Windows Vista 64 Bit: EXP/CVE-2011-2414.D

Hanky14 · 13.07.2014, 17:21

Hey Leute, vielen Dank für eure Hilfe. Ihr macht einen richtig guten Job!

Ich hab gestern Abend den Exploit "EXP/CVE-2011-2414.D" und vor ein paar Tagen "ADWARE/InstallCore.Gen9" auf meinem Rechner gefunden. Inwiefern diesen Dateien eine Gefahr für die Computersicherheit darstellen, kann ich leider nicht selbstständig beantworten, weswegen ich mich an euch wende.

Noch eine kleine Anmerkung: Ich habe, meiner Meinung, nach sensible Informationen unkenntlich gemacht. Ich hoffe das geht in Ordnung.

Leider sind die Logs anscheinend zu groß, weswegen ich eine Zip-Datei anhängen musste.

Danke für eure Hilfe!

cosinus · 13.07.2014, 17:35

Hi und

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hanky14 · 15.07.2014, 12:07

Nun folgen die Logs:

Ereignisse von Antivir:

Code:

ATTFilter

Exportierte Ereignisse:

12.07.2014 22:40 [System-Scanner] Malware gefunden
      Die Datei 'C:\ProgramData\**********\Content\data\99\0\9903392a451e5063e098e4a6ff025fb7cd3da3d0'
      enthielt einen Virus oder unerwünschtes Programm 'EXP/CVE-2011-2414.D' 
      [exploit].
      Durchgeführte Aktion(en):
      Eine Sicherungskopie wurde unter dem Namen 57e73f2a.qua erstellt ( QUARANTÄNE ).
      Die Datei wurde gelöscht.

12.07.2014 22:15 [Echtzeit-Scanner] Malware gefunden
      In der Datei 'C:\ProgramData\**********\Content\data\99\0\9903392a451e5063e098e4a6ff025fb7cd3da3d0'
      wurde ein Virus oder unerwünschtes Programm 'EXP/CVE-2011-2414.D' [exploit] 
      gefunden.
      Ausgeführte Aktion: Übergeben an Scanner

10.07.2014 13:46 [System-Scanner] Malware gefunden
      Die Datei 
      'C:\Users\Cyberstation\AppData\Local\Temp\JDSetup130459463820817068.exe'
      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/InstallCore.Gen9' 
      [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde gelöscht.

10.07.2014 13:46 [System-Scanner] Malware gefunden
      Die Datei 
      'C:\Users\Cyberstation\AppData\Local\Temp\JDSetup130459454121741068.exe'
      enthielt einen Virus oder unerwünschtes Programm 'ADWARE/InstallCore.Gen9' 
      [adware].
      Durchgeführte Aktion(en):
      Die Datei wurde gelöscht.

Defogger_disable:

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:29 on 13/07/2014 (Cyberstation)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...
SPTD -> Disabled (Service running -> reboot required)


-=E.O.F=-

GMER 2.1.19357:

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-13 16:27:05
Windows 6.0.6002 Service Pack 2 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T1L0-3 SAMSUNG_HD322HJ rev.1AC01113 298,09GB
Running: Gmer-19357.exe; Driver: C:\Users\CYBERS~1\AppData\Local\Temp\ufkyrpoc.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe                                                                                                                                                                                                                                suspicious modification
INITKDBG  C:\Windows\system32\ntoskrnl.exe                                                                                                                                                                                                                                suspicious modification
INITKDBG  C:\Windows\system32\ntoskrnl.exe                                                                                                                                                                                                                                suspicious modification
INITKDBG  C:\Windows\system32\ntoskrnl.exe                                                                                                                                                                                                                                suspicious modification
INITKDBG  C:\Windows\system32\ntoskrnl.exe                                                                                                                                                                                                                                suspicious modification
---- Processes - GMER 2.1 ----

Library   C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E4358E82-58D5-42C5-9C29-D9E2F502F6CC}\mpengine.dll (*** suspicious ***) @ C:\Windows\System32\svchost.exe [856] (Microsoft Malware Protection Engine/Microsoft Corporation)(2014-07-11 07:39:05)  000007fefb370000
Library   C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (*** suspicious ***) @ C:\Windows\Explorer.EXE [2764] (Dropbox Shell Extension/Dropbox, Inc.)(2013-09-11 02:09:56)                                                                        000007fef8210000
Process   C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [3032] (SpotifyWebHelper/Spotify Ltd)(2014-05-30 18:20:41)                               0000000000400000
Process   C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048] (Dropbox/Dropbox, Inc.)(2014-05-20 00:45:22)                                                          0000000000400000
Library   C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048](2014-01-03 01:09:26)                                                                             0000000004030000
Library   c:\users\cybers~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuzov5s.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048](2014-07-13 13:32:19)                                   00000000055d0000
Library   C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048](2013-08-23 19:01:44)                                                                                   0000000052b90000
Library   C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe [3048] (ICU Data DLL/The ICU Project)(2013-08-23 19:01:42)                                                     0000000054b80000

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                                                                                                                                                                
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                                                                                                                                                             C:\Program Files (x86)\DAEMON Tools Lite\
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                                                                                                                                                             0x00 0x00 0x00 0x00 ...
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                                                                                                                                                             0
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                                                                                                                                                          0xDE 0x8F 0x39 0x11 ...
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                                                                                                                                                                       
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                                                                                                                                                                    0xA0 0x02 0x00 0x00 ...
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                                                                                                                                                                 0xFD 0xB3 0x24 0x17 ...
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                                                                                                                                                                  
Reg       HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                                                                                                                                                            0xC5 0x65 0x7F 0xED ...
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                                                                                                                                                            
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                                                                                                                                                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                                                                                                                                                                 0x00 0x00 0x00 0x00 ...
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                                                                                                                                                                 0
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                                                                                                                                                              0xDE 0x8F 0x39 0x11 ...
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)                                                                                                                                                   
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                                                                                                                                                                        0xA0 0x02 0x00 0x00 ...
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                                                                                                                                                                     0xFD 0xB3 0x24 0x17 ...
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)                                                                                                                                              
Reg       HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                                                                                                                                                                0xC5 0x65 0x7F 0xED ...

---- EOF - GMER 2.1 ----

Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-07-2014
Ran by Cyberstation at 2014-07-13 15:36:15
Running from C:\Users\Cyberstation\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Add or Remove Adobe Creative Suite 3 Design Premium (HKLM-x32\...\Adobe_c14ac4070fd9614ffe63f4bb533db2c) (Version: 1.0 - Adobe Systems Incorporated)
Adobe Anchor Service CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Asset Services CS3 (x32 Version: 3 - Adobe Systems Incorporated) Hidden
Adobe Bridge CS3 (x32 Version: 2 - Adobe Systems Incorporated) Hidden
Adobe Bridge Start Meeting (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe BridgeTalk Plugin CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Camera Raw 4.0 (x32 Version: 4.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Color Common Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Extra Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Recommended Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 3 Design Premium (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Device Central CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Dreamweaver CS3 (x32 Version: 9 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit 2 (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS3 (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Flash CS3 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Flash Video Encoder (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Fonts All (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Help Viewer CS3 (x32 Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Illustrator CS3 (x32 Version: 13.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS3 (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS3 Icon Handler (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS3 (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe MotionPicture Color Files (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS3 (x32 Version: 10 - Adobe Systems Incorporated) Hidden
Adobe Reader X (10.1.4) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated)
Adobe Setup (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe SING CS3 (x32 Version: 0.1 - Adobe Systems Incorporated) Hidden
Adobe Stock Photos CS3 (x32 Version: 1.5 - Adobe Systems Incorporated) Hidden
Adobe Type Support (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS3 (x32 Version: 5.1.0 - Adobe Systems Incorporated) Hidden
Adobe Version Cue CS3 Client (x32 Version: 3 - Adobe Systems Incorporated) Hidden
Adobe Version Cue CS3 Server (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe WAS CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS3 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
AHV content for Acrobat and Flash (x32 Version: 1 - Adobe Systems Incorporated) Hidden
AMD Catalyst Install Manager (HKLM\...\{37FCE154-7F59-74F0-3A35-BF503CEB230B}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.34 - Atheros Communications Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)
Bing-Desktop (HKLM-x32\...\{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}) (Version: 1.3.466.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{59DC1BC4-08BC-466C-91E7-642C2EAAABF1}) (Version: 1.44.0 - Kovid Goyal)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.05152 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.05152 - Cisco Systems, Inc.) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version:  - Microsoft)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Druckerdeinstallation für EPSON SX110 Series (HKLM\...\EPSON SX110 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - )
Epson Stylus SX110_TX110 Handbuch (HKLM-x32\...\Epson Stylus SX110_TX110 Benutzerhandbuch) (Version:  - )
EPU-6 Engine (HKLM-x32\...\{56B83336-FBC1-4C46-8613-90A9E3B440D6}) (Version: 1.00.16 - )
FileZilla Client 3.8.1 (HKCU\...\FileZilla Client) (Version: 3.8.1 - Tim Kosse)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Greenshot 1.1.9.13 (HKLM\...\Greenshot_is1) (Version: 1.1.9.13 - Greenshot)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
marvell 61xx (HKLM-x32\...\mv61xxDriver) (Version: 1.2.0.57 - Marvell)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
PDF Settings (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Rosetta Stone Version 3 (HKLM-x32\...\{99011A6E-5200-11DE-BDB8-7ACD56D89593}) (Version: 3.4.5.0 - Rosetta Stone Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Sound Blaster X-Fi (HKLM-x32\...\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}) (Version: 1.0 - )
Spotify (HKCU\...\Spotify) (Version: 0.9.10.22.gf87988f9 - Spotify AB)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM-x32\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817396) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{39767ECA-1731-45DB-AB5B-6BF40E151D66}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{BA610006-2C39-4419-9834-CF61AB24810A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.PROPLUS_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.PROPLUS_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.PROPLUS_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)
VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN)
WinHTTrack Website Copier 3.48-10 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.48.10 - HTTrack)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wise Registry Cleaner 7.67 (HKLM-x32\...\Wise Registry Cleaner_is1) (Version:  - WiseCleaner.com, Inc.)

