Und die Fortsetzung, Teil 2:
Code:
Alles auswählen Aufklappen ATTFilter
==================== One Month Modified Files and Folders =======
2014-02-14 19:45 - 2014-02-12 19:19 - 00022411 _____ () C:\Users\*****\Downloads\FRST.txt
2014-02-14 19:44 - 2014-02-14 19:44 - 00000000 ____D () C:\Users\*****\Downloads\FRST-OlderVersion
2014-02-14 19:44 - 2014-02-12 19:19 - 00000000 ____D () C:\FRST
2014-02-14 19:44 - 2014-02-12 19:09 - 02152960 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2014-02-14 19:42 - 2014-02-14 19:39 - 00001066 _____ () C:\Users\*****\Desktop\JRT.txt
2014-02-14 19:27 - 2014-02-14 19:26 - 01037530 _____ (Thisisu) C:\Users\*****\Downloads\JRT.exe
2014-02-14 19:23 - 2013-11-14 08:27 - 01984356 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-02-14 19:23 - 2013-11-14 08:11 - 00843606 _____ () C:\WINDOWS\system32\perfh007.dat
2014-02-14 19:23 - 2013-11-14 08:11 - 00192300 _____ () C:\WINDOWS\system32\perfc007.dat
2014-02-14 19:22 - 2014-01-22 22:26 - 00000000 __RDO () C:\Users\*****\SkyDrive
2014-02-14 19:16 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-02-14 19:15 - 2014-02-12 18:04 - 00308593 _____ () C:\WINDOWS\WindowsUpdate.log
2014-02-14 19:15 - 2014-01-16 19:35 - 00000000 ____D () C:\AdwCleaner
2014-02-14 19:15 - 2013-08-22 14:25 - 00262144 _____ () C:\WINDOWS\system32\config\BBI
2014-02-14 19:13 - 2014-02-14 19:13 - 01166132 _____ () C:\Users\*****\Downloads\adwcleaner.exe
2014-02-14 19:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-02-14 18:50 - 2014-02-14 18:20 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-02-14 18:50 - 2014-02-14 18:15 - 00000000 ____D () C:\Users\*****\Desktop\mbar
2014-02-14 18:20 - 2014-02-14 18:20 - 00119000 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-02-14 18:18 - 2014-02-14 18:18 - 00091352 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-02-13 20:59 - 2014-02-13 20:59 - 12589848 _____ (Malwarebytes Corp.) C:\Users\*****\Downloads\mbar-1.07.0.1009.exe
2014-02-12 20:53 - 2014-02-12 20:45 - 00024795 _____ () C:\Users\*****\Downloads\Gmer.txt
2014-02-12 20:52 - 2014-02-12 19:20 - 00026506 _____ () C:\Users\*****\Downloads\Addition.txt
2014-02-12 20:48 - 2014-02-12 19:15 - 00000474 _____ () C:\Users\*****\Downloads\defogger_disable.log
2014-02-12 20:42 - 2014-02-12 20:41 - 00380416 _____ () C:\Users\*****\Downloads\Gmer-19357.exe
2014-02-12 19:15 - 2014-02-12 19:15 - 00000000 _____ () C:\Users\*****\defogger_reenable
2014-02-12 19:15 - 2014-01-22 21:39 - 00000000 ____D () C:\Users\*****
2014-02-12 19:10 - 2014-02-12 19:10 - 00050477 _____ () C:\Users\*****\Downloads\Defogger.exe
2014-02-12 18:30 - 2014-02-12 18:30 - 25640672 _____ (Microsoft Corporation) C:\Users\*****\Downloads\Windows-KB890830-x64-V5.9.exe
2014-02-11 22:00 - 2014-01-17 20:36 - 00000052 _____ () C:\WINDOWS\SysWOW64\DOErrors.log
2014-02-11 22:00 - 2014-01-17 20:36 - 00000000 _____ () C:\WINDOWS\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-02-11 21:27 - 2014-02-11 21:27 - 00000000 ____D () C:\Program Files (x86)\Hp
2014-02-11 21:15 - 2014-02-11 19:22 - 00000360 _____ () C:\WINDOWS\Tasks\HPCeeScheduleFor*****.job
2014-02-11 19:52 - 2014-01-25 19:41 - 00000000 ____D () C:\Users\NeroMediaHomeUser.4
2014-02-11 19:22 - 2014-02-11 19:22 - 00003174 _____ () C:\WINDOWS\System32\Tasks\HPCeeScheduleFor*****
2014-02-11 19:22 - 2014-01-15 20:57 - 00000000 ____D () C:\Users\*****\AppData\Local\Hewlett-Packard
2014-02-11 19:16 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-02-10 18:55 - 2014-02-02 18:46 - 00000000 ____D () C:\Users\*****\Ebay
2014-02-09 19:06 - 2014-01-15 21:07 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3605841183-1322370777-216223967-1002
2014-02-08 21:52 - 2014-01-24 18:35 - 00000000 ____D () C:\Users\*****\Documents\Outlook-Dateien
2014-02-08 21:31 - 2014-02-08 21:31 - 00000000 ____D () C:\Users\*****\Documents\Benutzerdefinierte Office-Vorlagen
