Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 16.03.2014, 13:46   #1
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Hallo zusammen,

ich habe diesen PC vor ca. 2-3 Wochen komplett neu (gekauft) installiert/aufgesetzt.

Seit 2-3 Tagen bekommen meine Eltern, wenn Sie sich in arcor anmelden wollen, folgende Meldung:
Code:
ATTFilter
Verbindung zur echten Website unter www.arcor.de kann nicht hergestellt werden

Ihre sichere Verbindung zu www.arcor.de wird durch etwas beeinträchtigt.

Versuchen Sie, diese Seite in einigen Minuten oder nach einem Wechsel zu einem neuen Netzwerk erneut zu laden. Falls Sie vor Kurzem eine Verbindung zu einem neuen WLAN hergestellt haben, schließen Sie die Anmeldung ab, bevor Sie die Seite erneut laden.

Wenn Sie www.arcor.de jetzt besuchen, teilen Sie eventuell private Informationen mit einem Angreifer. Chrome lädt die Seite aus Datenschutzgründen erst, nachdem eine sichere Verbindung zur echten Website unter www.arcor.de hergestellt werden konnte.
         
Wenn das hilfreich ist, kann ich auch einen Screenshot davon hochladen. ( Screenshot ist bereits vorhanden )

Ich habe mich bereits im Internet ein wenig darüber informiert, dort stand vermehrt, dass es am Datum liegt. Ich habe das Datum allerdings am Anfang richtig eingestellt und ich denke nicht, dass meine Eltern daran etwas geändert haben.


Ich bedanke mich an dieser Stelle schonmal für deine / eure Hilfe.

MfG

Necro

Alt 16.03.2014, 15:33   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Hi,

Logs bitte nicht in den Anhang. Notfalls aufteilen und über mehrere Posting in CODE-Tags

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 16.03.2014, 17:50   #3
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Hi,

sry bei mir waren Sie zu lang und dann stand ja in dem FAQ, dass man sie dann zippen soll aber dann werde ich Sie jetzt auf mehrere post verteilen.

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:16 on 16/03/2014 (Monika)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Monika at 2014-03-16 14:16:53
Running from C:\Users\Monika\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 7.2.4 - Hewlett-Packard) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\{B01EA176-C775-4490-B4CC-938A4B3EF5A3}) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
C410 (x32 Version: 140.0.273.000 - Hewlett-Packard) Hidden
Destinations (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.99.000 - Hewlett-Packard) Hidden
Fax (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.149 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Prem C410 All-In-One Driver Software 14.0 Rel. 7 (HKLM\...\{C1164ED0-EF08-4B0B-8084-3BDAEAAEFD8D}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{74DC0593-6BC6-4001-AD5F-D810AFB68D86}) (Version: 5.002.002.002 - Hewlett-Packard)
HPAppStudio (x32 Version: 140.0.95.000 - Hewlett-Packard) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3277 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.39.7991 - Intel(R) Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{B1AC3709-3E98-4F2C-A84E-4BCA2A452E64}) (Version: 4.2.40.2418 - Intel Corporation)
Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Default Manager (x32 Version: 2.1.54.0 - Microsoft Corporation) Hidden
Microsoft Search Enhancement Pack (x32 Version: 2.0.269.0 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSN Toolbar (HKLM-x32\...\{08234a0d-cf39-4dca-99f0-0c5cb496da81}) (Version: 4.0.0357.1 - Microsoft Corporation)
MSN Toolbar Platform (x32 Version: 4.0.0357.1 - Microsoft Corporation) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
PS_AIO_07_C410_SW_Min (x32 Version: 140.0.273.000 - Hewlett-Packard) Hidden
QuickTransfer (x32 Version: 140.0.98.000 - Hewlett-Packard) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.72.410.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7037 - Realtek Semiconductor Corp.)
Scan (x32 Version: 140.0.80.000 - Hewlett-Packard) Hidden
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)
WebReg (x32 Version: 140.0.212.017 - Hewlett-Packard) Hidden
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

==================== Restore Points  =========================

15-03-2014 18:36:35 Windows Update
15-03-2014 19:29:02 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {22CA686F-A364-4B4A-9F6B-6035297EC806} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-27] (Google Inc.)
Task: {55F35A2A-D747-4978-B119-A2A4CEBF9A3C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-27] (Google Inc.)
Task: {60C10526-A738-4D92-AFF6-469D0D9AA075} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {7FB2C8B9-425E-4AAA-BBB0-85EB4A1E0FDC} - System32\Tasks\Intel(R) Small Business Advantage\Notifier => C:\Program Files\Intel\Intel(R) Small Business Advantage\UI\SBA_Notifier.exe [2013-07-25] (Intel Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-08-01 17:31 - 2013-08-01 17:31 - 00198120 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-08-01 17:31 - 2013-08-01 17:31 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-08-01 17:31 - 2013-08-01 17:31 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: intelsba => 3
MSCONFIG\Services: LMS => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupreg: HotKeysCmds => "C:\Windows\system32\hkcmd.exe"
MSCONFIG\startupreg: IgfxTray => "C:\Windows\system32\igfxtray.exe"
MSCONFIG\startupreg: MSN Toolbar => "C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe"
MSCONFIG\startupreg: Persistence => "C:\Windows\system32\igfxpers.exe"

==================== Faulty Device Manager Devices =============

Name: Photosmart Prem C410 series
Description: Photosmart Prem C410 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/16/2014 01:39:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/15/2014 07:34:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/13/2014 05:06:26 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 08:33:08 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 07:41:51 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 03:57:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 03:51:24 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 01:57:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 00:01:13 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (03/12/2014 11:30:03 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/12/2014 03:49:28 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎12.‎03.‎2014 um 15:46:31 unerwartet heruntergefahren.

Error: (03/12/2014 02:36:57 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (03/01/2014 02:04:29 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{10DA4F3C-CC99-4190-BE4D-58330754E882}{7DDEFEA6-98EE-4F13-A25B-EC83D9BC5541}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (03/01/2014 02:04:16 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{10DA4F3C-CC99-4190-BE4D-58330754E882}{7DDEFEA6-98EE-4F13-A25B-EC83D9BC5541}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (03/01/2014 02:04:16 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{10DA4F3C-CC99-4190-BE4D-58330754E882}{7DDEFEA6-98EE-4F13-A25B-EC83D9BC5541}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (03/01/2014 00:56:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%1062

Error: (03/01/2014 00:53:13 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (02/27/2014 08:29:19 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070103 fehlgeschlagen: Intel Corporation - Graphics Adapter WDDM1.1, Graphics Adapter WDDM1.2, Graphics Adapter WDDM1.3 - Intel(R) HD Graphics 4600

Error: (02/27/2014 08:01:57 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070103 fehlgeschlagen: Intel Corporation - Graphics Adapter WDDM1.1, Graphics Adapter WDDM1.2, Graphics Adapter WDDM1.3 - Intel(R) HD Graphics 4600

Error: (02/27/2014 07:01:24 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Update für die Kompatibilitätsansichtsliste für Internet Explorer*8 für Windows 7 für x64-basierte Systeme (KB2598845)


Microsoft Office Sessions:
=========================
Error: (03/16/2014 01:39:23 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/15/2014 07:34:52 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/13/2014 05:06:26 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 08:33:08 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 07:41:51 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 03:57:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 03:51:24 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 01:57:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/12/2014 00:01:13 PM) (Source: SideBySide)(User: )
Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\sepsearchhelperie.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll2

Error: (03/12/2014 11:30:03 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-03-12 14:37:45.032
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 14:37:45.032
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 14:37:45.032
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 14:36:24.817
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 14:36:24.817
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 14:36:24.817
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 12:00:59.537
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 12:00:59.537
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 12:00:59.537
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-03-12 12:00:59.522
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 18%
Total physical RAM: 8054.07 MB
Available physical RAM: 6543.1 MB
Total Pagefile: 16106.31 MB
Available Pagefile: 14447.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:43.85 GB) (Free:12.32 GB) NTFS
Drive d: () (Fixed) (Total:179.62 GB) (Free:179.51 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 224 GB) (Disk ID: 84D5A34A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=44 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=180 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
__________________