==================== Restore Points  =========================

07-07-2014 09:30:16 Geplanter Prüfpunkt
08-07-2014 18:33:59 Geplanter Prüfpunkt
09-07-2014 14:35:41 Geplanter Prüfpunkt
10-07-2014 07:19:30 Windows Update
11-07-2014 15:26:27 Geplanter Prüfpunkt
12-07-2014 13:15:01 Geplanter Prüfpunkt
12-07-2014 13:46:17 Installed calibre
13-07-2014 12:29:51 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2006-11-02 14:34 - 2006-09-18 23:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0AEAFAF6-F116-4A60-AFB4-C8B755A6E975} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {192DDA2D-5815-47B8-983F-65744FEEC03A} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {240BD6BF-CEB2-4FA9-B405-4226B14F7946} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {254095AE-FB97-48EA-94A5-D8BF2AB79714} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {40EEDC7C-D5E9-4F2A-A82E-FFC0A55077BC} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {4E946E6C-49EC-4FD9-8F58-EB5AF1752C5D} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries
Task: {6D6A5FC9-E93E-4B56-ACFB-6DBE710CFF8E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-11] (Google Inc.)
Task: {6F3F40E2-EE0C-4F32-9BED-816B8FEFDCA6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-06-11] (Google Inc.)
Task: {7C638E5B-ECE5-4424-A7E5-2C913CA682E9} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {929B3367-CEE2-44F5-9143-310A111603D3} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files\ASUS\Six Engine\SixEngine.exe [2008-06-03] ()
Task: {98CB5F42-C3E7-490F-BC57-D1076A962D2B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {E91D6474-70CC-42BE-80FF-8BED8AF557ED} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-04-30 04:46 - 2013-04-30 04:46 - 00045056 _____ () C:\Windows\system32\atitmp64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-05-01 21:29 - 2014-05-01 21:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-05-30 18:43 - 2008-06-03 01:06 - 05964800 _____ () C:\Program Files\ASUS\Six Engine\SixEngine.exe
2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-05-30 20:20 - 2014-06-27 22:20 - 00598072 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2013-12-13 00:36 - 2013-12-13 00:36 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-05-30 18:43 - 2005-05-11 16:39 - 00565248 _____ () C:\Program Files\ASUS\Six Engine\pngio.dll
2014-05-30 18:43 - 2008-04-15 10:07 - 00053248 _____ () C:\Program Files\ASUS\Six Engine\AsSpindownTimeout.dll
2014-05-30 20:20 - 2014-06-27 22:19 - 36966968 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\libcef.dll
2014-07-13 15:32 - 2014-07-13 15:32 - 00043008 _____ () c:\Users\Cyberstation\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuzov5s.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\libcef.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-02-14 15:46 - 2013-02-14 15:46 - 01044048 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2014-05-30 20:31 - 2006-06-09 09:20 - 00003072 _____ () C:\Windows\system32\CTXFIGER.DLL
2014-05-30 20:30 - 2009-03-26 14:46 - 00148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2014-05-30 19:38 - 2014-06-18 09:42 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-05-30 20:20 - 2014-06-27 22:20 - 00886840 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-05-30 20:20 - 2014-06-27 22:19 - 00108600 _____ () C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\libegl.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupfolder: C:^Users^Cyberstation^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe_ID0EYTHM => C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Cisco AnyConnect Secure Mobility Agent for Windows => "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: PDFPrint => "C:\Program Files (x86)\PDF24\pdf24.exe"

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/13/2014 03:32:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/13/2014 11:25:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/12/2014 09:36:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/12/2014 08:52:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/12/2014 03:49:33 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (07/12/2014 03:49:28 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL> in der Hash-Zuordnung kann nicht aktualisiert werden.

Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)

Error: (07/12/2014 11:43:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2014 09:32:44 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/10/2014 07:51:24 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoID={354358F9-36B2-4708-8532-F17A93A49B69}: Der Benutzer "Cyberstation-PC\Cyberstation" hat eine Verbindung mit dem Namen "*********" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 0.

Error: (07/10/2014 04:04:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5055


System errors:
=============
Error: (07/12/2014 03:36:55 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/12/2014 03:36:50 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/11/2014 11:53:11 AM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/11/2014 11:53:06 AM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/11/2014 11:53:05 AM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/11/2014 11:53:04 AM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/10/2014 07:52:12 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/10/2014 07:52:07 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/10/2014 07:52:06 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (07/10/2014 07:52:05 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{29C601DC-1189-4392-BD5A-D4A292B8BE64} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.


Microsoft Office Sessions:
=========================
Error: (07/13/2014 03:32:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/13/2014 11:25:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/12/2014 09:36:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/12/2014 08:52:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/12/2014 03:49:33 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL

Error: (07/12/2014 03:49:28 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Kontext:  Anwendung, SystemIndex Katalog


Details:
	Ein an das System angeschlossenes Gerät funktioniert nicht.   (0x8007001f)
C:\USERS\CYBERSTATION\DOCUMENTS\CALIBRE-BIBLIOTHEK\METADATA.DB-JOURNAL

Error: (07/12/2014 11:43:16 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2014 09:32:44 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/10/2014 07:51:24 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: {354358F9-36B2-4708-8532-F17A93A49B69}Cyberstation-PC\Cyberstation********0

Error: (07/10/2014 04:04:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5055


CodeIntegrity Errors:
===================================
  Date: 2014-06-11 13:35:21.114
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-11 13:35:21.059
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-11 13:35:21.009
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-11 13:35:20.953
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-11 13:35:20.896
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 55%
Total physical RAM: 4094.12 MB
Available physical RAM: 1802.98 MB
Total Pagefile: 8391.52 MB
Available Pagefile: 5636.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:298.09 GB) (Free:96.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive f: (Seagate Expansion Drive) (Fixed) (Total:1863.02 GB) (Free:1042.42 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 9DF0F6F6)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 90925266)
Partition 1: (Not Active) - (Size=-198625372160) - (Type=07 NTFS)

==================== End Of Log ============================

Hanky14 · 15.07.2014, 12:09

FRST:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-07-2014
Ran by Cyberstation (administrator) on CYBERSTATION-PC on 13-07-2014 15:35:08
Running from C:\Users\Cyberstation\Downloads
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\ASUS\Six Engine\SixEngine.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [495616 2014-05-12] (Greenshot)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2368728 2014-05-23] (Microsoft Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [CTxfiHlp] => C:\Windows\SysWOW64\CTXFIHLP.EXE [25600 2009-06-03] (Creative Technology Ltd)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Spotify.exe [6189624 2014-06-27] (Spotify Ltd)
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify Web Helper] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-27] (Spotify Ltd)
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Outlook 2010.lnk
ShortcutTarget: Microsoft Outlook 2010.lnk -> C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe ()
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D9E641F7185CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-30]
FF Extension: Facebook Ads Block - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\jid1-CGxMej0nDJTjwQ@jetpack.xpi [2014-05-30]
FF Extension: Nimbus Screen Capture - editable screenshots. - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\nimbusscreencaptureff@everhelper.me.xpi [2014-05-30]
FF Extension: Updated Ad Blocker for Firefox 11+ - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi [2014-05-30]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-05-30]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-11]
CHR Extension: (Google Drive) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-11]
CHR Extension: (YouTube) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-11]
CHR Extension: (Google-Suche) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-11]
CHR Extension: (Google Wallet) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-11]
CHR Extension: (Google Mail) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-11]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173784 2014-05-23] (Microsoft Corp.)