2014-02-08 11:29 - 2014-02-08 11:29 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-08 11:29 - 2014-02-08 11:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-08 11:29 - 2014-02-03 20:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 13:16 - 2014-02-11 20:49 - 23170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-11 20:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-11 20:49 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-11 20:49 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-11 20:49 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-11 20:49 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-11 20:49 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-11 20:49 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-02-06 11:49 - 2014-02-11 20:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-11 20:49 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-11 20:49 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-11 20:49 - 17103872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-11 20:49 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-11 20:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-11 20:49 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-02-06 11:11 - 2014-02-11 20:49 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-11 20:49 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-11 20:49 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-11 20:49 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-11 20:49 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-11 20:49 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-11 20:49 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-11 20:49 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-02-06 10:47 - 2014-02-11 20:49 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-11 20:49 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-11 20:49 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-11 20:49 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-11 20:49 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-02-06 10:22 - 2014-02-11 20:49 - 13051392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-11 20:49 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-11 20:49 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-11 20:49 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-11 20:49 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-11 20:49 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-11 20:49 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-11 20:49 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-11 20:49 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-02-04 19:09 - 2014-01-17 18:01 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-02-03 23:12 - 2014-02-03 23:12 - 00002032 _____ () C:\Users\*****\Desktop\Avira EU-Cleaner.lnk
2014-02-03 23:12 - 2014-02-01 18:02 - 00001053 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avira-eu-cleaner_de(1).lnk
2014-02-03 22:04 - 2013-11-21 07:15 - 00000000 ____D () C:\WINDOWS\Hewlett-Packard
2014-02-03 21:21 - 2014-02-03 21:14 - 312761032 _____ (Norman Shark AS) C:\Users\*****\Downloads\Norman_Malware208_Cleaner.exe
2014-02-03 20:58 - 2014-02-03 20:58 - 00001166 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-03 20:09 - 2014-02-03 20:09 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-02-03 19:52 - 2014-01-25 12:57 - 00000000 ____D () C:\WINDOWS\Minidump
2014-02-03 19:52 - 2014-01-22 21:30 - 00000000 ___DC () C:\WINDOWS\Panther
2014-02-03 19:52 - 2014-01-17 20:16 - 00000000 ____D () C:\Users\*****\AppData\Local\CrashDumps
2014-02-03 19:52 - 2014-01-16 19:16 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Winamp
2014-02-03 19:50 - 2014-02-03 19:50 - 00002772 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-02-03 19:50 - 2014-02-03 19:50 - 00000841 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-03 19:50 - 2014-02-03 19:50 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-01 22:21 - 2014-02-01 22:21 - 03645064 _____ (Piriform Ltd) C:\Users\*****\Downloads\ccsetup410_slim.exe
2014-02-01 19:22 - 2014-02-01 19:22 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Malwarebytes
