| |
| |||||||
Log-Analyse und Auswertung: GMER Log nach neuinstallation von windows 7 (Rootkit)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
29.10.2013, 19:49
| #1 |
 |  GMER Log nach neuinstallation von windows 7 (Rootkit) Hallo, ich habe vor kurzem einen Rootkit auf meinem System bekommen. Naja ich denke es mal. Ich habe gleich dann windows cd reingelegt -> alles gelöscht also die partitionen undso. Dann habe ich windows neu installieren lassen und direkt GMER ausgeführt. Der meldet mir 2 malwares/rootkit Könnt ihr mir bei der auswertung helfen? Ist das system sicher? Ich bitte um hilfe. Danke ! Hier das ergebnis GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2013-10-29 19:46:31 Windows 6.1.7600 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST1000DM003-1CH162 rev.CC56 931,51GB Running: gmer_2.1.19163.exe; Driver: C:\Users\IsaUhr\AppData\Local\Temp\ffdiqpog.sys ---- Threads - GMER 2.1 ---- Thread C:\Windows\system32\svchost.exe [964:2596] 000007fefad31ebc Thread C:\Windows\system32\svchost.exe [964:776] 000007feeb7fb1b0 ---- EOF - GMER 2.1 ---- |
|
30.10.2013, 06:18
| #2 |
| /// the machine /// TB-Ausbilder    | GMER Log nach neuinstallation von windows 7 (Rootkit) Hi,
__________________ich sehe keine Rootkit-Meldungen in dem Log 
__________________ |
|
30.10.2013, 10:23
| #3 |
| | GMER Log nach neuinstallation von windows 7 (Rootkit) Danke!!!
__________________Habe gerade gemerkt, das quick scan angekreuzt war, Ist das schlimm? Hier mal vollstädigen scan. Kurz vor dem ende kam noch eine Meldung das die Gmer exe / C: $MFT beschädigt sei. Und Windows Defender ist die ganze Zeit deaktiviert und lässt sich nicht aktivieren. Da ich noch keine windows updates gemacht habe wollte ich gerade updaten, aber es öffnet sich bei jeder ausführung dieses fenster, "benutzerkontensteurung" ... windows update HERAUSGEBER ist dann unbekannt. Zudem, merke ich das meien razer Tastatur also das licht der tastaturen ständig aus und an geht. Bin ich clean? GMER Logfile: Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-10-30 10:04:02
Windows 6.1.7600 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST1000DM003-1CH162 rev.CC56 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\IsaUhr\AppData\Local\Temp\ffdiqpog.sys
---- Files - GMER 2.1 ----
File C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS00003.log 1048576 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 2331 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.mum 57709 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 1208 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~~7.6.7600.256.mum 1176 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 8256 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 1875 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 8256 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~~7.6.7600.256.mum 2249 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 8264 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 1894 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~~7.6.7600.256.mum 2669 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 2337 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.mum 57757 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 8264 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 1880 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 8264 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~~7.6.7600.256.mum 2217 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256.cat 9738 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256.mum 2925 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 9142 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 2661 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 10334 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~~7.6.7600.256.mum 1779 bytes
File C:\Windows\servicing\Packages\Package_43_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20866 bytes
File C:\Windows\servicing\Packages\Package_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.mum 2315 bytes
File C:\Windows\servicing\Packages\Package_for_KB2619339_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2619339_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 2117 bytes
File C:\Windows\servicing\Packages\Package_for_KB2619339_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2619339_SP1~31bf3856ad364e35~amd64~~6.1.1.0.mum 2319 bytes
File C:\Windows\servicing\Packages\Package_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.mum 2898 bytes
File C:\Windows\servicing\Packages\Package_for_KB2621440_RTM~31bf3856ad364e35~amd64~~6.1.1.5.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2621440_RTM~31bf3856ad364e35~amd64~~6.1.1.5.mum 2900 bytes
File C:\Windows\servicing\Packages\Package_for_KB2621440_SP1~31bf3856ad364e35~amd64~~6.1.1.5.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2621440_SP1~31bf3856ad364e35~amd64~~6.1.1.5.mum 3608 bytes
File C:\Windows\servicing\Packages\Package_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.mum 3384 bytes
File C:\Windows\servicing\Packages\Package_for_KB2644615_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.mum 3665 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 15322 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.mum 10394 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 15400 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.mum 3572 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.cat 10052 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.mum 4242 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 23506 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.mum 13577 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.cat 10626 bytes
File C:\Windows\servicing\Packages\Package_267_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_267_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 23717 bytes
File C:\Windows\servicing\Packages\Package_268_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_268_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 16800 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat 14740 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.mum 6909 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat 32816 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.mum 3096 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 22895 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.mum 6949 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 11792 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.mum 3184 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 24977 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.mum 4562 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 10618 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.mum 3080 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.mum 2869 bytes
File C:\Windows\servicing\Packages\Package_266_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20039 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.mum 6676 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 11808 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat 49736 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.mum 18420 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 10648 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.mum 2530 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 15322 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.mum 10002 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 15400 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.mum 3157 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 15320 bytes
File C:\Windows\servicing\Packages\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat 35483 bytes