Alt 16.03.2014, 17:53   #4
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-03-16 14:22:55
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Crucial_CT240M500SSD1 rev.MU03 223,57GB
Running: Gmer-19357.exe; Driver: C:\Users\Monika\AppData\Local\Temp\pxliauoc.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Secunia\PSI\PSIA.exe[1956] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                    0000000075c91465 2 bytes [C9, 75]
.text  C:\Program Files (x86)\Secunia\PSI\PSIA.exe[1956] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                   0000000075c914bb 2 bytes [C9, 75]
.text  ...                                                                                                                                                                          * 2
.text  C:\Program Files (x86)\Secunia\PSI\sua.exe[2000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                     0000000075c91465 2 bytes [C9, 75]
.text  C:\Program Files (x86)\Secunia\PSI\sua.exe[2000] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                    0000000075c914bb 2 bytes [C9, 75]
.text  ...                                                                                                                                                                          * 2
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe[3388] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                     0000000075c91465 2 bytes [C9, 75]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe[3388] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                    0000000075c914bb 2 bytes [C9, 75]
.text  ...                                                                                                                                                                          * 2
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 5                                                               0000000077b611f5 8 bytes {JMP 0xd}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 416                                                             0000000077b61390 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 159                                                    0000000077b6143f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 492                                                    0000000077b6158c 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 126                                                            0000000077b6191e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 636                                                            0000000077b61b1c 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!_vsnwprintf_s + 204                                                           0000000077b61bf0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 373                                              0000000077b61d75 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 691                                              0000000077b61eb3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!isalpha + 31                                                                  0000000077b61edf 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!_ui64toa + 84                                                                 0000000077b61f64 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!_strnicmp + 81                                                                0000000077b61fbd 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelf + 7                                                        0000000077b61fd7 8 bytes {JMP 0xb}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 658                                                    0000000077b62272 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 801                                                    0000000077b62301 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlInstallFunctionTableCallback + 578                                         0000000077b62792 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlIsGenericTableEmptyAvl + 16                                                0000000077b627b0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableAvl + 18                                              0000000077b627d2 8 bytes {JMP 0x10}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 79                               0000000077b6282f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 176                              0000000077b62890 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 2
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 299                                      0000000077b62d1b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 367                                      0000000077b62d5f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 3
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlCutoverTimeToSystemTime + 483                                              0000000077b63023 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 523                                                  0000000077b6323b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 912                                                  0000000077b633c0 16 bytes {JMP 0x4e}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 318                                                                 0000000077b63a5e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 403                                                                 0000000077b63ab3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 197                                     0000000077b63b85 8 bytes [10, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 611                                     0000000077b63d23 8 bytes [00, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!RtlpGetLCIDFromLangInfoNode + 80                                              0000000077b64190 8 bytes [A0, 69, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtSetInformationThread                                                        0000000077bb1380 8 bytes {JMP QWORD [RIP-0x4d4cf]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtQueryInformationThread                                                      0000000077bb1500 8 bytes {JMP QWORD [RIP-0x4d498]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtMapViewOfSection                                                            0000000077bb1530 8 bytes {JMP QWORD [RIP-0x4d9b1]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                                                          0000000077bb1650 8 bytes {JMP QWORD [RIP-0x4d7a7]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThread                                                              0000000077bb1700 8 bytes {JMP QWORD [RIP-0x4d9e3]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx                                                              0000000077bb1d30 8 bytes {JMP QWORD [RIP-0x4dba6]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtGetContextThread                                                            0000000077bb1f80 8 bytes {JMP QWORD [RIP-0x4de55]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread                                                            0000000077bb27e0 8 bytes {JMP QWORD [RIP-0x4e770]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 312                                          00000000755d13cc 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 471                                          00000000755d146b 8 bytes {JMP 0xffffffffffffffb0}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessInit + 611                                                       00000000755d16d7 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessTerm + 3                                                         00000000755d16e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuGetStackPointer + 23                                                    00000000755d19db 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetStackPointer + 23                                                    00000000755d19fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetInstructionPointer + 23                                              00000000755d1a1b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuNotifyAffinityChange + 3                                                00000000755d1a27 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuFlushInstructionCache + 23                                              00000000755d1a63 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe[2988] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessDebugEvent + 3                                                   00000000755d1a6f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 5                                                               0000000077b611f5 8 bytes {JMP 0xd}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 416                                                             0000000077b61390 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 159                                                    0000000077b6143f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 492                                                    0000000077b6158c 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 126                                                            0000000077b6191e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 636                                                            0000000077b61b1c 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!_vsnwprintf_s + 204                                                           0000000077b61bf0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 373                                              0000000077b61d75 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 691                                              0000000077b61eb3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!isalpha + 31                                                                  0000000077b61edf 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!_ui64toa + 84                                                                 0000000077b61f64 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!_strnicmp + 81                                                                0000000077b61fbd 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelf + 7                                                        0000000077b61fd7 8 bytes {JMP 0xb}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 658                                                    0000000077b62272 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 801                                                    0000000077b62301 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlInstallFunctionTableCallback + 578                                         0000000077b62792 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlIsGenericTableEmptyAvl + 16                                                0000000077b627b0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableAvl + 18                                              0000000077b627d2 8 bytes {JMP 0x10}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 79                               0000000077b6282f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 176                              0000000077b62890 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 2
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 299                                      0000000077b62d1b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 367                                      0000000077b62d5f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 3
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlCutoverTimeToSystemTime + 483                                              0000000077b63023 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 523                                                  0000000077b6323b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 912                                                  0000000077b633c0 16 bytes {JMP 0x4e}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 318                                                                 0000000077b63a5e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 403                                                                 0000000077b63ab3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 197                                     0000000077b63b85 8 bytes [10, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 611                                     0000000077b63d23 8 bytes [00, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!RtlpGetLCIDFromLangInfoNode + 80                                              0000000077b64190 8 bytes [A0, 69, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtSetInformationThread                                                        0000000077bb1380 8 bytes {JMP QWORD [RIP-0x4d4cf]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtQueryInformationThread                                                      0000000077bb1500 8 bytes {JMP QWORD [RIP-0x4d498]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtMapViewOfSection                                                            0000000077bb1530 8 bytes {JMP QWORD [RIP-0x4d9b1]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                                                          0000000077bb1650 8 bytes {JMP QWORD [RIP-0x4d7a7]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThread                                                              0000000077bb1700 8 bytes {JMP QWORD [RIP-0x4d9e3]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx                                                              0000000077bb1d30 8 bytes {JMP QWORD [RIP-0x4dba6]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtGetContextThread                                                            0000000077bb1f80 8 bytes {JMP QWORD [RIP-0x4de55]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread                                                            0000000077bb27e0 8 bytes {JMP QWORD [RIP-0x4e770]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 312                                          00000000755d13cc 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 471                                          00000000755d146b 8 bytes {JMP 0xffffffffffffffb0}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessInit + 611                                                       00000000755d16d7 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessTerm + 3                                                         00000000755d16e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuGetStackPointer + 23                                                    00000000755d19db 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetStackPointer + 23                                                    00000000755d19fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetInstructionPointer + 23                                              00000000755d1a1b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuNotifyAffinityChange + 3                                                00000000755d1a27 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuFlushInstructionCache + 23                                              00000000755d1a63 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe[1284] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessDebugEvent + 3                                                   00000000755d1a6f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 5                                                               0000000077b611f5 8 bytes {JMP 0xd}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 416                                                             0000000077b61390 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 159                                                    0000000077b6143f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 492                                                    0000000077b6158c 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 126                                                            0000000077b6191e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 636                                                            0000000077b61b1c 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!_vsnwprintf_s + 204                                                           0000000077b61bf0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 373                                              0000000077b61d75 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 691                                              0000000077b61eb3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!isalpha + 31                                                                  0000000077b61edf 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!_ui64toa + 84                                                                 0000000077b61f64 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!_strnicmp + 81                                                                0000000077b61fbd 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelf + 7                                                        0000000077b61fd7 8 bytes {JMP 0xb}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 658                                                    0000000077b62272 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 801                                                    0000000077b62301 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlInstallFunctionTableCallback + 578                                         0000000077b62792 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlIsGenericTableEmptyAvl + 16                                                0000000077b627b0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableAvl + 18                                              0000000077b627d2 8 bytes {JMP 0x10}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 79                               0000000077b6282f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 176                              0000000077b62890 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 2
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 299                                      0000000077b62d1b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 367                                      0000000077b62d5f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 3
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlCutoverTimeToSystemTime + 483                                              0000000077b63023 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 523                                                  0000000077b6323b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 912                                                  0000000077b633c0 16 bytes {JMP 0x4e}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 318                                                                 0000000077b63a5e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 403                                                                 0000000077b63ab3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 197                                     0000000077b63b85 8 bytes [10, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 611                                     0000000077b63d23 8 bytes [00, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!RtlpGetLCIDFromLangInfoNode + 80                                              0000000077b64190 8 bytes [A0, 69, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtSetInformationThread                                                        0000000077bb1380 8 bytes {JMP QWORD [RIP-0x4d4cf]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtQueryInformationThread                                                      0000000077bb1500 8 bytes {JMP QWORD [RIP-0x4d498]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtMapViewOfSection                                                            0000000077bb1530 8 bytes {JMP QWORD [RIP-0x4d9b1]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                                                          0000000077bb1650 8 bytes {JMP QWORD [RIP-0x4d7a7]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThread                                                              0000000077bb1700 8 bytes {JMP QWORD [RIP-0x4d9e3]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx                                                              0000000077bb1d30 8 bytes {JMP QWORD [RIP-0x4dba6]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtGetContextThread                                                            0000000077bb1f80 8 bytes {JMP QWORD [RIP-0x4de55]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread                                                            0000000077bb27e0 8 bytes {JMP QWORD [RIP-0x4e770]}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 312                                          00000000755d13cc 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 471                                          00000000755d146b 8 bytes {JMP 0xffffffffffffffb0}
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessInit + 611                                                       00000000755d16d7 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessTerm + 3                                                         00000000755d16e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuGetStackPointer + 23                                                    00000000755d19db 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetStackPointer + 23                                                    00000000755d19fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetInstructionPointer + 23                                              00000000755d1a1b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuNotifyAffinityChange + 3                                                00000000755d1a27 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuFlushInstructionCache + 23                                              00000000755d1a63 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe[4400] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessDebugEvent + 3                                                   00000000755d1a6f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 5                                   0000000077b611f5 8 bytes {JMP 0xd}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 416                                 0000000077b61390 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 159                        0000000077b6143f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 492                        0000000077b6158c 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 126                                0000000077b6191e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 636                                0000000077b61b1c 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!_vsnwprintf_s + 204                               0000000077b61bf0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 373                  0000000077b61d75 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 691                  0000000077b61eb3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!isalpha + 31                                      0000000077b61edf 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!_ui64toa + 84                                     0000000077b61f64 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!_strnicmp + 81                                    0000000077b61fbd 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelf + 7                            0000000077b61fd7 8 bytes {JMP 0xb}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 658                        0000000077b62272 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 801                        0000000077b62301 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlInstallFunctionTableCallback + 578             0000000077b62792 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlIsGenericTableEmptyAvl + 16                    0000000077b627b0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableAvl + 18                  0000000077b627d2 8 bytes {JMP 0x10}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 79   0000000077b6282f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 176  0000000077b62890 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 2
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 299          0000000077b62d1b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 367          0000000077b62d5f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 3
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlCutoverTimeToSystemTime + 483                  0000000077b63023 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 523                      0000000077b6323b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 912                      0000000077b633c0 16 bytes {JMP 0x4e}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 318                                     0000000077b63a5e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 403                                     0000000077b63ab3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 197         0000000077b63b85 8 bytes [10, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 611         0000000077b63d23 8 bytes [00, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!RtlpGetLCIDFromLangInfoNode + 80                  0000000077b64190 8 bytes [A0, 69, F8, 7E, 00, 00, 00, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtSetInformationThread                            0000000077bb1380 8 bytes {JMP QWORD [RIP-0x4d4cf]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtQueryInformationThread                          0000000077bb1500 8 bytes {JMP QWORD [RIP-0x4d498]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtMapViewOfSection                                0000000077bb1530 8 bytes {JMP QWORD [RIP-0x4d9b1]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                              0000000077bb1650 8 bytes {JMP QWORD [RIP-0x4d7a7]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThread                                  0000000077bb1700 8 bytes {JMP QWORD [RIP-0x4d9e3]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx                                  0000000077bb1d30 8 bytes {JMP QWORD [RIP-0x4dba6]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtGetContextThread                                0000000077bb1f80 8 bytes {JMP QWORD [RIP-0x4de55]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread                                0000000077bb27e0 8 bytes {JMP QWORD [RIP-0x4e770]}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 312              00000000755d13cc 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 471              00000000755d146b 8 bytes {JMP 0xffffffffffffffb0}
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessInit + 611                           00000000755d16d7 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessTerm + 3                             00000000755d16e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuGetStackPointer + 23                        00000000755d19db 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetStackPointer + 23                        00000000755d19fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetInstructionPointer + 23                  00000000755d1a1b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuNotifyAffinityChange + 3                    00000000755d1a27 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuFlushInstructionCache + 23                  00000000755d1a63 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessDebugEvent + 3                       00000000755d1a6f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                         0000000075c91465 2 bytes [C9, 75]
.text  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1504] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                        0000000075c914bb 2 bytes [C9, 75]
.text  ...                                                                                                                                                                          * 2
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 5                                                                                   0000000077b611f5 8 bytes {JMP 0xd}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlWalkHeap + 416                                                                                 0000000077b61390 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 159                                                                        0000000077b6143f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlpEnsureBufferSize + 492                                                                        0000000077b6158c 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 126                                                                                0000000077b6191e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlDeleteAce + 636                                                                                0000000077b61b1c 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!_vsnwprintf_s + 204                                                                               0000000077b61bf0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 373                                                                  0000000077b61d75 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlCreateActivationContext + 691                                                                  0000000077b61eb3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!isalpha + 31                                                                                      0000000077b61edf 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!_ui64toa + 84                                                                                     0000000077b61f64 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!_strnicmp + 81                                                                                    0000000077b61fbd 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelf + 7                                                                            0000000077b61fd7 8 bytes {JMP 0xb}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 658                                                                        0000000077b62272 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlImpersonateSelfEx + 801                                                                        0000000077b62301 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlInstallFunctionTableCallback + 578                                                             0000000077b62792 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlIsGenericTableEmptyAvl + 16                                                                    0000000077b627b0 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableAvl + 18                                                                  0000000077b627d2 8 bytes {JMP 0x10}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 79                                                   0000000077b6282f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlEnumerateGenericTableWithoutSplayingAvl + 176                                                  0000000077b62890 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 2
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 299                                                          0000000077b62d1b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlValidRelativeSecurityDescriptor + 367                                                          0000000077b62d5f 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  ...                                                                                                                                                                          * 3
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlCutoverTimeToSystemTime + 483                                                                  0000000077b63023 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 523                                                                      0000000077b6323b 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlQueryRegistryValues + 912                                                                      0000000077b633c0 16 bytes {JMP 0x4e}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 318                                                                                     0000000077b63a5e 16 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!_itow_s + 403                                                                                     0000000077b63ab3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 197                                                         0000000077b63b85 8 bytes [10, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlpCheckDynamicTimeZoneInformation + 611                                                         0000000077b63d23 8 bytes [00, 6A, F8, 7E, 00, 00, 00, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!RtlpGetLCIDFromLangInfoNode + 80                                                                  0000000077b64190 8 bytes [A0, 69, F8, 7E, 00, 00, 00, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtSetInformationThread                                                                            0000000077bb1380 8 bytes {JMP QWORD [RIP-0x4d4cf]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtQueryInformationThread                                                                          0000000077bb1500 8 bytes {JMP QWORD [RIP-0x4d498]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtMapViewOfSection                                                                                0000000077bb1530 8 bytes {JMP QWORD [RIP-0x4d9b1]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtWriteVirtualMemory                                                                              0000000077bb1650 8 bytes {JMP QWORD [RIP-0x4d7a7]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtQueueApcThread                                                                                  0000000077bb1700 8 bytes {JMP QWORD [RIP-0x4d9e3]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtCreateThreadEx                                                                                  0000000077bb1d30 8 bytes {JMP QWORD [RIP-0x4dba6]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtGetContextThread                                                                                0000000077bb1f80 8 bytes {JMP QWORD [RIP-0x4de55]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\ntdll.dll!NtSetContextThread                                                                                0000000077bb27e0 8 bytes {JMP QWORD [RIP-0x4e770]}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 312                                                              00000000755d13cc 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuInitializeStartupContext + 471                                                              00000000755d146b 8 bytes {JMP 0xffffffffffffffb0}
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessInit + 611                                                                           00000000755d16d7 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessTerm + 3                                                                             00000000755d16e3 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuGetStackPointer + 23                                                                        00000000755d19db 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetStackPointer + 23                                                                        00000000755d19fb 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuSetInstructionPointer + 23                                                                  00000000755d1a1b 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuNotifyAffinityChange + 3                                                                    00000000755d1a27 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuFlushInstructionCache + 23                                                                  00000000755d1a63 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]
.text  C:\Users\Monika\Desktop\Gmer-19357.exe[5192] C:\Windows\SYSTEM32\wow64cpu.dll!CpuProcessDebugEvent + 3                                                                       00000000755d1a6f 8 bytes [0D, F0, AD, BA, DE, C0, AD, ...]

---- Registry - GMER 2.1 ----

Reg    HKLM\SYSTEM\CurrentControlSet\services\KLIF\Parameters@LastProcessedRevision                                                                                                 32019174
Reg    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP\HP\xa0Update.lnk     1
Reg    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage\NewShortcuts@C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP\xa0Update.lnk                      1

---- EOF - GMER 2.1 ----
         
Den FRST.log kann ich leider ned posten der ist zu lang.

ich hänge Ihn hier nochmals einzeln an.