==================== Drivers (Whitelisted) ====================

S3 acsint; C:\Windows\System32\DRIVERS\acsint64.sys [49520 2013-12-13] (Cisco Systems, Inc.)
S3 acsmux; C:\Windows\System32\DRIVERS\acsmux64.sys [73584 2013-12-13] (Cisco Systems, Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-30] (Avira Operations GmbH & Co. KG)
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x64.sys [56320 2008-06-30] (Atheros Communications, Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-11-01] ()
R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [173096 2008-06-24] (Marvell Semiconductor, Inc.)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2014-05-30] (Duplex Secure Ltd.)
S3 CT20XUT.DLL; system32\CT20XUT.DLL [X]
S3 CTEXFIFX.DLL; system32\CTEXFIFX.DLL [X]
S3 CTHWIUT.DLL; system32\CTHWIUT.DLL [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-13 15:35 - 2014-07-13 15:35 - 00014975 _____ () C:\Users\Cyberstation\Downloads\FRST.txt
2014-07-13 15:34 - 2014-07-13 15:35 - 00000000 ____D () C:\FRST
2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe
2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log
2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable
2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe
2014-07-13 00:26 - 2014-07-13 00:28 - 239621255 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 23:19 - 2014-07-12 23:22 - 273409069 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 23:19 - 2014-07-12 23:21 - 288907926 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-12 23:10 - 2014-07-12 23:14 - 471518082 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache
2014-07-12 15:47 - 2014-07-12 15:52 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek
2014-07-12 15:47 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre
2014-07-12 15:47 - 2012-10-10 15:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi
2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-10 16:41 - 2014-07-10 16:49 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-10 16:41 - 2014-07-10 16:48 - 672344384 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-10 13:41 - 2014-07-10 18:46 - 00010147 _____ () C:\Users\Cyberstation\Desktop\**********
2014-07-09 13:46 - 2014-06-07 06:02 - 17854464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 13:46 - 2014-06-07 05:13 - 10890752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 13:46 - 2014-06-07 04:59 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 13:46 - 2014-06-07 04:52 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 13:46 - 2014-06-07 04:51 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 13:46 - 2014-06-07 04:51 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 13:46 - 2014-06-07 04:50 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-07-09 13:46 - 2014-06-07 04:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 13:46 - 2014-06-07 04:45 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-09 13:46 - 2014-06-07 04:45 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 13:46 - 2014-06-07 04:45 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 13:46 - 2014-06-07 04:42 - 02148352 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 13:46 - 2014-06-07 04:42 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 13:46 - 2014-06-07 04:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 13:46 - 2014-06-07 04:42 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 13:46 - 2014-06-07 04:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 13:46 - 2014-06-07 04:41 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-07-09 13:46 - 2014-06-07 04:41 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-07-09 13:46 - 2014-06-07 04:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 13:46 - 2014-06-07 04:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-07-09 13:46 - 2014-06-07 04:35 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 13:46 - 2014-06-07 02:33 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 13:46 - 2014-06-07 02:05 - 12353024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 13:46 - 2014-06-07 01:25 - 09711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 13:46 - 2014-06-07 01:12 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 13:46 - 2014-06-07 01:04 - 01106432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 13:46 - 2014-06-07 01:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 13:46 - 2014-06-07 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 13:46 - 2014-06-07 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-07-09 13:46 - 2014-06-07 00:58 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 13:46 - 2014-06-07 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 13:46 - 2014-06-07 00:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-07-09 13:46 - 2014-06-07 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-07-09 13:46 - 2014-06-07 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 13:46 - 2014-06-07 00:53 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 13:46 - 2014-06-07 00:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-07-09 13:46 - 2014-06-07 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 13:46 - 2014-06-07 00:51 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-07-09 13:46 - 2014-06-07 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 13:46 - 2014-06-06 10:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 13:46 - 2014-06-06 09:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 13:46 - 2014-05-30 09:10 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-06 20:23 - 2014-07-06 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-06 20:10 - 2014-07-06 20:18 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-06 20:10 - 2014-07-06 20:17 - 669643728 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:33 - 2014-06-25 00:02 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:26 - 2014-07-01 17:33 - 701000032 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:26 - 2014-06-17 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:24 - 2014-07-01 17:32 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:19 - 2014-07-01 17:26 - 706128656 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:19 - 2014-06-11 14:58 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\**********
2014-07-01 17:15 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:11 - 2014-07-01 17:18 - 706064608 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:11 - 2014-06-04 20:52 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:07 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:01 - 2014-07-01 17:11 - 677611088 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:01 - 2014-07-01 17:07 - 681574400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:01 - 2014-06-11 20:48 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-01 16:50 - 2014-07-01 17:00 - 849346560 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 16:50 - 2014-07-01 17:00 - 833077712 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:58 - 2014-07-01 15:03 - 535328048 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:56 - 2014-07-01 15:02 - 576716800 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:51 - 2014-07-01 14:57 - 576716800 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:49 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:46 - 2014-07-01 14:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:43 - 2014-07-01 14:49 - 476037888 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:40 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:38 - 2014-07-01 14:43 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:34 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:32 - 2014-07-01 14:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:28 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:28 - 2014-07-01 14:32 - 259149888 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:23 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:21 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:19 - 2014-07-01 14:23 - 398004976 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:17 - 2014-07-01 14:21 - 400102976 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:12 - 2014-07-01 14:18 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:11 - 2014-07-01 14:17 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:07 - 2014-07-01 14:11 - 405696048 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:05 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:02 - 2014-07-01 14:05 - 349102864 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:00 - 2014-07-01 14:07 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:57 - 2014-07-01 14:02 - 420847904 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:55 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:51 - 2014-07-01 13:57 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:48 - 2014-07-01 13:54 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:46 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:42 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:40 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:37 - 2014-07-01 13:42 - 351488704 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:35 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:32 - 2014-07-01 13:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:28 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:27 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:22 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:21 - 2014-07-01 13:27 - 461647600 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:16 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:15 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 15:00 - 2014-07-01 00:35 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:59 - 2014-06-30 15:00 - 163491820 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:56 - 2014-06-30 15:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:54 - 2014-06-30 14:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:51 - 2014-06-30 14:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:50 - 2014-07-01 00:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:50 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:46 - 2014-06-30 14:50 - 370164760 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:45 - 2014-06-30 14:50 - 440401920 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:41 - 2014-07-01 00:30 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:41 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:39 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:37 - 2014-06-30 14:39 - 203917016 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:36 - 2014-06-30 14:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:32 - 2014-06-30 14:37 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:32 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:32 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:29 - 2014-06-30 14:32 - 229162904 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:27 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:25 - 2014-06-30 14:29 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:25 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:21 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:21 - 2014-06-30 14:25 - 326638680 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:17 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:15 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:15 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:13 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:10 - 2014-06-30 14:15 - 374940216 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:09 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:04 - 2014-06-30 14:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:04 - 2014-06-30 14:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:04 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:02 - 2014-06-30 14:04 - 160388808 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:00 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:57 - 2014-06-30 14:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:57 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:56 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:54 - 2014-06-30 13:56 - 177277560 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:52 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:49 - 2014-06-30 13:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:49 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:47 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:46 - 2014-06-30 13:49 - 305981112 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:43 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:40 - 2014-06-30 13:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:40 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:38 - 2014-06-30 13:42 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:36 - 2014-06-30 13:38 - 186982360 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:35 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:31 - 2014-06-30 13:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:31 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:26 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:22 - 2014-06-28 23:26 - 325952240 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:21 - 2014-06-28 23:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:18 - 2014-06-28 23:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:16 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:13 - 2014-06-29 17:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:13 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:12 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:08 - 2014-06-28 23:13 - 330509056 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:08 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:04 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:02 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:59 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:59 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:58 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:55 - 2014-06-28 22:59 - 407250772 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:53 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:50 - 2014-06-28 22:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:48 - 2014-06-28 22:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:46 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:43 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:43 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:40 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:39 - 2014-06-28 22:43 - 406919476 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:35 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:35 - 2014-06-28 22:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:25 - 2014-06-29 16:57 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:21 - 2014-06-28 22:25 - 321940816 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:20 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:16 - 2014-06-28 22:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:13 - 2014-06-28 22:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:12 - 2014-06-28 22:19 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:11 - 2014-06-28 22:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:07 - 2014-06-28 22:16 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:07 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:07 - 2014-06-28 22:10 - 325194736 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:02 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:55 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:47 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:41 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:34 - 2014-06-28 22:17 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:34 - 2014-06-28 21:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:28 - 2014-06-28 21:33 - 326931936 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:21 - 2014-06-28 21:28 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:15 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:08 - 2014-06-28 21:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:55 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:53 - 2014-06-28 21:01 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:46 - 2014-06-28 20:53 - 407078660 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:39 - 2014-06-28 20:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:32 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:30 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:27 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:25 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:25 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:22 - 2014-06-28 20:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:19 - 2014-06-28 20:24 - 413233588 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:18 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:14 - 2014-06-28 20:19 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:13 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:10 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:08 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:05 - 2014-06-28 20:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:44 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:41 - 2014-06-28 19:44 - 328768656 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:39 - 2014-06-28 19:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:35 - 2014-06-28 19:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:34 - 2014-06-28 19:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:30 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:30 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:27 - 2014-07-13 00:26 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc
2014-06-27 22:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-06-27 22:05 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-06-27 22:05 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-06-27 22:05 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-06-27 22:05 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-06-27 22:05 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-06-27 22:05 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-06-27 22:05 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-06-27 22:05 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-06-27 22:05 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-06-27 22:05 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-06-27 22:05 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-06-27 22:04 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-06-27 22:04 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-06-27 22:04 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-06-27 22:04 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-06-27 22:04 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-06-27 22:04 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-06-27 22:04 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-06-27 22:04 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-06-27 22:04 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-06-27 22:04 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-06-27 22:04 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-06-27 22:04 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-06-27 22:04 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-06-27 22:04 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-06-27 22:04 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-06-27 22:04 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-06-27 22:04 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-06-27 22:04 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-06-27 22:04 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-06-27 22:04 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-06-27 22:04 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-06-27 22:04 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-06-27 22:04 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-06-27 22:04 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-06-27 22:04 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-06-27 22:04 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-06-27 22:04 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-06-27 22:04 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-06-27 22:04 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-06-27 22:04 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-06-27 22:04 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-06-27 22:04 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-06-27 22:04 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-06-27 22:04 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-06-27 22:04 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-06-27 22:04 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-06-27 22:04 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-06-27 22:04 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-06-27 22:04 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-06-27 22:04 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-06-27 22:04 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-06-27 22:04 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-06-27 22:04 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-06-27 22:04 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-06-27 22:04 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-06-27 22:04 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-06-27 22:03 - 2014-06-27 22:04 - 00010123 _____ () C:\Windows\DirectX.log
2014-06-27 22:03 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-06-27 22:03 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-06-27 22:03 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-06-27 22:03 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-06-27 22:03 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-06-27 22:03 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-06-27 22:03 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-06-27 22:03 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-06-27 22:03 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-06-27 22:03 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-06-27 22:03 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-06-27 22:03 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-06-27 22:03 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-06-27 22:03 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-06-27 22:03 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-06-27 22:03 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-06-27 22:03 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-06-27 22:03 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-06-27 22:03 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-06-27 22:03 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe
2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient
2014-06-15 13:27 - 2014-06-16 23:40 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-06-15 13:27 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-06-15 13:27 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-06-15 13:27 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-06-15 13:27 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-06-15 13:27 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-06-15 13:26 - 2014-06-16 23:40 - 00000000 ____D () C:\Program Files (x86)\LOL
2014-06-15 13:24 - 2014-06-16 23:39 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files
2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-06-15 13:23 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games
2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-06-15 11:57 - 2014-06-16 12:09 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-06-14 19:54 - 2014-06-14 19:54 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settingsbkup.sfm
2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settings.sfm
2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices
2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf
2014-06-13 13:10 - 2009-10-01 03:02 - 02537472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2014-06-13 13:10 - 2009-10-01 03:02 - 00334848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll
2014-06-13 13:10 - 2009-10-01 03:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShServiceObj.dll
2014-06-13 13:10 - 2009-10-01 03:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDShextAutoplay.exe
2014-06-13 13:10 - 2009-10-01 03:01 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WPDSp.dll
2014-06-13 13:10 - 2009-10-01 03:01 - 00196608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceWMDRM.dll
2014-06-13 13:10 - 2009-10-01 03:01 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceTypes.dll
2014-06-13 13:10 - 2009-10-01 03:01 - 00100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceClassExtension.dll
2014-06-13 13:10 - 2009-10-01 03:01 - 00060928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceConnectApi.dll
2014-06-13 13:10 - 2009-10-01 02:52 - 02727936 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2014-06-13 13:10 - 2009-10-01 02:52 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2014-06-13 13:10 - 2009-10-01 02:52 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe
2014-06-13 13:10 - 2009-10-01 02:51 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00433152 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtp.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00214528 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtpUS.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WpdUsb.sys
2014-06-13 13:10 - 2009-10-01 02:51 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll
2014-06-13 13:10 - 2009-10-01 02:51 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\WpdConns.dll
2014-06-13 12:45 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-06-13 12:45 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-06-13 12:45 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-06-13 12:45 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-06-13 12:45 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-06-13 12:45 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-06-13 12:45 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-06-13 12:45 - 2012-06-02 16:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-06-13 12:45 - 2009-07-14 14:19 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll
2014-06-13 12:45 - 2009-07-14 14:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winusb.dll
2014-06-13 12:25 - 2012-02-29 17:37 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-06-13 12:25 - 2012-02-29 17:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-06-13 12:25 - 2012-02-29 15:52 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-06-13 12:25 - 2009-09-10 04:07 - 03815424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2014-06-13 12:25 - 2009-09-10 04:06 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2014-06-13 12:25 - 2009-09-10 04:05 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-06-13 12:25 - 2009-09-10 04:01 - 03023360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll
2014-06-13 12:25 - 2009-09-10 04:00 - 01164800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2014-06-13 12:25 - 2009-09-10 04:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