File C:\Windows\servicing\Packages\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.mum 1674 bytes
File C:\Windows\servicing\Packages\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~~6.1.7600.16385.cat 21798 bytes
File C:\Windows\servicing\Packages\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~~6.1.7600.16385.mum 1444 bytes
File C:\Windows\servicing\Packages\Package_for_KB2661254_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2661254_SP1~31bf3856ad364e35~amd64~~6.1.1.3.mum 70218 bytes
File C:\Windows\servicing\Packages\Package_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 95182 bytes
File C:\Windows\servicing\Packages\Package_for_KB2698365_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2698365_RTM~31bf3856ad364e35~amd64~~6.1.1.2.mum 6390 bytes
File C:\Windows\servicing\Packages\Package_for_KB2698365_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2698365_SP1~31bf3856ad364e35~amd64~~6.1.1.2.mum 4961 bytes
File C:\Windows\servicing\Packages\Package_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 11792 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.mum 2990 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 13564 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.mum 7708 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 12922 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.mum 2704 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 19994 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.mum 9625 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 8882 bytes
File C:\Windows\servicing\Packages\Package_8_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.mum 3959 bytes
File C:\Windows\servicing\Packages\Package_9_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 12396 bytes
File C:\Windows\servicing\Packages\Package_9_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.mum 4298 bytes
File C:\Windows\servicing\Packages\Package_9_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 8860 bytes
File C:\Windows\servicing\Packages\Package_9_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.mum 2725 bytes
File C:\Windows\servicing\Packages\Package_9_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 14828 bytes
File C:\Windows\servicing\Packages\Package_9_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.mum 4379 bytes
File C:\Windows\servicing\Packages\Package_for_KB2345886_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2644615_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2644615_SP1~31bf3856ad364e35~amd64~~6.1.1.0.mum 2807 bytes
File C:\Windows\servicing\Packages\Package_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.mum 4017 bytes
File C:\Windows\servicing\Packages\Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~6.1.4.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~6.1.4.0.mum 2431 bytes
File C:\Windows\servicing\Packages\Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~6.1.4.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~6.1.4.0.mum 2409 bytes
File C:\Windows\servicing\Packages\Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 18093 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.mum 4564 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 43320 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.mum 5278 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 12922 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.mum 3098 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 20012 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.mum 9510 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 8864 bytes
File C:\Windows\servicing\Packages\Package_2_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.mum 4570 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat 13580 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.mum 5374 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.mum 0 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 27553 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.mum 6540 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.mum 2880 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.mum 3062 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.mum 8611 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.mum 6265 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.mum 3955 bytes
File C:\Windows\servicing\Packages\Package_80_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20486 bytes
File C:\Windows\servicing\Packages\Package_for_KB2345886_RTM~31bf3856ad364e35~amd64~~6.1.1.2.mum 2164 bytes
File C:\Windows\servicing\Packages\Package_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.mum 1681 bytes
File C:\Windows\servicing\Packages\Package_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.mum 3189 bytes
File C:\Windows\servicing\Packages\Package_for_KB2584146_SP1~31bf3856ad364e35~amd64~~6.1.1.3.mum 1915 bytes
File C:\Windows\servicing\Packages\Package_for_KB2644615_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 4334 bytes
File C:\Windows\servicing\Packages\Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.mum 2779 bytes
File C:\Windows\servicing\Packages\Package_for_KB2661254_RTM~31bf3856ad364e35~amd64~~6.1.1.3.mum 104994 bytes
File C:\Windows\servicing\Packages\Package_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.mum 5027 bytes
File C:\Windows\servicing\Packages\Package_for_KB2813170_RTM~31bf3856ad364e35~amd64~~6.1.1.3.mum 5057 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256.mum 3337 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 8860 bytes
File C:\Windows\servicing\Packages\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.mum 1853 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum 6933 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.cat 11744 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.mum 2454 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.mum 0 bytes
File C:\Windows\servicing\Packages\Package_1_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 43320 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.mum 5079 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 9456 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.mum 3596 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 9458 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.mum 3578 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 22895 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.mum 6340 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 10648 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.mum 2495 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 24977 bytes
File C:\Windows\servicing\Packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.mum 1898 bytes
File C:\Windows\servicing\Packages\Package_for_KB2419640_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2419640_RTM~31bf3856ad364e35~amd64~~6.1.1.1.mum 3711 bytes
File C:\Windows\servicing\Packages\Package_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.mum 2653 bytes
File C:\Windows\servicing\Packages\Package_for_KB2442962_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2442962_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 1946 bytes
File C:\Windows\servicing\Packages\Package_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2712808_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2712808_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 2635 bytes
File C:\Windows\servicing\Packages\Package_for_KB2712808_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2712808_SP1~31bf3856ad364e35~amd64~~6.1.1.0.mum 2613 bytes
File C:\Windows\servicing\Packages\Package_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.mum 3181 bytes
