Smartsecurity und Malwarebytes auf der aktuellsten Version

Router : THOMSON TG585 v7

System , Win 7 64Bit , 8GB DDR3RAM , AMD phenom X4 quad core proz.

Hardware is ja ned so wichtig denk ich!



Bitte um Hilfe

Beste Grüsse aus ÖSterreich Christoph

das schlimmste ist ja , ich schreib nen kollegen er soll mich bitte auf der PS3 halt der freundesliste hinzufügen , schreib ihm den namen : 10minuten später steht da : jemand anderer hatt sich eingeloggt auf dem account!" ich sitz da und denk mir nur : *TF is going on ( PS3 benutzt email und den WPK code oder so wie der heisst

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Upfate :

Addition.txtFRST Additions Logfile:
[CODE]Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Syrus at 2013-10-11 08:28:02
Running from C:\Users\Syrus\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}

==================== Installed Programs ======================

Adobe AIR (x32 Version: 3.9.0.1030)
ESET Smart Security (Version: 7.0.302.7)
Gameforge Live 1.9.0 "Legend" (x32 Version: 1.9.0)
Google Chrome (x32 Version: 30.0.1599.69)
Google Update Helper (x32 Version: 1.3.21.153)
League of Legends (x32 Version: 3.0.1)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
NVIDIA 3D Vision Treiber 327.23 (Version: 327.23)
NVIDIA Grafiktreiber 327.23 (Version: 327.23)
NVIDIA Install Application (Version: 2.1002.133.889)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2723)
NVIDIA Systemsteuerung 327.23 (Version: 327.23)
NVIDIA Update 1.14.17 (Version: 1.14.17)
NVIDIA Update Components (Version: 1.14.17)
Pando Media Booster (x32 Version: 2.6.0.7)
S.K.I.L.L. - Special Force 2 (x32)
WinRAR 5.00 (64-Bit) (Version: 5.00.0)

==================== Restore Points =========================

10-10-2013 14:45:07 Windows Update
10-10-2013 14:51:25 Windows Update
10-10-2013 15:08:33 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert
10-10-2013 15:10:01 Microsoft Visual C++ 2005 Redistributable wird installiert
10-10-2013 15:11:15 Installed League of Legends
10-10-2013 15:11:47 DirectX wurde installiert
10-10-2013 19:35:01 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {35A85C82-99A3-4476-932E-2CD4A5048281} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-10] (Google Inc.)
Task: {39AA8FB3-A665-4911-8670-5D6A4FA799DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-10] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-10 16:53 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-10 16:53 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-10 16:53 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-10 16:53 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-10 16:53 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-10-10 16:53 - 2013-10-03 08:03 - 13611984 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/11/2013 08:18:11 AM) (Source: Chrome) (User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=30.0.1599.69;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\fb8c0eee-0eee-4e9a-80a3-505b3f9c6060.dmp

Error: (10/10/2013 11:15:55 PM) (Source: Chrome) (User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=30.0.1599.69;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\d1b5d80c-cfe9-4612-a375-75fe36841a6c.dmp

Error: (10/10/2013 10:42:30 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: daemonu.exe, Version: 1.14.17.0, Zeitstempel: 0x52314d1a
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x72df6a64
ID des fehlerhaften Prozesses: 0x3e4
Startzeit der fehlerhaften Anwendung: 0xdaemonu.exe0
Pfad der fehlerhaften Anwendung: daemonu.exe1
Pfad des fehlerhaften Moduls: daemonu.exe2
Berichtskennung: daemonu.exe3

Error: (10/10/2013 10:42:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvSCPAPISvr.exe, Version: 7.17.13.2723, Zeitstempel: 0x52315920
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x72df6a64
ID des fehlerhaften Prozesses: 0x2e8
Startzeit der fehlerhaften Anwendung: 0xnvSCPAPISvr.exe0
Pfad der fehlerhaften Anwendung: nvSCPAPISvr.exe1
Pfad des fehlerhaften Moduls: nvSCPAPISvr.exe2
Berichtskennung: nvSCPAPISvr.exe3

Error: (10/10/2013 10:37:24 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{60042969-6CCA-46CD-81D4-22A056C989F3}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}HB_StartScreenSaver

Error: (10/10/2013 08:45:11 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{60042969-6CCA-46CD-81D4-22A056C989F3}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}HB_StartScreenSaver

Error: (10/10/2013 06:06:44 PM) (Source: EventSystem) (User: )
Description: 80070005EventSystem.EventSubscription{0D42575B-3602-462F-ACF9-CFDF6A224A7A}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}SLSVC_LOGON


System errors:
=============
Error: (10/10/2013 10:47:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet:
%%16405

Error: (10/10/2013 10:42:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Druckwarteschlange" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (10/10/2013 10:42:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spooler" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (10/10/2013 10:42:31 PM) (Source: Service Control Manager) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/10/2013 10:42:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "ESET Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (10/10/2013 10:42:27 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst ESET Service erreicht.

Error: (10/10/2013 10:42:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "ESET Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/10/2013 10:42:22 PM) (Source: Service Control Manager) (User: )
Description: Dienst "NVIDIA Stereoscopic 3D Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (10/10/2013 10:41:33 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/10/2013 04:58:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "ESET Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.


Microsoft Office Sessions:
=========================
Error: (10/11/2013 08:18:11 AM) (Source: Chrome)(User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=30.0.1599.69;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\fb8c0eee-0eee-4e9a-80a3-505b3f9c6060.dmp

Error: (10/10/2013 11:15:55 PM) (Source: Chrome)(User: NT-AUTORITÄT)
Description: Chrome has encountered a fatal error.
ver=30.0.1599.69;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\d1b5d80c-cfe9-4612-a375-75fe36841a6c.dmp

Error: (10/10/2013 10:42:30 PM) (Source: Application Error)(User: )
Description: daemonu.exe1.14.17.052314d1aunknown0.0.0.000000000c000000572df6a643e401cec5f92e0aeabbC:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exeunknown7aca0aec-31ec-11e3-ac1f-e0cb4eb496cf

Error: (10/10/2013 10:42:17 PM) (Source: Application Error)(User: )
Description: nvSCPAPISvr.exe7.17.13.272352315920unknown0.0.0.000000000c000000572df6a642e801cec5f8cebda7b4C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exeunknown72ec3f71-31ec-11e3-ac1f-e0cb4eb496cf

Error: (10/10/2013 10:37:24 PM) (Source: EventSystem)(User: )
Description: 80070005EventSystem.EventSubscription{60042969-6CCA-46CD-81D4-22A056C989F3}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}HB_StartScreenSaver

Error: (10/10/2013 08:45:11 PM) (Source: EventSystem)(User: )
Description: 80070005EventSystem.EventSubscription{60042969-6CCA-46CD-81D4-22A056C989F3}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}HB_StartScreenSaver

Error: (10/10/2013 06:06:44 PM) (Source: EventSystem)(User: )
Description: 80070005EventSystem.EventSubscription{0D42575B-3602-462F-ACF9-CFDF6A224A7A}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}SLSVC_LOGON


==================== Memory info ===========================

Percentage of memory in use: 23%
Total physical RAM: 8191.18 MB
Available physical RAM: 6296.61 MB
Total Pagefile: 16380.49 MB
Available Pagefile: 14009.47 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:257.66 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: E086E086)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST.txt
FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Syrus (administrator) on SYRUS-PC on 11-10-2013 08:27:14
Running from C:\Users\Syrus\Desktop
Windows 7 Home Premium (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Microsoft Corporation) C:\Windows\system32\LogonUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x22F98C2CC8C5CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 10.0.0.138

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.com/", "hxxp://search.conduit.com/?ctid=CT3281675&SearchSource=48&CUI=UN10009582249715289&UM=2"
CHR Extension: (From Dust) - C:\Users\Syrus\AppData\Local\Google\Chrome\User Data\Default\Extensions\anelkojiepicmcldgnmkplocifmegpfj\0.0.0.23_0
CHR Extension: (Google Docs) - C:\Users\Syrus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Syrus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Syrus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Syrus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Syrus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Syrus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

==================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)