Alt 16.03.2014, 17:57   #5
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Nochmal: die Logs bitte NICHT anhängen!! Notfalls aufteilen und über mehrere beiträge veteilt posten

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 16.03.2014, 18:32   #6
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Ok sry,
jetzt weiß ich glaub wie du es meinst^^

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Monika (administrator) on MAMA_PAPA-PC on 16-03-2014 14:16:32
Running from C:\Users\Monika\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Microsoft Default Manager] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [288080 2009-07-17] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

==================== Internet (Whitelisted) ====================

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-27]
CHR Extension: (Google Drive) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-27]
CHR Extension: (Brushed) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg [2014-02-27]
CHR Extension: (YouTube) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-27]
CHR Extension: (Adblock Plus) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-27]
CHR Extension: (Google-Suche) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-27]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-02-27]
CHR Extension: (AdBlock) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-27]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-02-27]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-02-27]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-02-27]
CHR Extension: (Google Wallet) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-27]
CHR Extension: (NotScripts) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2014-02-27]
CHR Extension: (Google Mail) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-27]
CHR Extension: (Anti-Banner) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-02-27]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S4 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-07-25] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-01] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

==================== Drivers (Whitelisted) ====================

R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-01] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-01] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-01] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-01] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-02-27] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-02-27] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [624224 2014-02-27] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-02-27] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-02-27] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-16 14:16 - 2014-03-16 14:16 - 00012615 _____ () C:\Users\Monika\Desktop\FRST.txt
2014-03-16 14:16 - 2014-03-16 14:16 - 00000474 _____ () C:\Users\Monika\Desktop\defogger_disable.log
2014-03-16 14:16 - 2014-03-16 14:16 - 00000000 ____D () C:\FRST
2014-03-16 14:16 - 2014-03-16 14:16 - 00000000 _____ () C:\Users\Monika\defogger_reenable
2014-03-16 14:15 - 2014-03-16 14:11 - 00380416 _____ () C:\Users\Monika\Desktop\Gmer-19357.exe
2014-03-16 14:15 - 2014-03-16 14:10 - 02157056 _____ (Farbar) C:\Users\Monika\Desktop\FRST64.exe
2014-03-16 14:15 - 2014-03-16 14:10 - 00050477 _____ () C:\Users\Monika\Desktop\Defogger.exe
2014-03-15 19:37 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-15 19:37 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-15 19:37 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-15 19:37 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 19:37 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-15 19:37 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-15 19:37 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 19:37 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-15 19:37 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 19:37 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 19:37 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-15 19:37 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-15 19:37 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-15 19:37 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-15 19:37 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-15 19:37 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-15 19:37 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-15 19:37 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 19:37 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-15 19:37 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-15 19:37 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 19:37 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 19:37 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-15 19:37 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 19:37 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-15 19:37 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 19:37 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-15 19:37 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 19:37 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 19:37 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-15 19:37 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 19:37 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 19:37 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 19:37 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 19:37 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 19:37 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 19:37 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 19:37 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 19:37 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-15 19:37 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-15 19:37 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-15 19:37 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-15 19:37 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-15 19:37 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-15 19:36 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-15 19:36 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-15 19:36 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-15 19:36 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-12 15:55 - 2014-03-12 15:55 - 00000000 ____D () C:\Windows\pss
2014-03-04 20:01 - 2014-03-04 20:03 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-04 20:01 - 2014-03-04 20:01 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-04 20:01 - 2014-03-04 20:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-04 20:00 - 2014-03-04 20:02 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-03-01 14:18 - 2014-03-01 14:18 - 00259570 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-03-01 14:16 - 2014-03-01 14:16 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-01 14:06 - 2014-03-01 14:06 - 00000000 ____D () C:\ProgramData\WEBREG
2014-03-01 14:05 - 2014-03-01 14:05 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Macromedia
2014-03-01 14:04 - 2014-03-01 14:07 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HP
2014-03-01 14:04 - 2014-03-01 14:04 - 00000000 ____D () C:\Users\Monika\AppData\Local\HP
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\MSN Toolbar
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-01 12:36 - 2014-03-16 14:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-01 12:36 - 2014-03-12 11:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-01 12:36 - 2014-03-12 11:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-01 12:36 - 2014-03-12 11:32 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-01 12:36 - 2014-03-08 18:37 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HpUpdate
2014-03-01 12:36 - 2014-03-01 12:36 - 00001351 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00001189 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\Windows\system32\Macromed
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\ProgramData\HP Product Assistant
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-03-01 12:34 - 2014-03-01 12:34 - 00002006 _____ () C:\Users\Public\Desktop\HP ePrinterCenter.lnk
2014-03-01 12:33 - 2014-03-01 12:36 - 00000000 ____D () C:\Program Files (x86)\HP
2014-03-01 12:33 - 2010-03-10 15:35 - 00138752 _____ (Hewlett-Packard Company) C:\Windows\system32\hpf3l101.dll
2014-03-01 12:33 - 2009-12-10 19:48 - 01412224 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpost_p04i.dll
2014-03-01 12:33 - 2009-12-10 19:48 - 01179776 _____ (Hewlett-Packard) C:\Windows\system32\hposwia_p04i.dll
2014-03-01 12:33 - 2009-12-10 19:48 - 00525440 _____ (Hewlett-Packard Co.) C:\Windows\system32\hposc_p04a.dll
2014-03-01 12:33 - 2009-10-22 01:55 - 00643200 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll
2014-03-01 12:32 - 2014-03-01 14:06 - 00238349 _____ () C:\Windows\hpoins52.dat
2014-03-01 12:32 - 2014-03-01 14:06 - 00000801 _____ () C:\ProgramData\hpzinstall.log
2014-03-01 12:32 - 2014-03-01 14:05 - 00000000 ____D () C:\ProgramData\HP
2014-02-27 21:08 - 2014-03-01 12:24 - 00000000 ____D () C:\Users\Monika\AppData\Local\Intel_Corporation
2014-02-27 20:41 - 2014-02-27 20:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_INETMON_01011.Wdf
2014-02-27 20:41 - 2013-08-01 17:01 - 00029088 _____ () C:\Windows\system32\Drivers\INETMON.sys
2014-02-27 20:40 - 2014-02-27 20:40 - 00004614 _____ () C:\Windows\DPINST.LOG
2014-02-27 20:39 - 2014-02-27 20:39 - 00000000 ____D () C:\Windows\System32\Tasks\Intel(R) Small Business Advantage
2014-02-27 20:39 - 2013-09-16 20:19 - 00016344 ____R (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-02-27 20:38 - 2014-02-27 20:41 - 00000000 ____D () C:\ProgramData\Intel
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____D () C:\Program Files (x86)\MSI
2014-02-27 20:38 - 2013-09-16 20:19 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2014-02-27 20:38 - 2013-09-16 20:19 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys
2014-02-27 20:02 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-27 20:02 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-27 20:02 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-27 20:02 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-02-27 20:02 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-27 20:02 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-27 20:00 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-02-27 20:00 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-02-27 19:18 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-27 19:18 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-27 19:12 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-27 19:12 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-27 19:12 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-27 19:12 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-27 19:12 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-27 19:12 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-02-27 19:12 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-27 19:12 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-27 19:12 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-02-27 19:12 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2014-02-27 19:12 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-02-27 19:12 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-02-27 19:12 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-02-27 19:12 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-02-27 19:12 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-02-27 19:12 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-02-27 19:12 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-02-27 19:12 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-02-27 19:03 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-27 19:03 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-02-27 19:03 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-02-27 19:03 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-02-27 19:03 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-02-27 19:03 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-02-27 19:02 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-02-27 19:02 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-02-27 19:02 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-02-27 19:02 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-02-27 19:02 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-02-27 19:02 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-02-27 19:02 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-02-27 19:02 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-02-27 19:02 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-02-27 19:02 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-02-27 19:02 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-02-27 19:02 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-02-27 19:02 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-02-27 19:02 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-02-27 19:02 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-02-27 19:02 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-02-27 19:02 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-02-27 19:02 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-02-27 19:02 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-02-27 19:02 - 2012-04-28 04:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-27 19:02 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-02-27 19:02 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-02-27 19:02 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-02-27 19:02 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-02-27 19:02 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-02-27 19:02 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-02-27 18:58 - 2014-03-04 20:02 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Adobe
2014-02-27 16:56 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-02-27 16:56 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-02-27 16:56 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-02-27 16:55 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-02-27 16:52 - 2014-02-27 16:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-27 16:52 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-27 16:49 - 2014-02-27 20:02 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 16:44 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-02-27 16:39 - 2014-02-27 16:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-27 16:35 - 2014-02-27 16:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:34 - 2014-02-27 16:44 - 00016876 _____ () C:\Windows\IE11_main.log
2014-02-27 16:30 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-27 16:30 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-27 16:30 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-27 16:30 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-27 16:30 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-27 16:30 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-27 16:30 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-27 16:30 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-27 16:30 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-27 16:30 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-27 16:30 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-27 16:30 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-27 16:30 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-27 16:30 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-27 16:30 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-27 16:30 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-27 16:17 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-02-27 16:15 - 2014-02-27 16:17 - 00004135 _____ () C:\Windows\IE9_main.log
2014-02-27 16:03 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-02-27 16:03 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-02-27 16:03 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-02-27 16:01 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-02-27 16:01 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-02-27 16:01 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-02-27 16:01 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-02-27 16:01 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-02-27 16:01 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-02-27 16:01 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-02-27 16:01 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-02-27 16:01 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-02-27 16:01 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-02-27 16:01 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-02-27 16:01 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-02-27 16:01 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-02-27 16:01 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-02-27 16:00 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-27 16:00 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-27 16:00 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-27 16:00 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-02-27 16:00 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-27 16:00 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-02-27 16:00 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-02-27 16:00 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-02-27 16:00 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-02-27 16:00 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-02-27 16:00 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-02-27 16:00 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-02-27 16:00 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-02-27 16:00 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-02-27 16:00 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-02-27 15:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-27 15:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-27 15:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-27 15:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-27 15:59 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-27 15:59 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-27 15:59 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-27 15:59 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-27 15:59 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-27 15:59 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-27 15:59 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-27 15:59 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-27 15:59 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-27 15:59 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-27 15:59 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-27 15:59 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-27 15:59 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-27 15:59 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-27 15:59 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-02-27 15:59 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-27 15:59 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-02-27 15:59 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-27 15:59 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-02-27 15:59 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-02-27 15:59 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-02-27 15:59 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-27 15:59 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-02-27 15:59 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-02-27 15:59 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-02-27 15:59 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-02-27 15:59 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-02-27 15:59 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-27 15:59 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-27 15:59 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-27 15:59 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-27 15:59 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-27 15:59 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-27 15:59 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-27 15:59 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-27 15:59 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-02-27 15:59 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-02-27 15:59 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-02-27 15:59 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-02-27 15:59 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-02-27 15:59 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-27 15:59 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-02-27 15:59 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-02-27 15:59 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-02-27 15:59 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-02-27 15:59 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-02-27 15:59 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-02-27 15:59 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-02-27 15:59 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-02-27 15:59 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-02-27 15:59 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-27 15:59 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-27 15:59 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-02-27 15:59 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-02-27 15:59 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-02-27 15:59 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-02-27 15:59 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-02-27 15:59 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-02-27 15:59 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-02-27 15:59 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-02-27 15:59 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-02-27 15:59 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-02-27 15:59 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-02-27 15:59 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-02-27 15:59 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-02-27 15:59 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-02-27 15:59 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-02-27 15:59 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-02-27 15:59 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-02-27 15:59 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-02-27 15:59 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-02-27 15:59 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-02-27 15:59 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-02-27 15:59 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-02-27 15:59 - 2012-11-28 23:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-02-27 15:59 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-02-27 15:59 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-02-27 15:59 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-02-27 15:59 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-02-27 15:59 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-02-27 15:59 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-02-27 15:59 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-02-27 15:59 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-02-27 15:59 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-02-27 15:59 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-02-27 15:59 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-02-27 15:59 - 2012-08-11 01:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-02-27 15:59 - 2012-08-11 00:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-02-27 15:59 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-02-27 15:59 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-02-27 15:59 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-02-27 15:59 