File C:\Windows\servicing\Packages\Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~6.1.2.0.mum 4626 bytes
File C:\Windows\servicing\Packages\Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~6.1.2.0.mum 3097 bytes
File C:\Windows\servicing\Packages\Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.mum 4075 bytes
File C:\Windows\servicing\Packages\Package_for_KB2742598_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_for_KB2742598_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 57707 bytes
File C:\Windows\servicing\Packages\Package_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 7702 bytes
File C:\Windows\servicing\Packages\Package_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.mum 37599 bytes
File C:\Windows\servicing\Packages\Package_for_KB2813170_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7704 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.mum 4454 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 30185 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.mum 4148 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 17421 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.mum 4154 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 51020 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.mum 7187 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 9456 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.mum 5245 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 11214 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.mum 5590 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 14846 bytes
File C:\Windows\servicing\Packages\Package_3_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.mum 4575 bytes
File C:\Windows\servicing\Packages\Package_43_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 9456 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 18093 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.mum 3953 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_6_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.mum 5179 bytes
File C:\Windows\servicing\Packages\Package_75_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_75_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20864 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 27553 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.mum 6144 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 30329 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.mum 3759 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 17421 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.mum 3761 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 34088 bytes
File C:\Windows\servicing\Packages\Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.mum 20857 bytes
File C:\Windows\servicing\Packages\Package_80_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 9456 bytes
File C:\Windows\servicing\Packages\Package_for_KB2544893_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2544893_RTM~31bf3856ad364e35~amd64~~6.1.1.1.mum 2783 bytes
File C:\Windows\servicing\Packages\Package_for_KB2544893_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2544893_SP1~31bf3856ad364e35~amd64~~6.1.1.1.mum 1919 bytes
File C:\Windows\servicing\Packages\Package_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.mum 2635 bytes
File C:\Windows\servicing\Packages\Package_for_KB2564958_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2564958_RTM~31bf3856ad364e35~amd64~~6.1.1.1.mum 3805 bytes
File C:\Windows\servicing\Packages\Package_for_KB2564958_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2564958_SP1~31bf3856ad364e35~amd64~~6.1.1.1.mum 2807 bytes
File C:\Windows\servicing\Packages\Package_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.mum 4017 bytes
File C:\Windows\servicing\Packages\Package_for_KB2584146_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2584146_RTM~31bf3856ad364e35~amd64~~6.1.1.3.mum 1938 bytes
File C:\Windows\servicing\Packages\Package_for_KB2584146_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_213_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_213_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20657 bytes
File C:\Windows\servicing\Packages\Package_229_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_229_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20469 bytes
File C:\Windows\servicing\Packages\Package_234_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 9456 bytes
File C:\Windows\servicing\Packages\Package_234_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20051 bytes
File C:\Windows\servicing\Packages\Package_265_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 23569 bytes
File C:\Windows\servicing\Packages\Package_265_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 20231 bytes
File C:\Windows\servicing\Packages\Package_266_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 27169 bytes
File C:\Windows\servicing\Packages\Package_for_KB2813170_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7704 bytes
File C:\Windows\servicing\Packages\Package_for_KB2813170_SP1~31bf3856ad364e35~amd64~~6.1.1.3.mum 3526 bytes
File C:\Windows\servicing\Packages\Package_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 7722 bytes
File C:\Windows\servicing\Packages\Package_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.mum 4399 bytes
File C:\Windows\servicing\Packages\Package_for_KB979309_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7694 bytes
File C:\Windows\servicing\Packages\Package_for_KB979309_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 1485 bytes
File C:\Windows\servicing\Packages\Package_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.cat 7694 bytes
File C:\Windows\servicing\Packages\Package_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.mum 1483 bytes
File C:\Windows\servicing\Packages\Package_for_KB2654428_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2654428_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 3805 bytes
File C:\Windows\servicing\Packages\Package_for_KB2654428_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2654428_SP1~31bf3856ad364e35~amd64~~6.1.1.0.mum 2807 bytes
File C:\Windows\servicing\Packages\Package_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.mum 4017 bytes
File C:\Windows\servicing\Packages\Package_for_KB2660649_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2660649_RTM~31bf3856ad364e35~amd64~~6.1.1.3.mum 2586 bytes
File C:\Windows\servicing\Packages\Package_for_KB2660649_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2660649_SP1~31bf3856ad364e35~amd64~~6.1.1.3.mum 2764 bytes
File C:\Windows\servicing\Packages\Package_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.mum 3283 bytes
File C:\Windows\servicing\Packages\Package_for_KB2661254_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.cat 10052 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.mum 3843 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 14976 bytes
File C:\Windows\servicing\Packages\Package_4_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.mum 8610 bytes
File C:\Windows\servicing\Packages\Package_59_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\servicing\Packages\Package_59_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.mum 21270 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat 14740 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.mum 6514 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat 32816 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.mum 2901 bytes
File C:\Windows\servicing\Packages\Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 10618 bytes
File C:\Windows\servicing\Packages\Package_for_KB2491683_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\servicing\Packages\Package_for_KB2491683_RTM~31bf3856ad364e35~amd64~~6.1.1.1.mum 0 bytes