==================== One Month Modified Files and Folders =======

2014-07-13 15:35 - 2014-07-13 15:35 - 00014975 _____ () C:\Users\Cyberstation\Downloads\FRST.txt
2014-07-13 15:35 - 2014-07-13 15:34 - 00000000 ____D () C:\FRST
2014-07-13 15:35 - 2014-06-11 13:25 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-13 15:35 - 2008-01-21 03:53 - 01099527 _____ () C:\Windows\WindowsUpdate.log
2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe
2014-07-13 15:33 - 2014-05-31 13:25 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DropboxMaster
2014-07-13 15:33 - 2014-05-31 13:23 - 00000000 ___RD () C:\Users\Cyberstation\Dropbox
2014-07-13 15:33 - 2014-05-30 19:33 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Dropbox
2014-07-13 15:32 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Spotify
2014-07-13 15:30 - 2014-06-11 13:25 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-13 15:30 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-13 15:30 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-13 15:30 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log
2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable
2014-07-13 15:29 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation
2014-07-13 15:29 - 2006-11-02 17:42 - 00032592 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe
2014-07-13 15:15 - 2014-05-31 23:03 - 00002745 _____ () C:\Users\Cyberstation\Desktop\Microsoft Outlook 2010.lnk
2014-07-13 00:28 - 2014-07-13 00:26 - 239621255 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-13 00:26 - 2014-06-28 19:27 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc
2014-07-12 23:22 - 2014-07-12 23:19 - 273409069 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 23:21 - 2014-07-12 23:19 - 288907926 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-12 23:14 - 2014-07-12 23:10 - 471518082 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 21:42 - 2014-05-30 19:37 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DAEMON Tools Lite
2014-07-12 21:41 - 2014-05-30 21:15 - 00001173 _____ () C:\Users\Cyberstation\Desktop\RosettaStoneVersion3.lnk
2014-07-12 21:41 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\VirtualStore
2014-07-12 15:52 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek
2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache
2014-07-12 15:48 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre
2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi
2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-12 15:37 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\**********
2014-07-11 18:30 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Spotify
2014-07-11 15:14 - 2008-01-21 13:10 - 01565124 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 15:14 - 2008-01-21 13:09 - 00673414 _____ () C:\Windows\system32\perfh007.dat
2014-07-11 15:14 - 2008-01-21 13:09 - 00145426 _____ () C:\Windows\system32\perfc007.dat
2014-07-11 15:11 - 2006-11-02 17:27 - 00101210 _____ () C:\Windows\setupact.log
2014-07-11 14:46 - 2014-06-04 11:11 - 00013050 _____ () C:\Users\Cyberstation\Desktop\**********
2014-07-10 19:29 - 2014-05-30 22:27 - 00002641 _____ () C:\Users\Cyberstation\Desktop\Microsoft Word 2010.lnk
2014-07-10 18:46 - 2014-07-10 13:41 - 00010147 _____ () C:\Users\Cyberstation\Desktop\**********
2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-10 16:49 - 2014-07-10 16:41 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-10 16:48 - 2014-07-10 16:41 - 672344384 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-10 16:40 - 2014-05-30 20:00 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-07-10 13:18 - 2014-05-30 22:27 - 00002643 _____ () C:\Users\Cyberstation\Desktop\Microsoft Excel 2010.lnk
2014-07-10 09:49 - 2006-11-02 17:21 - 02302280 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 09:43 - 2006-11-02 17:07 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 09:24 - 2014-05-30 21:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 09:22 - 2006-11-02 14:35 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-07-06 20:27 - 2014-07-06 20:23 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-06 20:18 - 2014-07-06 20:10 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-06 20:17 - 2014-07-06 20:10 - 669643728 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-06 17:19 - 2014-05-31 13:32 - 00008192 _____ () C:\Users\Cyberstation\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-06 15:54 - 2014-05-30 18:52 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-01 17:33 - 2014-07-01 17:26 - 701000032 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:32 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:26 - 2014-07-01 17:19 - 706128656 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:24 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:18 - 2014-07-01 17:11 - 706064608 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\**********
2014-07-01 17:15 - 2014-07-01 17:07 - 734003200 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:11 - 2014-07-01 17:01 - 677611088 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:07 - 2014-07-01 17:01 - 681574400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:00 - 2014-07-01 16:50 - 849346560 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 17:00 - 2014-07-01 16:50 - 833077712 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 15:03 - 2014-07-01 14:58 - 535328048 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 15:02 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:57 - 2014-07-01 14:51 - 576716800 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:56 - 2014-07-01 14:49 - 576716800 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:51 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:49 - 2014-07-01 14:43 - 476037888 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:46 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:43 - 2014-07-01 14:38 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:40 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:37 - 2014-07-01 14:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:34 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:32 - 2014-07-01 14:28 - 259149888 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:28 - 2014-07-01 14:23 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:28 - 2014-07-01 14:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:23 - 2014-07-01 14:19 - 398004976 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:21 - 2014-07-01 14:17 - 400102976 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:18 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:17 - 2014-07-01 14:11 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:12 - 2014-07-01 14:05 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:11 - 2014-07-01 14:07 - 405696048 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:07 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:05 - 2014-07-01 14:02 - 349102864 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:02 - 2014-07-01 13:57 - 420847904 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 14:00 - 2014-07-01 13:55 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:57 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:54 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:51 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:48 - 2014-07-01 13:42 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:46 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:42 - 2014-07-01 13:37 - 351488704 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:40 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:37 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:35 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:32 - 2014-07-01 13:27 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:28 - 2014-07-01 13:22 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:27 - 2014-07-01 13:21 - 461647600 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:21 - 2014-07-01 13:16 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:21 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\**********
2014-07-01 00:35 - 2014-06-30 15:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-01 00:34 - 2014-06-30 14:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-07-01 00:30 - 2014-06-30 14:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-30 15:00 - 2014-06-30 14:59 - 163491820 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 15:00 - 2014-06-30 14:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:59 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:55 - 2014-06-30 14:51 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:54 - 2014-06-30 14:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:50 - 2014-06-30 14:46 - 370164760 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:50 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:45 - 2014-06-30 14:41 - 440401920 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:45 - 2014-06-30 14:39 - 440401920 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:41 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:39 - 2014-06-30 14:37 - 203917016 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:37 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:36 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:32 - 2014-06-30 14:29 - 229162904 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:32 - 2014-06-30 14:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:29 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:25 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:25 - 2014-06-30 14:21 - 326638680 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:21 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:21 - 2014-06-30 14:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:17 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:15 - 2014-06-30 14:10 - 374940216 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:13 - 2014-06-30 14:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:10 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:08 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:04 - 2014-06-30 14:02 - 160388808 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:04 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:02 - 2014-06-30 13:57 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 14:00 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:56 - 2014-06-30 13:54 - 177277560 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:56 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:54 - 2014-06-30 13:49 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:52 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:49 - 2014-06-30 13:46 - 305981112 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:47 - 2014-06-30 13:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:46 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:42 - 2014-06-30 13:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:40 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:38 - 2014-06-30 13:36 - 186982360 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:36 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-30 13:35 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-29 17:00 - 2014-06-28 23:13 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-29 16:59 - 2014-06-28 23:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-29 16:59 - 2014-06-28 22:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-29 16:59 - 2014-06-28 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-29 16:57 - 2014-06-28 22:25 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:26 - 2014-06-28 23:22 - 325952240 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:26 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:22 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:21 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:18 - 2014-06-28 23:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:16 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:13 - 2014-06-28 23:08 - 330509056 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:12 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:08 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:08 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:04 - 2014-06-28 22:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 23:02 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:59 - 2014-06-28 22:55 - 407250772 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:58 - 2014-06-28 22:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:55 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:52 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:50 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:48 - 2014-06-28 22:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:46 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:43 - 2014-06-28 22:39 - 406919476 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:40 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:39 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:25 - 2014-06-28 22:21 - 321940816 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:25 - 2014-06-28 22:20 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:21 - 2014-06-28 22:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:19 - 2014-06-28 22:12 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:18 - 2014-06-28 22:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:17 - 2014-06-28 21:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:16 - 2014-06-28 22:07 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:15 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:11 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:10 - 2014-06-28 22:07 - 325194736 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:07 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:07 - 2014-06-28 20:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 22:02 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:55 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:47 - 2014-06-28 21:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:40 - 2014-06-28 21:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:33 - 2014-06-28 21:28 - 326931936 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:28 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:21 - 2014-06-28 21:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:14 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:08 - 2014-06-28 20:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 21:01 - 2014-06-28 20:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:53 - 2014-06-28 20:46 - 407078660 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:46 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:39 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:32 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:30 - 2014-06-28 20:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:26 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:24 - 2014-06-28 20:19 - 413233588 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:22 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:19 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:18 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:14 - 2014-06-28 20:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:13 - 2014-06-28 20:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 20:09 - 2014-06-28 20:05 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:44 - 2014-06-28 19:41 - 328768656 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:43 - 2014-06-28 19:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:41 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:38 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:35 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 19:34 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\**********
2014-06-28 13:02 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-06-27 22:04 - 2014-06-27 22:03 - 00010123 _____ () C:\Windows\DirectX.log
2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe
2014-06-25 00:02 - 2014-07-01 17:33 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-21 05:30 - 2014-06-11 13:25 - 00004118 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-21 05:30 - 2014-06-11 13:25 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 09:42 - 2014-05-30 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 20:27 - 2014-07-01 17:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\**********
2014-06-16 23:40 - 2014-06-15 13:27 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-06-16 23:40 - 2014-06-15 13:26 - 00000000 ____D () C:\Program Files (x86)\LOL
2014-06-16 23:39 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files
2014-06-16 14:33 - 2014-05-30 21:02 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Adobe
2014-06-16 14:23 - 2014-05-30 21:07 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Adobe
2014-06-16 12:09 - 2014-06-15 11:57 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-15 16:19 - 2008-01-21 05:26 - 00104466 _____ () C:\Windows\PFRO.log
2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient
2014-06-15 14:43 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\**********
2014-06-15 14:33 - 2014-05-30 22:29 - 00015142 _____ () C:\Users\Cyberstation\Desktop\**********
2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-06-15 13:24 - 2014-06-15 13:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games
2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-06-15 01:21 - 2014-05-30 23:08 - 00000979 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-15 01:21 - 2014-05-30 23:08 - 00000949 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-06-15 01:21 - 2014-05-30 23:07 - 00000915 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2014-06-14 21:02 - 2014-05-30 21:01 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-14 21:02 - 2014-05-30 21:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-14 20:08 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\rescache
2014-06-14 19:54 - 2014-06-14 19:54 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settingsbkup.sfm
2014-06-13 17:43 - 2014-06-13 17:43 - 00001080 _____ () C:\Windows\system32\settings.sfm
2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-06-13 17:42 - 2014-06-13 17:42 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices
2014-06-13 17:42 - 2006-11-02 17:07 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\th-TH
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\sr-Latn-CS
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\ro-RO
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\lt-LT
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\hr-HR
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\he-IL
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\et-EE
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\bg-BG
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\SysWOW64\ar-SA
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\th-TH
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\he-IL
2014-06-13 17:42 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\system32\et-EE
2014-06-13 17:42 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-06-13 17:42 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2014-06-13 17:41 - 2014-06-13 17:41 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf
2014-06-13 17:41 - 2006-11-02 15:33 - 00000000 ____D () C:\Program Files\Common Files\System
2014-06-13 17:40 - 2014-05-30 20:47 - 00000159 ___RH () C:\Windows\ctfile.rfc
2014-06-13 17:40 - 2014-05-30 20:31 - 00466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-06-13 17:40 - 2014-05-30 20:31 - 00444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-06-13 17:40 - 2014-05-30 20:31 - 00121880 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-06-13 17:40 - 2014-05-30 20:31 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll

Some content of TEMP:
====================
C:\Users\Cyberstation\AppData\Local\Temp\13-9-legacy_vista_win7_64_dd_ccc_whql.exe
C:\Users\Cyberstation\AppData\Local\Temp\avgnt.exe
C:\Users\Cyberstation\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpuzov5s.dll
C:\Users\Cyberstation\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Cyberstation\AppData\Local\Temp\Uni000.exe
C:\Users\Cyberstation\AppData\Local\Temp\_is46B0.exe
C:\Users\Cyberstation\AppData\Local\Temp\_is586C.exe
C:\Users\Cyberstation\AppData\Local\Temp\_isB06A.exe
C:\Users\Gast\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-13 15:37

==================== End Of Log ============================

--- --- ---

Momentan finde ich mittels Antivir und Bitdefender Total Security keinerlei Schädlinge mehr auf meinem PC, weswegen ich davon ausgehe, dass ich dem Problem Einhalt geboten habe. Wie sieht eure Einschätzung aus?
Danke für euer Engagement und eure Hilfe!

cosinus · 15.07.2014, 12:12

(edit)

Bitte erläutern, ob dieser Rechner gewerblich genutzt wird. Ich seh da eine ganze Reihe an Software, die sich der durchschnittliche Otto Privato niemals kaufen würde.

Hanky14 · 15.07.2014, 12:39

Ich bin derzeit Student und arbeite als 450€ Kraft via Home Office für ein Medienunternehmen eines Freundes. Dieses Unternehmen hat mir die Software zur Verfügung gestellt. Der PC von dem ihr hier die Logdaten seht, wird von mir hauptsächlich, mit der Ausnahme der 10h die Woche, privat genutzt.

cosinus · 15.07.2014, 13:09

Ok, mir ging's nämlich darum, ob das ein Büro-PC ist oder nicht, so einer kann nämlich u.U. sensible Kundendaten o.ä. in die Logs schreiben.

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hanky14 · 15.07.2014, 13:59

AdwCleaner:

Code:

ATTFilter

# AdwCleaner v3.215 - Bericht erstellt am 15/07/2014 um 14:18:21
# Aktualisiert 09/07/2014 von Xplode
# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (64 bits)
# Benutzername : Cyberstation - CYBERSTATION-PC
# Gestartet von : C:\Users\Cyberstation\Downloads\adwcleaner_3.215.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

[!] Ordner Gelöscht : C:\Users\CYBERS~1\AppData\Local\Temp\OCS

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16561


-\\ Mozilla Firefox v30.0 (de)

[ Datei : C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\prefs.js ]


[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\43ddkp89.default\prefs.js ]


-\\ Google Chrome v35.0.1916.153

[ Datei : C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1418 octets] - [15/07/2014 14:17:39]
AdwCleaner[S0].txt - [1198 octets] - [15/07/2014 14:18:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1258 octets] ##########

JRT:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows (TM) Vista Home Premium x64
Ran by Cyberstation on 15.07.2014 at 14:28:03,43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ FireFox

Emptied folder: C:\Users\Cyberstation\AppData\Roaming\mozilla\firefox\profiles\14pz22pp.default\minidumps [27 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.07.2014 at 14:33:24,26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Erneuter FRST: Wie bereits beim ersten FRST Logbericht habe ich meiner Meinung nach sensible Informationen unkenntlich gemacht.

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-07-2014
Ran by Cyberstation (administrator) on CYBERSTATION-PC on 15-07-2014 14:35:46
Running from C:\Users\Cyberstation\Downloads
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\ASUS\Six Engine\SixEngine.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Greenshot) C:\Program Files\Greenshot\Greenshot.exe
(Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDExtHost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDAppHost.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BDRuntimeHost.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTxfispi.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Microsoft Corporation) C:\Windows\SysWOW64\conime.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_145.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Greenshot] => C:\Program Files\Greenshot\Greenshot.exe [495616 2014-05-12] (Greenshot)
HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe"
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-06] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BingDesktop] => C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2368728 2014-05-23] (Microsoft Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [CTxfiHlp] => C:\Windows\SysWOW64\CTXFIHLP.EXE [25600 2009-06-03] (Creative Technology Ltd)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-07-08] (Apple Inc.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Spotify.exe [6189624 2014-06-27] (Spotify Ltd)
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Run: [Spotify Web Helper] => C:\Users\Cyberstation\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1176632 2014-06-27] (Spotify Ltd)
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3132636138-289149283-414863540-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Cyberstation\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Cyberstation\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Outlook 2010.lnk
ShortcutTarget: Microsoft Outlook 2010.lnk -> C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\outicon.exe ()
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D9E641F7185CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-30]
FF Extension: Facebook Ads Block - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\jid1-CGxMej0nDJTjwQ@jetpack.xpi [2014-05-30]
FF Extension: Nimbus Screen Capture - editable screenshots. - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\nimbusscreencaptureff@everhelper.me.xpi [2014-05-30]
FF Extension: Updated Ad Blocker for Firefox 11+ - C:\Users\Cyberstation\AppData\Roaming\Mozilla\Firefox\Profiles\14pz22pp.default\Extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi [2014-05-30]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-05-30]

Chrome: 
=======
CHR HomePage: 
CHR Extension: (Google Docs) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-11]
CHR Extension: (Google Drive) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-11]
CHR Extension: (YouTube) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-11]
CHR Extension: (Google-Suche) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-11]
CHR Extension: (Google Wallet) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-11]
CHR Extension: (Google Mail) - C:\Users\Cyberstation\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-11]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-06] (Avira Operations GmbH & Co. KG)
R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173784 2014-05-23] (Microsoft Corp.)