2014-02-01 19:21 - 2014-02-01 19:21 - 00001128 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-01 19:21 - 2014-02-01 19:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-01 19:21 - 2014-02-01 19:21 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-01 19:20 - 2014-02-01 19:20 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-01 18:01 - 2014-01-17 18:05 - 02209056 _____ () C:\Users\*****\Downloads\avira-eu-cleaner_de.exe
2014-02-01 15:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-01-31 19:52 - 2014-01-16 19:34 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-31 18:55 - 2014-01-31 18:54 - 00000597 _____ () C:\Users\*****\AppData\Roaming\haj-log_2014-01-31 18_54_50.mjf
2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Imploded Software
2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 21:03 - 2014-01-30 21:03 - 00000000 ____D () C:\Users\*****\AppData\Local\Eraser 6
2014-01-25 19:48 - 2014-01-25 19:32 - 00000000 ____D () C:\ProgramData\Nero
2014-01-25 19:41 - 2014-01-25 19:41 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Nero
2014-01-25 19:41 - 2014-01-25 19:41 - 00000000 ____D () C:\Users\*****\AppData\Local\Nero
2014-01-25 16:53 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-01-25 16:03 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-01-25 15:59 - 2014-01-17 17:32 - 00000000 ____D () C:\Users\*****\AppData\Roaming\CyberLink
2014-01-25 15:54 - 2014-01-25 15:52 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-01-25 15:54 - 2014-01-15 20:56 - 00000000 ____D () C:\Users\*****\AppData\Local\Packages
2014-01-25 15:26 - 2013-07-22 10:02 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-01-25 15:25 - 2012-08-04 01:02 - 00000000 ____D () C:\SWSetup
2014-01-25 15:24 - 2013-11-21 07:22 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-01-25 15:17 - 2014-01-25 15:17 - 00003166 _____ () C:\WINDOWS\System32\Tasks\CLVDLauncher
2014-01-25 15:16 - 2014-01-25 15:16 - 00003166 _____ () C:\WINDOWS\System32\Tasks\CLMLSvc_P2G8
2014-01-25 14:33 - 2014-01-25 14:33 - 00000000 ____D () C:\Users\*****\AppData\Local\Downloaded Installations
2014-01-25 14:30 - 2014-01-16 18:40 - 00000000 ____D () C:\Users\*****\AppData\Roaming\hpqlog
2014-01-25 14:27 - 2014-01-15 21:00 - 00000000 ____D () C:\Users\*****\AppData\Local\CyberLink
2014-01-25 14:27 - 2013-11-21 07:29 - 00000000 ____D () C:\Users\Public\CyberLink
2014-01-25 14:25 - 2013-11-21 07:24 - 00000000 ____D () C:\ProgramData\CyberLink
2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Users\*****\AppData\Local\MediaServer
2014-01-25 14:15 - 2014-01-23 18:11 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-01-25 13:56 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-01-25 13:39 - 2014-01-25 13:39 - 00830680 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2014-01-25 13:39 - 2014-01-25 13:39 - 00074456 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2014-01-25 13:39 - 2013-11-21 07:03 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-01-25 13:38 - 2014-01-25 13:38 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2014-01-25 13:37 - 2014-01-25 13:37 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2014-01-25 13:36 - 2014-01-25 13:37 - 00722160 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2014-01-25 13:36 - 2014-01-25 13:37 - 00524016 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2014-01-25 13:36 - 2014-01-25 13:37 - 00421616 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo19.dll
2014-01-25 13:36 - 2014-01-25 13:37 - 00400112 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2014-01-25 13:36 - 2014-01-25 13:37 - 00251632 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2014-01-25 13:36 - 2014-01-25 13:37 - 00169712 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynTPCom.dll
2014-01-25 13:36 - 2014-01-25 13:37 - 00034544 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2014-01-25 13:07 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2014-01-25 12:57 - 2013-08-22 15:44 - 00489600 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-25 12:56 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-01-24 21:55 - 2014-01-24 21:56 - 02944216 _____ (Realtek Semiconductor Corporation ) C:\WINDOWS\SysWOW64\Drivers\rtwlane.sys