File C:\Windows\servicing\Packages\Package_for_KB2491683_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\servicing\Packages\Package_for_KB2491683_SP1~31bf3856ad364e35~amd64~~6.1.1.1.mum 0 bytes
File C:\Windows\servicing\Packages\Package_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.mum 0 bytes
File C:\Windows\servicing\Packages\Package_for_KB2511455_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2511455_RTM~31bf3856ad364e35~amd64~~6.1.1.0.mum 3127 bytes
File C:\Windows\servicing\Packages\Package_for_KB2511455_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\servicing\Packages\Package_for_KB2511455_SP1~31bf3856ad364e35~amd64~~6.1.1.0.mum 2129 bytes
File C:\Windows\servicing\Packages\Package_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2419640_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2442962_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2491683_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2491683_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511455_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511455_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544893_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544893_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2564958_RTM~31bf3856ad364e35~amd64~~6.1.1.1.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2564958_SP1~31bf3856ad364e35~amd64~~6.1.1.1.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 10648 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 24977 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 18093 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 27553 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 30329 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 17421 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_7_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 34088 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_80_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 9456 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 11792 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 13564 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 12922 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 19994 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_8_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 8882 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 12396 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 8860 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_9_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 14828 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2345886_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~de-DE~6.1.7600.16385.cat 35483 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Server-Help-Package.ClientUltimate~31bf3856ad364e35~amd64~~6.1.7600.16385.cat 21798 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_266_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 27169 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 10648 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr005.cat 16621 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr006.cat 14301 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr007.cat 11386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr008.cat 8776 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr009.cat 12851 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr00a.cat 9081 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca003.cat 10523 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00a.cat 16185 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00b.cat 23202 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00c.cat 18247 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00d.cat 20310 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00e.cat 15276 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00f.cat 19431 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00g.cat 22204 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00h.cat 15574 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00i.cat 17361 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00x.cat 19634 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00z.cat 19431 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep002.cat 8776 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep003.cat 17564 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep004.cat 19320 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep005.cat 7898 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00a.cat 16499 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00b.cat 32933 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00c.cat 17499 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00d.cat 15477 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00e.cat 15783 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00f.cat 12859 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00g.cat 12844 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnep00l.cat 43209 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnfx002.cat 11668 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnge001.cat 10837 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt002.cat 20085 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt003.cat 20085 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp002.cat 62391 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp003.cat 77664 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp004.cat 25465 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnhp005.cat 36236 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin002.cat 18055 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin003.cat 18055 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnin004.cat 18055 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm002.cat 12835 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm003.cat 13118 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm004.cat 8470 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnkm005.cat 9355 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky002.cat 16315 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky003.cat 16606 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky004.cat 13134 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky005.cat 9645 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky006.cat 12545 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky007.cat 12561 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky009.cat 12836 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle002.cat 20955 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle003.cat 20955 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnle004.cat 20955 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx002.cat 11370 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx003.cat 12545 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx004.cat 8775 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx005.cat 10805 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx006.cat 8180 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx007.cat 10515 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx008.cat 9050 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx009.cat 8180 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00a.cat 8195 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00b.cat 10515 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00c.cat 8485 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00d.cat 9050 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00e.cat 8180 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00w.cat 7913 