| |
| |||||||
Log-Analyse und Auswertung: sec_error_unknown_issuerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
05.12.2014, 16:33
| #16 |
 |  sec_error_unknown_issuer Hallo, sorry das ich mich noch nicht gemeldt habe, aber ich liege mit einer Grippe, und war nicht fit für den Computer. Ich werde es morgen vormittag machen, und dann sofort Bescheid geben. Ich hoffe es ist kein Problem das ich es im Augebnblick nicht kann. Danke LG Brigitte |
|
05.12.2014, 19:58
| #17 |
| /// TB-Ausbilder   | sec_error_unknown_issuer Servus,
__________________kein Problem, dann bis morgen. |
|
07.12.2014, 16:12
| #18 |
| | sec_error_unknown_issuer Combofix Logfile:
__________________Code:
ATTFilter ComboFix 14-12-07.01 - Jürgen 07.12.2014 15:48:57.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3988.2609 [GMT 1:00]
ausgeführt von:: c:\users\J³rgen\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Vorheriger Suchlauf -------
.
c:\windows\security\Database\tmp.edb
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-11-07 bis 2014-12-07 ))))))))))))))))))))))))))))))
.
.
2014-12-07 15:01 . 2014-12-07 15:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-12-07 14:48 . 2014-12-07 14:48 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ABFA1921-D660-49FC-80BD-B0566D2888A6}\offreg.dll
2014-12-07 14:41 . 2014-12-07 14:42 -------- d-----w- c:\users\Jürgen
2014-12-05 12:47 . 2014-11-17 01:08 11632448 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ABFA1921-D660-49FC-80BD-B0566D2888A6}\mpengine.dll
2014-12-02 21:31 . 2014-11-27 17:50 -------- d-----w- C:\AdwCleaner
2014-12-02 21:12 . 2014-12-01 17:51 -------- d-----w- C:\FRST
2014-12-02 17:37 . 2014-12-02 17:37 364512 ----a-w- c:\windows\system32\aswBoot.exe
2014-12-02 17:37 . 2014-12-02 17:37 43152 ----a-w- c:\windows\avastSS.scr
2014-12-02 17:33 . 2014-12-02 17:37 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-12-02 17:33 . 2014-12-02 17:37 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-12-02 17:33 . 2014-12-02 17:37 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-12-02 17:33 . 2014-12-02 17:37 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-12-02 17:33 . 2014-12-02 17:37 83280 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2014-12-02 17:33 . 2014-12-02 17:37 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-12-02 17:33 . 2014-12-02 17:37 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-12-02 17:33 . 2014-12-02 17:37 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-12-02 17:32 . 2014-12-02 17:32 -------- d-----w- c:\program files\AVAST Software
2014-12-02 17:13 . 2014-12-02 17:13 -------- d-s---w- c:\windows\SysWow64\Microsoft
2014-12-01 09:35 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-12-01 09:35 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-12-01 08:25 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2014-12-01 08:25 . 2014-06-24 03:29 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-12-01 08:25 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2014-12-01 08:25 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-12-01 08:25 . 2014-11-06 03:20 968704 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-12-01 08:25 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-12-01 08:25 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-12-01 08:24 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-12-01 08:24 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-12-01 08:24 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-12-01 08:24 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-12-01 08:24 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-12-01 08:24 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-12-01 08:24 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-12-01 08:24 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-12-01 08:24 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-12-01 08:24 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-12-01 08:24 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-12-01 08:24 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-11-30 17:21 . 2014-11-30 17:29 -------- d-----w- c:\windows\system32\MRT
2014-11-30 16:29 . 2014-11-30 16:29 -------- d-----w- c:\program files (x86)\MSXML 4.0
2014-11-30 13:55 . 2014-11-30 13:55 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information
2014-11-30 13:55 . 2014-11-30 13:55 -------- d--h--w- c:\programdata\CanonBJ
2014-11-30 13:54 . 2010-04-24 04:00 83968 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPP9Z.DLL
2014-11-30 13:54 . 2010-04-24 04:00 28672 ----a-w- c:\windows\system32\Spool\prtprocs\x64\CNMPD9Z.DLL
2014-11-30 13:53 . 2010-04-24 04:00 336896 ----a-w- c:\windows\system32\CNMLM9Z.DLL
2014-11-30 13:53 . 2009-04-03 15:01 1321984 ----a-w- c:\windows\system32\CNC550C.dll
2014-11-30 13:53 . 2009-04-03 15:00 92672 ----a-w- c:\windows\system32\CNC550I.dll
2014-11-30 13:53 . 2009-03-19 13:39 328192 ----a-w- c:\windows\system32\CNC550L.dll