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-02-27 15:59 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-02-27 15:59 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-02-27 15:59 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-02-27 15:59 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-02-27 15:58 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-27 15:58 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-27 15:58 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-02-27 15:58 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-02-27 15:58 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-02-27 15:58 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-02-27 15:58 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-02-27 15:58 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-02-27 15:57 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-02-27 15:57 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-02-27 15:57 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-02-27 15:57 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-02-27 15:57 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-02-27 15:57 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-02-27 15:57 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-27 15:57 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-27 15:57 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-02-27 15:57 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-02-27 15:57 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-02-27 15:57 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-02-27 15:57 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-02-27 15:57 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-02-27 15:57 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-02-27 15:57 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-02-27 15:57 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-02-27 15:57 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-02-27 15:57 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-02-27 15:57 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-02-27 15:57 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-02-27 15:57 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-02-27 15:57 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-02-27 15:57 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-02-27 15:57 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-02-27 15:57 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-02-27 15:57 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-02-27 15:57 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-02-27 15:57 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-02-27 15:57 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-02-27 15:57 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-02-27 15:57 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-02-27 15:57 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-02-27 15:57 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-02-27 15:57 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-02-27 15:57 - 2010-12-23 11:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-02-27 15:57 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-02-27 15:57 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-02-27 15:57 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-02-27 15:57 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-02-27 15:56 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-27 15:56 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-27 15:56 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-02-27 15:56 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-02-27 15:56 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-02-27 15:56 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-02-27 15:56 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-02-27 15:56 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-02-27 15:56 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-02-27 15:56 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-02-27 15:56 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-02-27 15:56 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-02-27 15:56 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-02-27 15:56 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-02-27 15:56 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-02-27 15:56 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-02-27 15:56 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-02-27 15:56 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-02-27 15:56 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-02-27 15:56 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-02-27 15:56 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-02-27 15:56 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-02-27 15:54 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-27 15:54 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-27 15:54 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-27 15:54 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-27 15:54 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-02-27 15:54 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-02-27 15:54 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-02-27 15:54 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-02-27 15:54 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-02-27 15:54 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-02-27 15:54 - 2012-04-26 06:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-02-27 15:54 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-02-27 15:54 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-02-27 15:53 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-27 15:53 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-02-27 15:53 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-02-27 15:53 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-02-27 15:52 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-27 15:52 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-27 15:52 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-27 15:52 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-02-27 15:52 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-02-27 15:52 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-02-27 15:52 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-02-27 15:52 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-02-27 15:52 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-02-27 15:52 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-02-27 15:52 - 2012-04-07 13:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-02-27 15:52 - 2012-04-07 12:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-02-27 15:52 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-02-27 15:52 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-02-27 15:52 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-02-27 15:52 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-02-27 15:52 - 2011-08-27 06:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-02-27 15:52 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-02-27 15:52 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-02-27 15:52 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-02-27 15:52 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-02-27 15:52 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-02-27 15:52 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-02-27 15:52 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-02-27 15:52 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-02-27 15:52 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-02-27 15:52 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-02-27 15:52 - 2011-04-22 23:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-02-27 15:52 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-02-27 15:52 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-02-27 15:52 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-02-27 15:52 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-02-27 15:52 - 2011-02-05 18:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-02-27 15:52 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-02-27 15:52 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-02-27 15:52 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-02-27 15:52 - 2011-02-05 18:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-02-27 15:52 - 2011-02-05 18:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-02-27 15:52 - 2011-02-05 18:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-02-27 15:51 - 2011-11-19 15:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-02-27 15:51 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-02-27 15:43 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-27 15:43 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-27 15:43 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-27 15:39 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-27 15:39 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-27 15:39 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-27 15:39 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-27 15:39 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-27 15:39 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-27 15:39 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-27 15:39 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-27 15:39 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-27 15:33 - 2014-03-01 14:04 - 00058400 _____ () C:\Users\Monika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-27 15:33 - 2014-02-27 20:40 - 00000488 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 15:20 - 2014-03-16 13:37 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-27 15:20 - 2014-03-12 21:30 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-27 15:20 - 2014-03-12 14:32 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-27 15:20 - 2014-02-27 16:25 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-27 15:20 - 2014-02-27 16:25 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Users\Monika\AppData\Local\Google
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Users\Monika\AppData\Local\Secunia PSI
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-02-27 15:18 - 2014-02-27 15:18 - 00000736 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Malwarebytes
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-27 15:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-27 15:15 - 2014-02-27 15:15 - 00002334 _____ () C:\Users\Monika\Desktop\Sicherer Zahlungsverkehr.lnk
2014-02-27 15:12 - 2014-03-16 13:53 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-27 15:12 - 2014-02-27 15:44 - 00624224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-27 15:12 - 2014-02-27 15:44 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-27 15:12 - 2014-02-27 15:12 - 00001124 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-02-27 15:12 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-02-27 15:09 - 2014-02-27 15:09 - 00018240 _____ () C:\Windows\system32\results.xml
2014-02-27 15:09 - 2014-02-27 15:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-02-27 15:06 - 2014-02-27 15:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-02-27 15:06 - 2013-04-26 03:24 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-02-27 15:05 - 2013-04-26 03:24 - 00786416 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-02-27 15:05 - 2013-04-26 03:24 - 00368112 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Program Files\Realtek
2014-02-27 15:03 - 2013-09-10 14:40 - 03640024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-27 15:03 - 2013-09-10 12:56 - 00644705 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-27 15:03 - 2013-09-10 09:16 - 00148696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-02-27 15:03 - 2013-09-05 08:52 - 02586328 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-27 15:03 - 2013-09-04 07:12 - 01993496 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2014-02-27 15:03 - 2013-09-04 07:12 - 01722648 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2014-02-27 15:03 - 2013-09-03 04:16 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-27 15:03 - 2013-08-20 13:17 - 02809048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-27 15:03 - 2013-08-07 10:41 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-27 15:03 - 2013-08-05 11:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-02-27 15:03 - 2013-08-02 13:16 - 01005784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-27 15:03 - 2013-07-30 07:04 - 00397080 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-02-27 15:03 - 2013-07-26 07:05 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-02-27 15:03 - 2013-07-24 03:07 - 02032896 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-27 15:03 - 2013-07-23 08:40 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-02-27 15:03 - 2013-07-23 08:39 - 00922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-27 15:03 - 2013-06-05 14:42 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-27 15:03 - 2013-04-24 10:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-27 15:03 - 2013-02-20 11:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-27 15:03 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-27 15:03 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-27 15:03 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-02-27 15:03 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-27 15:03 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-27 15:03 - 2009-11-18 00:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-02-27 15:02 - 2014-02-27 15:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 15:02 - 2014-02-27 15:03 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-27 15:02 - 2013-04-10 04:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-02-27 15:02 - 2013-04-10 04:09 - 00108104 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-02-27 15:02 - 2013-04-10 04:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-02-27 15:00 - 2013-08-20 00:25 - 00449528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-02-27 14:59 - 2014-02-27 20:40 - 00000000 ____D () C:\Program Files\Intel
2014-02-27 14:59 - 2013-08-24 02:48 - 07583216 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00843248 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00771056 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00769520 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00754672 _____ (Intel Corporation) C:\Windows\system32\GfxUIHotKeyMenu.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00531440 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00391152 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00386544 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2014-02-27 14:59 - 2013-08-24 02:47 - 00395248 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe
2014-02-27 14:59 - 2013-08-24 02:47 - 00153072 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2014-02-27 14:59 - 2013-08-20 00:24 - 00180224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3277.dll
2014-02-27 14:59 - 2013-08-20 00:22 - 00002980 _____ () C:\Windows\system32\iglhxs64.vp
2014-02-27 14:59 - 2013-08-20 00:20 - 13748224 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 12090368 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 09081856 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 07915008 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 04165120 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2014-02-27 14:59 - 2013-08-20 00:20 - 00548352 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00522240 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00521728 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00517120 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00516096 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00513536 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00513024 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00371200 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00365568 _____ () C:\Windows\system32\igdmd64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00220672 _____ () C:\Windows\system32\igdde64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00160256 _____ () C:\Windows\system32\igdail64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00066048 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 04067328 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 02384896 _____ () C:\Windows\system32\GfxRes.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00622080 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00345600 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2014-02-27 14:59 - 2013-08-20 00:19 - 00265221 _____ () C:\Windows\system32\Gfxres.th-TH.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00251734 _____ () C:\Windows\system32\Gfxres.el-GR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00243712 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00233456 _____ () C:\Windows\system32\Gfxres.ru-RU.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00199680 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00199353 _____ () C:\Windows\system32\Gfxres.ar-SA.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00196916 _____ () C:\Windows\system32\Gfxres.ja-JP.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00194048 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00190958 _____ () C:\Windows\system32\Gfxres.he-IL.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00179225 _____ () C:\Windows\system32\Gfxres.ko-KR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00179110 _____ () C:\Windows\system32\Gfxres.it-IT.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00176823 _____ () C:\Windows\system32\Gfxres.es-ES.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00176557 _____ () C:\Windows\system32\Gfxres.fr-FR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00176510 _____ () C:\Windows\system32\Gfxres.de-DE.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00175131 _____ () C:\Windows\system32\Gfxres.ro-RO.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00174116 _____ () C:\Windows\system32\Gfxres.hu-HU.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00173825 _____ () C:\Windows\system32\Gfxres.tr-TR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00173685 _____ () C:\Windows\system32\Gfxres.pl-PL.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00173366 _____ () C:\Windows\system32\Gfxres.nl-NL.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00172633 _____ () C:\Windows\system32\Gfxres.pt-BR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171913 _____ () C:\Windows\system32\Gfxres.fi-FI.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171581 _____ () C:\Windows\system32\Gfxres.sk-SK.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171419 _____ () C:\Windows\system32\Gfxres.sv-SE.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171189 _____ () C:\Windows\system32\Gfxres.pt-PT.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00170868 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00170047 _____ () C:\Windows\system32\Gfxres.hr-HR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00166544 _____ () C:\Windows\system32\Gfxres.sl-SI.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00165246 _____ () C:\Windows\system32\Gfxres.nb-NO.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00164570 _____ () C:\Windows\system32\Gfxres.da-DK.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00159819 _____ () C:\Windows\system32\Gfxres.en-US.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00153121 _____ () C:\Windows\system32\Gfxres.zh-TW.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00151342 _____ () C:\Windows\system32\Gfxres.zh-CN.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00029184 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00012288 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2014-02-27 14:59 - 2013-08-20 00:16 - 06300672 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2014-02-27 14:59 - 2013-08-20 00:16 - 00303104 _____ () C:\Windows\SysWOW64\igdmd32.dll
2014-02-27 14:59 - 2013-08-20 00:15 - 11379712 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2014-02-27 14:59 - 2013-08-20 00:14 - 13146112 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2014-02-27 14:59 - 2013-08-20 00:14 - 00180736 _____ () C:\Windows\SysWOW64\igdde32.dll
2014-02-27 14:59 - 2013-08-20 00:13 - 00491520 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2014-02-27 14:59 - 2013-08-20 00:13 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll
2014-02-27 14:59 - 2013-08-20 00:12 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 21005824 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 02963456 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 00289280 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 00253440 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 25977344 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 03279360 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 00328192 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 00304640 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-02-27 14:59 - 2013-08-19 23:53 - 04409856 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2014-02-27 14:59 - 2013-08-19 23:51 - 03504640 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 02813952 _____ () C:\Windows\system32\iglhxa64.cpa
2014-02-27 14:59 - 2013-07-30 20:44 - 02064896 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 01814016 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 01127424 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 01123328 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00214528 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00179712 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00151552 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00143360 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00129024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00122880 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2014-02-27 14:59 - 2013-07-30 20:44 - 00064000 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2014-02-27 14:59 - 2013-07-30 20:44 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00044025 _____ () C:\Windows\system32\iglhxo64.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043816 _____ () C:\Windows\system32\iglhxc64_dev.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043494 _____ () C:\Windows\system32\iglhxc64.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043298 _____ () C:\Windows\system32\iglhxg64_dev.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043256 _____ () C:\Windows\system32\iglhxg64.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00042079 _____ () C:\Windows\system32\iglhxo64_dev.vp
2014-02-27 14:57 - 2014-02-27 20:39 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-27 14:57 - 2013-08-05 11:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-02-27 14:56 - 2014-02-27 14:58 - 00000000 ____D () C:\Intel
2014-02-27 14:56 - 2014-02-27 14:56 - 00000000 ____D () C:\MSI
2014-02-27 14:51 - 2014-03-16 14:16 - 00000000 ____D () C:\Users\Monika
2014-02-27 14:51 - 2014-03-16 13:41 - 01602784 _____ () C:\Windows\WindowsUpdate.log
2014-02-27 14:51 - 2014-02-27 19:09 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-27 14:51 - 2014-02-27 19:09 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-27 14:51 - 2014-02-27 18:58 - 00001425 _____ () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 14:51 - 2014-02-27 14:51 - 00000020 ___SH () C:\Users\Monika\ntuser.ini
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 __SHD () C:\Recovery
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 ____D () C:\Users\Monika\AppData\Local\VirtualStore
2014-02-27 14:51 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-27 14:51 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-27 14:40 - 2014-02-27 14:40 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-27 14:39 - 2014-02-27 14:51 - 00000000 ____D () C:\Windows\Panther
         