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00x.cat 8501 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00y.cat 9089 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00z.cat 7913 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnms002.cat 9403 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr002.cat 20085 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr003.cat 20085 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnnr004.cat 20085 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnod002.cat 11103 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnok002.cat 20101 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc002.cat 8195 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc003.cat 8195 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc004.cat 8195 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc005.cat 19795 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc006.cat 19780 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc007.cat 19795 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00a.cat 9959 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00c.cat 8791 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsa002.cat 26207 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsh002.cat 18933 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnso002.cat 11104 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv002.cat 20360 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv003.cat 20375 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnsv004.cat 20360 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts002.cat 9355 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnts003.cat 9653 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnxx002.cat 9340 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\windows-legacy-whql.cat 351022 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256.cat 9738 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 9142 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-AuxComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 10334 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 8256 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-AdmComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 8256 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 8264 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-CoreComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 8860 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 8264 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core-UIComp~31bf3856ad364e35~amd64~~7.6.7600.256.cat 8264 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Core~31bf3856ad364e35~amd64~~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 11808 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 30185 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 17421 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 51020 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 9456 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 11214 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 14846 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_43_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 9456 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat 49736 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2698365_RTM~31bf3856ad364e35~amd64~~6.1.1.2.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2698365_SP1~31bf3856ad364e35~amd64~~6.1.1.2.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2712808_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2712808_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2729094_RTM~31bf3856ad364e35~amd64~~6.1.2.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2729094_SP1~31bf3856ad364e35~amd64~~6.1.2.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2742598_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2813170_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7704 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2813170_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7704 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 7722 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979309_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7694 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.cat 7694 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 15322 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 15400 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.cat 10052 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 23506 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB979309~31bf3856ad364e35~amd64~~6.1.1.0.cat 10626 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_213_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_229_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_234_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 9456 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_265_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 23569 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr002.cat 24741 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr003.cat 12569 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_16_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 8578 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_17_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 9166 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_18_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 22360 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_197_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 9456 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_19_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 12082 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat 17672 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2442962~31bf3856ad364e35~amd64~~6.1.1.0.cat 11744 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2345886~31bf3856ad364e35~amd64~~6.1.1.2.cat 7716 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2584146_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2644615_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnbr004.cat 12271 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnca00y.cat 8470 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prngt004.cat 20085 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnky008.cat 13415 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnlx00v.cat 8486 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\prnrc00b.cat 13690 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WUClient-SelfUpdate-Aux-MiniLP~31bf3856ad364e35~amd64~de-DE~7.6.7600.256.cat 7386 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2647753_RTM~31bf3856ad364e35~amd64~~6.1.4.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2647753_SP1~31bf3856ad364e35~amd64~~6.1.4.