==================== Drivers (Whitelisted) ====================

S3 acsint; C:\Windows\System32\DRIVERS\acsint64.sys [49520 2013-12-13] (Cisco Systems, Inc.)
S3 acsmux; C:\Windows\System32\DRIVERS\acsmux64.sys [73584 2013-12-13] (Cisco Systems, Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-03] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-30] (Avira Operations GmbH & Co. KG)
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x64.sys [56320 2008-06-30] (Atheros Communications, Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-11-01] ()
R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [173096 2008-06-24] (Marvell Semiconductor, Inc.)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2014-05-30] (Duplex Secure Ltd.)
S3 CT20XUT.DLL; system32\CT20XUT.DLL [X]
S3 CTEXFIFX.DLL; system32\CTEXFIFX.DLL [X]
S3 CTHWIUT.DLL; system32\CTHWIUT.DLL [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-15 14:33 - 2014-07-15 14:33 - 00000850 _____ () C:\Users\Cyberstation\Desktop\JRT.txt
2014-07-15 14:28 - 2014-07-15 14:28 - 00000000 ____D () C:\Windows\ERUNT
2014-07-15 14:27 - 2014-07-15 14:27 - 01016261 _____ (Thisisu) C:\Users\Cyberstation\Downloads\JRT.exe
2014-07-15 14:23 - 2014-07-15 14:23 - 00001338 _____ () C:\Users\Cyberstation\Desktop\AdwCleaner[S0].txt
2014-07-15 14:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-15 14:17 - 2014-07-15 14:18 - 00000000 ____D () C:\AdwCleaner
2014-07-15 14:16 - 2014-07-15 14:16 - 01348263 _____ () C:\Users\Cyberstation\Downloads\adwcleaner_3.215.exe
2014-07-15 00:20 - 2014-07-15 00:20 - 00001694 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-15 00:19 - 2014-07-15 00:20 - 00000000 ____D () C:\Program Files\iTunes
2014-07-15 00:19 - 2014-07-15 00:20 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-15 00:19 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files\iPod
2014-07-13 18:16 - 2014-07-13 18:16 - 00000000 ____D () C:\Users\Cyberstation\Desktop\Neuer Ordner
2014-07-13 16:45 - 2014-07-13 16:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-07-13 16:44 - 2013-11-04 16:47 - 00074512 _____ (BitDefender SRL) C:\Windows\SysWOW64\bdsandboxuiskin32.dll
2014-07-13 16:44 - 2009-07-15 01:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll
2014-07-13 16:44 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2014-07-13 16:39 - 2014-07-13 16:57 - 00000000 ____D () C:\Program Files\Bitdefender
2014-07-13 16:39 - 2014-07-13 16:39 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll
2014-07-13 16:39 - 2013-11-04 16:47 - 00084848 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUISkin.dll
2014-07-13 16:39 - 2013-11-04 16:46 - 00034384 _____ (BitDefender SRL) C:\Windows\system32\BDSandBoxUH.dll
2014-07-13 16:38 - 2014-07-13 16:55 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-07-13 16:38 - 2014-07-13 16:38 - 07040424 _____ () C:\Users\Cyberstation\Downloads\bitdefender_tsecurity_2015.exe
2014-07-13 16:38 - 2014-07-13 16:38 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\QuickScan
2014-07-13 15:56 - 2014-07-13 15:56 - 00380416 _____ () C:\Users\Cyberstation\Downloads\Gmer-19357.exe
2014-07-13 15:36 - 2014-07-13 15:37 - 00040126 _____ () C:\Users\Cyberstation\Downloads\Addition.txt
2014-07-13 15:35 - 2014-07-15 14:35 - 00015351 _____ () C:\Users\Cyberstation\Downloads\FRST.txt
2014-07-13 15:34 - 2014-07-15 14:35 - 00000000 ____D () C:\FRST
2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe
2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log
2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable
2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe
2014-07-13 00:26 - 2014-07-13 00:28 - 239621255 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 23:19 - 2014-07-12 23:22 - 273409069 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 23:19 - 2014-07-12 23:21 - 288907926 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-12 23:10 - 2014-07-12 23:14 - 471518082 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache
2014-07-12 15:47 - 2014-07-12 15:52 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek
2014-07-12 15:47 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre
2014-07-12 15:47 - 2012-10-10 15:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi
2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-10 16:41 - 2014-07-10 16:49 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-10 16:41 - 2014-07-10 16:48 - 672344384 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-10 13:41 - 2014-07-10 18:46 - 00010147 _____ () C:\Users\Cyberstation\Desktop\*********
2014-07-09 13:46 - 2014-06-07 06:02 - 17854464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 13:46 - 2014-06-07 05:13 - 10890752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 13:46 - 2014-06-07 04:59 - 02339328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 13:46 - 2014-06-07 04:52 - 01348608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 13:46 - 2014-06-07 04:51 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 13:46 - 2014-06-07 04:51 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 13:46 - 2014-06-07 04:50 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-07-09 13:46 - 2014-06-07 04:47 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 13:46 - 2014-06-07 04:45 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-09 13:46 - 2014-06-07 04:45 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 13:46 - 2014-06-07 04:45 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 13:46 - 2014-06-07 04:42 - 02148352 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 13:46 - 2014-06-07 04:42 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 13:46 - 2014-06-07 04:42 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 13:46 - 2014-06-07 04:42 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 13:46 - 2014-06-07 04:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 13:46 - 2014-06-07 04:41 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-07-09 13:46 - 2014-06-07 04:41 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-07-09 13:46 - 2014-06-07 04:40 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 13:46 - 2014-06-07 04:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-07-09 13:46 - 2014-06-07 04:35 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 13:46 - 2014-06-07 02:33 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 13:46 - 2014-06-07 02:05 - 12353024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 13:46 - 2014-06-07 01:25 - 09711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 13:46 - 2014-06-07 01:12 - 01810432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 13:46 - 2014-06-07 01:04 - 01106432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 13:46 - 2014-06-07 01:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 13:46 - 2014-06-07 01:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 13:46 - 2014-06-07 01:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-07-09 13:46 - 2014-06-07 00:58 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-07-09 13:46 - 2014-06-07 00:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-07-09 13:46 - 2014-06-07 00:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-07-09 13:46 - 2014-06-07 00:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 13:46 - 2014-06-07 00:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-07-09 13:46 - 2014-06-07 00:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 13:46 - 2014-06-07 00:53 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 13:46 - 2014-06-07 00:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-07-09 13:46 - 2014-06-07 00:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-07-09 13:46 - 2014-06-07 00:51 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-07-09 13:46 - 2014-06-07 00:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-07-09 13:46 - 2014-06-06 10:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 13:46 - 2014-06-06 09:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 13:46 - 2014-05-30 09:10 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-06 20:23 - 2014-07-06 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-06 20:10 - 2014-07-06 20:18 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-06 20:10 - 2014-07-06 20:17 - 669643728 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:33 - 2014-06-25 00:02 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:26 - 2014-07-01 17:33 - 701000032 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:26 - 2014-06-17 20:27 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:24 - 2014-07-01 17:32 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:19 - 2014-07-01 17:26 - 706128656 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:19 - 2014-06-11 14:58 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\*********
2014-07-01 17:15 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:11 - 2014-07-01 17:18 - 706064608 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:11 - 2014-06-04 20:52 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:07 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:01 - 2014-07-01 17:11 - 677611088 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:01 - 2014-07-01 17:07 - 681574400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:01 - 2014-06-11 20:48 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-01 16:50 - 2014-07-01 17:00 - 849346560 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 16:50 - 2014-07-01 17:00 - 833077712 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:58 - 2014-07-01 15:03 - 535328048 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:56 - 2014-07-01 15:02 - 576716800 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:51 - 2014-07-01 14:57 - 576716800 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:49 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:46 - 2014-07-01 14:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:43 - 2014-07-01 14:49 - 476037888 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:40 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:38 - 2014-07-01 14:43 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:34 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:32 - 2014-07-01 14:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:28 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:28 - 2014-07-01 14:32 - 259149888 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:23 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:21 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:19 - 2014-07-01 14:23 - 398004976 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:17 - 2014-07-01 14:21 - 400102976 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:12 - 2014-07-01 14:18 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:11 - 2014-07-01 14:17 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:07 - 2014-07-01 14:11 - 405696048 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:05 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:02 - 2014-07-01 14:05 - 349102864 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:00 - 2014-07-01 14:07 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:57 - 2014-07-01 14:02 - 420847904 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:55 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:51 - 2014-07-01 13:57 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:48 - 2014-07-01 13:54 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:46 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:42 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:40 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:37 - 2014-07-01 13:42 - 351488704 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:35 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:32 - 2014-07-01 13:37 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:28 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:27 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:22 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:21 - 2014-07-01 13:27 - 461647600 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:16 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:15 - 2014-07-01 13:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 12:14 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 15:00 - 2014-07-01 00:35 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:59 - 2014-06-30 15:00 - 163491820 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:56 - 2014-06-30 15:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:54 - 2014-06-30 14:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:51 - 2014-06-30 14:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:50 - 2014-07-01 00:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:50 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:46 - 2014-06-30 14:50 - 370164760 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:45 - 2014-06-30 14:50 - 440401920 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:41 - 2014-07-01 00:30 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:41 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:39 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:37 - 2014-06-30 14:39 - 203917016 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:36 - 2014-06-30 14:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:32 - 2014-06-30 14:37 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:32 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:32 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:29 - 2014-06-30 14:32 - 229162904 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:27 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:25 - 2014-06-30 14:29 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:25 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:21 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:21 - 2014-06-30 14:25 - 326638680 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:17 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:15 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:15 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:13 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:10 - 2014-06-30 14:15 - 374940216 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:09 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:04 - 2014-06-30 14:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:04 - 2014-06-30 14:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:04 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:02 - 2014-06-30 14:04 - 160388808 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:00 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:57 - 2014-06-30 14:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:57 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:56 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:54 - 2014-06-30 13:56 - 177277560 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:52 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:49 - 2014-06-30 13:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:49 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:47 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:46 - 2014-06-30 13:49 - 305981112 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:43 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:40 - 2014-06-30 13:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:40 - 2012-11-22 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:38 - 2014-06-30 13:42 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:36 - 2014-06-30 13:38 - 186982360 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:35 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:31 - 2014-06-30 13:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:31 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:26 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:22 - 2014-06-28 23:26 - 325952240 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:21 - 2014-06-28 23:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:18 - 2014-06-28 23:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:16 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:13 - 2014-06-29 17:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:13 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:12 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:08 - 2014-06-28 23:13 - 330509056 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:08 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:04 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:02 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:59 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:59 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:58 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:55 - 2014-06-28 22:59 - 407250772 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:53 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:50 - 2014-06-28 22:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:48 - 2014-06-28 22:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:46 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:43 - 2014-06-29 16:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:43 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:40 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:39 - 2014-06-28 22:43 - 406919476 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:35 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:35 - 2014-06-28 22:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:30 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:25 - 2014-06-29 16:57 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:25 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:21 - 2014-06-28 22:25 - 321940816 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:20 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:16 - 2014-06-28 22:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:13 - 2014-06-28 22:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:12 - 2014-06-28 22:19 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:11 - 2014-06-28 22:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:07 - 2014-06-28 22:16 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:07 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:07 - 2014-06-28 22:10 - 325194736 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:02 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:55 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:47 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:41 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:34 - 2014-06-28 22:17 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:34 - 2014-06-28 21:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:28 - 2014-06-28 21:33 - 326931936 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:21 - 2014-06-28 21:28 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:15 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:08 - 2014-06-28 21:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:55 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:53 - 2014-06-28 21:01 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:46 - 2014-06-28 20:53 - 407078660 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:39 - 2014-06-28 20:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:32 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:30 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:27 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:25 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:25 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:22 - 2014-06-28 20:26 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:19 - 2014-06-28 20:24 - 413233588 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:18 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:14 - 2014-06-28 20:19 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:13 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:10 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:08 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:05 - 2014-06-28 20:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:44 - 2012-11-22 22:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:41 - 2014-06-28 19:44 - 328768656 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:39 - 2014-06-28 19:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:35 - 2014-06-28 19:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:34 - 2014-06-28 19:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:30 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:30 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:27 - 2014-07-13 00:26 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc
2014-06-27 22:05 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-06-27 22:05 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-06-27 22:05 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-06-27 22:05 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-06-27 22:05 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-06-27 22:05 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-06-27 22:05 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-06-27 22:05 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-06-27 22:05 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-06-27 22:05 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-06-27 22:05 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-06-27 22:05 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-06-27 22:05 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-06-27 22:05 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-06-27 22:05 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-06-27 22:05 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-06-27 22:05 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-06-27 22:05 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-06-27 22:05 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-06-27 22:05 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-06-27 22:05 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-06-27 22:04 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-06-27 22:04 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-06-27 22:04 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-06-27 22:04 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-06-27 22:04 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-06-27 22:04 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-06-27 22:04 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-06-27 22:04 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-06-27 22:04 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-06-27 22:04 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-06-27 22:04 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-06-27 22:04 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-06-27 22:04 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-06-27 22:04 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-06-27 22:04 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-06-27 22:04 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-06-27 22:04 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-06-27 22:04 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-06-27 22:04 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-06-27 22:04 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-06-27 22:04 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-06-27 22:04 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-06-27 22:04 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-06-27 22:04 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-06-27 22:04 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-06-27 22:04 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-06-27 22:04 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-06-27 22:04 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-06-27 22:04 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-06-27 22:04 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-06-27 22:04 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-06-27 22:04 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-06-27 22:04 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-06-27 22:04 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-06-27 22:04 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-06-27 22:04 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-06-27 22:04 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-06-27 22:04 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-06-27 22:04 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-06-27 22:04 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-06-27 22:04 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-06-27 22:04 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-06-27 22:04 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-06-27 22:04 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-06-27 22:04 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-06-27 22:04 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-06-27 22:04 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-06-27 22:04 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-06-27 22:04 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-06-27 22:04 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-06-27 22:04 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-06-27 22:04 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-06-27 22:04 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-06-27 22:03 - 2014-06-27 22:04 - 00010123 _____ () C:\Windows\DirectX.log
2014-06-27 22:03 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-06-27 22:03 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-06-27 22:03 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-06-27 22:03 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-06-27 22:03 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-06-27 22:03 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-06-27 22:03 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-06-27 22:03 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-06-27 22:03 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-06-27 22:03 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-06-27 22:03 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-06-27 22:03 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-06-27 22:03 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-06-27 22:03 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-06-27 22:03 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-06-27 22:03 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-06-27 22:03 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-06-27 22:03 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-06-27 22:03 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-06-27 22:03 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe
2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient
2014-06-15 13:27 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-06-15 13:27 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-06-15 13:27 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-06-15 13:27 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-06-15 13:27 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-06-15 13:26 - 2014-06-16 23:40 - 00000000 ____D () C:\Program Files (x86)\LOL
2014-06-15 13:24 - 2014-06-16 23:39 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files
2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-06-15 13:23 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games
2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-06-15 11:57 - 2014-06-16 12:09 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google