2014-01-24 21:55 - 2014-01-24 21:56 - 02944216 _____ (Realtek Semiconductor Corporation ) C:\WINDOWS\system32\Drivers\rtwlane.sys
2014-01-24 21:50 - 2014-01-24 21:50 - 00099288 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\TeeDriverx64.sys
2014-01-24 21:50 - 2013-11-21 07:02 - 00016344 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\IntelMEFWVer.dll
2014-01-24 21:45 - 2013-11-21 07:00 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2014-01-24 21:44 - 2014-01-22 21:33 - 00000000 ____D () C:\Program Files\Intel
2014-01-24 21:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-01-24 21:41 - 2014-01-24 21:41 - 00000000 ____D () C:\Users\*****\Intel
2014-01-24 19:28 - 2014-01-24 18:35 - 00271360 _____ () C:\Users\*****\Desktop\Outlook.pst
2014-01-23 18:08 - 2014-01-23 18:08 - 00575168 _____ (Microsoft Corporation) C:\Users\*****\Downloads\Setup.x86.de-DE_ProPlusRetail_QHG2J-NGYMH-KR9XQ-QDDHW-6MQ63_act_1_.exe
2014-01-23 17:59 - 2014-01-23 17:59 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Norton Internet Security
2014-01-22 22:24 - 2014-01-15 20:59 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-22 22:24 - 2014-01-15 20:59 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-22 22:24 - 2014-01-15 20:59 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-01-22 22:23 - 2014-01-22 22:23 - 00001457 _____ () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-22 22:23 - 2014-01-22 22:23 - 00000020 ___SH () C:\Users\*****\ntuser.ini
2014-01-22 22:23 - 2013-11-21 07:38 - 00003234 _____ () C:\WINDOWS\System32\Tasks\Norton WSC Integration
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-01-22 21:52 - 2014-01-22 21:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-01-22 21:52 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-01-22 21:51 - 2014-01-22 21:51 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2014-01-22 21:51 - 2014-01-22 21:39 - 00028578 _____ () C:\WINDOWS\diagwrn.xml
2014-01-22 21:51 - 2014-01-22 21:39 - 00028578 _____ () C:\WINDOWS\diagerr.xml
2014-01-22 21:51 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration
2014-01-22 21:49 - 2014-01-22 21:36 - 02008488 _____ () C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2014-01-22 21:47 - 2014-01-22 21:45 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-01-22 21:47 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media
2014-01-22 21:47 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-22 21:45 - 2013-11-21 07:10 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-01-22 21:45 - 2013-11-21 07:10 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-01-22 21:43 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2014-01-22 21:43 - 2013-07-22 18:35 - 00000000 ____D () C:\WINDOWS\en-GB
2014-01-22 21:43 - 2013-07-22 10:11 - 00000000 ____D () C:\WINDOWS\de
2014-01-22 21:42 - 2014-01-22 21:42 - 00000000 ____D () C:\Users\Default\Documents\hp.system.package.metadata
2014-01-22 21:42 - 2014-01-22 21:42 - 00000000 ____D () C:\Users\Default User\Documents\hp.system.package.metadata
2014-01-22 21:42 - 2013-11-21 07:03 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda
2014-01-22 21:42 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2014-01-22 21:42 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2014-01-22 21:42 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\WCN
2014-01-22 21:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2014-01-22 21:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2014-01-22 21:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2014-01-22 21:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2014-01-22 21:42 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2014-01-22 21:42 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2014-01-22 21:42 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-01-22 21:42 - 2013-07-22 10:07 - 00000000 ____D () C:\WINDOWS\SysWOW64\Adobe
2014-01-22 21:42 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated
2014-01-22 21:41 - 2014-01-22 21:33 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-22 21:41 - 2014-01-22 21:33 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-01-22 21:41 - 2014-01-17 17:20 - 00000000 ___HD () C:\WINDOWS\system32\CanonIJ Uninstaller Information
2014-01-22 21:41 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2014-01-22 21:41 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2014-01-22 21:41 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2014-01-22 21:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME
2014-01-22 21:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help
2014-01-22 21:41 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-01-22 21:41 - 2012-08-03 23:29 - 00000000 ____D () C:\ProgramData\PRICache
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Vorlagen
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Startmenü
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Netzwerkumgebung
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Lokale Einstellungen
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Eigene Dateien
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Druckumgebung
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Musik
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Documents\Eigene Bilder
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Verlauf
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\AppData\Local\Anwendungsdaten
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 _SHDL () C:\Users\*****\Anwendungsdaten
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 ___RD () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-01-22 21:39 - 2014-01-22 21:39 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2014-01-22 21:39 - 2014-01-16 19:34 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-22 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-01-22 21:34 - 2014-01-22 21:33 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-22 21:33 - 2014-01-22 21:33 - 00000264 _____ () C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2014-01-22 21:33 - 2014-01-22 21:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-01-22 21:33 - 2014-01-22 21:33 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-01-22 21:33 - 2014-01-22 21:33 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-22 21:33 - 2014-01-22 21:33 - 00000000 ____D () C:\Program Files\Synaptics
2014-01-22 21:32 - 2014-01-22 21:32 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-01-22 21:32 - 2014-01-22 21:32 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM
2014-01-22 21:32 - 2014-01-22 21:32 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2014-01-22 21:32 - 2014-01-22 21:32 - 00000000 ____D () C:\Program Files\Realtek
2014-01-22 21:30 - 2014-01-22 21:30 - 00000000 __SHD () C:\Recovery
2014-01-22 21:29 - 2014-01-22 21:29 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-01-22 21:29 - 2014-01-22 21:29 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe
2014-01-22 21:29 - 2014-01-22 21:29 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-01-22 21:29 - 2014-01-22 21:29 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-01-22 21:29 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-01-22 21:29 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-01-22 21:28 - 2014-01-22 21:28 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-01-22 21:28 - 2014-01-22 21:28 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-01-22 21:28 - 2014-01-22 21:28 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-01-22 21:28 - 2014-01-22 21:28 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-01-22 21:28 - 2014-01-22 21:28 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-01-22 21:28 - 2014-01-22 21:28 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-01-22 21:28 - 2014-01-22 21:28 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-01-22 21:28 - 2014-01-22 21:28 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2014-01-22 21:28 - 2014-01-22 21:28 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-01-22 21:28 - 2014-01-22 21:28 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-01-22 