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 7702 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2654428_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2654428_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660649_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660649_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2661254_RTM~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2661254_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_267_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_268_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat 14740 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat 32816 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 22895 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 11792 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2644615~31bf3856ad364e35~amd64~~6.1.1.0.cat 24977 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 10618 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat 18093 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 43320 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 12922 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2742598~31bf3856ad364e35~amd64~~6.1.1.0.cat 20012 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 8864 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2419640~31bf3856ad364e35~amd64~~6.1.1.1.cat 13580 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2491683~31bf3856ad364e35~amd64~~6.1.1.1.cat 0 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 27553 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 15322 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 15400 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 15320 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2712808~31bf3856ad364e35~amd64~~6.1.1.0.cat 10052 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB2813170~31bf3856ad364e35~amd64~~6.1.1.3.cat 14976 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_59_for_KB2661254~31bf3856ad364e35~amd64~~6.1.1.3.cat 10632 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2511455~31bf3856ad364e35~amd64~~6.1.1.0.cat 14740 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2544893~31bf3856ad364e35~amd64~~6.1.1.1.cat 32816 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2647753~31bf3856ad364e35~amd64~~6.1.4.0.cat 10618 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2660649~31bf3856ad364e35~amd64~~6.1.1.3.cat 43320 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2698365~31bf3856ad364e35~amd64~~6.1.1.2.cat 9456 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2729094~31bf3856ad364e35~amd64~~6.1.2.0.cat 9458 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_6_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat 22895 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2584146_SP1~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2584146~31bf3856ad364e35~amd64~~6.1.1.3.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2619339_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2619339_SP1~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2619339~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2621440_RTM~31bf3856ad364e35~amd64~~6.1.1.5.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2621440_SP1~31bf3856ad364e35~amd64~~6.1.1.5.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2621440~31bf3856ad364e35~amd64~~6.1.1.5.cat 7700 bytes
File C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_for_KB2644615_RTM~31bf3856ad364e35~amd64~~6.1.1.0.cat 7700 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-h..rtuimedia.resources_31bf3856ad364e35_6.1.7600.16385_de-de_336f711d4edcda2c 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-h..rtuimedia.resources_31bf3856ad364e35_6.1.7600.16385_de-de_336f711d4edcda2c\artuimedia.h1s 1153772 bytes executable
File C:\Windows\winsxs\amd64_microsoft-windows-i..l-keyboard-00000481_31bf3856ad364e35_6.1.7600.16385_none_43365fb27de98d39 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-i..l-keyboard-00000481_31bf3856ad364e35_6.1.7600.16385_none_43365fb27de98d39\KBDMAORI.DLL 6656 bytes executable
File C:\Windows\winsxs\amd64_microsoft-windows-international-nlsbuild_31bf3856ad364e35_6.1.7600.16385_none_efc1a6691fa925dd 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-international-nlsbuild_31bf3856ad364e35_6.1.7600.16385_none_efc1a6691fa925dd\nlsbres.dll 68608 bytes executable
File C:\Windows\winsxs\amd64_microsoft-windows-f..-truetype-moolboran_31bf3856ad364e35_6.1.7600.16385_none_c3c7531afa803429 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..-truetype-moolboran_31bf3856ad364e35_6.1.7600.16385_none_c3c7531afa803429\moolbor.ttf 342840 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..-truetype-wingdings_31bf3856ad364e35_6.1.7600.16385_none_85208756a65ef4ea 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..-truetype-wingdings_31bf3856ad364e35_6.1.7600.16385_none_85208756a65ef4ea\wingding.ttf 83740 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..acefilter.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6b2be19238377990 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..acefilter.resources_31bf3856ad364e35_6.1.7600.16385_de-de_6b2be19238377990\filetrace.mfl 9922 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..allconfig-installer_31bf3856ad364e35_6.1.7600.16385_none_731e1fe6187914ea 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..allconfig-installer_31bf3856ad364e35_6.1.7600.16385_none_731e1fe6187914ea\cmifw.dll 80384 bytes executable
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88\FXSCOMPOSE.dll 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88\FXSCOMPOSERES.dll 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88\FXSCOVER.exe 267264 bytes executable
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88\FXSUTILITY.dll 0 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88\WFS.exe 974336 bytes executable
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88\wfs.mof 2136 bytes
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16385_none_d4ee9e0e42176b88\WFSR.dll 669184 bytes executable
File C:\Windows\winsxs\amd64_microsoft-windows-f..client-applications_31bf3856ad364e35_6.1.7600.16759_none_d513169241fb71ad 0 bytes
---- EOF - GMER 2.1 ----
Geändert von Quant (30.10.2013 um 10:42 Uhr) |
|
30.10.2013, 14:37
| #4 |
| /// the machine /// TB-Ausbilder | GMER Log nach neuinstallation von windows 7 (Rootkit) hi, Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.10.2013, 15:00
| #5 |
| | GMER Log nach neuinstallation von windows 7 (Rootkit) Hallo. Ich habe gerade meinen Pc gestartet um deinen anweisungen zu folgen aber der pc fing an tausende index einträge zu löschen, dort stand auch chksd oder so ähnlich EDIT Hier die Logs FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2013
Ran by IsaUhr (administrator) on ISAUHR-PC on 30-10-2013 15:03:51
Running from C:\Users\IsaUhr\Desktop
Windows 7 Ultimate (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) =================
==================== Registry (Whitelisted) ==================
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xCEFBC4A3D4D4CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
==================== Services (Whitelisted) =================
==================== Drivers (Whitelisted) ====================
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-30 15:03 - 2013-10-30 15:03 - 00000000 ____D C:\FRST
2013-10-30 15:02 - 2013-10-30 15:02 - 01956614 _____ (Farbar) C:\Users\IsaUhr\Desktop\FRST64.exe
2013-10-30 14:59 - 2013-10-30 14:59 - 00003480 ____N C:\bootsqm.dat
2013-10-30 14:59 - 2013-10-30 14:59 - 00000000 __SHD C:\found.000
2013-10-30 10:12 - 2013-10-30 10:12 - 00057560 _____ C:\Users\IsaUhr\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-30 10:04 - 2013-10-30 10:04 - 00099444 _____ C:\Users\IsaUhr\Desktop\Neues Textdokument (2).txt
2013-10-29 19:44 - 2013-10-29 19:44 - 00000000 _____ C:\Users\IsaUhr\Desktop\Neues Textdokument.txt
2013-10-29 19:29 - 2013-10-29 19:29 - 00377856 _____ C:\Users\IsaUhr\Desktop\gmer_2.1.19163.exe
2013-10-29 19:24 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2013-10-29 19:24 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2013-10-29 19:24 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2013-10-29 19:24 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2013-10-29 19:23 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2013-10-29 19:23 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2013-10-29 19:22 - 2013-10-29 19:22 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-29 19:22 - 2013-10-29 19:22 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-10-29 19:22 - 2012-06-12 15:00 - 00726160 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2013-10-29 19:22 - 2012-06-12 15:00 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2013-10-29 19:22 - 2012-06-12 15:00 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2013-10-29 19:21 - 2013-08-17 22:07 - 03589380 _____ (Igor Pavlov) C:\Users\IsaUhr\Desktop\LAN_W7_W764_7.061.0612.2012_PV_Realtek.exe