==================== Drivers (Whitelisted) ====================

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-16] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-16] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-16] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-16] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-16] (ESET)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-16] (ESET)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-11 08:25 - 2013-10-11 08:25 - 01954124 _____ (Farbar) C:\Users\Syrus\Downloads\FRST64 (1).exe
2013-10-11 08:25 - 2013-10-11 08:25 - 00000000 ____D C:\FRST
2013-10-11 08:24 - 2013-10-11 08:24 - 01954124 _____ (Farbar) C:\Users\Syrus\Desktop\FRST64.exe
2013-10-10 22:55 - 2013-10-10 22:55 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\LolClient
2013-10-10 22:55 - 2013-10-10 22:55 - 00000000 ____D C:\ProgramData\Adobe
2013-10-10 22:54 - 2013-10-10 22:55 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Adobe
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Macromedia
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Syrus\AppData\Local\Adobe
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-10-10 22:53 - 2013-10-10 22:53 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Syrus\Downloads\AdobeAIRInstaller.exe
2013-10-10 22:29 - 2010-09-14 08:45 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2013-10-10 22:29 - 2010-09-14 08:07 - 00276992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcncsvc.dll
2013-10-10 22:14 - 2013-10-10 22:14 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-10 22:14 - 2009-09-10 08:28 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2013-10-10 22:14 - 2009-09-10 07:52 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2013-10-10 22:14 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-10 22:14 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-10 22:13 - 2013-10-10 22:47 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-10 22:13 - 2013-10-10 22:14 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-10 22:13 - 2013-09-12 09:25 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-10-10 22:13 - 2013-09-12 09:25 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-10-10 22:13 - 2013-09-12 09:25 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-10-10 22:13 - 2013-09-12 09:25 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-10-10 22:13 - 2013-09-12 09:25 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-10-10 22:13 - 2013-09-12 09:25 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-10-10 22:12 - 2013-10-10 22:14 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-10-10 22:12 - 2013-10-10 22:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-10-10 22:12 - 2013-09-17 22:22 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-10-10 22:12 - 2013-09-17 22:22 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-10-10 22:07 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 22:07 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-10-10 22:07 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-10-10 22:07 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-10-10 22:03 - 2009-10-10 05:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2013-10-10 21:58 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-10-10 21:58 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2013-10-10 21:58 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2013-10-10 21:58 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2013-10-10 21:58 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2013-10-10 21:58 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2013-10-10 21:58 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2013-10-10 21:58 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2013-10-10 21:58 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2013-10-10 21:58 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2013-10-10 21:58 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2013-10-10 21:47 - 2012-12-16 18:52 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 21:47 - 2012-12-16 16:40 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 21:47 - 2012-12-16 16:25 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 21:47 - 2012-12-16 16:25 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 21:47 - 2009-10-19 16:46 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 21:47 - 2009-10-19 16:10 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 21:46 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-10-10 21:46 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-10-10 21:46 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-10-10 21:46 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-10-10 21:46 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-10-10 21:46 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-10-10 21:46 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-10-10 21:46 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-10-10 21:42 - 2013-10-10 21:42 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 21:42 - 2013-09-26 01:46 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 21:40 - 2012-03-01 08:54 - 00022896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-10-10 21:40 - 2012-03-01 08:40 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-10-10 21:40 - 2012-03-01 08:35 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-10-10 21:40 - 2012-03-01 07:45 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-10-10 21:40 - 2012-03-01 07:40 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2013-10-10 21:36 - 2010-03-04 06:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2013-10-10 21:34 - 2013-03-19 08:19 - 05497688 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 21:34 - 2013-03-19 07:54 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-10-10 21:34 - 2013-03-19 07:06 - 03958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 21:34 - 2013-03-19 07:06 - 03902312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 21:34 - 2013-03-19 06:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-10-10 21:34 - 2013-03-19 05:19 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-10-10 21:34 - 2013-03-02 07:49 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 21:34 - 2013-03-02 07:49 - 01198080 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 21:34 - 2013-03-02 07:49 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-10-10 21:34 - 2013-03-02 07:44 - 01026560 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-10-10 21:34 - 2013-03-02 07:43 - 09377280 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 21:34 - 2013-03-02 07:43 - 00735744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 21:34 - 2013-03-02 07:43 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-10-10 21:34 - 2013-03-02 07:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-10-10 21:34 - 2013-03-02 07:43 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 21:34 - 2013-03-02 07:43 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-10-10 21:34 - 2013-03-02 07:42 - 12405760 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 21:34 - 2013-03-02 07:42 - 02463744 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 21:34 - 2013-03-02 07:42 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-10-10 21:34 - 2013-03-02 07:42 - 00256000 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-10-10 21:34 - 2013-03-02 07:42 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 21:34 - 2013-03-02 07:06 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 21:34 - 2013-03-02 07:05 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 21:34 - 2013-03-02 07:05 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-10-10 21:34 - 2013-03-02 07:02 - 06032384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-10 21:34 - 2013-03-02 07:02 - 00627200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 21:34 - 2013-03-02 07:02 - 00606208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2013-10-10 21:34 - 2013-03-02 07:02 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-10-10 21:34 - 2013-03-02 07:02 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-10-10 21:34 - 2013-03-02 07:01 - 11019776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 21:34 - 2013-03-02 07:01 - 02077184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 21:34 - 2013-03-02 07:01 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-10-10 21:34 - 2013-03-02 07:01 - 00185856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-10-10 21:34 - 2013-03-02 07:01 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-10 21:34 - 2013-03-02 07:01 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-10 21:34 - 2013-03-02 06:38 - 00482816 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-10-10 21:34 - 2013-03-02 06:03 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-10-10 21:34 - 2013-03-02 05:56 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 21:34 - 2013-03-02 05:56 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-10-10 21:34 - 2013-03-02 05:30 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-10-10 21:34 - 2013-03-02 05:29 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 21:34 - 2013-03-02 05:29 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-10-10 21:34 - 2009-09-03 09:36 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2013-10-10 21:34 - 2009-09-03 09:04 - 01320960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2013-10-10 21:33 - 2013-04-12 16:36 - 01653096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-10-10 21:33 - 2013-01-04 07:41 - 01893224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 21:33 - 2013-01-04 07:40 - 00287576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-10-10 21:33 - 2012-11-30 01:21 - 00420032 _____ C:\Windows\SysWOW64\locale.nls
2013-10-10 21:33 - 2012-11-30 01:19 - 00420032 _____ C:\Windows\system32\locale.nls
2013-10-10 21:33 - 2012-01-04 11:58 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-10-10 21:33 - 2012-01-04 11:03 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2013-10-10 21:33 - 2011-04-29 05:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-10-10 21:33 - 2011-04-29 05:12 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-10-10 21:33 - 2011-04-29 05:12 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-10-10 21:33 - 2011-01-26 08:53 - 00982912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 21:33 - 2011-01-26 08:53 - 00265088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-10-10 21:33 - 2011-01-26 08:31 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-10-10 21:33 - 2010-11-02 07:18 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2013-10-10 21:33 - 2010-11-02 07:12 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-10-10 21:33 - 2010-11-02 06:41 - 00135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsRasterService.dll
2013-10-10 21:33 - 2010-08-04 09:07 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2013-10-10 21:33 - 2010-06-26 07:31 - 01863680 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2013-10-10 21:33 - 2010-06-26 07:14 - 01495040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2013-10-10 21:33 - 2010-05-23 12:15 - 01619456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-10-10 21:33 - 2010-05-23 12:11 - 03181568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2013-10-10 21:33 - 2010-05-23 12:11 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2013-10-10 21:33 - 2010-05-23 10:37 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-10-10 21:33 - 2010-05-23 10:35 - 04068864 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2013-10-10 21:33 - 2010-05-23 10:35 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-10-10 21:33 - 2010-05-23 10:35 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2013-10-10 21:32 - 2013-02-12 17:42 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-10-10 21:32 - 2013-02-12 17:37 - 03138048 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-10-10 21:32 - 2013-02-12 17:31 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-10-10 21:32 - 2013-02-12 17:13 - 02691072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-10-10 21:32 - 2013-02-12 17:07 - 00131072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-10-10 21:32 - 2013-02-12 15:59 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-10-10 21:32 - 2012-11-22 12:32 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-10-10 21:32 - 2012-11-22 11:33 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2013-10-10 21:32 - 2012-11-09 07:34 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-10-10 21:32 - 2012-11-09 06:49 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-10-10 21:32 - 2012-11-02 07:30 - 02001408 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-10-10 21:32 - 2012-11-02 07:30 - 01880064 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-10-10 21:32 - 2012-11-02 06:50 - 01388544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2013-10-10 21:32 - 2012-11-02 06:50 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2013-10-10 21:32 - 2012-06-09 07:30 - 14165504 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-10-10 21:32 - 2012-06-09 06:46 - 12868608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-10-10 21:32 - 2012-03-03 08:29 - 01837568 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2013-10-10 21:32 - 2012-03-03 08:29 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-10-10 21:32 - 2012-03-03 08:29 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2013-10-10 21:32 - 2012-03-03 08:29 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-10-10 21:32 - 2012-03-03 08:29 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-10-10 21:32 - 2012-03-03 07:40 - 01170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2013-10-10 21:32 - 2012-03-03 07:40 - 01074176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-10-10 21:32 - 2012-03-03 07:40 - 00739840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2013-10-10 21:32 - 2012-03-03 07:40 - 00218624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2013-10-10 21:32 - 2012-03-03 07:40 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2013-10-10 21:32 - 2011-11-17 09:14 - 01739160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 21:32 - 2011-11-17 07:41 - 01292592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 21:32 - 2011-05-04 07:30 - 02326016 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-10-10 21:32 - 2011-05-04 07:28 - 02228224 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-10-10 21:32 - 2011-05-04 07:28 - 00779264 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-10-10 21:32 - 2011-05-04 07:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-10-10 21:32 - 2011-05-04 07:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-10-10 21:32 - 2011-05-04 07:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-10-10 21:32 - 2011-05-04 07:24 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-10-10 21:32 - 2011-05-04 07:24 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2013-10-10 21:32 - 2011-05-04 07:24 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-10-10 21:32 - 2011-05-04 06:53 - 01553920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2013-10-10 21:32 - 2011-05-04 06:52 - 01401856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2013-10-10 21:32 - 2011-05-04 06:52 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2013-10-10 21:32 - 2011-05-04 06:52 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2013-10-10 21:32 - 2011-05-04 06:52 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2013-10-10 21:32 - 2011-05-04 06:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2013-10-10 21:32 - 2011-05-04 06:52 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2013-10-10 21:32 - 2011-05-04 06:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2013-10-10 21:32 - 2011-05-04 06:52 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2013-10-10 21:32 - 2011-03-12 14:03 - 00662528 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-10-10 21:32 - 2011-03-12 13:31 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2013-10-10 21:31 - 2013-01-04 07:37 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-10-10 21:31 - 2013-01-04 07:37 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 21:31 - 2013-01-04 07:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-10-10 21:31 - 2013-01-04 07:36 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-10-10 21:31 - 2013-01-04 07:33 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-10-10 21:31 - 2013-01-04 07:30 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-10-10 21:31 - 2013-01-04 07:30 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 07:26 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:51 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-10-10 21:31 - 2013-01-04 06:51 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-10-10 21:31 - 2013-01-04 06:51 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 06:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 05:19 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-10-10 21:31 - 2013-01-04 04:48 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 21:31 - 2013-01-04 04:48 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 21:31 - 2013-01-04 04:48 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 21:31 - 2013-01-04 04:48 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 21:31 - 2013-01-04 04:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 04:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 04:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-10 21:31 - 2013-01-04 04:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-10 21:31 - 2012-12-07 07:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-10-10 21:31 - 2012-12-07 07:35 - 02745856 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-10-10 21:31 - 2012-12-07 07:04 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2013-10-10 21:31 - 2012-12-07 06:57 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2013-10-10 21:31 - 2012-12-07 05:45 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-10-10 21:31 - 2012-12-07 05:45 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2013-10-10 21:31 - 2012-12-07 05:21 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2013-10-10 21:31 - 2012-11-09 07:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-10-10 21:31 - 2012-11-09 06:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-10-10 21:31 - 2012-06-02 07:38 - 00152432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-10-10 21:31 - 2012-06-02 07:38 - 00095088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-10-10 21:31 - 2012-06-02 07:37 - 00459216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-10-10 21:31 - 2012-06-02 07:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-10-10 21:31 - 2012-06-02 06:48 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-10-10 21:31 - 2012-06-02 06:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-10-10 21:31 - 2012-06-02 06:42 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-10-10 21:31 - 2011-11-17 09:12 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-10-10 21:31 - 2011-11-17 09:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-10-10 21:31 - 2011-11-17 09:11 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-10-10 21:31 - 2011-11-17 09:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-10-10 21:31 - 2011-11-17 09:08 - 01446912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-10-10 21:31 - 2011-11-17 09:05 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-10-10 21:31 - 2011-11-17 07:39 - 00314368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2013-10-10 21:31 - 2011-10-15 08:25 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-10-10 21:31 - 2011-10-15 07:48 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2013-10-10 21:31 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-10-10 21:31 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2013-10-10 21:31 - 2011-02-26 08:23 - 02870272 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-10-10 21:31 - 2011-02-26 07:33 - 02614784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2013-10-10 21:31 - 2010-12-23 08:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-10-10 21:31 - 2010-12-23 08:07 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-10-10 21:31 - 2010-12-23 08:02 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-10-10 21:31 - 2010-12-23 07:28 - 00850432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2013-10-10 21:31 - 2010-12-23 07:28 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2013-10-10 21:31 - 2010-12-23 07:24 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2013-10-10 21:31 - 2010-12-21 08:16 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-10-10 21:31 - 2010-12-21 08:16 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 21:31 - 2010-12-21 08:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2013-10-10 21:31 - 2010-12-21 08:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2013-10-10 21:31 - 2010-12-21 08:15 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2013-10-10 21:31 - 2010-12-21 08:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2013-10-10 21:31 - 2010-12-21 08:10 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 21:31 - 2010-12-21 07:38 - 00350720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2013-10-10 21:31 - 2010-12-21 07:38 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 21:31 - 2010-12-21 07:38 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll
2013-10-10 21:31 - 2010-12-21 07:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2013-10-10 21:31 - 2010-12-21 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\slwga.dll
2013-10-10 21:31 - 2010-12-21 07:34 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 21:31 - 2010-10-16 07:17 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2013-10-10 21:31 - 2010-10-16 06:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll
2013-10-10 21:31 - 2010-09-01 07:21 - 14627840 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-10-10 21:31 - 2010-09-01 07:12 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-10-10 21:31 - 2010-09-01 06:29 - 11406848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-10-10 21:31 - 2010-09-01 06:23 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-10-10 21:31 - 2010-08-31 06:32 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll
2013-10-10 21:31 - 2010-08-31 06:32 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll
2013-10-10 21:31 - 2010-08-21 08:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 21:31 - 2010-08-21 07:33 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 21:30 - 2013-03-01 05:32 - 03150848 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 21:30 - 2012-11-20 07:55 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-10-10 21:30 - 2012-11-20 07:10 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-10-10 21:30 - 2012-08-11 02:53 - 00714752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-10-10 21:30 - 2012-08-11 01:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2013-10-10 21:30 - 2012-06-16 07:25 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 21:30 - 2012-06-16 07:25 - 00609792 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-10-10 21:30 - 2012-06-16 06:37 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-10-10 21:30 - 2012-06-16 06:36 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 21:30 - 2012-06-02 07:25 - 01462784 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-10-10 21:30 - 2012-06-02 07:25 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-10-10 21:30 - 2012-06-02 07:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-10-10 21:30 - 2012-06-02 06:45 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-10-10 21:30 - 2012-06-02 06:45 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-10-10 21:30 - 2012-06-02 06:45 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-10-10 21:30 - 2012-05-02 07:32 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2013-10-10 21:30 - 2011-12-28 05:59 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 21:30 - 2011-10-26 07:22 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-10-10 21:30 - 2011-10-26 07:22 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-10-10 21:30 - 2011-10-26 06:28 - 01328640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-10-10 21:30 - 2011-10-26 06:28 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2013-10-10 21:30 - 2011-08-27 07:40 - 00861184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-10-10 21:30 - 2011-08-27 07:40 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-10-10 21:30 - 2011-08-27 06:43 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2013-10-10 21:30 - 2011-08-27 06:43 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-10-10 21:30 - 2011-08-17 07:32 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-10-10 21:30 - 2011-08-17 07:27 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2013-10-10 21:30 - 2011-08-17 07:27 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-10-10 21:30 - 2011-08-17 07:27 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2013-10-10 21:30 - 2011-08-17 07:27 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2013-10-10 21:30 - 2011-08-17 06:26 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2013-10-10 21:30 - 2011-08-17 06:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSNP.ax
2013-10-10 21:30 - 2011-08-17 06:22 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2013-10-10 21:30 - 2011-08-17 06:22 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mpeg2Data.ax
2013-10-10 21:30 - 2011-08-17 06:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSDvbNP.ax
2013-10-10 21:30 - 2011-03-11 08:19 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-10-10 21:30 - 2011-03-11 08:19 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-10-10 21:30 - 2011-03-11 07:40 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2013-10-10 21:30 - 2011-03-11 07:40 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2013-10-10 21:30 - 2011-02-24 08:30 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-10-10 21:30 - 2011-02-24 07:32 - 00288256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2013-10-10 21:30 - 2011-02-05 14:41 - 00640896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2013-10-10 21:30 - 2011-02-05 14:41 - 00556928 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2013-10-10 21:30 - 2011-02-05 14:41 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2013-10-10 21:30 - 2011-02-05 14:41 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2013-10-10 21:30 - 2011-02-05 14:41 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2013-10-10 21:30 - 2011-02-05 14:39 - 00603976 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-10-10 21:30 - 2011-02-05 14:39 - 00518160 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-10-10 21:30 - 2010-11-02 07:18 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2013-10-10 21:30 - 2010-11-02 07:17 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2013-10-10 21:30 - 2010-11-02 07:17 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2013-10-10 21:30 - 2010-11-02 07:16 - 01114624 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2013-10-10 21:30 - 2010-11-02 07:10 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2013-10-10 21:30 - 2010-11-02 07:10 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2013-10-10 21:30 - 2010-11-02 06:40 - 00496128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll
2013-10-10 21:30 - 2010-11-02 06:40 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskcomp.dll
2013-10-10 21:30 - 2010-11-02 06:34 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskeng.exe
2013-10-10 21:30 - 2010-11-02 06:34 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
2013-10-10 21:30 - 2010-08-26 07:27 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2013-10-10 21:30 - 2010-08-26 06:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2013-10-10 21:30 - 2010-06-29 07:39 - 02085376 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2013-10-10 21:30 - 2010-06-29 07:02 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2013-10-10 21:30 - 2010-06-19 08:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2013-10-10 21:30 - 2010-06-19 08:23 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
2013-10-10 21:30 - 2010-01-19 11:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2013-10-10 21:30 - 2010-01-19 11:05 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2013-10-10 21:30 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2013-10-10 21:30 - 2010-01-19 11:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2013-10-10 21:30 - 2010-01-19 11:00 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2013-10-10 21:30 - 2010-01-19 11:00 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2013-10-10 21:30 - 2010-01-19 11:00 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2013-10-10 21:30 - 2010-01-19 11:00 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2013-10-10 21:30 - 2010-01-19 01:29 - 00369152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2013-10-10 21:30 - 2010-01-19 01:29 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2013-10-10 21:30 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2013-10-10 21:30 - 2010-01-19 01:29 - 00085504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2013-10-10 21:30 - 2010-01-19 01:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2013-10-10 21:30 - 2010-01-19 01:28 - 00320512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2013-10-10 21:30 - 2010-01-19 01:28 - 00280064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2013-10-10 21:30 - 2010-01-19 01:28 - 00277504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2013-10-10 21:30 - 2009-12-19 11:50 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2013-10-10 21:30 - 2009-12-19 11:47 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2013-10-10 21:30 - 2009-12-19 11:47 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2013-10-10 21:30 - 2009-12-19 11:47 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2013-10-10 21:30 - 2009-12-19 11:46 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2013-10-10 21:30 - 2009-12-19 11:02 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\avifil32.dll
2013-10-10 21:30 - 2009-12-19 11:02 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mciavi32.dll
2013-10-10 21:30 - 2009-12-19 11:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iyuv_32.dll
2013-10-10 21:30 - 2009-12-19 11:02 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvidc32.dll
2013-10-10 21:30 - 2009-12-19 11:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msyuv.dll
2013-10-10 21:30 - 2009-12-19 11:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrle32.dll
2013-10-10 21:30 - 2009-12-19 11:02 - 00012288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsbyuv.dll
2013-10-10 21:30 - 2009-10-28 08:24 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2013-10-10 21:29 - 2013-02-12 16:02 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-10-10 21:29 - 2012-09-26 00:39 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-10-10 21:29 - 2012-09-25 23:55 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2013-10-10 21:29 - 2012-08-24 20:05 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-10-10 21:29 - 2012-08-24 19:10 - 00172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-10-10 21:29 - 2012-08-02 19:55 - 00574464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-10-10 21:29 - 2012-08-02 19:05 - 00490496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2013-10-10 21:29 - 2012-07-05 00:04 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-10-10 21:29 - 2012-07-05 00:01 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-10-10 21:29 - 2012-07-05 00:01 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-10-10 21:29 - 2012-07-04 23:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2013-10-10 21:29 - 2012-07-04 23:23 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2013-10-10 21:29 - 2012-05-14 07:20 - 00956416 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-10-10 21:29 - 2012-05-05 10:30 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-10-10 21:29 - 2012-05-05 09:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2013-10-10 21:29 - 2012-04-28 05:50 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2013-10-10 21:29 - 2012-04-26 07:34 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2013-10-10 21:29 - 2012-04-26 07:34 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-10-10 21:29 - 2012-04-26 07:28 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-10-10 21:29 - 2012-04-07 14:18 - 03213824 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2013-10-10 21:29 - 2012-04-07 13:34 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2013-10-10 21:29 - 2012-01-03 08:24 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-10-10 21:29 - 2012-01-03 07:44 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2013-10-10 21:29 - 2011-12-16 10:42 - 00634368 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-10-10 21:29 - 2011-12-16 09:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2013-10-10 21:29 - 2011-07-09 04:44 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-10-10 21:29 - 2011-06-15 11:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-10-10 21:29 - 2011-06-15 11:58 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-10-10 21:29 - 2011-06-15 11:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-10-10 21:29 - 2011-06-15 11:58 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-10-10 21:29 - 2011-06-15 11:04 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2013-10-10 21:29 - 2011-06-15 11:04 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2013-10-10 21:29 - 2011-06-15 11:04 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2013-10-10 21:29 - 2011-06-15 11:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2013-10-10 21:29 - 2011-06-15 11:04 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2013-10-10 21:29 - 2011-05-24 13:21 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-10-10 21:29 - 2011-05-24 12:34 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2013-10-10 21:29 - 2011-05-24 12:34 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2013-10-10 21:29 - 2011-05-24 12:34 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2013-10-10 21:29 - 2011-05-24 12:32 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2013-10-10 21:29 - 2011-05-04 04:51 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-10-10 21:29 - 2011-05-04 04:51 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-10-10 21:29 - 2011-05-03 07:21 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-10-10 21:29 - 2011-05-03 06:50 - 00740864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2013-10-10 21:29 - 2011-03-03 08:17 - 00356352 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-10-10 21:29 - 2011-03-03 08:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-10-10 21:29 - 2011-03-03 08:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-10-10 21:29 - 2011-03-03 07:29 - 00269824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2013-10-10 21:29 - 2011-03-03 07:27 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2013-10-10 21:29 - 2011-02-23 07:15 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-10-10 21:29 - 2011-02-12 08:14 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-10-10 21:29 - 2010-12-18 08:08 - 01097216 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-10-10 21:29 - 2010-12-18 07:26 - 01034240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-10-10 21:29 - 2010-08-21 08:38 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2013-10-10 21:29 - 2010-08-21 07:36 - 00738816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll
2013-10-10 21:29 - 2010-05-05 09:37 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2013-10-10 21:29 - 2010-05-05 08:46 - 00363520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2013-10-10 21:29 - 2009-08-29 09:50 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2013-10-10 21:29 - 2009-08-29 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msasn1.dll
2013-10-10 21:28 - 2013-01-24 07:41 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-10-10 21:28 - 2012-11-02 07:27 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-10-10 21:28 - 2012-11-02 06:48 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2013-10-10 21:28 - 2012-09-06 19:38 - 00295792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2013-10-10 21:28 - 2012-03-17 09:55 - 00075632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-10-10 21:28 - 2011-06-16 07:31 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-10-10 21:28 - 2011-06-16 06:35 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2013-10-10 21:28 - 2011-04-27 04:57 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2013-10-10 21:28 - 2011-04-22 22:18 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2013-10-10 21:28 - 2011-02-18 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-10-10 21:28 - 2011-02-18 07:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2013-10-10 21:28 - 2010-10-16 07:23 - 00112000 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-10-10 21:28 - 2010-07-29 08:30 - 00082944 _____ (Radius Inc.) C:\Windows\SysWOW64\iccvid.dll
2013-10-10 21:28 - 2010-03-05 09:52 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2013-10-10 21:28 - 2010-03-05 09:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2013-10-10 21:27 - 2010-08-27 08:14 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2013-10-10 21:27 - 2010-08-27 07:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2013-10-10 20:59 - 2012-02-11 08:29 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-10-10 20:59 - 2012-02-11 08:29 - 00067584 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2013-10-10 20:58 - 2011-11-19 17:07 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2013-10-10 20:58 - 2011-11-19 16:06 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2013-10-10 20:46 - 2013-10-10 20:46 - 00000324 _____ C:\Windows\PFRO.log
2013-10-10 20:30 - 2013-10-10 20:30 - 00306352 _____ C:\Users\Syrus\Downloads\portscan.zip
2013-10-10 20:30 - 2013-10-10 20:30 - 00000000 ____D C:\Users\Syrus\Downloads\portscan
2013-10-10 20:26 - 2013-10-10 20:26 - 00000000 ____D C:\Users\Syrus\Downloads\FastIPChangerV1.7
2013-10-10 20:26 - 2013-10-10 20:26 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\WinRAR
2013-10-10 20:24 - 2013-10-10 20:24 - 00329658 _____ C:\Users\Syrus\Downloads\FastIPChangerV1.7.zip
2013-10-10 17:30 - 2013-10-10 16:44 - 00000000 ____D C:\Windows\Panther
2013-10-10 17:14 - 2013-10-11 00:04 - 00000000 _____ C:\dfu.log
2013-10-10 17:13 - 2013-10-10 17:13 - 00001950 _____ C:\Users\Public\Desktop\S.K.I.L.L. - Special Force 2.lnk
2013-10-10 17:13 - 2013-10-10 17:13 - 00001067 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2013-10-10 17:13 - 2013-10-10 17:13 - 00000000 ____D C:\Users\Syrus\Downloads\Gameforge Live
2013-10-10 17:13 - 2013-10-10 17:13 - 00000000 ____D C:\Users\Syrus\AppData\Local\Gameforge4d
2013-10-10 17:13 - 2013-10-10 17:13 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2013-10-10 17:12 - 2013-10-10 17:12 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-10 17:12 - 2013-10-10 17:12 - 00000000 ____D C:\Program Files\WinRAR
2013-10-10 17:12 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-10-10 17:12 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-10-10 17:12 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-10-10 17:12 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-10-10 17:12 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-10-10 17:11 - 2013-10-10 17:11 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-10-10 17:11 - 2013-10-10 17:11 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-10-10 17:11 - 2013-10-10 17:11 - 00000000 ____D C:\Riot Games
2013-10-10 17:09 - 2013-10-10 17:09 - 02074056 _____ C:\Users\Syrus\Downloads\winrar-x64-500d.exe
2013-10-10 17:08 - 2013-10-11 00:15 - 00000000 ____D C:\Users\Syrus\AppData\Local\PMB Files
2013-10-10 17:08 - 2013-10-11 00:15 - 00000000 ____D C:\ProgramData\PMB Files
2013-10-10 17:08 - 2013-10-10 17:10 - 19368272 _____ (Gameforge                                                   ) C:\Users\Syrus\Downloads\SKILL_GameforgeLiveSetup.exe
2013-10-10 17:08 - 2013-10-10 17:08 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-10-10 17:07 - 2013-10-10 17:08 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Riot Games
2013-10-10 17:06 - 2013-10-10 17:07 - 34888568 _____ (Riot Games) C:\Users\Syrus\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2013-10-10 17:02 - 2013-08-07 04:22 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\ESET
2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 ____D C:\Users\Syrus\AppData\Local\ESET
2013-10-10 16:57 - 2013-10-10 16:57 - 00000000 ____D C:\ProgramData\ESET
2013-10-10 16:57 - 2013-10-10 16:57 - 00000000 ____D C:\Program Files\ESET
2013-10-10 16:53 - 2013-10-10 16:53 - 01582904 _____ (ESET) C:\Users\Syrus\Downloads\eset_smart_security_live_installer.exe
2013-10-10 16:53 - 2013-10-10 16:53 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-10 16:52 - 2013-10-11 07:57 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 16:52 - 2013-10-11 00:04 - 00058016 _____ C:\Users\Syrus\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-10 16:52 - 2013-10-10 22:47 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-10 16:52 - 2013-10-10 16:53 - 00000000 ____D C:\Users\Syrus\AppData\Local\Google
2013-10-10 16:52 - 2013-10-10 16:53 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-10 16:52 - 2013-10-10 16:52 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-10 16:52 - 2013-10-10 16:52 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-10 16:52 - 2013-10-10 16:52 - 00000000 ____D C:\Users\Syrus\AppData\Local\Deployment
2013-10-10 16:52 - 2013-10-10 16:52 - 00000000 ____D C:\Users\Syrus\AppData\Local\Apps\2.0
2013-10-10 16:51 - 2012-02-15 08:27 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-10-10 16:51 - 2012-02-15 07:44 - 00826368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2013-10-10 16:51 - 2012-02-15 06:46 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-10-10 16:51 - 2010-01-09 09:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-10-10 16:51 - 2010-01-09 08:52 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cabview.dll
2013-10-10 16:46 - 2013-10-10 22:48 - 00000000 ___RD C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-10 16:46 - 2013-10-10 22:48 - 00000000 ___RD C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-10 16:46 - 2013-10-10 16:46 - 00001439 _____ C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-10 16:46 - 2013-10-10 16:46 - 00001405 _____ C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-10-10 16:46 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-10-10 16:46 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2013-10-10 16:46 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-10-10 16:46 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-10-10 16:46 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2013-10-10 16:46 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-10-10 16:46 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2013-10-10 16:45 - 2013-10-10 16:46 - 00000000 ____D C:\Users\Syrus
2013-10-10 16:45 - 2013-10-10 16:45 - 00000020 ___SH C:\Users\Syrus\ntuser.ini
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Vorlagen
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Startmenü
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Netzwerkumgebung
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Lokale Einstellungen
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Eigene Dateien
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Druckumgebung
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Documents\Eigene Musik
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Documents\Eigene Bilder
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\AppData\Local\Verlauf
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\AppData\Local\Anwendungsdaten
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Anwendungsdaten
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 ____D C:\Users\Syrus\AppData\Local\VirtualStore
2013-10-10 16:45 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-10-10 16:45 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-10-10 16:45 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-10 16:45 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Programme
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 __SHD C:\Recovery
2013-10-10 16:36 - 2013-10-10 16:36 - 00001313 _____ C:\Windows\TSSysprep.log
2013-10-10 16:35 - 2013-10-10 23:11 - 01505793 _____ C:\Windows\WindowsUpdate.log
2013-09-17 22:22 - 2013-09-17 22:22 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-17 22:22 - 2013-09-17 22:22 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00022814 _____ C:\Windows\system32\nvinfo.pb
2013-09-16 17:15 - 2013-09-16 17:15 - 00239320 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00239296 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00220232 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00168256 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00062136 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00044120 _____ (ESET) C:\Windows\system32\Drivers\EpfwLWF.sys
2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