21:28 - 2014-01-22 21:28 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2014-01-22 21:28 - 2014-01-22 21:28 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2014-01-22 21:28 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-01-22 21:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-01-22 21:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-01-22 21:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-01-22 21:27 - 2014-01-22 21:27 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-01-22 21:24 - 2014-01-22 21:24 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2014-01-22 21:24 - 2014-01-22 21:24 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2014-01-22 21:24 - 2014-01-22 21:24 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2014-01-22 21:24 - 2014-01-22 21:24 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer
2014-01-22 21:24 - 2014-01-22 21:24 - 00000000 ____D () C:\Program Files\Reference Assemblies
2014-01-22 21:24 - 2014-01-22 21:24 - 00000000 ____D () C:\Program Files\MSBuild
2014-01-22 21:24 - 2014-01-22 21:24 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2014-01-22 21:24 - 2014-01-22 21:24 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-01-22 21:24 - 2014-01-22 21:24 - 00000000 ____D () C:\inetpub
2014-01-22 21:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2014-01-22 21:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\inetsrv
2014-01-22 21:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2014-01-22 21:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\inetsrv
2014-01-22 19:48 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-01-21 19:19 - 2014-01-17 18:53 - 00000000 ____D () C:\Users\*****\AppData\Local\Adobe
2014-01-21 19:19 - 2014-01-17 18:53 - 00000000 ____D () C:\ProgramData\Adobe
2014-01-21 19:19 - 2014-01-15 20:58 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Adobe
2014-01-19 18:36 - 2014-01-19 18:36 - 00000000 ____D () C:\Users\*****\AppData\Local\Macromedia
2014-01-19 14:00 - 2014-01-19 14:00 - 00000000 ____D () C:\Users\*****\AppData\Roaming\CANON INC
2014-01-19 13:29 - 2014-01-19 13:29 - 00000000 ____D () C:\Users\*****\AppData\Local\Intel_Corporation
2014-01-19 12:59 - 2014-01-19 12:59 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-19 12:59 - 2014-01-19 12:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-19 12:26 - 2014-01-16 19:58 - 00000000 ____D () C:\Users\*****\AppData\Roaming\vlc
2014-01-18 11:33 - 2014-01-18 11:33 - 00002130 _____ () C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk
2014-01-18 11:32 - 2014-01-18 11:32 - 00000000 ____D () C:\Program Files (x86)\devolo
2014-01-18 11:31 - 2014-01-18 11:31 - 23063544 _____ (devolo AG) C:\Users\*****\Downloads\software-dlan-cockpit-windows-v4-1-3.exe
2014-01-18 11:28 - 2014-01-18 11:30 - 00025088 _____ (Microsoft Corporation) C:\Users\*****\Desktop\ZAPGRAB.exe.EXE
2014-01-18 11:28 - 2014-01-18 11:28 - 00025088 _____ (Microsoft Corporation) C:\Users\*****\Downloads\ZAPGRAB.exe.EXE
2014-01-17 20:36 - 2013-07-22 10:05 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-01-17 20:32 - 2014-01-17 20:32 - 00000000 ____D () C:\Users\*****\AppData\Roaming\DisplayTune
2014-01-17 20:32 - 2014-01-17 20:32 - 00000000 ____D () C:\Users\*****\AppData\Local\DisplayTune
2014-01-17 20:28 - 2014-01-17 20:28 - 00000000 ____D () C:\Program Files (x86)\Portrait Displays
2014-01-17 20:28 - 2013-07-22 10:16 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-17 20:16 - 2014-01-17 20:16 - 00000000 ____D () C:\ProgramData\Panasonic
2014-01-17 20:15 - 2014-01-17 20:15 - 00000000 ____D () C:\Users\*****\AppData\Roaming\InstallShield
2014-01-17 20:15 - 2014-01-17 20:15 - 00000000 ____D () C:\Users\*****\AppData\Local\Panasonic
2014-01-17 20:14 - 2014-01-17 20:14 - 00002184 _____ () C:\Users\Public\Desktop\PHOTOfunSTUDIO 6.0.lnk
2014-01-17 20:13 - 2014-01-17 20:13 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services
2014-01-17 20:13 - 2014-01-17 20:13 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2014-01-17 20:13 - 2014-01-17 20:13 - 00000000 ____D () C:\Program Files (x86)\Panasonic