2013-10-29 19:17 - 2013-10-29 19:17 - 00001435 _____ C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-29 19:17 - 2013-10-29 19:17 - 00001401 _____ C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-10-29 19:17 - 2013-10-29 19:17 - 00000020 ___SH C:\Users\IsaUhr\ntuser.ini
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Vorlagen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Startmenü
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Netzwerkumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Lokale Einstellungen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Eigene Dateien
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Druckumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\AppData\Local\Verlauf
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\AppData\Local\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 __SHD C:\Recovery
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ___RD C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ___RD C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ____D C:\Users\IsaUhr\AppData\Local\VirtualStore
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ____D C:\Users\IsaUhr
2013-10-29 19:17 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-10-29 19:17 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-10-29 19:16 - 2013-10-30 15:04 - 01557754 _____ C:\Windows\WindowsUpdate.log
2013-10-29 19:14 - 2013-10-29 19:14 - 00001313 _____ C:\Windows\TSSysprep.log
2013-10-29 19:13 - 2013-10-29 19:13 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-10-29 19:09 - 2013-10-29 19:17 - 00000000 ____D C:\Windows\Panther
==================== One Month Modified Files and Folders =======
2013-10-30 15:04 - 2013-10-29 19:16 - 01557754 _____ C:\Windows\WindowsUpdate.log
2013-10-30 15:03 - 2013-10-30 15:03 - 00000000 ____D C:\FRST
2013-10-30 15:02 - 2013-10-30 15:02 - 01956614 _____ (Farbar) C:\Users\IsaUhr\Desktop\FRST64.exe
2013-10-30 15:01 - 2009-07-14 05:51 - 00019390 _____ C:\Windows\setupact.log
2013-10-30 15:00 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-30 14:59 - 2013-10-30 14:59 - 00003480 ____N C:\bootsqm.dat
2013-10-30 14:59 - 2013-10-30 14:59 - 00000000 __SHD C:\found.000
2013-10-30 10:30 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-30 10:30 - 2009-07-14 05:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-30 10:12 - 2013-10-30 10:12 - 00057560 _____ C:\Users\IsaUhr\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-30 10:04 - 2013-10-30 10:04 - 00099444 _____ C:\Users\IsaUhr\Desktop\Neues Textdokument (2).txt
2013-10-30 10:02 - 2009-07-14 18:58 - 00643628 _____ C:\Windows\system32\perfh007.dat
2013-10-30 10:02 - 2009-07-14 18:58 - 00126188 _____ C:\Windows\system32\perfc007.dat
2013-10-30 10:02 - 2009-07-14 06:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-29 19:44 - 2013-10-29 19:44 - 00000000 _____ C:\Users\IsaUhr\Desktop\Neues Textdokument.txt
2013-10-29 19:29 - 2013-10-29 19:29 - 00377856 _____ C:\Users\IsaUhr\Desktop\gmer_2.1.19163.exe
2013-10-29 19:24 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-10-29 19:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-29 19:22 - 2013-10-29 19:22 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-29 19:22 - 2013-10-29 19:22 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-10-29 19:21 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore
2013-10-29 19:17 - 2013-10-29 19:17 - 00001435 _____ C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-10-29 19:17 - 2013-10-29 19:17 - 00001401 _____ C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2013-10-29 19:17 - 2013-10-29 19:17 - 00000020 ___SH C:\Users\IsaUhr\ntuser.ini
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Vorlagen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Startmenü
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Netzwerkumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Lokale Einstellungen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Eigene Dateien
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Druckumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\AppData\Local\Verlauf
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\AppData\Local\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\IsaUhr\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Programme
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 __SHD C:\Recovery
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ___RD C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ___RD C:\Users\IsaUhr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ____D C:\Users\IsaUhr\AppData\Local\VirtualStore
2013-10-29 19:17 - 2013-10-29 19:17 - 00000000 ____D C:\Users\IsaUhr
2013-10-29 19:17 - 2013-10-29 19:09 - 00000000 ____D C:\Windows\Panther
2013-10-29 19:17 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-10-29 19:17 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2013-10-29 19:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-29 19:15 - 2009-07-14 05:45 - 00274464 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-29 19:14 - 2013-10-29 19:14 - 00001313 _____ C:\Windows\TSSysprep.log
2013-10-29 19:14 - 2009-07-14 05:46 - 00001774 _____ C:\Windows\DtcInstall.log
2013-10-29 19:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-10-29 19:13 - 2013-10-29 19:13 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-10-29 19:10 - 2009-07-14 19:18 - 00000000 ____D C:\Windows\CSC
2013-10-29 19:09 - 2009-07-14 06:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-10-29 19:09 - 2009-07-14 06:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-10-29 19:08 - 2009-07-14 05:45 - 00000000 ____D C:\Windows\Setup
2013-10-29 19:08 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-29 19:10
==================== End Of Log ============================
--- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2013
Ran by IsaUhr at 2013-10-30 15:04:41
Running from C:\Users\IsaUhr\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Realtek Ethernet Controller Driver (x32 Version: 7.61.612.2012)
==================== Restore Points =========================
29-10-2013 18:21:51 Installiert Realtek Ethernet Controller Driver
29-10-2013 18:23:35 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
==================== Loaded Modules (whitelisted) =============
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Standard-VGA-Grafikkarte
Description: Standard-VGA-Grafikkarte
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardgrafikkartentypen)
Service: vga
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/30/2013 10:31:52 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:52 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:52 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:50 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:49 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:49 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:49 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:47 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:46 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
Error: (10/30/2013 10:31:46 AM) (Source: Microsoft-Windows-CAPI2) (User: )
Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. Fehler: 1392 (0x570) : Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
.