Alt 16.03.2014, 18:33   #7
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Teil2:
Code:
ATTFilter
==================== One Month Modified Files and Folders =======

2014-03-16 14:16 - 2014-03-16 14:16 - 00012615 _____ () C:\Users\Monika\Desktop\FRST.txt
2014-03-16 14:16 - 2014-03-16 14:16 - 00000474 _____ () C:\Users\Monika\Desktop\defogger_disable.log
2014-03-16 14:16 - 2014-03-16 14:16 - 00000000 ____D () C:\FRST
2014-03-16 14:16 - 2014-03-16 14:16 - 00000000 _____ () C:\Users\Monika\defogger_reenable
2014-03-16 14:16 - 2014-02-27 14:51 - 00000000 ____D () C:\Users\Monika
2014-03-16 14:11 - 2014-03-16 14:15 - 00380416 _____ () C:\Users\Monika\Desktop\Gmer-19357.exe
2014-03-16 14:10 - 2014-03-16 14:15 - 02157056 _____ (Farbar) C:\Users\Monika\Desktop\FRST64.exe
2014-03-16 14:10 - 2014-03-16 14:15 - 00050477 _____ () C:\Users\Monika\Desktop\Defogger.exe
2014-03-16 14:03 - 2014-03-01 12:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-16 13:53 - 2014-02-27 15:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-16 13:43 - 2011-04-12 08:43 - 00698856 _____ () C:\Windows\system32\perfh007.dat
2014-03-16 13:43 - 2011-04-12 08:43 - 00148996 _____ () C:\Windows\system32\perfc007.dat
2014-03-16 13:43 - 2009-07-14 06:13 - 01618324 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-16 13:41 - 2014-02-27 14:51 - 01602784 _____ () C:\Windows\WindowsUpdate.log
2014-03-16 13:37 - 2014-02-27 15:20 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-16 13:37 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-16 13:37 - 2009-07-14 05:51 - 00041295 _____ () C:\Windows\setupact.log
2014-03-16 13:37 - 2009-07-14 05:45 - 00276576 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-16 13:37 - 2009-07-14 05:45 - 00016848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-16 13:37 - 2009-07-14 05:45 - 00016848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-12 21:30 - 2014-02-27 15:20 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-12 15:55 - 2014-03-12 15:55 - 00000000 ____D () C:\Windows\pss
2014-03-12 14:32 - 2014-02-27 15:20 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-12 13:16 - 2010-11-21 04:47 - 00031192 _____ () C:\Windows\PFRO.log
2014-03-12 11:32 - 2014-03-01 12:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 11:32 - 2014-03-01 12:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 11:32 - 2014-03-01 12:36 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-08 18:37 - 2014-03-01 12:36 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HpUpdate
2014-03-04 20:03 - 2014-03-04 20:01 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-04 20:02 - 2014-03-04 20:00 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-03-04 20:02 - 2014-02-27 18:58 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Adobe
2014-03-04 20:01 - 2014-03-04 20:01 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-04 20:01 - 2014-03-04 20:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-01 14:18 - 2014-03-01 14:18 - 00259570 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-03-01 14:16 - 2014-03-01 14:16 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-01 14:07 - 2014-03-01 14:04 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HP
2014-03-01 14:06 - 2014-03-01 14:06 - 00000000 ____D () C:\ProgramData\WEBREG
2014-03-01 14:06 - 2014-03-01 12:32 - 00238349 _____ () C:\Windows\hpoins52.dat
2014-03-01 14:06 - 2014-03-01 12:32 - 00000801 _____ () C:\ProgramData\hpzinstall.log
2014-03-01 14:05 - 2014-03-01 14:05 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Macromedia
2014-03-01 14:05 - 2014-03-01 12:32 - 00000000 ____D () C:\ProgramData\HP
2014-03-01 14:04 - 2014-03-01 14:04 - 00000000 ____D () C:\Users\Monika\AppData\Local\HP
2014-03-01 14:04 - 2014-02-27 15:33 - 00058400 _____ () C:\Users\Monika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-01 14:04 - 2009-07-14 03:34 - 00000438 _____ () C:\Windows\win.ini
2014-03-01 12:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\MSN Toolbar
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-01 12:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-01 12:36 - 2014-03-01 12:36 - 00001351 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00001189 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\Windows\system32\Macromed
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\ProgramData\HP Product Assistant
2014-03-01 12:36 - 2014-03-01 12:33 - 00000000 ____D () C:\Program Files (x86)\HP
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-03-01 12:34 - 2014-03-01 12:34 - 00002006 _____ () C:\Users\Public\Desktop\HP ePrinterCenter.lnk
2014-03-01 12:24 - 2014-02-27 21:08 - 00000000 ____D () C:\Users\Monika\AppData\Local\Intel_Corporation
2014-03-01 07:05 - 2014-03-15 19:37 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-15 19:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-15 19:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-15 19:37 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-15 19:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-15 19:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-15 19:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-15 19:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-15 19:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-15 19:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-15 19:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-15 19:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-15 19:37 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-15 19:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-15 19:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-15 19:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-15 19:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-15 19:37 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-15 19:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-15 19:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-15 19:37 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-15 19:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-15 19:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-15 19:37 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-15 19:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-15 19:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-15 19:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-15 19:37 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-15 19:37 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-15 19:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-15 19:37 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-15 19:37 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-15 19:37 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-15 19:37 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-15 19:37 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-15 19:37 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-15 19:37 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-15 19:37 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-15 19:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-15 19:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 20:41 - 2014-02-27 20:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_INETMON_01011.Wdf
2014-02-27 20:41 - 2014-02-27 20:38 - 00000000 ____D () C:\ProgramData\Intel
2014-02-27 20:40 - 2014-02-27 20:40 - 00004614 _____ () C:\Windows\DPINST.LOG
2014-02-27 20:40 - 2014-02-27 15:33 - 00000488 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 20:40 - 2014-02-27 14:59 - 00000000 ____D () C:\Program Files\Intel
2014-02-27 20:39 - 2014-02-27 20:39 - 00000000 ____D () C:\Windows\System32\Tasks\Intel(R) Small Business Advantage
2014-02-27 20:39 - 2014-02-27 14:57 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____D () C:\Program Files (x86)\MSI
2014-02-27 20:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-27 20:02 - 2014-02-27 16:49 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 19:09 - 2014-02-27 14:51 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-27 19:09 - 2014-02-27 14:51 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-27 19:08 - 2011-04-12 08:55 - 00000000 ____D () C:\Program Files\Windows Journal
2014-02-27 18:58 - 2014-02-27 14:51 - 00001425 _____ () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 17:11 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-27 17:11 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-27 16:53 - 2014-02-27 16:52 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-27 16:44 - 2014-02-27 16:34 - 00016876 _____ () C:\Windows\IE11_main.log
2014-02-27 16:39 - 2014-02-27 16:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-27 16:35 - 2014-02-27 16:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:25 - 2014-02-27 15:20 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-27 16:25 - 2014-02-27 15:20 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-27 16:17 - 2014-02-27 16:15 - 00004135 _____ () C:\Windows\IE9_main.log
2014-02-27 15:44 - 2014-02-27 15:12 - 00624224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-27 15:44 - 2014-02-27 15:12 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-27 15:44 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-02-27 15:44 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-02-27 15:44 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-02-27 15:32 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Users\Monika\AppData\Local\Google
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Users\Monika\AppData\Local\Secunia PSI
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-02-27 15:18 - 2014-02-27 15:18 - 00000736 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Malwarebytes
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-27 15:15 - 2014-02-27 15:15 - 00002334 _____ () C:\Users\Monika\Desktop\Sicherer Zahlungsverkehr.lnk
2014-02-27 15:12 - 2014-02-27 15:12 - 00001124 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-02-27 15:09 - 2014-02-27 15:09 - 00018240 _____ () C:\Windows\system32\results.xml
2014-02-27 15:09 - 2014-02-27 15:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-02-27 15:06 - 2014-02-27 15:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Program Files\Realtek
2014-02-27 15:03 - 2014-02-27 15:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 15:03 - 2014-02-27 15:02 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-27 15:02 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-27 14:58 - 2014-02-27 14:56 - 00000000 ____D () C:\Intel
2014-02-27 14:56 - 2014-02-27 14:56 - 00000000 ____D () C:\MSI
2014-02-27 14:51 - 2014-02-27 14:51 - 00000020 ___SH () C:\Users\Monika\ntuser.ini
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 __SHD () C:\Recovery
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 ____D () C:\Users\Monika\AppData\Local\VirtualStore
2014-02-27 14:51 - 2014-02-27 14:39 - 00000000 ____D () C:\Windows\Panther
2014-02-27 14:51 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-27 14:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-27 14:40 - 2014-02-27 14:40 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-27 14:40 - 2009-07-14 05:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-02-27 14:40 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-27 14:39 - 2011-04-12 08:55 - 00000000 ____D () C:\Windows\CSC
2014-02-27 14:39 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-27 14:39 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\Monika\AppData\Local\Temp\devcon64.exe
C:\Users\Monika\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-12 12:00

==================== End Of Log ============================
         

Alt 16.03.2014, 19:15   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 16.03.2014, 19:49   #9
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Hi,

Hier der Log es wurde nichts gefunden.

Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
www.malwarebytes.org

Database version: v2014.03.16.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Monika :: MAMA_PAPA-PC [administrator]

16.03.2014 20:42:13
mbar-log-2014-03-16 (20-42-13).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 228449
Time elapsed: 3 minute(s), 57 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

Alt 16.03.2014, 19:50   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 16.03.2014, 20:14   #11
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Code:
ATTFilter
# AdwCleaner v3.022 - Bericht erstellt am 16/03/2014 um 21:04:12
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Monika - MAMA_PAPA-PC
# Gestartet von : C:\Users\Monika\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [803 octets] - [16/03/2014 21:03:23]
AdwCleaner[S0].txt - [725 octets] - [16/03/2014 21:04:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [784 octets] ##########
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Professional x64
Ran by Monika on 16.03.2014 at 21:06:00,31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.03.2014 at 21:09:36,46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Monika (administrator) on MAMA_PAPA-PC on 16-03-2014 21:10:29
Running from C:\Users\Monika\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Microsoft Default Manager] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [288080 2009-07-17] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

==================== Internet (Whitelisted) ====================

BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM-x32 - MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-27]
CHR Extension: (Google Drive) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-27]
CHR Extension: (Brushed) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfjgbcjfpbbfepcccpaffkjofcmglifg [2014-02-27]
CHR Extension: (YouTube) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-27]
CHR Extension: (Adblock Plus) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-27]
CHR Extension: (Google-Suche) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-27]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-02-27]
CHR Extension: (AdBlock) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-27]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-02-27]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-02-27]
CHR Extension: (Virtuelle Tastatur) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-02-27]
CHR Extension: (Google Wallet) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-27]
CHR Extension: (NotScripts) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\odjhifogjcknibkahlpidmdajjpkkcfn [2014-02-27]
CHR Extension: (Google Mail) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-27]
CHR Extension: (Anti-Banner) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-02-27]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2013-10-17]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2013-10-17]

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S4 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-07-25] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-01] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