==================== One Month Modified Files and Folders =======

2013-10-11 08:25 - 2013-10-11 08:25 - 01954124 _____ (Farbar) C:\Users\Syrus\Downloads\FRST64 (1).exe
2013-10-11 08:25 - 2013-10-11 08:25 - 00000000 ____D C:\FRST
2013-10-11 08:24 - 2013-10-11 08:24 - 01954124 _____ (Farbar) C:\Users\Syrus\Desktop\FRST64.exe
2013-10-11 08:16 - 2009-07-14 06:45 - 00013600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-11 08:16 - 2009-07-14 06:45 - 00013600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-11 07:57 - 2013-10-10 16:52 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-11 00:15 - 2013-10-10 17:08 - 00000000 ____D C:\Users\Syrus\AppData\Local\PMB Files
2013-10-11 00:15 - 2013-10-10 17:08 - 00000000 ____D C:\ProgramData\PMB Files
2013-10-11 00:04 - 2013-10-10 17:14 - 00000000 _____ C:\dfu.log
2013-10-11 00:04 - 2013-10-10 16:52 - 00058016 _____ C:\Users\Syrus\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-10 23:11 - 2013-10-10 16:35 - 01505793 _____ C:\Windows\WindowsUpdate.log
2013-10-10 22:55 - 2013-10-10 22:55 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\LolClient
2013-10-10 22:55 - 2013-10-10 22:55 - 00000000 ____D C:\ProgramData\Adobe
2013-10-10 22:55 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Adobe
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Macromedia
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Syrus\AppData\Local\Adobe
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2013-10-10 22:54 - 2013-10-10 22:54 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-10-10 22:53 - 2013-10-10 22:53 - 18080872 _____ (Adobe Systems Inc.) C:\Users\Syrus\Downloads\AdobeAIRInstaller.exe
2013-10-10 22:50 - 2009-07-14 19:58 - 00643628 _____ C:\Windows\system32\perfh007.dat
2013-10-10 22:50 - 2009-07-14 19:58 - 00126188 _____ C:\Windows\system32\perfc007.dat
2013-10-10 22:50 - 2009-07-14 07:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-10 22:48 - 2013-10-10 16:46 - 00000000 ___RD C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-10 22:48 - 2013-10-10 16:46 - 00000000 ___RD C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-10 22:47 - 2013-10-10 22:13 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-10 22:47 - 2013-10-10 16:52 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-10 22:45 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-10 22:45 - 2009-07-14 06:51 - 00015782 _____ C:\Windows\setupact.log
2013-10-10 22:45 - 2009-07-14 06:45 - 00275856 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 22:41 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-10-10 22:40 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal
2013-10-10 22:14 - 2013-10-10 22:14 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-10-10 22:14 - 2013-10-10 22:14 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-10-10 22:14 - 2013-10-10 22:13 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-10 22:14 - 2013-10-10 22:12 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-10-10 22:13 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-10-10 22:12 - 2013-10-10 22:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-10-10 21:42 - 2013-10-10 21:42 - 00000000 ____D C:\Windows\system32\MRT
2013-10-10 20:46 - 2013-10-10 20:46 - 00000324 _____ C:\Windows\PFRO.log
2013-10-10 20:30 - 2013-10-10 20:30 - 00306352 _____ C:\Users\Syrus\Downloads\portscan.zip
2013-10-10 20:30 - 2013-10-10 20:30 - 00000000 ____D C:\Users\Syrus\Downloads\portscan
2013-10-10 20:26 - 2013-10-10 20:26 - 00000000 ____D C:\Users\Syrus\Downloads\FastIPChangerV1.7
2013-10-10 20:26 - 2013-10-10 20:26 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\WinRAR
2013-10-10 20:24 - 2013-10-10 20:24 - 00329658 _____ C:\Users\Syrus\Downloads\FastIPChangerV1.7.zip
2013-10-10 19:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-10 17:30 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-10-10 17:30 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-10-10 17:13 - 2013-10-10 17:13 - 00001950 _____ C:\Users\Public\Desktop\S.K.I.L.L. - Special Force 2.lnk
2013-10-10 17:13 - 2013-10-10 17:13 - 00001067 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2013-10-10 17:13 - 2013-10-10 17:13 - 00000000 ____D C:\Users\Syrus\Downloads\Gameforge Live
2013-10-10 17:13 - 2013-10-10 17:13 - 00000000 ____D C:\Users\Syrus\AppData\Local\Gameforge4d
2013-10-10 17:13 - 2013-10-10 17:13 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2013-10-10 17:12 - 2013-10-10 17:12 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-10 17:12 - 2013-10-10 17:12 - 00000000 ____D C:\Program Files\WinRAR
2013-10-10 17:11 - 2013-10-10 17:11 - 00001613 _____ C:\Users\Public\Desktop\Play League of Legends.lnk
2013-10-10 17:11 - 2013-10-10 17:11 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2013-10-10 17:11 - 2013-10-10 17:11 - 00000000 ____D C:\Riot Games
2013-10-10 17:10 - 2013-10-10 17:08 - 19368272 _____ (Gameforge                                                   ) C:\Users\Syrus\Downloads\SKILL_GameforgeLiveSetup.exe
2013-10-10 17:09 - 2013-10-10 17:09 - 02074056 _____ C:\Users\Syrus\Downloads\winrar-x64-500d.exe
2013-10-10 17:08 - 2013-10-10 17:08 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2013-10-10 17:08 - 2013-10-10 17:07 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\Riot Games
2013-10-10 17:07 - 2013-10-10 17:06 - 34888568 _____ (Riot Games) C:\Users\Syrus\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 ____D C:\Users\Syrus\AppData\Roaming\ESET
2013-10-10 16:59 - 2013-10-10 16:59 - 00000000 ____D C:\Users\Syrus\AppData\Local\ESET
2013-10-10 16:57 - 2013-10-10 16:57 - 00000000 ____D C:\ProgramData\ESET
2013-10-10 16:57 - 2013-10-10 16:57 - 00000000 ____D C:\Program Files\ESET
2013-10-10 16:53 - 2013-10-10 16:53 - 01582904 _____ (ESET) C:\Users\Syrus\Downloads\eset_smart_security_live_installer.exe
2013-10-10 16:53 - 2013-10-10 16:53 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-10-10 16:53 - 2013-10-10 16:52 - 00000000 ____D C:\Users\Syrus\AppData\Local\Google
2013-10-10 16:53 - 2013-10-10 16:52 - 00000000 ____D C:\Program Files (x86)\Google
2013-10-10 16:52 - 2013-10-10 16:52 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-10 16:52 - 2013-10-10 16:52 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-10 16:52 - 2013-10-10 16:52 - 00000000 ____D C:\Users\Syrus\AppData\Local\Deployment
2013-10-10 16:52 - 2013-10-10 16:52 - 00000000 ____D C:\Users\Syrus\AppData\Local\Apps\2.0
2013-10-10 16:46 - 2013-10-10 16:46 - 00001439 _____ C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-10 16:46 - 2013-10-10 16:46 - 00001405 _____ C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-10-10 16:46 - 2013-10-10 16:45 - 00000000 ____D C:\Users\Syrus
2013-10-10 16:45 - 2013-10-10 16:45 - 00000020 ___SH C:\Users\Syrus\ntuser.ini
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Vorlagen
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Startmenü
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Netzwerkumgebung
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Lokale Einstellungen
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Eigene Dateien
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Druckumgebung
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Documents\Eigene Musik
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Documents\Eigene Bilder
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\AppData\Local\Verlauf
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\AppData\Local\Anwendungsdaten
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 _SHDL C:\Users\Syrus\Anwendungsdaten
2013-10-10 16:45 - 2013-10-10 16:45 - 00000000 ____D C:\Users\Syrus\AppData\Local\VirtualStore
2013-10-10 16:45 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore
2013-10-10 16:44 - 2013-10-10 17:30 - 00000000 ____D C:\Windows\Panther
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Programme
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-10-10 16:44 - 2013-10-10 16:44 - 00000000 __SHD C:\Recovery
2013-10-10 16:44 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-10-10 16:44 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-10-10 16:44 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery
2013-10-10 16:44 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT
2013-10-10 16:37 - 2009-07-14 06:46 - 00001774 _____ C:\Windows\DtcInstall.log
2013-10-10 16:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-10-10 16:36 - 2013-10-10 16:36 - 00001313 _____ C:\Windows\TSSysprep.log
2013-09-26 01:46 - 2013-10-10 21:42 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-17 22:22 - 2013-10-10 22:12 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-09-17 22:22 - 2013-10-10 22:12 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 29337376 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 22102304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 15703688 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 13628208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 11274528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-09-17 22:22 - 2013-09-17 22:22 - 09281032 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 07720576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 07648000 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 06329552 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02986672 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02970400 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02789152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02630304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02367264 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 02007328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6432723.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6432723.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00681760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00603424 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00586016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00515360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-09-17 22:22 - 2013-09-17 22:22 - 00022814 _____ C:\Windows\system32\nvinfo.pb
2013-09-17 22:22 - 2009-07-13 23:59 - 15901448 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-09-17 22:22 - 2009-06-10 22:37 - 12947360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-09-16 17:15 - 2013-09-16 17:15 - 00239320 _____ (ESET) C:\Windows\system32\Drivers\eamonm.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00239296 _____ (ESET) C:\Windows\system32\Drivers\edevmon.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00220232 _____ (ESET) C:\Windows\system32\Drivers\epfw.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00168256 _____ (ESET) C:\Windows\system32\Drivers\ehdrv.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00062136 _____ (ESET) C:\Windows\system32\Drivers\epfwwfp.sys
2013-09-16 17:15 - 2013-09-16 17:15 - 00044120 _____ (ESET) C:\Windows\system32\Drivers\EpfwLWF.sys
2013-09-12 09:25 - 2013-10-10 22:13 - 06599968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-09-12 09:25 - 2013-10-10 22:13 - 03452192 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2013-09-12 09:25 - 2013-10-10 22:13 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-09-12 09:25 - 2013-10-10 22:13 - 00920864 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-09-12 09:25 - 2013-10-10 22:13 - 00219424 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-09-12 09:25 - 2013-10-10 22:13 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-09-12 01:17 - 2013-09-12 01:17 - 00571168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe

Some content of TEMP:
====================
C:\Users\Syrus\AppData\Local\Temp\swt-win32-3349.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-10 19:30

==================== End Of Log ============================
         

--- --- ---

--- --- ---

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

hier die auswertung vom notebook !

/codeFRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Josef at 2013-10-11 10:27:49
Running from C:\Users\Josef\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Out of date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Out of date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.7.0.1530)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02)
Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482)
ASUS AI Recovery (x32 Version: 1.0.8)
ASUS FancyStart (x32 Version: 1.0.8)
ASUS LifeFrame3 (x32 Version: 3.0.20)
ASUS Live Update (x32 Version: 2.5.9)
ASUS MultiFrame (x32 Version: 1.0.0019)
ASUS Power4Gear Hybrid (Version: 1.1.27)
ASUS SmartLogon (x32 Version: 1.0.0007)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028)
ASUS USB2.0 UVC VGA WebCam (Version: 5.8.53120.202)
ASUS Virtual Camera (x32 Version: 1.0.19)
ATI Catalyst Install Manager (Version: 3.0.750.0)
ATK Package (x32 Version: 1.0.0001)
Avira Free Antivirus (x32 Version: 14.0.0.383)
Avira SearchFree Toolbar (x32 Version: 12.4.0.1130)
Boingo Wi-Fi (x32 Version: 1.7.0048)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Full New (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Light (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center InstallProxy (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Localization All (x32 Version: 2009.1111.1543.28169)
CCC Help Chinese Standard (x32 Version: 2009.1111.1542.28169)
CCC Help Chinese Traditional (x32 Version: 2009.1111.1542.28169)
CCC Help Czech (x32 Version: 2009.1111.1542.28169)
CCC Help Danish (x32 Version: 2009.1111.1542.28169)
CCC Help Dutch (x32 Version: 2009.1111.1542.28169)
CCC Help English (x32 Version: 2009.1111.1542.28169)
CCC Help Finnish (x32 Version: 2009.1111.1542.28169)
CCC Help French (x32 Version: 2009.1111.1542.28169)
CCC Help German (x32 Version: 2009.1111.1542.28169)
CCC Help Greek (x32 Version: 2009.1111.1542.28169)
CCC Help Hungarian (x32 Version: 2009.1111.1542.28169)
CCC Help Italian (x32 Version: 2009.1111.1542.28169)
CCC Help Japanese (x32 Version: 2009.1111.1542.28169)
CCC Help Korean (x32 Version: 2009.1111.1542.28169)
CCC Help Norwegian (x32 Version: 2009.1111.1542.28169)
CCC Help Polish (x32 Version: 2009.1111.1542.28169)
CCC Help Portuguese (x32 Version: 2009.1111.1542.28169)
CCC Help Russian (x32 Version: 2009.1111.1542.28169)
CCC Help Spanish (x32 Version: 2009.1111.1542.28169)
CCC Help Swedish (x32 Version: 2009.1111.1542.28169)
CCC Help Thai (x32 Version: 2009.1111.1542.28169)
CCC Help Turkish (x32 Version: 2009.1111.1542.28169)
ccc-core-static (x32 Version: 2009.1111.1543.28169)
ccc-utility64 (Version: 2009.1111.1543.28169)
Choice Guard (x32 Version: 1.2.87.0)
ControlDeck (x32 Version: 1.0.5)
CyberLink LabelPrint (x32 Version: 2.5.1908)
CyberLink Power2Go (x32 Version: 6.1.3602c)
ETDWare PS/2-x64 7.0.5.9_WHQL
Fast Boot (Version: 1.0.5)
Garmin BaseCamp (x32 Version: 4.2.1)
Garmin USB Drivers (x32 Version: 2.3.1.0)
Google Chrome (x32 Version: 30.0.1599.69)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.165)
IDT Audio (x32 Version: 1.0.6259.0)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
IrfanView (remove only) (x32 Version: 4.35)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Junk Mail filter update (x32 Version: 14.0.8050.1202)
K_Series_ScreenSaver_EN (x32)
Landwirtschafts Simulator 2011 (x32 Version: 1.0)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
NXe (x32 Version: 2004.02.25)
OpenOffice.org 3.2 (x32 Version: 3.2.9502)
Picasa 3 (x32 Version: 3.9)
Skype™ 6.2 (x32 Version: 6.2.106)
syncables desktop SE (x32 Version: 5.5.615.9518)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VLC media player 1.1.1 (x32 Version: 1.1.1)
WIDCOMM Bluetooth Software (Version: 6.2.5.500)
Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) (Version: 07/17/2009 6.2.0.9403)
Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (Version: 07/29/2009 6.1.7100.0)
Windows Driver Package - Broadcom HIDClass  (06/11/2009 6.2.0.9500) (Version: 06/11/2009 6.2.0.9500)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6)
Windows Live Call (x32 Version: 14.0.8050.1202)
Windows Live Communications Platform (x32 Version: 14.0.8050.1202)
Windows Live Essentials (x32 Version: 14.0.8050.1202)
Windows Live Family Safety (Version: 14.0.8052.1208)
Windows Live Fotogalerie (x32 Version: 14.0.8051.1204)
Windows Live Mail (x32 Version: 14.0.8050.1202)
Windows Live Messenger (x32 Version: 14.0.8050.1202)
Windows Live Sync (x32 Version: 14.0.8050.1202)
Windows Live Toolbar (x32 Version: 14.0.8052.1208)
Windows Live Writer (x32 Version: 14.0.8050.1202)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinFlash (x32 Version: 2.29.0)
WinRAR 5.00 (64-bit) (Version: 5.00.0)
Wireless Console 3 (x32 Version: 3.0.15)

==================== Restore Points  =========================

20-09-2013 09:04:31 Windows 7 Service Pack 1
20-09-2013 11:17:37 Windows Update
23-09-2013 13:26:39 Windows Update
23-09-2013 13:33:02 Windows-Sicherung
23-09-2013 13:49:49 Windows Modules Installer
29-09-2013 18:14:16 Windows-Sicherung
06-10-2013 19:07:06 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2BA9A816-A86E-4F6D-A30D-4C7F15107C7D} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] ()
Task: {2CD5D2E9-F2CA-47CF-8AEE-07CA2E73B675} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-16] (Google Inc.)
Task: {564FCB01-7DEE-4694-B706-E75C7D1EDD7D} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {6150DFE7-3D8B-434B-B8F7-E9F2D2ACD8D0} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {787902D6-CCAE-4ED1-8111-6A67176F2A79} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-19] (ASUS)
Task: {90B6CEE9-75B6-4B52-996C-215969C33A00} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()
Task: {92653A4A-84C6-4650-B648-E838ABF2EA1E} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2009-07-14] (Microsoft Corporation)
Task: {A586AC14-110F-494F-B6AD-8D8517C503C8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-16] (Google Inc.)
Task: {C26F2389-A9AD-46C0-824C-E5680B0BF837} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-12-24] (ATK)
Task: {C952A990-47A2-4C03-AC42-8A47F097D66C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-11] (Adobe Systems Incorporated)
Task: {D3B93239-49CE-4614-803E-5BE8EADFCC07} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-18] (Adobe Systems Incorporated)
Task: {E79E1C2D-57CB-4FE0-BDF4-BEC496DEB483} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {FBF3BCD5-20B3-461F-B30D-E425C68A876A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2008-10-01 08:02 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2009-12-23 22:12 - 2009-12-23 22:12 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll
2009-12-19 04:11 - 2009-12-19 04:11 - 00033280 _____ () C:\Program Files\P4G\OvrClk.dll
2008-10-23 19:21 - 2008-10-23 19:21 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-08-03 19:32 - 2010-08-03 19:32 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-09-19 16:35 - 2013-09-19 16:32 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-10-07 06:31 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-07 06:31 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-07 06:31 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-07 06:31 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-07 06:31 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-10-07 06:31 - 2013-10-03 08:03 - 13611984 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/11/2013 06:30:43 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{23a199c4-9f1f-11df-9032-806e6f6e6963} - 0000000000000120,0x0053c008,000000000019DCC0,0,000000000019ECD0,4096,[0])". hr = 0x80070079, Das Zeitlimit für die Semaphore wurde erreicht.
.