==================== One Month Modified Files and Folders =======

2014-07-15 14:36 - 2014-07-13 15:35 - 00015351 _____ () C:\Users\Cyberstation\Downloads\FRST.txt
2014-07-15 14:35 - 2014-07-13 15:34 - 00000000 ____D () C:\FRST
2014-07-15 14:35 - 2014-06-11 13:25 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-15 14:33 - 2014-07-15 14:33 - 00000850 _____ () C:\Users\Cyberstation\Desktop\JRT.txt
2014-07-15 14:28 - 2014-07-15 14:28 - 00000000 ____D () C:\Windows\ERUNT
2014-07-15 14:27 - 2014-07-15 14:27 - 01016261 _____ (Thisisu) C:\Users\Cyberstation\Downloads\JRT.exe
2014-07-15 14:27 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Spotify
2014-07-15 14:27 - 2008-01-21 03:53 - 01176958 _____ () C:\Windows\WindowsUpdate.log
2014-07-15 14:24 - 2014-05-31 13:25 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DropboxMaster
2014-07-15 14:24 - 2014-05-31 13:23 - 00000000 ___RD () C:\Users\Cyberstation\Dropbox
2014-07-15 14:24 - 2014-05-30 19:33 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Dropbox
2014-07-15 14:23 - 2014-07-15 14:23 - 00001338 _____ () C:\Users\Cyberstation\Desktop\AdwCleaner[S0].txt
2014-07-15 14:21 - 2014-06-11 13:25 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-15 14:20 - 2008-01-21 05:26 - 00107418 _____ () C:\Windows\PFRO.log
2014-07-15 14:20 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-15 14:20 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-15 14:20 - 2006-11-02 17:22 - 00003712 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-15 14:19 - 2006-11-02 17:42 - 00032592 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-15 14:18 - 2014-07-15 14:17 - 00000000 ____D () C:\AdwCleaner
2014-07-15 14:16 - 2014-07-15 14:16 - 01348263 _____ () C:\Users\Cyberstation\Downloads\adwcleaner_3.215.exe
2014-07-15 13:42 - 2014-05-30 22:27 - 00002641 _____ () C:\Users\Cyberstation\Desktop\Microsoft Word 2010.lnk
2014-07-15 00:20 - 2014-07-15 00:20 - 00001694 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-15 00:20 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files\iTunes
2014-07-15 00:20 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-07-15 00:19 - 2014-07-15 00:19 - 00000000 ____D () C:\Program Files\iPod
2014-07-14 16:26 - 2014-05-30 20:20 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Spotify
2014-07-13 18:16 - 2014-07-13 18:16 - 00000000 ____D () C:\Users\Cyberstation\Desktop\Neuer Ordner
2014-07-13 17:01 - 2014-05-30 21:01 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-13 17:01 - 2014-05-30 21:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-13 16:57 - 2014-07-13 16:39 - 00000000 ____D () C:\Program Files\Bitdefender
2014-07-13 16:55 - 2014-07-13 16:38 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-07-13 16:45 - 2014-07-13 16:45 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2014-07-13 16:45 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation
2014-07-13 16:45 - 2006-11-02 17:27 - 00102028 _____ () C:\Windows\setupact.log
2014-07-13 16:43 - 2006-11-02 15:33 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-13 16:39 - 2014-07-13 16:39 - 00000000 _____ () C:\Windows\system32\BDSandBoxUISkin32.dll
2014-07-13 16:38 - 2014-07-13 16:38 - 07040424 _____ () C:\Users\Cyberstation\Downloads\bitdefender_tsecurity_2015.exe
2014-07-13 16:38 - 2014-07-13 16:38 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\QuickScan
2014-07-13 15:56 - 2014-07-13 15:56 - 00380416 _____ () C:\Users\Cyberstation\Downloads\Gmer-19357.exe
2014-07-13 15:37 - 2014-07-13 15:36 - 00040126 _____ () C:\Users\Cyberstation\Downloads\Addition.txt
2014-07-13 15:34 - 2014-07-13 15:34 - 02086912 _____ (Farbar) C:\Users\Cyberstation\Downloads\FRST64.exe
2014-07-13 15:29 - 2014-07-13 15:29 - 00000596 _____ () C:\Users\Cyberstation\Downloads\defogger_disable.log
2014-07-13 15:29 - 2014-07-13 15:29 - 00000020 _____ () C:\Users\Cyberstation\defogger_reenable
2014-07-13 15:27 - 2014-07-13 15:27 - 00050477 _____ () C:\Users\Cyberstation\Downloads\Defogger.exe
2014-07-13 15:15 - 2014-05-31 23:03 - 00002745 _____ () C:\Users\Cyberstation\Desktop\Microsoft Outlook 2010.lnk
2014-07-13 00:28 - 2014-07-13 00:26 - 239621255 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-13 00:26 - 2014-06-28 19:27 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\vlc
2014-07-12 23:22 - 2014-07-12 23:19 - 273409069 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 23:21 - 2014-07-12 23:19 - 288907926 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 23:15 - 2014-07-12 23:15 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-12 23:14 - 2014-07-12 23:10 - 471518082 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 21:42 - 2014-05-30 19:37 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\DAEMON Tools Lite
2014-07-12 21:41 - 2014-05-30 21:15 - 00001173 _____ () C:\Users\Cyberstation\Desktop\RosettaStoneVersion3.lnk
2014-07-12 21:41 - 2014-05-30 18:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\VirtualStore
2014-07-12 15:52 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\Documents\Calibre-Bibliothek
2014-07-12 15:48 - 2014-07-12 15:48 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\calibre-cache
2014-07-12 15:48 - 2014-07-12 15:47 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\calibre
2014-07-12 15:46 - 2014-07-12 15:46 - 00000871 _____ () C:\Users\Public\Desktop\calibre - E-book management.lnk
2014-07-12 15:46 - 2014-07-12 15:46 - 00000000 ____D () C:\Program Files (x86)\Calibre2
2014-07-12 15:44 - 2014-07-12 15:44 - 56244224 _____ () C:\Users\Cyberstation\Downloads\calibre-1.44.0.msi
2014-07-12 15:44 - 2014-07-12 15:44 - 16737290 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 15:40 - 2014-07-12 15:40 - 16702117 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-12 15:37 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\*********
2014-07-11 15:14 - 2008-01-21 13:10 - 01565124 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-11 15:14 - 2008-01-21 13:09 - 00673414 _____ () C:\Windows\system32\perfh007.dat
2014-07-11 15:14 - 2008-01-21 13:09 - 00145426 _____ () C:\Windows\system32\perfc007.dat
2014-07-11 14:46 - 2014-06-04 11:11 - 00013050 _____ () C:\Users\Cyberstation\Desktop\*********
2014-07-10 18:46 - 2014-07-10 13:41 - 00010147 _____ () C:\Users\Cyberstation\Desktop\*********
2014-07-10 16:50 - 2014-07-10 16:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-10 16:49 - 2014-07-10 16:41 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-10 16:48 - 2014-07-10 16:41 - 672344384 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-10 16:40 - 2014-05-30 20:00 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-07-10 13:18 - 2014-05-30 22:27 - 00002643 _____ () C:\Users\Cyberstation\Desktop\Microsoft Excel 2010.lnk
2014-07-10 09:49 - 2006-11-02 17:21 - 02302280 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 09:43 - 2006-11-02 17:07 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 09:24 - 2014-05-30 21:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 09:22 - 2006-11-02 14:35 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-07-06 20:27 - 2014-07-06 20:23 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-06 20:18 - 2014-07-06 20:10 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-06 20:17 - 2014-07-06 20:10 - 669643728 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-06 17:19 - 2014-05-31 13:32 - 00008192 _____ () C:\Users\Cyberstation\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-06 15:54 - 2014-05-30 18:52 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-01 17:33 - 2014-07-01 17:26 - 701000032 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:32 - 2014-07-01 17:24 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:26 - 2014-07-01 17:19 - 706128656 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:24 - 2014-07-01 17:15 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:18 - 2014-07-01 17:11 - 706064608 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:16 - 2014-07-01 17:16 - 00000000 _____ () C:\Users\Cyberstation\Desktop\*********
2014-07-01 17:15 - 2014-07-01 17:07 - 734003200 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:11 - 2014-07-01 17:01 - 677611088 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:07 - 2014-07-01 17:01 - 681574400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:00 - 2014-07-01 16:50 - 849346560 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 17:00 - 2014-07-01 16:50 - 833077712 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 15:03 - 2014-07-01 14:58 - 535328048 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 15:02 - 2014-07-01 14:56 - 576716800 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:57 - 2014-07-01 14:51 - 576716800 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:56 - 2014-07-01 14:49 - 576716800 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:51 - 2014-07-01 14:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:49 - 2014-07-01 14:43 - 476037888 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:46 - 2014-07-01 14:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:43 - 2014-07-01 14:38 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:40 - 2014-07-01 14:34 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:37 - 2014-07-01 14:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:34 - 2014-07-01 14:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:32 - 2014-07-01 14:28 - 259149888 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:28 - 2014-07-01 14:23 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:28 - 2014-07-01 14:21 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:23 - 2014-07-01 14:19 - 398004976 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:21 - 2014-07-01 14:17 - 400102976 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:18 - 2014-07-01 14:12 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:17 - 2014-07-01 14:11 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:12 - 2014-07-01 14:05 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:11 - 2014-07-01 14:07 - 405696048 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:07 - 2014-07-01 14:00 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:05 - 2014-07-01 14:02 - 349102864 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:02 - 2014-07-01 13:57 - 420847904 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 14:00 - 2014-07-01 13:55 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:57 - 2014-07-01 13:51 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:54 - 2014-07-01 13:48 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:51 - 2014-07-01 13:46 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:48 - 2014-07-01 13:42 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:46 - 2014-07-01 13:40 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:42 - 2014-07-01 13:37 - 351488704 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:40 - 2014-07-01 13:35 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:37 - 2014-07-01 13:32 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:35 - 2014-07-01 13:28 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:32 - 2014-07-01 13:27 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:28 - 2014-07-01 13:22 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:27 - 2014-07-01 13:21 - 461647600 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:21 - 2014-07-01 13:16 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:21 - 2014-07-01 13:15 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 13:15 - 2014-07-01 12:14 - 524288000 _____ () C:\Users\Cyberstation\Downloads\*********
2014-07-01 00:35 - 2014-06-30 15:00 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-01 00:34 - 2014-06-30 14:50 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-07-01 00:30 - 2014-06-30 14:41 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-30 15:00 - 2014-06-30 14:59 - 163491820 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 15:00 - 2014-06-30 14:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:59 - 2014-06-30 14:54 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:55 - 2014-06-30 14:51 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:54 - 2014-06-30 14:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:50 - 2014-06-30 14:46 - 370164760 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:50 - 2014-06-30 14:45 - 440401920 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:45 - 2014-06-30 14:41 - 440401920 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:45 - 2014-06-30 14:39 - 440401920 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:41 - 2014-06-30 14:36 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:39 - 2014-06-30 14:37 - 203917016 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:37 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:36 - 2014-06-30 14:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:32 - 2014-06-30 14:29 - 229162904 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:32 - 2014-06-30 14:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:29 - 2014-06-30 14:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:25 - 2014-06-30 14:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:25 - 2014-06-30 14:21 - 326638680 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:21 - 2014-06-30 14:17 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:21 - 2014-06-30 14:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:17 - 2014-06-30 14:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:15 - 2014-06-30 14:10 - 374940216 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:13 - 2014-06-30 14:09 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:10 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:08 - 2014-06-30 14:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:04 - 2014-06-30 14:02 - 160388808 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:04 - 2014-06-30 14:00 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:02 - 2014-06-30 13:57 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 14:00 - 2014-06-30 13:56 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:56 - 2014-06-30 13:54 - 177277560 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:56 - 2014-06-30 13:52 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:54 - 2014-06-30 13:49 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:52 - 2014-06-30 13:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:49 - 2014-06-30 13:46 - 305981112 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:47 - 2014-06-30 13:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:46 - 2014-06-30 13:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:42 - 2014-06-30 13:38 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:40 - 2014-06-30 13:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:38 - 2014-06-30 13:36 - 186982360 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:36 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-30 13:35 - 2014-06-30 13:31 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-29 17:00 - 2014-06-28 23:13 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-29 16:59 - 2014-06-28 23:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-29 16:59 - 2014-06-28 22:59 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-29 16:59 - 2014-06-28 22:43 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-29 16:57 - 2014-06-28 22:25 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:26 - 2014-06-28 23:22 - 325952240 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:26 - 2014-06-28 23:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:22 - 2014-06-28 23:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:21 - 2014-06-28 23:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:18 - 2014-06-28 23:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:16 - 2014-06-28 23:12 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:13 - 2014-06-28 23:08 - 330509056 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:12 - 2014-06-28 23:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:08 - 2014-06-28 23:04 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:08 - 2014-06-28 23:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:04 - 2014-06-28 22:59 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 23:02 - 2014-06-28 22:58 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:59 - 2014-06-28 22:55 - 407250772 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:58 - 2014-06-28 22:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:55 - 2014-06-28 22:50 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:52 - 2014-06-28 22:48 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:50 - 2014-06-28 22:46 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:48 - 2014-06-28 22:43 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:46 - 2014-06-28 22:40 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:43 - 2014-06-28 22:39 - 406919476 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:40 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:39 - 2014-06-28 22:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:35 - 2014-06-28 22:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:30 - 2014-06-28 22:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:25 - 2014-06-28 22:21 - 321940816 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:25 - 2014-06-28 22:20 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:21 - 2014-06-28 22:16 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:19 - 2014-06-28 22:12 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:18 - 2014-06-28 22:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:17 - 2014-06-28 21:34 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:16 - 2014-06-28 22:07 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:15 - 2014-06-28 22:11 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:11 - 2014-06-28 22:07 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:10 - 2014-06-28 22:07 - 325194736 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:07 - 2014-06-28 22:02 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:07 - 2014-06-28 20:25 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 22:02 - 2014-06-28 21:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:55 - 2014-06-28 21:47 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:47 - 2014-06-28 21:41 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:40 - 2014-06-28 21:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:33 - 2014-06-28 21:28 - 326931936 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:28 - 2014-06-28 21:21 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:21 - 2014-06-28 21:15 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:14 - 2014-06-28 21:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:08 - 2014-06-28 20:55 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 21:01 - 2014-06-28 20:53 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:53 - 2014-06-28 20:46 - 407078660 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:46 - 2014-06-28 20:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:39 - 2014-06-28 20:32 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:32 - 2014-06-28 20:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:30 - 2014-06-28 20:27 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:26 - 2014-06-28 20:22 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:24 - 2014-06-28 20:19 - 413233588 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:22 - 2014-06-28 20:18 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:19 - 2014-06-28 20:14 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:18 - 2014-06-28 20:13 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:14 - 2014-06-28 20:10 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:13 - 2014-06-28 20:08 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 20:09 - 2014-06-28 20:05 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:44 - 2014-06-28 19:41 - 328768656 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:43 - 2014-06-28 19:39 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:41 - 2014-06-28 19:35 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:38 - 2014-06-28 19:34 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:35 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 19:34 - 2014-06-28 19:30 - 419430400 _____ () C:\Users\Cyberstation\Downloads\*********
2014-06-28 13:02 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-06-27 22:04 - 2014-06-27 22:03 - 00010123 _____ () C:\Windows\DirectX.log
2014-06-27 20:59 - 2014-06-27 20:59 - 01141680 _____ () C:\Users\Cyberstation\Downloads\SteamSetup.exe
2014-06-25 00:02 - 2014-07-01 17:33 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-21 05:30 - 2014-06-11 13:25 - 00004118 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-21 05:30 - 2014-06-11 13:25 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-18 09:42 - 2014-06-18 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 09:42 - 2014-05-30 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-17 20:27 - 2014-07-01 17:26 - 00000000 ____D () C:\Users\Cyberstation\Downloads\*********
2014-06-16 23:40 - 2014-06-15 13:26 - 00000000 ____D () C:\Program Files (x86)\LOL
2014-06-16 23:39 - 2014-06-15 13:24 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\PMB Files
2014-06-16 14:33 - 2014-05-30 21:02 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Adobe
2014-06-16 14:23 - 2014-05-30 21:07 - 00000000 ____D () C:\Users\Cyberstation\AppData\Local\Adobe
2014-06-16 12:09 - 2014-06-15 11:57 - 01540748 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-06-15 14:58 - 2014-06-15 14:58 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\LolClient
2014-06-15 14:43 - 2014-05-30 22:28 - 00000000 ____D () C:\Users\Cyberstation\Documents\*********
2014-06-15 14:33 - 2014-05-30 22:29 - 00015142 _____ () C:\Users\Cyberstation\Desktop\*********
2014-06-15 13:24 - 2014-06-15 13:24 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-06-15 13:24 - 2014-06-15 13:23 - 00000000 ____D () C:\Users\Cyberstation\AppData\Roaming\Riot Games
2014-06-15 13:22 - 2014-06-15 13:22 - 34888568 _____ (Riot Games) C:\Users\Cyberstation\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe
2014-06-15 01:21 - 2014-06-15 01:21 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-06-15 01:21 - 2014-05-30 23:08 - 00000979 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-15 01:21 - 2014-05-30 23:08 - 00000949 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-06-15 01:21 - 2014-05-30 23:07 - 00000915 _____ () C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