==================== Drivers (Whitelisted) ====================

R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-01] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-01] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-01] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-01] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-02-27] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-02-27] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [624224 2014-02-27] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-02-27] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-02-27] (Kaspersky Lab ZAO)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-16 21:10 - 2014-03-16 21:10 - 00012711 _____ () C:\Users\Monika\Desktop\FRST.txt
2014-03-16 21:09 - 2014-03-16 21:09 - 00000626 _____ () C:\Users\Monika\Desktop\JRT.txt
2014-03-16 21:05 - 2014-03-16 21:05 - 00000863 _____ () C:\Users\Monika\Desktop\AdwCleaner[S0].txt
2014-03-16 21:05 - 2014-03-16 21:05 - 00000000 ____D () C:\Windows\ERUNT
2014-03-16 21:03 - 2014-03-16 21:04 - 00000000 ____D () C:\AdwCleaner
2014-03-16 21:02 - 2014-03-16 21:02 - 01950720 _____ () C:\Users\Monika\Desktop\adwcleaner.exe
2014-03-16 21:02 - 2014-03-16 21:02 - 01037734 _____ (Thisisu) C:\Users\Monika\Desktop\JRT.exe
2014-03-16 21:02 - 2014-03-16 14:10 - 02157056 _____ (Farbar) C:\Users\Monika\Desktop\FRST64.exe
2014-03-16 20:42 - 2014-03-16 20:47 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-16 20:42 - 2014-03-16 20:42 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-16 20:41 - 2014-03-16 20:47 - 00000000 ____D () C:\Users\Monika\Desktop\mbar
2014-03-16 20:41 - 2014-03-16 20:41 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-16 20:41 - 2014-03-16 20:40 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Monika\Desktop\mbar-1.07.0.1009.exe
2014-03-16 14:19 - 2014-03-16 14:19 - 00000000 ____D () C:\Users\Monika\AppData\Local\CrashDumps
2014-03-16 14:16 - 2014-03-16 21:10 - 00000000 ____D () C:\FRST
2014-03-16 14:16 - 2014-03-16 14:16 - 00000000 _____ () C:\Users\Monika\defogger_reenable
2014-03-15 19:37 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-15 19:37 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-15 19:37 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-15 19:37 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 19:37 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-15 19:37 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-15 19:37 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 19:37 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-15 19:37 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 19:37 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 19:37 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-15 19:37 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-15 19:37 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-15 19:37 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-15 19:37 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-15 19:37 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-15 19:37 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-15 19:37 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 19:37 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-15 19:37 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-15 19:37 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 19:37 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 19:37 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-15 19:37 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 19:37 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-15 19:37 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 19:37 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-15 19:37 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 19:37 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 19:37 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-15 19:37 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 19:37 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 19:37 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 19:37 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 19:37 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 19:37 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 19:37 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 19:37 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 19:37 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-15 19:37 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-15 19:37 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-15 19:37 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-15 19:37 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-15 19:37 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-15 19:36 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-15 19:36 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-15 19:36 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-15 19:36 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-12 15:55 - 2014-03-12 15:55 - 00000000 ____D () C:\Windows\pss
2014-03-04 20:01 - 2014-03-04 20:03 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-04 20:01 - 2014-03-04 20:01 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-04 20:01 - 2014-03-04 20:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-04 20:00 - 2014-03-04 20:02 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-03-01 14:18 - 2014-03-01 14:18 - 00259570 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-03-01 14:16 - 2014-03-01 14:16 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-01 14:06 - 2014-03-01 14:06 - 00000000 ____D () C:\ProgramData\WEBREG
2014-03-01 14:05 - 2014-03-01 14:05 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Macromedia
2014-03-01 14:04 - 2014-03-01 14:07 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HP
2014-03-01 14:04 - 2014-03-01 14:04 - 00000000 ____D () C:\Users\Monika\AppData\Local\HP
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\MSN Toolbar
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-01 12:36 - 2014-03-16 21:03 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-01 12:36 - 2014-03-12 11:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-01 12:36 - 2014-03-12 11:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-01 12:36 - 2014-03-12 11:32 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-01 12:36 - 2014-03-08 18:37 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HpUpdate
2014-03-01 12:36 - 2014-03-01 12:36 - 00001351 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00001189 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\Windows\system32\Macromed
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\ProgramData\HP Product Assistant
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-03-01 12:34 - 2014-03-01 12:34 - 00002006 _____ () C:\Users\Public\Desktop\HP ePrinterCenter.lnk
2014-03-01 12:33 - 2014-03-01 12:36 - 00000000 ____D () C:\Program Files (x86)\HP
2014-03-01 12:33 - 2010-03-10 15:35 - 00138752 _____ (Hewlett-Packard Company) C:\Windows\system32\hpf3l101.dll
2014-03-01 12:33 - 2009-12-10 19:48 - 01412224 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpost_p04i.dll
2014-03-01 12:33 - 2009-12-10 19:48 - 01179776 _____ (Hewlett-Packard) C:\Windows\system32\hposwia_p04i.dll
2014-03-01 12:33 - 2009-12-10 19:48 - 00525440 _____ (Hewlett-Packard Co.) C:\Windows\system32\hposc_p04a.dll
2014-03-01 12:33 - 2009-10-22 01:55 - 00643200 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll
2014-03-01 12:32 - 2014-03-01 14:06 - 00238349 _____ () C:\Windows\hpoins52.dat
2014-03-01 12:32 - 2014-03-01 14:06 - 00000801 _____ () C:\ProgramData\hpzinstall.log
2014-03-01 12:32 - 2014-03-01 14:05 - 00000000 ____D () C:\ProgramData\HP
2014-02-27 21:08 - 2014-03-01 12:24 - 00000000 ____D () C:\Users\Monika\AppData\Local\Intel_Corporation
2014-02-27 20:41 - 2014-02-27 20:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_INETMON_01011.Wdf
2014-02-27 20:41 - 2013-08-01 17:01 - 00029088 _____ () C:\Windows\system32\Drivers\INETMON.sys
2014-02-27 20:40 - 2014-02-27 20:40 - 00004614 _____ () C:\Windows\DPINST.LOG
2014-02-27 20:39 - 2014-02-27 20:39 - 00000000 ____D () C:\Windows\System32\Tasks\Intel(R) Small Business Advantage
2014-02-27 20:39 - 2013-09-16 20:19 - 00016344 ____R (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll
2014-02-27 20:38 - 2014-02-27 20:41 - 00000000 ____D () C:\ProgramData\Intel
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____D () C:\Program Files (x86)\MSI
2014-02-27 20:38 - 2013-09-16 20:19 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll
2014-02-27 20:38 - 2013-09-16 20:19 - 00099288 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys
2014-02-27 20:02 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-02-27 20:02 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-02-27 20:02 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-02-27 20:02 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-02-27 20:02 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-02-27 20:02 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-27 20:00 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-02-27 20:00 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-02-27 19:18 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-27 19:18 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-27 19:12 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-27 19:12 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-27 19:12 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-27 19:12 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-27 19:12 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-27 19:12 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-02-27 19:12 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-27 19:12 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-27 19:12 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-02-27 19:12 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2014-02-27 19:12 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-02-27 19:12 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-02-27 19:12 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-02-27 19:12 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2014-02-27 19:12 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2014-02-27 19:12 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2014-02-27 19:12 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-02-27 19:12 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-02-27 19:12 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-02-27 19:03 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-02-27 19:03 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-02-27 19:03 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-02-27 19:03 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-02-27 19:03 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-02-27 19:03 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-02-27 19:03 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-02-27 19:02 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-02-27 19:02 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-02-27 19:02 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-02-27 19:02 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-02-27 19:02 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-02-27 19:02 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-02-27 19:02 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-02-27 19:02 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-02-27 19:02 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-02-27 19:02 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-02-27 19:02 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-02-27 19:02 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-02-27 19:02 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-02-27 19:02 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-02-27 19:02 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-02-27 19:02 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-02-27 19:02 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-02-27 19:02 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll
2014-02-27 19:02 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-02-27 19:02 - 2012-04-28 04:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-27 19:02 - 2011-03-03 07:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-02-27 19:02 - 2011-03-03 07:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-02-27 19:02 - 2011-03-03 07:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2014-02-27 19:02 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2014-02-27 19:02 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe
2014-02-27 19:02 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-02-27 18:58 - 2014-03-04 20:02 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Adobe
2014-02-27 16:56 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-02-27 16:56 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-02-27 16:56 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-02-27 16:55 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-02-27 16:52 - 2014-02-27 16:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-27 16:52 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-27 16:49 - 2014-02-27 20:02 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 16:44 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-02-27 16:39 - 2014-02-27 16:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-27 16:35 - 2014-02-27 16:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:34 - 2014-02-27 16:44 - 00016876 _____ () C:\Windows\IE11_main.log
2014-02-27 16:30 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-27 16:30 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-27 16:30 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-27 16:30 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-27 16:30 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-27 16:30 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-27 16:30 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-27 16:30 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-27 16:30 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-27 16:30 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-27 16:30 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-27 16:30 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-27 16:30 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-27 16:30 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-27 16:30 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-27 16:30 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-27 16:17 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-02-27 16:15 - 2014-02-27 16:17 - 00004135 _____ () C:\Windows\IE9_main.log
2014-02-27 16:03 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-02-27 16:03 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-02-27 16:03 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-02-27 16:01 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-02-27 16:01 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-02-27 16:01 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-02-27 16:01 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-02-27 16:01 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-02-27 16:01 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-02-27 16:01 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-02-27 16:01 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-02-27 16:01 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-02-27 16:01 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-02-27 16:01 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-02-27 16:01 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-02-27 16:01 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-02-27 16:01 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-02-27 16:01 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-02-27 16:01 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-02-27 16:01 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-02-27 16:01 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-02-27 16:00 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-27 16:00 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-27 16:00 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-27 16:00 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-02-27 16:00 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-27 16:00 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-02-27 16:00 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-02-27 16:00 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-02-27 16:00 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-02-27 16:00 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-02-27 16:00 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-02-27 16:00 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-02-27 16:00 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-02-27 16:00 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-02-27 16:00 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-02-27 15:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-27 15:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-27 15:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-27 15:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-27 15:59 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-27 15:59 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-27 15:59 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-27 15:59 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-27 15:59 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-27 15:59 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-27 15:59 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-27 15:59 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-27 15:59 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-27 15:59 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-27 15:59 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-27 15:59 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-27 15:59 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-27 15:59 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-27 15:59 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-27 15:59 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-02-27 15:59 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-02-27 15:59 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-27 15:59 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-02-27 15:59 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-27 15:59 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-02-27 15:59 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-02-27 15:59 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-02-27 15:59 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-27 15:59 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-02-27 15:59 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-02-27 15:59 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-02-27 15:59 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-02-27 15:59 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-02-27 15:59 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-27 15:59 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-27 15:59 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-27 15:59 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-27 15:59 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-27 15:59 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-27 15:59 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-27 15:59 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-27 15:59 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-02-27 15:59 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-02-27 15:59 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-02-27 15:59 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-02-27 15:59 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-02-27 15:59 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-27 15:59 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-02-27 15:59 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-02-27 15:59 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-02-27 15:59 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-02-27 15:59 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-02-27 15:59 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-02-27 15:59 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-02-27 15:59 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-02-27 15:59 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-02-27 15:59 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-27 15:59 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-27 15:59 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-02-27 15:59 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-02-27 15:59 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-02-27 15:59 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-02-27 15:59 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-02-27 15:59 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-02-27 15:59 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-02-27 15:59 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-02-27 15:59 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-02-27 15:59 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-02-27 15:59 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-02-27 15:59 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-02-27 15:59 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-02-27 15:59 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-02-27 15:59 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-02-27 15:59 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-02-27 15:59 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-02-27 15:59 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-02-27 15:59 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-02-27 15:59 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-02-27 15:59 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-02-27 15:59 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-02-27 15:59 - 2012-11-28 23:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-02-27 15:59 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-02-27 15:59 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-02-27 15:59 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2014-02-27 15:59 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-02-27 15:59 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2014-02-27 15:59 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2014-02-27 15:59 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2014-02-27 15:59 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-02-27 15:59 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2014-02-27 15:59 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2014-02-27 15:59 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll
2014-02-27 15:59 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2014-02-27 15:59 - 2012-08-11 01:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-02-27 15:59 - 2012-08-11 00:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-02-27 15:59 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-02-27 15:59 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2014-02-27 15:59 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-02-27 15:59 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll
2014-02-27 15:59 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2014-02-27 15:59 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl
2014-02-27 15:59 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-02-27 15:59 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll
2014-02-27 15:58 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-27 15:58 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-27 15:58 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-02-27 15:58 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-02-27 15:58 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2014-02-27 15:58 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll
2014-02-27 15:58 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll
2014-02-27 15:58 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-02-27 15:58 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-02-27 15:57 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-02-27 15:57 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-02-27 15:57 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-02-27 15:57 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-02-27 15:57 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-02-27 15:57 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-02-27 15:57 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-27 15:57 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-02-27 15:57 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-02-27 15:57 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-02-27 15:57 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-02-27 15:57 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-02-27 15:57 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-02-27 15:57 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-02-27 15:57 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2014-02-27 15:57 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-02-27 15:57 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2014-02-27 15:57 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-02-27 15:57 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2014-02-27 15:57 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-02-27 15:57 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-02-27 15:57 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-02-27 15:57 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-02-27 15:57 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-02-27 15:57 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-02-27 15:57 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2014-02-27 15:57 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2014-02-27 15:57 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2014-02-27 15:57 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2014-02-27 15:57 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2014-02-27 15:57 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-02-27 15:57 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-02-27 15:57 - 2011-03-11 07:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-02-27 15:57 - 2011-03-11 07:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-02-27 15:57 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll
2014-02-27 15:57 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll
2014-02-27 15:57 - 2010-12-23 11:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-02-27 15:57 - 2010-12-23 11:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-02-27 15:57 - 2010-12-23 11:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2014-02-27 15:57 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2014-02-27 15:57 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2014-02-27 15:57 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax
2014-02-27 15:56 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-27 15:56 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-27 15:56 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-02-27 15:56 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-02-27 15:56 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-02-27 15:56 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-02-27 15:56 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-02-27 15:56 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-02-27 15:56 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-02-27 15:56 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-02-27 15:56 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2014-02-27 15:56 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll
2014-02-27 15:56 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll
2014-02-27 15:56 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-02-27 15:56 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-02-27 15:56 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-02-27 15:56 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-02-27 15:56 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll
2014-02-27 15:56 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax
2014-02-27 15:56 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-02-27 15:56 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-02-27 15:56 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-02-27 15:54 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-27 15:54 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-27 15:54 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-27 15:54 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-27 15:54 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-02-27 15:54 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-02-27 15:54 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-02-27 15:54 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-02-27 15:54 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-02-27 15:54 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-02-27 15:54 - 2012-04-26 06:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-02-27 15:54 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-02-27 15:54 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2014-02-27 15:53 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-27 15:53 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-02-27 15:53 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-02-27 15:53 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-02-27 15:52 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-27 15:52 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-27 15:52 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-27 15:52 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-02-27 15:52 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-02-27 15:52 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-02-27 15:52 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2014-02-27 15:52 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll
2014-02-27 15:52 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-02-27 15:52 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-02-27 15:52 - 2012-04-07 13:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-02-27 15:52 - 2012-04-07 12:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-02-27 15:52 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-02-27 15:52 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2014-02-27 15:52 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-02-27 15:52 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2014-02-27 15:52 - 2011-08-27 06:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-02-27 15:52 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-02-27 15:52 - 2011-08-27 05:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-02-27 15:52 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2014-02-27 15:52 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-02-27 15:52 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll
2014-02-27 15:52 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll
2014-02-27 15:52 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll
2014-02-27 15:52 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-02-27 15:52 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-02-27 15:52 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-02-27 15:52 - 2011-04-22 23:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-02-27 15:52 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-02-27 15:52 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2014-02-27 15:52 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
2014-02-27 15:52 - 2011-02-12 12:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2014-02-27 15:52 - 2011-02-05 18:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-02-27 15:52 - 2011-02-05 18:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-02-27 15:52 - 2011-02-05 18:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-02-27 15:52 - 2011-02-05 18:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-02-27 15:52 - 2011-02-05 18:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-02-27 15:52 - 2011-02-05 18:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-02-27 15:52 - 2011-02-05 18:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-02-27 15:51 - 2011-11-19 15:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-02-27 15:51 - 2011-11-19 15:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-02-27 15:43 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-27 15:43 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-27 15:43 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-27 15:39 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-27 15:39 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-27 15:39 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-27 15:39 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-27 15:39 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-27 15:39 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-27 15:39 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-27 15:39 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-27 15:39 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-27 15:33 - 2014-03-01 14:04 - 00058400 _____ () C:\Users\Monika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-27 15:33 - 2014-02-27 20:40 - 00000488 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 15:20 - 2014-03-16 21:05 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-27 15:20 - 2014-03-16 20:30 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-27 15:20 - 2014-03-16 14:32 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-27 15:20 - 2014-02-27 16:25 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-27 15:20 - 2014-02-27 16:25 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Users\Monika\AppData\Local\Google
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Users\Monika\AppData\Local\Secunia PSI
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-02-27 15:18 - 2014-02-27 15:18 - 00000736 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Malwarebytes
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-27 15:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-27 15:15 - 2014-02-27 15:15 - 00002334 _____ () C:\Users\Monika\Desktop\Sicherer Zahlungsverkehr.lnk
2014-02-27 15:12 - 2014-03-16 21:05 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-27 15:12 - 2014-02-27 15:44 - 00624224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-27 15:12 - 2014-02-27 15:44 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-27 15:12 - 2014-02-27 15:12 - 00001124 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-02-27 15:12 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-02-27 15:09 - 2014-02-27 15:09 - 00018240 _____ () C:\Windows\system32\results.xml
2014-02-27 15:09 - 2014-02-27 15:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-02-27 15:06 - 2014-02-27 15:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-02-27 15:06 - 2013-04-26 03:24 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys
2014-02-27 15:05 - 2013-04-26 03:24 - 00786416 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys
2014-02-27 15:05 - 2013-04-26 03:24 - 00368112 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Program Files\Realtek
2014-02-27 15:03 - 2013-09-10 14:40 - 03640024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-27 15:03 - 2013-09-10 12:56 - 00644705 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-27 15:03 - 2013-09-10 09:16 - 00148696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-02-27 15:03 - 2013-09-05 08:52 - 02586328 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-27 15:03 - 2013-09-04 07:12 - 01993496 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO264.dll
2014-02-27 15:03 - 2013-09-04 07:12 - 01722648 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO232.dll
2014-02-27 15:03 - 2013-09-03 04:16 - 02080472 ____R (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-27 15:03 - 2013-08-20 13:17 - 02809048 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-27 15:03 - 2013-08-07 10:41 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-27 15:03 - 2013-08-05 11:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-02-27 15:03 - 2013-08-02 13:16 - 01005784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-27 15:03 - 2013-07-30 07:04 - 00397080 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-02-27 15:03 - 2013-07-26 07:05 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-02-27 15:03 - 2013-07-24 03:07 - 02032896 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-27 15:03 - 2013-07-23 08:40 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-02-27 15:03 - 2013-07-23 08:39 - 00922880 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-27 15:03 - 2013-06-05 14:42 - 00208072 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-27 15:03 - 2013-04-24 10:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-27 15:03 - 2013-02-20 11:55 - 01284680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-27 15:03 - 2012-03-08 04:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-27 15:03 - 2011-12-20 08:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-27 15:03 - 2011-11-22 09:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-02-27 15:03 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-02-27 15:03 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-27 15:03 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-27 15:03 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-27 15:03 - 2009-11-18 00:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-02-27 15:02 - 2014-02-27 15:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 15:02 - 2014-02-27 15:03 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-27 15:02 - 2013-04-10 04:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-02-27 15:02 - 2013-04-10 04:09 - 00108104 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-02-27 15:02 - 2013-04-10 04:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-02-27 15:00 - 2013-08-20 00:25 - 00449528 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys
2014-02-27 14:59 - 2014-02-27 20:40 - 00000000 ____D () C:\Program Files\Intel
2014-02-27 14:59 - 2013-08-24 02:48 - 07583216 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00843248 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00771056 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00769520 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00754672 _____ (Intel Corporation) C:\Windows\system32\GfxUIHotKeyMenu.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00531440 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00391152 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00386544 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe
2014-02-27 14:59 - 2013-08-24 02:48 - 00279024 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
2014-02-27 14:59 - 2013-08-24 02:47 - 00395248 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe
2014-02-27 14:59 - 2013-08-24 02:47 - 00153072 _____ (Intel Corporation) C:\Windows\system32\difx64.exe
2014-02-27 14:59 - 2013-08-20 00:24 - 00180224 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3277.dll
2014-02-27 14:59 - 2013-08-20 00:22 - 00002980 _____ () C:\Windows\system32\iglhxs64.vp
2014-02-27 14:59 - 2013-08-20 00:20 - 13748224 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 12090368 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 09081856 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 07915008 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 04165120 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys
2014-02-27 14:59 - 2013-08-20 00:20 - 00548352 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00522240 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00521728 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00517120 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00516096 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00513536 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00513024 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00371200 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc
2014-02-27 14:59 - 2013-08-20 00:20 - 00365568 _____ () C:\Windows\system32\igdmd64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00220672 _____ () C:\Windows\system32\igdde64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00160256 _____ () C:\Windows\system32\igdail64.dll
2014-02-27 14:59 - 2013-08-20 00:20 - 00066048 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 04067328 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 02384896 _____ () C:\Windows\system32\GfxRes.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00622080 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00345600 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl
2014-02-27 14:59 - 2013-08-20 00:19 - 00265221 _____ () C:\Windows\system32\Gfxres.th-TH.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00251734 _____ () C:\Windows\system32\Gfxres.el-GR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00243712 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00233456 _____ () C:\Windows\system32\Gfxres.ru-RU.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00199680 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00199353 _____ () C:\Windows\system32\Gfxres.ar-SA.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00196916 _____ () C:\Windows\system32\Gfxres.ja-JP.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00194048 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00190958 _____ () C:\Windows\system32\Gfxres.he-IL.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00179225 _____ () C:\Windows\system32\Gfxres.ko-KR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00179110 _____ () C:\Windows\system32\Gfxres.it-IT.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00176823 _____ () C:\Windows\system32\Gfxres.es-ES.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00176557 _____ () C:\Windows\system32\Gfxres.fr-FR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00176510 _____ () C:\Windows\system32\Gfxres.de-DE.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00175131 _____ () C:\Windows\system32\Gfxres.ro-RO.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00174116 _____ () C:\Windows\system32\Gfxres.hu-HU.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00173825 _____ () C:\Windows\system32\Gfxres.tr-TR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00173685 _____ () C:\Windows\system32\Gfxres.pl-PL.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00173366 _____ () C:\Windows\system32\Gfxres.nl-NL.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00172633 _____ () C:\Windows\system32\Gfxres.pt-BR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171913 _____ () C:\Windows\system32\Gfxres.fi-FI.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171581 _____ () C:\Windows\system32\Gfxres.sk-SK.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171419 _____ () C:\Windows\system32\Gfxres.sv-SE.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00171189 _____ () C:\Windows\system32\Gfxres.pt-PT.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00170868 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00170047 _____ () C:\Windows\system32\Gfxres.hr-HR.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00166544 _____ () C:\Windows\system32\Gfxres.sl-SI.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00165246 _____ () C:\Windows\system32\Gfxres.nb-NO.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00164570 _____ () C:\Windows\system32\Gfxres.da-DK.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00159819 _____ () C:\Windows\system32\Gfxres.en-US.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00153121 _____ () C:\Windows\system32\Gfxres.zh-TW.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00151342 _____ () C:\Windows\system32\Gfxres.zh-CN.resources
2014-02-27 14:59 - 2013-08-20 00:19 - 00029184 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll
2014-02-27 14:59 - 2013-08-20 00:19 - 00012288 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll
2014-02-27 14:59 - 2013-08-20 00:16 - 06300672 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll
2014-02-27 14:59 - 2013-08-20 00:16 - 00303104 _____ () C:\Windows\SysWOW64\igdmd32.dll
2014-02-27 14:59 - 2013-08-20 00:15 - 11379712 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll
2014-02-27 14:59 - 2013-08-20 00:14 - 13146112 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll
2014-02-27 14:59 - 2013-08-20 00:14 - 00180736 _____ () C:\Windows\SysWOW64\igdde32.dll
2014-02-27 14:59 - 2013-08-20 00:13 - 00491520 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll
2014-02-27 14:59 - 2013-08-20 00:13 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll
2014-02-27 14:59 - 2013-08-20 00:12 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 21005824 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 02963456 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 00289280 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll
2014-02-27 14:59 - 2013-08-20 00:04 - 00253440 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 25977344 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 03279360 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 00328192 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll
2014-02-27 14:59 - 2013-08-20 00:03 - 00304640 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll
2014-02-27 14:59 - 2013-08-19 23:53 - 04409856 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll
2014-02-27 14:59 - 2013-08-19 23:51 - 03504640 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 02813952 _____ () C:\Windows\system32\iglhxa64.cpa
2014-02-27 14:59 - 2013-07-30 20:44 - 02064896 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 01814016 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 01127424 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 01123328 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00214528 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00179712 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00151552 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00143360 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00129024 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00122880 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL
2014-02-27 14:59 - 2013-07-30 20:44 - 00064000 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL
2014-02-27 14:59 - 2013-07-30 20:44 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll
2014-02-27 14:59 - 2013-07-30 20:44 - 00044025 _____ () C:\Windows\system32\iglhxo64.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043816 _____ () C:\Windows\system32\iglhxc64_dev.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043494 _____ () C:\Windows\system32\iglhxc64.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043298 _____ () C:\Windows\system32\iglhxg64_dev.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00043256 _____ () C:\Windows\system32\iglhxg64.vp
2014-02-27 14:59 - 2013-07-30 20:44 - 00042079 _____ () C:\Windows\system32\iglhxo64_dev.vp
2014-02-27 14:57 - 2014-02-27 20:39 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-27 14:57 - 2013-08-05 11:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-02-27 14:56 - 2014-02-27 14:58 - 00000000 ____D () C:\Intel
2014-02-27 14:56 - 2014-02-27 14:56 - 00000000 ____D () C:\MSI
2014-02-27 14:51 - 2014-03-16 21:04 - 01632296 _____ () C:\Windows\WindowsUpdate.log
2014-02-27 14:51 - 2014-03-16 14:16 - 00000000 ____D () C:\Users\Monika
2014-02-27 14:51 - 2014-02-27 19:09 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-27 14:51 - 2014-02-27 19:09 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-27 14:51 - 2014-02-27 18:58 - 00001425 _____ () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 14:51 - 2014-02-27 14:51 - 00000020 ___SH () C:\Users\Monika\ntuser.ini
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 __SHD () C:\Recovery
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 ____D () C:\Users\Monika\AppData\Local\VirtualStore
2014-02-27 14:51 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-27 14:51 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-27 14:40 - 2014-02-27 14:40 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-27 14:39 - 2014-02-27 14:51 - 00000000 ____D () C:\Windows\Panther
         