Vorgang:
   EndPrepareSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (10/11/2013 06:30:40 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (09/09/2013 00:47:52 PM) (Source: Application Hang) (User: )
Description: Programm OneClick.exe, Version 13.0.3020.2 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 10d8

Startzeit: 01ceac7e55c255d5

Endzeit: 219

Anwendungspfad: C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe

Berichts-ID: 39aa0830-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/09/2013 00:47:28 PM) (Source: Application Hang) (User: )
Description: Programm wlmail.exe, Version 14.0.8050.1202 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 16bc

Startzeit: 01cead49b7a4b334

Endzeit: 26

Anwendungspfad: C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

Berichts-ID: 3332a9f3-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/01/2013 10:27:47 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 8.0.7600.17267 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 828

Startzeit: 01cea7519d5d579a

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Berichts-ID: f179baf1-1344-11e3-81e2-1c4bd61a8a2a

Error: (08/28/2013 10:19:04 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7600.16768 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 790

Startzeit: 01cea42b7367b3b5

Endzeit: 10

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: 0873a6ed-101f-11e3-81e2-1c4bd61a8a2a

Error: (07/22/2013 07:50:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.17267, Zeitstempel: 0x51317269
Name des fehlerhaften Moduls: aswWebRepIE.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x518bac37
Ausnahmecode: 0xc0000005
Fehleroffset: 0x73b59c70
ID des fehlerhaften Prozesses: 0x12a8
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (07/06/2013 10:21:34 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 8.0.7600.17267 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1138

Startzeit: 01ce7a853b9bde0a

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Berichts-ID: 9f5ba27e-e679-11e2-8057-1c4bd61a8a2a

Error: (06/25/2013 02:03:22 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: smartlogon.exe, Version: 1.0.7.5, Zeitstempel: 0x4a111446
Name des fehlerhaften Moduls: smartlogon.exe, Version: 1.0.7.5, Zeitstempel: 0x4a111446
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000775b
ID des fehlerhaften Prozesses: 0xedc
Startzeit der fehlerhaften Anwendung: 0xsmartlogon.exe0
Pfad der fehlerhaften Anwendung: smartlogon.exe1
Pfad des fehlerhaften Moduls: smartlogon.exe2
Berichtskennung: smartlogon.exe3

Error: (06/24/2013 07:31:09 AM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde nicht erfolgreich abgeschlossen, da eine Schattenkopie nicht erstellt werden konnte. Löschen Sie auf dem zu sichernden Laufwerk nicht benötigte Dateien, um Speicherplatz freizugeben, und wiederholen Sie den Vorgang.


System errors:
=============
Error: (10/11/2013 09:57:21 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/11/2013 09:57:21 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/11/2013 06:30:38 AM) (Source: volsnap) (User: )
Description: Die Schattenkopie des erstellten Volumes "C:" konnte nicht installiert werden.

Error: (10/09/2013 06:15:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (10/09/2013 06:15:12 AM) (Source: DCOM) (User: )
Description: 109gupdate/comsvc{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (10/06/2013 11:39:53 AM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 10.0.0.1 mit dem Computer mit der
Netzwerkhardwareadresse 00-1F-A7-D0-BF-6F ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (10/06/2013 11:39:52 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/06/2013 11:39:52 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/02/2013 08:05:06 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (09/23/2013 03:49:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706be fehlgeschlagen: Windows Internet Explorer 9 für Windows 7 für x64-basierte Systeme


Microsoft Office Sessions:
=========================
Error: (10/11/2013 06:30:43 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{23a199c4-9f1f-11df-9032-806e6f6e6963} - 0000000000000120,0x0053c008,000000000019DCC0,0,000000000019ECD0,4096,[0])0x80070079, Das Zeitlimit für die Semaphore wurde erreicht.


Vorgang:
   EndPrepareSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (10/11/2013 06:30:40 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101

Error: (09/09/2013 00:47:52 PM) (Source: Application Hang)(User: )
Description: OneClick.exe13.0.3020.210d801ceac7e55c255d5219C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe39aa0830-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/09/2013 00:47:28 PM) (Source: Application Hang)(User: )
Description: wlmail.exe14.0.8050.120216bc01cead49b7a4b33426C:\Program Files (x86)\Windows Live\Mail\wlmail.exe3332a9f3-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/01/2013 10:27:47 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7600.1726782801cea7519d5d579a16C:\Program Files (x86)\Internet Explorer\iexplore.exef179baf1-1344-11e3-81e2-1c4bd61a8a2a

Error: (08/28/2013 10:19:04 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7600.1676879001cea42b7367b3b510C:\Windows\Explorer.EXE0873a6ed-101f-11e3-81e2-1c4bd61a8a2a

Error: (07/22/2013 07:50:52 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7600.1726751317269aswWebRepIE.dll_unloaded0.0.0.0518bac37c000000573b59c7012a801ce8703fb117ac8C:\Program Files (x86)\Internet Explorer\iexplore.exeaswWebRepIE.dll3fe3f368-f2f7-11e2-b37a-1c4bd61a8a2a

Error: (07/06/2013 10:21:34 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7600.17267113801ce7a853b9bde0a0C:\Program Files (x86)\Internet Explorer\iexplore.exe9f5ba27e-e679-11e2-8057-1c4bd61a8a2a

Error: (06/25/2013 02:03:22 AM) (Source: Application Error)(User: )
Description: smartlogon.exe1.0.7.54a111446smartlogon.exe1.0.7.54a111446c00000050000775bedc01ce710d74483239C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exeC:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exea5fcaf23-dd2a-11e2-8057-1c4bd61a8a2a

Error: (06/24/2013 07:31:09 AM) (Source: Windows Backup)(User: )
Description: Bei der Erstellung einer Schattenkopie ist eine Zeitüberschreitung aufgetreten. Wiederholen Sie diesen Vorgang. (0x81000101)


==================== Memory info =========================== 

Percentage of memory in use: 45%
Total physical RAM: 3948.54 MB
Available physical RAM: 2140.06 MB
Total Pagefile: 7895.22 MB
Available Pagefile: 5479.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:73.02 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:329.79 GB) (Free:245.07 GB) NTFS
Drive e: (Landwirtschafts) (CDROM) (Total:0.81 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E0C5913D)
Partition 1: (Not Active) - (Size=20 GB) - (Type=1C)
Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=330 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

--- --- ---
/end

/codeFRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by Josef at 2013-10-11 10:27:49
Running from C:\Users\Josef\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Out of date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Out of date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.7.0.1530)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.02) - Deutsch (x32 Version: 11.0.02)
Alcor Micro USB Card Reader (x32 Version: 1.5.17.25482)
ASUS AI Recovery (x32 Version: 1.0.8)
ASUS FancyStart (x32 Version: 1.0.8)
ASUS LifeFrame3 (x32 Version: 3.0.20)
ASUS Live Update (x32 Version: 2.5.9)
ASUS MultiFrame (x32 Version: 1.0.0019)
ASUS Power4Gear Hybrid (Version: 1.1.27)
ASUS SmartLogon (x32 Version: 1.0.0007)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0028)
ASUS USB2.0 UVC VGA WebCam (Version: 5.8.53120.202)
ASUS Virtual Camera (x32 Version: 1.0.19)
ATI Catalyst Install Manager (Version: 3.0.750.0)
ATK Package (x32 Version: 1.0.0001)
Avira Free Antivirus (x32 Version: 14.0.0.383)
Avira SearchFree Toolbar (x32 Version: 12.4.0.1130)
Boingo Wi-Fi (x32 Version: 1.7.0048)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Core Implementation (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Full Existing (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Full New (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Light (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Previews Common (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center InstallProxy (x32 Version: 2009.1111.1543.28169)
Catalyst Control Center Localization All (x32 Version: 2009.1111.1543.28169)
CCC Help Chinese Standard (x32 Version: 2009.1111.1542.28169)
CCC Help Chinese Traditional (x32 Version: 2009.1111.1542.28169)
CCC Help Czech (x32 Version: 2009.1111.1542.28169)
CCC Help Danish (x32 Version: 2009.1111.1542.28169)
CCC Help Dutch (x32 Version: 2009.1111.1542.28169)
CCC Help English (x32 Version: 2009.1111.1542.28169)
CCC Help Finnish (x32 Version: 2009.1111.1542.28169)
CCC Help French (x32 Version: 2009.1111.1542.28169)
CCC Help German (x32 Version: 2009.1111.1542.28169)
CCC Help Greek (x32 Version: 2009.1111.1542.28169)
CCC Help Hungarian (x32 Version: 2009.1111.1542.28169)
CCC Help Italian (x32 Version: 2009.1111.1542.28169)
CCC Help Japanese (x32 Version: 2009.1111.1542.28169)
CCC Help Korean (x32 Version: 2009.1111.1542.28169)
CCC Help Norwegian (x32 Version: 2009.1111.1542.28169)
CCC Help Polish (x32 Version: 2009.1111.1542.28169)
CCC Help Portuguese (x32 Version: 2009.1111.1542.28169)
CCC Help Russian (x32 Version: 2009.1111.1542.28169)
CCC Help Spanish (x32 Version: 2009.1111.1542.28169)
CCC Help Swedish (x32 Version: 2009.1111.1542.28169)
CCC Help Thai (x32 Version: 2009.1111.1542.28169)
CCC Help Turkish (x32 Version: 2009.1111.1542.28169)
ccc-core-static (x32 Version: 2009.1111.1543.28169)
ccc-utility64 (Version: 2009.1111.1543.28169)
Choice Guard (x32 Version: 1.2.87.0)
ControlDeck (x32 Version: 1.0.5)
CyberLink LabelPrint (x32 Version: 2.5.1908)
CyberLink Power2Go (x32 Version: 6.1.3602c)
ETDWare PS/2-x64 7.0.5.9_WHQL
Fast Boot (Version: 1.0.5)
Garmin BaseCamp (x32 Version: 4.2.1)
Garmin USB Drivers (x32 Version: 2.3.1.0)
Google Chrome (x32 Version: 30.0.1599.69)
Google Earth Plug-in (x32 Version: 7.1.1.1888)
Google Update Helper (x32 Version: 1.3.21.165)
IDT Audio (x32 Version: 1.0.6259.0)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
IrfanView (remove only) (x32 Version: 4.35)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
JavaFX 2.1.1 (x32 Version: 2.1.1)
Junk Mail filter update (x32 Version: 14.0.8050.1202)
K_Series_ScreenSaver_EN (x32)
Landwirtschafts Simulator 2011 (x32 Version: 1.0)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
NXe (x32 Version: 2004.02.25)
OpenOffice.org 3.2 (x32 Version: 3.2.9502)
Picasa 3 (x32 Version: 3.9)
Skype™ 6.2 (x32 Version: 6.2.106)
syncables desktop SE (x32 Version: 5.5.615.9518)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VLC media player 1.1.1 (x32 Version: 1.1.1)
WIDCOMM Bluetooth Software (Version: 6.2.5.500)
Windows Driver Package - Broadcom Bluetooth  (07/17/2009 6.2.0.9403) (Version: 07/17/2009 6.2.0.9403)
Windows Driver Package - Broadcom Bluetooth  (07/29/2009 6.1.7100.0) (Version: 07/29/2009 6.1.7100.0)
Windows Driver Package - Broadcom HIDClass  (06/11/2009 6.2.0.9500) (Version: 06/11/2009 6.2.0.9500)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.6)
Windows Live Call (x32 Version: 14.0.8050.1202)
Windows Live Communications Platform (x32 Version: 14.0.8050.1202)
Windows Live Essentials (x32 Version: 14.0.8050.1202)
Windows Live Family Safety (Version: 14.0.8052.1208)
Windows Live Fotogalerie (x32 Version: 14.0.8051.1204)
Windows Live Mail (x32 Version: 14.0.8050.1202)
Windows Live Messenger (x32 Version: 14.0.8050.1202)
Windows Live Sync (x32 Version: 14.0.8050.1202)
Windows Live Toolbar (x32 Version: 14.0.8052.1208)
Windows Live Writer (x32 Version: 14.0.8050.1202)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
WinFlash (x32 Version: 2.29.0)
WinRAR 5.00 (64-bit) (Version: 5.00.0)
Wireless Console 3 (x32 Version: 3.0.15)