Some content of TEMP:
====================
C:\Users\Cyberstation\AppData\Local\Temp\13-9-legacy_vista_win7_64_dd_ccc_whql.exe
C:\Users\Cyberstation\AppData\Local\Temp\avgnt.exe
C:\Users\Cyberstation\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdksznu.dll
C:\Users\Cyberstation\AppData\Local\Temp\Quarantine.exe
C:\Users\Cyberstation\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\Cyberstation\AppData\Local\Temp\Uni000.exe
C:\Users\Cyberstation\AppData\Local\Temp\_is46B0.exe
C:\Users\Cyberstation\AppData\Local\Temp\_is586C.exe
C:\Users\Cyberstation\AppData\Local\Temp\_isB06A.exe
C:\Users\Gast\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-15 14:27

==================== End Of Log ============================

--- --- ---

--- --- ---

Mein unwissendes Ich würde behaupten, dass die Scans gut aussehen!

Ich hätte noch zwei Fragen:
1. Wie lange verbleiben die Posts auf eurem Forum online bzw. im Archiv erreichbar?
2. Was genau ist der Exploit "EXP/CVE-2011-2414.D"? Ich habe mich danach zwar im Internet erkundigt, versteh seine Funktionsweise jedoch immer noch nicht. :-/

Nochmals danke für eure Hilfe und euer Engagement!

cosinus · 15.07.2014, 14:03

Was ein Exploit ist kannst du ja selber nachlesen =>

Zitat:

12.07.2014 22:40 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\**********\Content\data\99\0\9903392a451e5063e098e4a6ff025fb7cd3da3d0'
enthielt einen Virus oder unerwünschtes Programm 'EXP/CVE-2011-2414.D'

Mich würde mal intressieren, was du da durch Sternchen unkenntlich gemacht hast....

Hanky14 · 15.07.2014, 14:37

Zitat:

Was ein Exploit ist kannst du ja selber nachlesen =>

Zitat:

12.07.2014 22:40 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\**********\Content\data\99\0\9903392a451e5063e098e4a6ff025fb7cd3da3d0'
enthielt einen Virus oder unerwünschtes Programm 'EXP/CVE-2011-2414.D'

Mich würde mal intressieren, was du da durch Sternchen unkenntlich gemacht hast....

Das Vorhandensein eines Exploits erklärt mir noch nicht zwingend, was ein Exploit ist und wie er funktioniert, bzw. welche Auswirkungen er auf die Rechnersicherheit hat!

cosinus · 15.07.2014, 14:47

Hab diesen Link vergessen zu posten => Exploit ? Wikipedia

Hanky14 · 15.07.2014, 16:30

Danke dir!

cosinus · 16.07.2014, 00:09

Was die Sternchen sein sollen wissen wir aber immer noch nicht

Hanky14 · 18.07.2014, 16:46

Müsst ihr das denn wissen?

cosinus · 18.07.2014, 21:29

Erklär ich mal wie ich das sonst irgendwie zuordnen soll

15.07.2014, 12:12	#5
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows Vista 64 Bit: EXP/CVE-2011-2414.D (edit) Bitte erläutern, ob dieser Rechner gewerblich genutzt wird. Ich seh da eine ganze Reihe an Software, die sich der durchschnittliche Otto Privato niemals kaufen würde. __________________ Logfiles bitte immer in CODE-Tags posten

15.07.2014, 14:47	#11
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows Vista 64 Bit: EXP/CVE-2011-2414.D Hab diesen Link vergessen zu posten => Exploit ? Wikipedia __________________ Logfiles bitte immer in CODE-Tags posten

16.07.2014, 00:09	#13
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows Vista 64 Bit: EXP/CVE-2011-2414.D Was die Sternchen sein sollen wissen wir aber immer noch nicht __________________ Logfiles bitte immer in CODE-Tags posten

18.07.2014, 21:29	#15
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows Vista 64 Bit: EXP/CVE-2011-2414.D Erklär ich mal wie ich das sonst irgendwie zuordnen soll __________________ Logfiles bitte immer in CODE-Tags posten

Windows Vista 64 Bit: EXP/CVE-2011-2414.D

Log-Analyse und Auswertung: Windows Vista 64 Bit: EXP/CVE-2011-2414.D