System errors:
=============
Error: (10/30/2013 03:00:08 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 30.10.2013 um 10:31:04 unerwartet heruntergefahren.
Error: (10/30/2013 10:31:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Defender" wurde mit folgendem Fehler beendet:
%%-2147023504
Error: (10/30/2013 10:31:44 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.
Error: (10/30/2013 10:31:43 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.
Error: (10/30/2013 10:31:43 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.
Error: (10/30/2013 10:31:43 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.
Error: (10/30/2013 10:31:41 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Defender" wurde mit folgendem Fehler beendet:
%%-2147023504
Error: (10/30/2013 10:31:40 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.
Error: (10/30/2013 10:31:40 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.
Error: (10/30/2013 10:31:40 AM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "\Device\HarddiskVolume2" den Befehl "chkdsk" aus.
Microsoft Office Sessions:
=========================
Error: (10/30/2013 10:31:52 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:52 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:52 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:50 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:49 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:49 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:49 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:47 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:46 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
Error: (10/30/2013 10:31:46 AM) (Source: Microsoft-Windows-CAPI2)(User: )
Description: 1392 (0x570)Die Datei oder das Verzeichnis ist beschädigt und nicht lesbar.
==================== Memory info ===========================
Percentage of memory in use: 19%
Total physical RAM: 7358.96 MB
Available physical RAM: 5935.68 MB
Total Pagefile: 14716.07 MB
Available Pagefile: 13382.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.41 GB) (Free:910.49 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 246F2A88)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Geändert von Quant (30.10.2013 um 15:08 Uhr) |
|
31.10.2013, 09:28
| #6 |
| /// the machine /// TB-Ausbilder | GMER Log nach neuinstallation von windows 7 (Rootkit) hi, Scan mit Combofix
__________________ --> GMER Log nach neuinstallation von windows 7 (Rootkit) |
|
31.10.2013, 09:34
| #7 |
| | GMER Log nach neuinstallation von windows 7 (Rootkit) Hallo, Ich bin zurzeit nicht zu hause, komme erst gegen 16:00.. Kannst du zurzeit was zu meinem Rechner sagen? Ist er infiziert? Ich hatte mal tcpview runtergeladen und der zeigte mir sehr viele sachen an, vielleicht ist dies hilfreich. |
|
31.10.2013, 10:21
| #8 |
| /// the machine /// TB-Ausbilder | GMER Log nach neuinstallation von windows 7 (Rootkit) Nach diesem Scan kann ich dir mehr sagen 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
31.10.2013, 12:59
| #9 |
| | GMER Log nach neuinstallation von windows 7 (Rootkit) Hey, Danke aber da du gegen 17:00 nicht da bist können wir ja erst morgen weiter machen.. Ich bin ka erst 17:00 da. Ist den jetzt nichts verkehrt bis jetzt?? Kannst du kein zwischenergebnis sagen oder so? Mein Onkel rief eben an, er hat mein rechner nochmal neuaufgesetzt. |
|
01.11.2013, 10:55
| #10 |
| /// the machine /// TB-Ausbilder | GMER Log nach neuinstallation von windows 7 (Rootkit) also brauchst du jetzt keine Hilfe mehr?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
01.11.2013, 13:31
| #11 |
| | GMER Log nach neuinstallation von windows 7 (Rootkit) Nein. Ich danke dir mehrmals ! Nach dem 2. Aufsetzen scheint alles in Ordnung zu sein. Und vielleicht hättest du einen ratschlag für mich. Ich benutze gerade Avg Internet Security full ( nicht gecrackt. Es gibt eine gratis huawei ausgabe von avg für 365tage in der man alle Komponenten verwenden kann ) mit spybot S&D. Ist dies ausreichend? Danke nochmal !!! |
|
02.11.2013, 11:04
| #12 |
| /// the machine /// TB-Ausbilder | GMER Log nach neuinstallation von windows 7 (Rootkit) Ich bin zwar kein Fan von AVG, aber das ist ausreichend
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu GMER Log nach neuinstallation von windows 7 (Rootkit) |
| appdata, auswertung, c:\windows, device, direkt, driver, gelöscht, gmer, harddisk, ide, log, melde, meldet, neu, neuinstallation, rootkit, scan, svchost.exe, system, system sicher, system32, temp, threads, windows, windows 7 |
WARNUNG an die MITLESER: 
Hybrid-Darstellung