==================== Restore Points  =========================

20-09-2013 09:04:31 Windows 7 Service Pack 1
20-09-2013 11:17:37 Windows Update
23-09-2013 13:26:39 Windows Update
23-09-2013 13:33:02 Windows-Sicherung
23-09-2013 13:49:49 Windows Modules Installer
29-09-2013 18:14:16 Windows-Sicherung
06-10-2013 19:07:06 Windows-Sicherung

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2BA9A816-A86E-4F6D-A30D-4C7F15107C7D} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] ()
Task: {2CD5D2E9-F2CA-47CF-8AEE-07CA2E73B675} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-16] (Google Inc.)
Task: {564FCB01-7DEE-4694-B706-E75C7D1EDD7D} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2009-07-23] (ATK)
Task: {6150DFE7-3D8B-434B-B8F7-E9F2D2ACD8D0} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {787902D6-CCAE-4ED1-8111-6A67176F2A79} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-05-19] (ASUS)
Task: {90B6CEE9-75B6-4B52-996C-215969C33A00} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()
Task: {92653A4A-84C6-4650-B648-E838ABF2EA1E} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2009-07-14] (Microsoft Corporation)
Task: {A586AC14-110F-494F-B6AD-8D8517C503C8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-16] (Google Inc.)
Task: {C26F2389-A9AD-46C0-824C-E5680B0BF837} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2009-12-24] (ATK)
Task: {C952A990-47A2-4C03-AC42-8A47F097D66C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-11] (Adobe Systems Incorporated)
Task: {D3B93239-49CE-4614-803E-5BE8EADFCC07} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-18] (Adobe Systems Incorporated)
Task: {E79E1C2D-57CB-4FE0-BDF4-BEC496DEB483} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [2007-11-30] ()
Task: {FBF3BCD5-20B3-461F-B30D-E425C68A876A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2008-10-01 08:02 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2009-12-23 22:12 - 2009-12-23 22:12 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll
2009-12-19 04:11 - 2009-12-19 04:11 - 00033280 _____ () C:\Program Files\P4G\OvrClk.dll
2008-10-23 19:21 - 2008-10-23 19:21 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2010-08-03 19:32 - 2010-08-03 19:32 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-09-19 16:35 - 2013-09-19 16:32 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-10-07 06:31 - 2013-10-03 08:02 - 00698832 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
2013-10-07 06:31 - 2013-10-03 08:02 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
2013-10-07 06:31 - 2013-10-03 08:03 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
2013-10-07 06:31 - 2013-10-03 08:03 - 00415184 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
2013-10-07 06:31 - 2013-10-03 08:02 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
2013-10-07 06:31 - 2013-10-03 08:03 - 13611984 _____ () C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/11/2013 06:30:43 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{23a199c4-9f1f-11df-9032-806e6f6e6963} - 0000000000000120,0x0053c008,000000000019DCC0,0,000000000019ECD0,4096,[0])". hr = 0x80070079, Das Zeitlimit für die Semaphore wurde erreicht.
.


Vorgang:
   EndPrepareSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (10/11/2013 06:30:40 AM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).

Error: (09/09/2013 00:47:52 PM) (Source: Application Hang) (User: )
Description: Programm OneClick.exe, Version 13.0.3020.2 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 10d8

Startzeit: 01ceac7e55c255d5

Endzeit: 219

Anwendungspfad: C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe

Berichts-ID: 39aa0830-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/09/2013 00:47:28 PM) (Source: Application Hang) (User: )
Description: Programm wlmail.exe, Version 14.0.8050.1202 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 16bc

Startzeit: 01cead49b7a4b334

Endzeit: 26

Anwendungspfad: C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

Berichts-ID: 3332a9f3-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/01/2013 10:27:47 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 8.0.7600.17267 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 828

Startzeit: 01cea7519d5d579a

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Berichts-ID: f179baf1-1344-11e3-81e2-1c4bd61a8a2a

Error: (08/28/2013 10:19:04 PM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7600.16768 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 790

Startzeit: 01cea42b7367b3b5

Endzeit: 10

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID: 0873a6ed-101f-11e3-81e2-1c4bd61a8a2a

Error: (07/22/2013 07:50:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.17267, Zeitstempel: 0x51317269
Name des fehlerhaften Moduls: aswWebRepIE.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x518bac37
Ausnahmecode: 0xc0000005
Fehleroffset: 0x73b59c70
ID des fehlerhaften Prozesses: 0x12a8
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (07/06/2013 10:21:34 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 8.0.7600.17267 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1138

Startzeit: 01ce7a853b9bde0a

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Berichts-ID: 9f5ba27e-e679-11e2-8057-1c4bd61a8a2a

Error: (06/25/2013 02:03:22 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: smartlogon.exe, Version: 1.0.7.5, Zeitstempel: 0x4a111446
Name des fehlerhaften Moduls: smartlogon.exe, Version: 1.0.7.5, Zeitstempel: 0x4a111446
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000775b
ID des fehlerhaften Prozesses: 0xedc
Startzeit der fehlerhaften Anwendung: 0xsmartlogon.exe0
Pfad der fehlerhaften Anwendung: smartlogon.exe1
Pfad des fehlerhaften Moduls: smartlogon.exe2
Berichtskennung: smartlogon.exe3

Error: (06/24/2013 07:31:09 AM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde nicht erfolgreich abgeschlossen, da eine Schattenkopie nicht erstellt werden konnte. Löschen Sie auf dem zu sichernden Laufwerk nicht benötigte Dateien, um Speicherplatz freizugeben, und wiederholen Sie den Vorgang.


System errors:
=============
Error: (10/11/2013 09:57:21 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/11/2013 09:57:21 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/11/2013 06:30:38 AM) (Source: volsnap) (User: )
Description: Die Schattenkopie des erstellten Volumes "C:" konnte nicht installiert werden.

Error: (10/09/2013 06:15:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%109

Error: (10/09/2013 06:15:12 AM) (Source: DCOM) (User: )
Description: 109gupdate/comsvc{4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (10/06/2013 11:39:53 AM) (Source: Tcpip) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 10.0.0.1 mit dem Computer mit der
Netzwerkhardwareadresse 00-1F-A7-D0-BF-6F ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (10/06/2013 11:39:52 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/06/2013 11:39:52 AM) (Source: ACPI) (User: )
Description: ACPI: ACPI-BIOS versucht, in einen ungültigen PCI-Operationsbereich (0x4) zu schreiben. Wenden Sie sich an den Systemhersteller, um technische Unterstützung zu erhalten.

Error: (10/02/2013 08:05:06 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (09/23/2013 03:49:35 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800706be fehlgeschlagen: Windows Internet Explorer 9 für Windows 7 für x64-basierte Systeme


Microsoft Office Sessions:
=========================
Error: (10/11/2013 06:30:43 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{23a199c4-9f1f-11df-9032-806e6f6e6963} - 0000000000000120,0x0053c008,000000000019DCC0,0,000000000019ECD0,4096,[0])0x80070079, Das Zeitlimit für die Semaphore wurde erreicht.


Vorgang:
   EndPrepareSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (10/11/2013 06:30:40 AM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101

Error: (09/09/2013 00:47:52 PM) (Source: Application Hang)(User: )
Description: OneClick.exe13.0.3020.210d801ceac7e55c255d5219C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe39aa0830-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/09/2013 00:47:28 PM) (Source: Application Hang)(User: )
Description: wlmail.exe14.0.8050.120216bc01cead49b7a4b33426C:\Program Files (x86)\Windows Live\Mail\wlmail.exe3332a9f3-193d-11e3-bb62-1c4bd61a8a2a

Error: (09/01/2013 10:27:47 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7600.1726782801cea7519d5d579a16C:\Program Files (x86)\Internet Explorer\iexplore.exef179baf1-1344-11e3-81e2-1c4bd61a8a2a

Error: (08/28/2013 10:19:04 PM) (Source: Application Hang)(User: )
Description: Explorer.EXE6.1.7600.1676879001cea42b7367b3b510C:\Windows\Explorer.EXE0873a6ed-101f-11e3-81e2-1c4bd61a8a2a

Error: (07/22/2013 07:50:52 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.7600.1726751317269aswWebRepIE.dll_unloaded0.0.0.0518bac37c000000573b59c7012a801ce8703fb117ac8C:\Program Files (x86)\Internet Explorer\iexplore.exeaswWebRepIE.dll3fe3f368-f2f7-11e2-b37a-1c4bd61a8a2a

Error: (07/06/2013 10:21:34 PM) (Source: Application Hang)(User: )
Description: iexplore.exe8.0.7600.17267113801ce7a853b9bde0a0C:\Program Files (x86)\Internet Explorer\iexplore.exe9f5ba27e-e679-11e2-8057-1c4bd61a8a2a

Error: (06/25/2013 02:03:22 AM) (Source: Application Error)(User: )
Description: smartlogon.exe1.0.7.54a111446smartlogon.exe1.0.7.54a111446c00000050000775bedc01ce710d74483239C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exeC:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exea5fcaf23-dd2a-11e2-8057-1c4bd61a8a2a

Error: (06/24/2013 07:31:09 AM) (Source: Windows Backup)(User: )
Description: Bei der Erstellung einer Schattenkopie ist eine Zeitüberschreitung aufgetreten. Wiederholen Sie diesen Vorgang. (0x81000101)


==================== Memory info =========================== 

Percentage of memory in use: 45%
Total physical RAM: 3948.54 MB
Available physical RAM: 2140.06 MB
Total Pagefile: 7895.22 MB
Available Pagefile: 5479.48 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:73.02 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:329.79 GB) (Free:245.07 GB) NTFS
Drive e: (Landwirtschafts) (CDROM) (Total:0.81 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E0C5913D)
Partition 1: (Not Active) - (Size=20 GB) - (Type=1C)
Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=330 GB) - (Type=OF Extended)

==================== End Of Log ============================
         

--- --- ---
/end

/code

Combofix Logfile:

ComboFix 13-10-09.01 - Syrus 11.10.2013  10:17:40.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.43.1031.18.8191.6161 [GMT 2:00]
ausgeführt von:: c:\users\Syrus\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET Personal Firewall *Enabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-09-11 bis 2013-10-11  ))))))))))))))))))))))))))))))
.
.
2013-10-11 08:25 . 2013-10-11 08:25	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-10-11 07:24 . 2013-10-11 07:24	--------	d-----w-	c:\program files (x86)\Windows Kits
2013-10-11 07:16 . 2013-10-11 07:16	--------	d-----w-	c:\program files (x86)\Microsoft.NET
2013-10-11 07:13 . 2013-10-11 07:24	--------	d-----w-	c:\programdata\Package Cache
2013-10-11 06:25 . 2013-10-11 06:25	--------	d-----w-	C:\FRST
2013-10-10 20:58 . 2013-10-10 20:58	76232	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{ED0AAD67-7363-42D6-95E6-21DD541080F7}\offreg.dll
2013-10-10 20:54 . 2013-10-10 20:54	--------	d-----w-	c:\program files (x86)\Common Files\Adobe AIR
2013-10-10 20:29 . 2010-09-14 06:45	367104	----a-w-	c:\windows\system32\wcncsvc.dll
2013-10-10 20:29 . 2010-09-14 06:07	276992	----a-w-	c:\windows\SysWow64\wcncsvc.dll
2013-10-10 20:14 . 2009-09-10 06:28	311808	----a-w-	c:\windows\system32\msv1_0.dll
2013-10-10 20:14 . 2009-09-10 05:52	257024	----a-w-	c:\windows\SysWow64\msv1_0.dll
2013-10-10 20:07 . 2012-07-26 07:46	2560	----a-w-	c:\windows\system32\drivers\de-DE\wdf01000.sys.mui
2013-10-10 20:07 . 2012-07-26 04:55	785512	----a-w-	c:\windows\system32\drivers\Wdf01000.sys
2013-10-10 20:07 . 2012-07-26 04:55	54376	----a-w-	c:\windows\system32\drivers\WdfLdr.sys
2013-10-10 20:07 . 2012-07-26 02:36	9728	----a-w-	c:\windows\system32\Wdfres.dll
2013-10-10 20:03 . 2009-10-10 03:17	14336	----a-w-	c:\windows\system32\drivers\sffp_sd.sys
2013-10-10 19:58 . 2009-11-25 10:47	99176	----a-w-	c:\windows\SysWow64\PresentationHostProxy.dll
2013-10-10 19:58 . 2009-11-25 10:47	49472	----a-w-	c:\windows\SysWow64\netfxperf.dll
2013-10-10 19:58 . 2009-11-25 10:47	48960	----a-w-	c:\windows\system32\netfxperf.dll
2013-10-10 19:58 . 2009-11-25 10:47	297808	----a-w-	c:\windows\SysWow64\mscoree.dll
2013-10-10 19:58 . 2009-11-25 10:47	295264	----a-w-	c:\windows\SysWow64\PresentationHost.exe
2013-10-10 19:58 . 2009-11-25 10:47	1130824	----a-w-	c:\windows\SysWow64\dfshim.dll
2013-10-10 19:58 . 2009-11-25 10:47	109912	----a-w-	c:\windows\system32\PresentationHostProxy.dll
2013-10-10 19:58 . 2009-11-25 10:47	444752	----a-w-	c:\windows\system32\mscoree.dll
2013-10-10 19:58 . 2009-11-25 10:47	320352	----a-w-	c:\windows\system32\PresentationHost.exe
2013-10-10 19:58 . 2009-11-25 10:47	1942856	----a-w-	c:\windows\system32\dfshim.dll
2013-10-10 19:58 . 2010-02-23 08:16	294912	----a-w-	c:\windows\system32\browserchoice.exe
2013-10-10 19:47 . 2012-12-16 16:52	46080	----a-w-	c:\windows\system32\atmlib.dll
2013-10-10 19:47 . 2012-12-16 14:40	367616	----a-w-	c:\windows\system32\atmfd.dll
2013-10-10 19:47 . 2012-12-16 14:25	295424	----a-w-	c:\windows\SysWow64\atmfd.dll
2013-10-10 19:47 . 2012-12-16 14:25	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2013-10-10 19:47 . 2009-10-19 14:46	100864	----a-w-	c:\windows\system32\fontsub.dll
2013-10-10 19:47 . 2009-10-19 14:10	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2013-10-10 19:46 . 2012-07-26 03:08	229888	----a-w-	c:\windows\system32\WUDFHost.exe
2013-10-10 19:46 . 2012-07-26 03:08	84992	----a-w-	c:\windows\system32\WUDFSvc.dll
2013-10-10 19:46 . 2012-07-26 03:08	744448	----a-w-	c:\windows\system32\WUDFx.dll
2013-10-10 19:46 . 2012-07-26 03:08	45056	----a-w-	c:\windows\system32\WUDFCoinstaller.dll
2013-10-10 19:46 . 2012-07-26 03:08	194048	----a-w-	c:\windows\system32\WUDFPlatform.dll
2013-10-10 19:46 . 2012-07-26 02:26	87040	----a-w-	c:\windows\system32\drivers\WUDFPf.sys
2013-10-10 19:46 . 2012-07-26 02:26	198656	----a-w-	c:\windows\system32\drivers\WUDFRd.sys
2013-10-10 19:42 . 2013-10-10 19:42	--------	d-----w-	c:\windows\system32\MRT
2013-10-10 19:40 . 2012-03-01 06:54	22896	----a-w-	c:\windows\system32\drivers\fs_rec.sys
2013-10-10 19:40 . 2012-03-01 06:40	80896	----a-w-	c:\windows\system32\imagehlp.dll
2013-10-10 19:40 . 2012-03-01 06:35	5120	----a-w-	c:\windows\system32\wmi.dll
2013-10-10 19:40 . 2012-03-01 05:45	158720	----a-w-	c:\windows\SysWow64\imagehlp.dll
2013-10-10 19:40 . 2012-03-01 05:40	5120	----a-w-	c:\windows\SysWow64\wmi.dll
2013-10-10 19:36 . 2010-03-04 04:32	243712	----a-w-	c:\windows\system32\drivers\ks.sys
2013-10-10 19:33 . 2013-04-12 14:36	1653096	----a-w-	c:\windows\system32\drivers\ntfs.sys
2013-10-10 19:32 . 2012-03-03 06:29	1837568	----a-w-	c:\windows\system32\d3d10warp.dll
2013-10-10 19:31 . 2010-12-21 06:15	264192	----a-w-	c:\windows\system32\upnp.dll
2013-10-10 19:30 . 2012-04-02 05:26	1732096	----a-w-	c:\program files\Windows Journal\NBDoc.DLL
2013-10-10 19:29 . 2011-10-01 05:28	886784	----a-w-	c:\program files\Common Files\System\wab32.dll
2013-10-10 19:28 . 2012-11-02 05:27	478208	----a-w-	c:\windows\system32\dpnet.dll
2013-10-10 19:27 . 2010-08-27 06:14	236032	----a-w-	c:\windows\system32\srvsvc.dll
2013-10-10 19:27 . 2010-08-27 05:46	9728	----a-w-	c:\windows\SysWow64\sscore.dll
2013-10-10 18:59 . 2012-02-11 06:29	559104	----a-w-	c:\windows\system32\spoolsv.exe
2013-10-10 18:59 . 2012-02-11 06:29	67584	----a-w-	c:\windows\splwow64.exe
2013-10-10 18:58 . 2011-11-19 15:07	77312	----a-w-	c:\windows\system32\packager.dll
2013-10-10 18:58 . 2011-11-19 14:06	67072	----a-w-	c:\windows\SysWow64\packager.dll
2013-10-10 15:30 . 2013-10-10 14:44	--------	d-----w-	c:\windows\Panther
2013-10-10 15:13 . 2013-10-10 15:13	--------	d-----w-	c:\program files (x86)\GameforgeLive
2013-10-10 15:12 . 2013-10-10 15:12	--------	d-----w-	c:\program files\WinRAR
2013-10-10 15:12 . 2008-07-31 08:41	68616	----a-w-	c:\windows\SysWow64\XAPOFX1_1.dll
2013-10-10 15:12 . 2008-07-31 08:40	509448	----a-w-	c:\windows\SysWow64\XAudio2_2.dll
2013-10-10 15:12 . 2008-07-12 06:18	467984	----a-w-	c:\windows\SysWow64\d3dx10_39.dll
2013-10-10 15:12 . 2008-07-12 06:18	1493528	----a-w-	c:\windows\SysWow64\D3DCompiler_39.dll
2013-10-10 15:12 . 2008-07-12 06:18	3851784	----a-w-	c:\windows\SysWow64\D3DX9_39.dll
2013-10-10 15:11 . 2013-10-10 15:11	--------	d-sh--w-	c:\windows\SysWow64\AI_RecycleBin
2013-10-10 15:11 . 2013-10-10 15:11	--------	d-----w-	C:\Riot Games
2013-10-10 15:08 . 2013-10-10 22:15	--------	d-----w-	c:\programdata\PMB Files
2013-10-10 15:08 . 2013-10-10 15:08	--------	d-----w-	c:\program files (x86)\Pando Networks
2013-10-10 15:02 . 2013-09-15 22:50	9694160	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{ED0AAD67-7363-42D6-95E6-21DD541080F7}\mpengine.dll
2013-10-10 15:02 . 2013-08-07 02:22	278800	------w-	c:\windows\system32\MpSigStub.exe
2013-10-10 14:57 . 2013-10-10 14:57	--------	d-----w-	c:\program files\ESET
2013-10-10 14:57 . 2013-10-11 07:25	--------	d-sh--w-	c:\windows\Installer
2013-10-10 14:52 . 2013-10-10 14:53	--------	d-----w-	c:\program files (x86)\Google
2013-10-10 14:51 . 2010-01-09 07:19	139264	----a-w-	c:\windows\system32\cabview.dll
2013-10-10 14:51 . 2010-01-09 06:52	132608	----a-w-	c:\windows\SysWow64\cabview.dll
2013-10-10 14:51 . 2012-02-15 06:27	1031680	----a-w-	c:\windows\system32\rdpcore.dll
2013-10-10 14:51 . 2012-02-15 05:44	826368	----a-w-	c:\windows\SysWow64\rdpcore.dll
2013-10-10 14:51 . 2012-02-15 04:46	23552	----a-w-	c:\windows\system32\drivers\tdtcp.sys
2013-10-10 14:46 . 2012-06-02 22:19	2428952	----a-w-	c:\windows\system32\wuaueng.dll
2013-10-10 14:46 . 2012-06-02 22:19	57880	----a-w-	c:\windows\system32\wuauclt.exe
2013-10-10 14:46 . 2012-06-02 22:19	44056	----a-w-	c:\windows\system32\wups2.dll
2013-10-10 14:46 . 2012-06-02 22:15	2622464	----a-w-	c:\windows\system32\wucltux.dll
2013-10-10 14:46 . 2012-06-02 22:19	38424	----a-w-	c:\windows\system32\wups.dll
2013-10-10 14:46 . 2012-06-02 22:19	701976	----a-w-	c:\windows\system32\wuapi.dll
2013-10-10 14:46 . 2012-06-02 22:15	99840	----a-w-	c:\windows\system32\wudriver.dll
2013-10-10 14:45 . 2012-06-02 13:19	186752	----a-w-	c:\windows\system32\wuwebv.dll
2013-10-10 14:45 . 2012-06-02 13:15	36864	----a-w-	c:\windows\system32\wuapp.exe
2013-10-10 14:45 . 2013-10-10 14:46	--------	d-----w-	c:\users\Syrus
2013-09-16 15:15 . 2013-09-16 15:15	62136	----a-w-	c:\windows\system32\drivers\epfwwfp.sys
2013-09-16 15:15 . 2013-09-16 15:15	44120	----a-w-	c:\windows\system32\drivers\EpfwLWF.sys
2013-09-16 15:15 . 2013-09-16 15:15	239320	----a-w-	c:\windows\system32\drivers\eamonm.sys
2013-09-16 15:15 . 2013-09-16 15:15	239296	----a-w-	c:\windows\system32\drivers\edevmon.sys
2013-09-16 15:15 . 2013-09-16 15:15	220232	----a-w-	c:\windows\system32\drivers\epfw.sys
2013-09-16 15:15 . 2013-09-16 15:15	168256	----a-w-	c:\windows\system32\drivers\ehdrv.sys
2013-09-11 23:17 . 2013-09-11 23:17	571168	----a-w-	c:\windows\SysWow64\nvStreaming.exe
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-17 20:22 . 2009-07-13 21:59	15901448	----a-w-	c:\windows\system32\nvwgf2umx.dll
2013-09-17 20:22 . 2009-06-10 20:37	12947360	----a-w-	c:\windows\SysWow64\nvd3dum.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - XHUNTER1
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-10 14:53	1185744	----a-w-	c:\program files (x86)\Google\Chrome\Application\30.0.1599.69\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-10-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-10 14:52]
.
2013-10-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-10-10 14:52]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5618456]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-10-11  10:41:43
ComboFix-quarantined-files.txt  2013-10-11 08:41
ComboFix2.txt  2013-10-11 08:15
.
Vor Suchlauf: 10 Verzeichnis(se), 274.744.221.696 Bytes frei
Nach Suchlauf: 11 Verzeichnis(se), 274.696.323.072 Bytes frei
.
- - End Of File - - B8EBCECAF53EC6602D22947CB2219288
         

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31


/end

und nun ?!?!?!

na toll , einfach von meandem andren was reinkopieren hätt ich selber auch amchen können . pfff..

na toll , einfach von meandem andren was reinkopieren hätt ich selber auch amchen können . pfff..

was genau hast Du jetzt für ein Problem?

soviel zur hilfe , danke , lol

logo, du bekommst nach so nem hirnlosen Spruch mit Sicherheit noch Hilfe, klaaaaar