Alt 16.03.2014, 20:14   #12
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Code:
ATTFilter
==================== One Month Modified Files and Folders =======

2014-03-16 21:10 - 2014-03-16 21:10 - 00012711 _____ () C:\Users\Monika\Desktop\FRST.txt
2014-03-16 21:10 - 2014-03-16 14:16 - 00000000 ____D () C:\FRST
2014-03-16 21:09 - 2014-03-16 21:09 - 00000626 _____ () C:\Users\Monika\Desktop\JRT.txt
2014-03-16 21:09 - 2011-04-12 08:43 - 00698856 _____ () C:\Windows\system32\perfh007.dat
2014-03-16 21:09 - 2011-04-12 08:43 - 00148996 _____ () C:\Windows\system32\perfc007.dat
2014-03-16 21:09 - 2009-07-14 06:13 - 01618324 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-16 21:08 - 2014-02-27 14:51 - 01632296 _____ () C:\Windows\WindowsUpdate.log
2014-03-16 21:05 - 2014-03-16 21:05 - 00000863 _____ () C:\Users\Monika\Desktop\AdwCleaner[S0].txt
2014-03-16 21:05 - 2014-03-16 21:05 - 00000000 ____D () C:\Windows\ERUNT
2014-03-16 21:05 - 2014-02-27 15:20 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-16 21:05 - 2014-02-27 15:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-03-16 21:05 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-16 21:05 - 2009-07-14 05:51 - 00043437 _____ () C:\Windows\setupact.log
2014-03-16 21:04 - 2014-03-16 21:03 - 00000000 ____D () C:\AdwCleaner
2014-03-16 21:04 - 2009-07-14 05:45 - 00016848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-16 21:04 - 2009-07-14 05:45 - 00016848 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-16 21:03 - 2014-03-01 12:36 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-16 21:02 - 2014-03-16 21:02 - 01950720 _____ () C:\Users\Monika\Desktop\adwcleaner.exe
2014-03-16 21:02 - 2014-03-16 21:02 - 01037734 _____ (Thisisu) C:\Users\Monika\Desktop\JRT.exe
2014-03-16 20:47 - 2014-03-16 20:42 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-03-16 20:47 - 2014-03-16 20:41 - 00000000 ____D () C:\Users\Monika\Desktop\mbar
2014-03-16 20:42 - 2014-03-16 20:42 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-03-16 20:41 - 2014-03-16 20:41 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-03-16 20:40 - 2014-03-16 20:41 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Monika\Desktop\mbar-1.07.0.1009.exe
2014-03-16 20:30 - 2014-02-27 15:20 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-16 14:32 - 2014-02-27 15:20 - 00002175 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-16 14:19 - 2014-03-16 14:19 - 00000000 ____D () C:\Users\Monika\AppData\Local\CrashDumps
2014-03-16 14:16 - 2014-03-16 14:16 - 00000000 _____ () C:\Users\Monika\defogger_reenable
2014-03-16 14:16 - 2014-02-27 14:51 - 00000000 ____D () C:\Users\Monika
2014-03-16 14:10 - 2014-03-16 21:02 - 02157056 _____ (Farbar) C:\Users\Monika\Desktop\FRST64.exe
2014-03-16 13:37 - 2009-07-14 05:45 - 00276576 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-12 15:55 - 2014-03-12 15:55 - 00000000 ____D () C:\Windows\pss
2014-03-12 13:16 - 2010-11-21 04:47 - 00031192 _____ () C:\Windows\PFRO.log
2014-03-12 11:32 - 2014-03-01 12:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 11:32 - 2014-03-01 12:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 11:32 - 2014-03-01 12:36 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-08 18:37 - 2014-03-01 12:36 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HpUpdate
2014-03-04 20:03 - 2014-03-04 20:01 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-04 20:02 - 2014-03-04 20:00 - 00000000 ____D () C:\Users\Monika\AppData\Local\Adobe
2014-03-04 20:02 - 2014-02-27 18:58 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Adobe
2014-03-04 20:01 - 2014-03-04 20:01 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-03-04 20:01 - 2014-03-04 20:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-01 14:18 - 2014-03-01 14:18 - 00259570 _____ () C:\Windows\msxml4-KB2758694-enu.LOG
2014-03-01 14:16 - 2014-03-01 14:16 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-01 14:07 - 2014-03-01 14:04 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\HP
2014-03-01 14:06 - 2014-03-01 14:06 - 00000000 ____D () C:\ProgramData\WEBREG
2014-03-01 14:06 - 2014-03-01 12:32 - 00238349 _____ () C:\Windows\hpoins52.dat
2014-03-01 14:06 - 2014-03-01 12:32 - 00000801 _____ () C:\ProgramData\hpzinstall.log
2014-03-01 14:05 - 2014-03-01 14:05 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Macromedia
2014-03-01 14:05 - 2014-03-01 12:32 - 00000000 ____D () C:\ProgramData\HP
2014-03-01 14:04 - 2014-03-01 14:04 - 00000000 ____D () C:\Users\Monika\AppData\Local\HP
2014-03-01 14:04 - 2014-02-27 15:33 - 00058400 _____ () C:\Users\Monika\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-01 14:04 - 2009-07-14 03:34 - 00000438 _____ () C:\Windows\win.ini
2014-03-01 12:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\MSN Toolbar
2014-03-01 12:37 - 2014-03-01 12:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-01 12:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-01 12:36 - 2014-03-01 12:36 - 00001351 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00001189 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\Windows\system32\Macromed
2014-03-01 12:36 - 2014-03-01 12:36 - 00000000 ____D () C:\ProgramData\HP Product Assistant
2014-03-01 12:36 - 2014-03-01 12:33 - 00000000 ____D () C:\Program Files (x86)\HP
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\spool
2014-03-01 12:35 - 2014-03-01 12:35 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-03-01 12:34 - 2014-03-01 12:34 - 00002006 _____ () C:\Users\Public\Desktop\HP ePrinterCenter.lnk
2014-03-01 12:24 - 2014-02-27 21:08 - 00000000 ____D () C:\Users\Monika\AppData\Local\Intel_Corporation
2014-03-01 07:05 - 2014-03-15 19:37 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-15 19:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-15 19:37 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-15 19:37 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-15 19:37 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-15 19:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-15 19:37 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-15 19:37 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-15 19:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-15 19:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-15 19:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-15 19:37 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-15 19:37 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-15 19:37 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-15 19:37 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-15 19:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-15 19:37 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-15 19:37 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-15 19:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-15 19:37 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-15 19:37 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-15 19:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-15 19:37 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-15 19:37 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-15 19:37 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-15 19:37 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-15 19:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-15 19:37 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-15 19:37 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-15 19:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-15 19:37 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-15 19:37 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-15 19:37 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-15 19:37 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-15 19:37 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-15 19:37 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-15 19:37 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-15 19:37 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-15 19:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-15 19:37 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 20:41 - 2014-02-27 20:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_INETMON_01011.Wdf
2014-02-27 20:41 - 2014-02-27 20:38 - 00000000 ____D () C:\ProgramData\Intel
2014-02-27 20:40 - 2014-02-27 20:40 - 00004614 _____ () C:\Windows\DPINST.LOG
2014-02-27 20:40 - 2014-02-27 15:33 - 00000488 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 20:40 - 2014-02-27 14:59 - 00000000 ____D () C:\Program Files\Intel
2014-02-27 20:39 - 2014-02-27 20:39 - 00000000 ____D () C:\Windows\System32\Tasks\Intel(R) Small Business Advantage
2014-02-27 20:39 - 2014-02-27 14:57 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2014-02-27 20:38 - 2014-02-27 20:38 - 00000000 ____D () C:\Program Files (x86)\MSI
2014-02-27 20:09 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-02-27 20:02 - 2014-02-27 16:49 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 19:09 - 2014-02-27 14:51 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-27 19:09 - 2014-02-27 14:51 - 00000000 ___RD () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-27 19:08 - 2011-04-12 08:55 - 00000000 ____D () C:\Program Files\Windows Journal
2014-02-27 18:58 - 2014-02-27 14:51 - 00001425 _____ () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-27 17:11 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-27 17:11 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-02-27 17:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-27 16:53 - 2014-02-27 16:52 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-27 16:44 - 2014-02-27 16:34 - 00016876 _____ () C:\Windows\IE11_main.log
2014-02-27 16:39 - 2014-02-27 16:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-02-27 16:39 - 2014-02-27 16:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-02-27 16:39 - 2014-02-27 16:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-02-27 16:39 - 2014-02-27 16:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-02-27 16:39 - 2014-02-27 16:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-02-27 16:39 - 2014-02-27 16:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-02-27 16:35 - 2014-02-27 16:35 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:35 - 2014-02-27 16:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-02-27 16:25 - 2014-02-27 15:20 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-27 16:25 - 2014-02-27 15:20 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-27 16:17 - 2014-02-27 16:15 - 00004135 _____ () C:\Windows\IE9_main.log
2014-02-27 15:44 - 2014-02-27 15:12 - 00624224 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-02-27 15:44 - 2014-02-27 15:12 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-02-27 15:44 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kl1.sys
2014-02-27 15:44 - 2013-10-17 15:47 - 00029280 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klkbdflt.sys
2014-02-27 15:44 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2014-02-27 15:32 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Users\Monika\AppData\Local\Google
2014-02-27 15:20 - 2014-02-27 15:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Users\Monika\AppData\Local\Secunia PSI
2014-02-27 15:19 - 2014-02-27 15:19 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-02-27 15:18 - 2014-02-27 15:18 - 00000736 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\Users\Monika\AppData\Roaming\Malwarebytes
2014-02-27 15:18 - 2014-02-27 15:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-27 15:15 - 2014-02-27 15:15 - 00002334 _____ () C:\Users\Monika\Desktop\Sicherer Zahlungsverkehr.lnk
2014-02-27 15:12 - 2014-02-27 15:12 - 00001124 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-02-27 15:12 - 2014-02-27 15:12 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-02-27 15:09 - 2014-02-27 15:09 - 00018240 _____ () C:\Windows\system32\results.xml
2014-02-27 15:09 - 2014-02-27 15:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-02-27 15:06 - 2014-02-27 15:06 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-27 15:03 - 2014-02-27 15:03 - 00000000 ____D () C:\Program Files\Realtek
2014-02-27 15:03 - 2014-02-27 15:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 15:03 - 2014-02-27 15:02 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-27 15:02 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-27 14:58 - 2014-02-27 14:56 - 00000000 ____D () C:\Intel
2014-02-27 14:56 - 2014-02-27 14:56 - 00000000 ____D () C:\MSI
2014-02-27 14:51 - 2014-02-27 14:51 - 00000020 ___SH () C:\Users\Monika\ntuser.ini
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Monika\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Programme
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 __SHD () C:\Recovery
2014-02-27 14:51 - 2014-02-27 14:51 - 00000000 ____D () C:\Users\Monika\AppData\Local\VirtualStore
2014-02-27 14:51 - 2014-02-27 14:39 - 00000000 ____D () C:\Windows\Panther
2014-02-27 14:51 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-27 14:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-27 14:40 - 2014-02-27 14:40 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-27 14:40 - 2009-07-14 05:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-02-27 14:40 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-27 14:39 - 2011-04-12 08:55 - 00000000 ____D () C:\Windows\CSC
2014-02-27 14:39 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-27 14:39 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\Monika\AppData\Local\Temp\devcon64.exe
C:\Users\Monika\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe
C:\Users\Monika\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-12 12:00

==================== End Of Log ============================
         

Alt 16.03.2014, 20:15   #13
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 16.03.2014, 20:41   #14
Necro0
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.16.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Monika :: MAMA_PAPA-PC [Administrator]

16.03.2014 21:19:46
mbam-log-2014-03-16 (21-19-46).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 212500
Laufzeit: 1 Minute(n), 8 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=59fe1e013c8de74a8ffa7dfc9abd593c
# engine=17471
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-16 08:35:54
# local_time=2014-03-16 09:35:54 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 1241 146632004 0 0
# scanned=105379
# found=0
# cleaned=0
# scan_time=680
         

Alt 16.03.2014, 21:30   #15
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Standard

Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.



TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.




Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat. Um Usertracking zu verhindern kann man gut die Firefox-Erweiterung Ghostery verwenden.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Antwort

Themen zu Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.
anmelden, anmeldung, code, erneut, folge, folgende, gekauft, geändert, hallo zusammen, hilfreich, internet, komplett, lädt, melden, meldung, netzwerk, neu, neue, neuen, schließen, screenshot, seite, verbindung, vermehrt, win, wlan



Ähnliche Themen: Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden.


  1. Verbindung zur echten Website unter www.google.de kann nicht hergestellt werden
    Plagegeister aller Art und deren Bekämpfung - 11.08.2014 (31)
  2. Verbindung zum Proxy Server kann nicht hergestellt werden
    Log-Analyse und Auswertung - 06.07.2014 (3)
  3. conhost.exe / csrss.exe - Bin mir unsicher ob die "echten" vom System ausgeführt werden
    Plagegeister aller Art und deren Bekämpfung - 21.03.2014 (8)
  4. Firefox: Verbindung zum Proxy Server kann nicht hergestellt werden
    Plagegeister aller Art und deren Bekämpfung - 20.02.2014 (3)
  5. Weißer Bildschirm, "Website kann nicht angezeigt werden
    Log-Analyse und Auswertung - 05.02.2013 (26)
  6. Virus: "Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 12.12.2012 (3)
  7. "Website kann nicht angezeigt werden" Virus (OTL Dateien vorhanden)
    Plagegeister aller Art und deren Bekämpfung - 21.11.2012 (4)
  8. Weißer Bildschirm, "Diese Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 18.11.2012 (21)
  9. Weißer Bildschirm, "Diese Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 17.11.2012 (35)
  10. Trojaner Ransom-D / Weißer Bildschirm: "Diese Website kann nicht angezeigt werden"
    Plagegeister aller Art und deren Bekämpfung - 07.11.2012 (39)
  11. weißer Bildschirm mit Text " Website kann nicht angezeigt werden" -> Avast meldete Trojaner Ransom-D
    Plagegeister aller Art und deren Bekämpfung - 14.10.2012 (25)
  12. Weißer Bildschirm, "Website kann nicht angezeigt werden", Conteneur ActiveX
    Plagegeister aller Art und deren Bekämpfung - 05.10.2012 (4)
  13. Administratorkonto nicht mehr benutzbar, Meldung "Website kann nicht angezeigt werden"
    Log-Analyse und Auswertung - 16.08.2012 (15)
  14. "Diese Website kann nicht angezeigt werden" -> PC nicht benutzbar
    Plagegeister aller Art und deren Bekämpfung - 15.08.2012 (1)
  15. Chrome demnächst auch unter Linux in einer "echten" Sandbox
    Alles rund um Mac OSX & Linux - 05.07.2012 (0)
  16. Kann nichts machen - weißer Bildschirm "Warten Sie während die Verbindung hergestellt wird"
    Plagegeister aller Art und deren Bekämpfung - 03.04.2012 (17)
  17. Verbindung zum Server kann nicht hergestellt werden
    Log-Analyse und Auswertung - 17.02.2005 (8)

Zum Thema Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. - Hallo zusammen, ich habe diesen PC vor ca. 2-3 Wochen komplett neu (gekauft) installiert/aufgesetzt. Seit 2-3 Tagen bekommen meine Eltern, wenn Sie sich in arcor anmelden wollen, folgende Meldung: Code: - Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden....
Archiv
Du betrachtest: Win 7: Verbindung zur echten Website unter "arcor" kann nicht hergestellt werden. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.