2014-01-17 20:13 - 2014-01-17 20:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-01-17 20:13 - 2013-07-22 10:11 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-01-17 20:08 - 2014-01-17 20:08 - 00002962 _____ () C:\WINDOWS\System32\Tasks\iSCSIAgentAutoStartup
2014-01-17 20:08 - 2014-01-17 20:08 - 00001097 _____ () C:\Users\Public\Desktop\Qfinder.lnk
2014-01-17 20:08 - 2014-01-17 20:07 - 11208576 _____ (Igor Pavlov) C:\Users\*****\Downloads\QNAPQfinderWindows-4.0.3.1025.exe
2014-01-17 20:08 - 2014-01-17 19:44 - 00000000 ____D () C:\Program Files (x86)\QNAP
2014-01-17 19:40 - 2014-01-16 19:34 - 00000000 ____D () C:\Users\*****\Documents\Freemake
2014-01-17 19:30 - 2014-01-17 19:30 - 00000000 ____D () C:\Users\*****\Documents\Klett
2014-01-17 19:28 - 2014-01-17 19:27 - 00000000 ____D () C:\Program Files (x86)\Klett
2014-01-17 19:26 - 2014-01-17 19:26 - 00002026 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-17 19:26 - 2014-01-17 19:26 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-01-17 19:09 - 2013-11-21 07:38 - 00002508 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-01-17 19:09 - 2013-11-21 07:37 - 00000000 ____D () C:\WINDOWS\system32\Drivers\NISx64
2014-01-17 18:56 - 2014-01-17 18:56 - 00000000 ____D () C:\sources
2014-01-17 18:36 - 2014-01-17 18:36 - 00000000 ____D () C:\Users\Public\Documents\Canon MyCameraFiles
2014-01-17 18:36 - 2014-01-17 17:17 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-01-17 18:35 - 2014-01-17 18:35 - 00001144 _____ () C:\Users\Public\Desktop\Map Utility.lnk
2014-01-17 18:33 - 2014-01-17 18:29 - 00001199 _____ () C:\Users\Public\Desktop\ImageBrowser EX.lnk
2014-01-17 18:30 - 2014-01-17 18:30 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Canon_Inc_IC
2014-01-17 18:28 - 2014-01-17 18:28 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-01-17 18:21 - 2014-01-17 18:21 - 00000000 ____D () C:\Users\*****\AppData\Roaming\canon
2014-01-17 18:21 - 2014-01-17 18:21 - 00000000 ____D () C:\ProgramData\Canon_Inc_IC
2014-01-17 18:02 - 2014-01-17 18:01 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-01-17 17:33 - 2014-01-17 17:33 - 00000000 ____D () C:\Users\*****\AppData\Local\HP Quick Start
2014-01-17 17:32 - 2014-01-17 17:32 - 00000000 ____D () C:\Users\*****\Documents\Avatar
2014-01-17 17:32 - 2014-01-15 21:00 - 00000000 ____D () C:\Users\*****\Documents\Youcam
2014-01-17 17:31 - 2013-07-22 18:17 - 00000000 ___HD () C:\HP
2014-01-17 17:28 - 2014-01-17 17:28 - 00002061 _____ () C:\Users\Public\Desktop\Canon MP540 series Benutzerregistrierung.LNK
2014-01-17 17:23 - 2014-01-17 17:23 - 00002046 _____ () C:\Users\Public\Desktop\Canon Solution Menu.lnk
2014-01-17 17:23 - 2014-01-17 17:23 - 00001811 _____ () C:\Users\Public\Desktop\My Printer.lnk
2014-01-17 17:23 - 2014-01-17 17:23 - 00000000 ____D () C:\Program Files\Common Files\CANON
2014-01-17 17:23 - 2014-01-17 17:23 - 00000000 ____D () C:\Program Files\Canon
2014-01-17 17:22 - 2014-01-17 17:22 - 00002102 _____ () C:\Users\Public\Desktop\MP Navigator EX 2.0.lnk
2014-01-17 17:22 - 2014-01-17 17:22 - 00002100 _____ () C:\Users\Public\Desktop\Easy-PhotoPrint EX.lnk
2014-01-17 17:21 - 2014-01-17 17:21 - 00002335 _____ () C:\Users\Public\Desktop\MP540 series Online-Handbuch.lnk
2014-01-17 17:20 - 2014-01-17 17:20 - 00000000 ___HD () C:\ProgramData\CanonBJ
2014-01-17 17:19 - 2014-01-17 17:19 - 00000000 ___HD () C:\Program Files\CanonBJ
2014-01-16 19:45 - 2014-01-16 19:44 - 41404760 _____ (Apple Inc.) C:\Users\*****\Downloads\QuickTimeInstaller.exe
2014-01-16 19:41 - 2014-01-16 19:41 - 00001897 _____ () C:\Users\Public\Desktop\IrfanView Thumbnails.lnk
2014-01-16 19:41 - 2014-01-16 19:41 - 00001009 _____ () C:\Users\Public\Desktop\IrfanView.lnk
2014-01-16 19:41 - 2014-01-16 19:41 - 00000000 ____D () C:\Users\*****\AppData\Roaming\IrfanView
2014-01-16 19:41 - 2014-01-16 19:41 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2014-01-16 19:39 - 2014-01-16 19:39 - 02179728 _____ (Irfan Skiljan) C:\Users\*****\Downloads\iview437g_setup.exe
2014-01-16 19:34 - 2014-01-16 19:34 - 00001327 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
2014-01-16 19:34 - 2014-01-16 19:34 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-16 19:31 - 2014-01-16 19:31 - 00001330 _____ () C:\Users\Public\Desktop\Helium Audio Joiner.lnk
2014-01-16 19:31 - 2014-01-16 19:31 - 00000000 ____D () C:\ProgramData\Imploded Software
2014-01-16 19:31 - 2014-01-16 19:31 - 00000000 ____D () C:\Program Files (x86)\Imploded Software
2014-01-16 19:30 - 2014-01-16 19:30 - 04646928 _____ (Imploded Software ) C:\Users\*****\Downloads\haj_setup-1.8.0.exe
2014-01-16 19:29 - 2014-01-16 19:29 - 00002064 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2014-01-16 19:29 - 2014-01-16 19:28 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-01-16 19:27 - 2014-01-16 19:27 - 07080248 _____ () C:\Users\*****\Downloads\MyPhoneExplorer_1.8.5.exe
2014-01-16 19:24 - 2014-01-16 19:24 - 00001754 _____ () C:\Users\Public\Desktop\Eraser.lnk
2014-01-16 19:24 - 2014-01-16 19:24 - 00000000 ____D () C:\Program Files\Eraser
2014-01-16 19:23 - 2014-01-16 19:23 - 09110456 _____ (The Eraser Project) C:\Users\*****\Downloads\Eraser_6.0.10.2620.exe
2014-01-16 19:21 - 2014-01-16 19:21 - 00000878 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-01-16 19:21 - 2014-01-16 19:21 - 00000000 ____D () C:\Program Files\VideoLAN
2014-01-16 19:19 - 2014-01-16 19:19 - 23679700 _____ () C:\Users\*****\Downloads\vlc-2.1.1-win64.exe
2014-01-16 19:17 - 2014-01-16 19:16 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-01-16 19:16 - 2014-01-16 19:16 - 00000986 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-01-16 19:14 - 2014-01-16 19:14 - 12855384 _____ (Nullsoft, Inc.) C:\Users\*****\Downloads\winamp5666_full_de-de_b3516.exe
2014-01-16 19:11 - 2014-01-16 19:11 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Mozilla
2014-01-16 19:11 - 2014-01-16 19:11 - 00000000 ____D () C:\Users\*****\AppData\Local\Mozilla
2014-01-16 19:09 - 2014-01-16 19:09 - 23867560 _____ (Mozilla) C:\Users\*****\Downloads\Firefox_Setup_26.0.exe
2014-01-16 19:08 - 2014-01-16 19:08 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Avira
2014-01-16 19:06 - 2014-01-16 19:06 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Macromedia
2014-01-16 19:05 - 2014-01-16 19:05 - 00002073 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-16 19:05 - 2014-01-16 19:05 - 00000000 ____D () C:\ProgramData\Avira
2014-01-16 19:05 - 2014-01-16 19:05 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-16 18:58 - 2014-01-16 18:49 - 130658432 _____ () C:\Users\*****\Downloads\avira_free_antivirus_de.exe
2014-01-16 18:58 - 2013-11-21 07:38 - 00177312 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2014-01-16 18:58 - 2013-11-21 07:38 - 00007631 _____ () C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2014-01-15 22:24 - 2014-01-15 22:24 - 00000427 ____H () C:\WINDOWS\system32\Rebecca.dat
2014-01-15 21:21 - 2014-01-15 21:01 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Hewlett-Packard
2014-01-15 21:01 - 2014-01-15 21:01 - 00000000 ____D () C:\MediaServer
2014-01-15 21:00 - 2014-01-15 21:00 - 00000000 ____D () C:\Users\*****\AppData\Roaming\Synaptics
2014-01-15 20:58 - 2013-07-22 10:14 - 00000000 ___RD () C:\Program Files\Online Services
2014-01-15 20:58 - 2013-07-22 10:14 - 00000000 ___RD () C:\Program Files (x86)\Online Services
2014-01-15 20:58 - 2012-08-04 01:02 - 00000000 ___HD () C:\SYSTEM.SAV
2014-01-15 20:57 - 2014-01-15 20:57 - 00000000 ____D () C:\Users\*****\AppData\Local\Power2Go8
2014-01-15 20:56 - 2014-01-15 20:56 - 00000000 ____D () C:\Users\*****\AppData\Local\VirtualStore
2014-01-15 20:56 - 2013-11-21 07:37 - 00000000 ____D () C:\ProgramData\Norton
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Programme
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-01-15 19:47 - 2014-01-15 19:47 - 00000000 _SHDL () C:\Dokumente und Einstellungen
Some content of TEMP:
====================
C:\Users\*****\AppData\Local\Temp\avgnt.exe
C:\Users\*****\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-08 03:11
==================== End Of Log ============================