2014-11-30 13:53 . 2009-03-19 13:38 303104 ----a-w- c:\windows\SysWow64\CNC550L.dll
2014-11-30 13:53 . 2008-08-25 17:02 17920 ----a-w- c:\windows\system32\CNHMCA6.dll
2014-11-30 13:52 . 2009-04-03 14:57 106496 ----a-w- c:\windows\SysWow64\CNC550U.dll
2014-11-30 13:52 . 2008-08-25 17:02 15872 ----a-w- c:\windows\SysWow64\CNHMCA.dll
2014-11-30 13:08 . 2014-11-30 13:09 -------- d-----w- c:\users\Brigitte 1
2014-11-30 10:49 . 2014-11-30 10:49 -------- d-s---w- c:\windows\system32\CompatTel
2014-11-30 10:34 . 2014-11-30 10:34 -------- d-----w- c:\windows\Migration
2014-11-30 10:26 . 2013-10-14 17:00 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE
2014-11-30 10:16 . 2014-11-30 10:16 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-11-30 08:06 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2014-11-30 08:06 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2014-11-30 08:06 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2014-11-30 08:06 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2014-11-30 08:06 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2014-11-30 08:06 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2014-11-30 08:06 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2014-11-29 16:11 . 2014-11-29 16:18 -------- d-----w- c:\programdata\Kromtech
2014-11-29 16:00 . 2014-11-29 16:00 -------- d-----w- c:\programdata\Malwarebytes
2014-11-29 15:18 . 2014-11-29 15:18 -------- d-s---w- c:\windows\SysWow64\config
2014-11-29 09:51 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-11-29 09:51 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-11-29 09:51 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-11-29 09:51 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-11-29 09:51 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-11-29 09:42 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2014-11-29 09:33 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2014-11-29 09:33 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2014-11-29 09:33 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2014-11-29 08:53 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2014-11-29 08:53 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2014-11-29 08:53 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2014-11-29 08:53 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2014-11-29 08:53 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2014-11-29 08:53 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2014-11-29 08:52 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-11-29 08:52 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-11-28 14:11 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll
2014-11-28 14:11 . 2013-10-30 02:19 301568 ----a-w- c:\windows\SysWow64\msieftp.dll
2014-11-28 14:11 . 2013-07-04 12:50 633856 ----a-w- c:\windows\system32\comctl32.dll
2014-11-28 14:11 . 2013-07-04 11:50 530432 ----a-w- c:\windows\SysWow64\comctl32.dll
2014-11-28 14:10 . 2012-10-09 18:17 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2014-11-28 14:10 . 2012-10-09 18:17 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2014-11-28 14:10 . 2012-10-09 17:40 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2014-11-28 14:10 . 2012-10-09 17:40 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
2014-11-28 14:10 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll
2014-11-28 14:10 . 2011-10-01 04:37 708608 ----a-w- c:\program files (x86)\Common Files\System\wab32.dll
2014-11-28 14:10 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll
2014-11-28 14:10 . 2013-07-09 04:52 175104 ----a-w- c:\windows\SysWow64\wintrust.dll
2014-11-28 14:08 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2014-11-28 14:08 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2014-11-28 14:08 . 2014-11-05 17:56 304640 ----a-w- c:\windows\system32\generaltel.dll
2014-11-28 14:08 . 2014-11-05 17:56 228864 ----a-w- c:\windows\system32\aepdu.dll
2014-11-28 14:08 . 2014-11-05 17:52 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-11-28 14:08 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2014-11-28 14:08 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2014-11-28 14:07 . 2014-11-28 14:07 -------- d-----w- c:\program files\Microsoft Silverlight
2014-11-28 14:07 . 2014-11-28 14:07 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
2014-11-28 13:56 . 2014-06-03 10:02 1719296 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2014-11-28 13:55 . 2014-08-21 06:43 1882624 ----a-w- c:\windows\system32\msxml3.dll
2014-11-28 13:55 . 2014-08-21 06:40 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-11-28 13:55 . 2014-08-21 06:26 1237504 ----a-w- c:\windows\SysWow64\msxml3.dll
2014-11-28 13:55 . 2014-08-21 06:23 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2014-11-28 13:50 . 2011-12-30 06:26 515584 ----a-w- c:\windows\system32\timedate.cpl
2014-11-28 13:50 . 2011-12-30 05:27 478720 ----a-w- c:\windows\SysWow64\timedate.cpl
2014-11-28 13:50 . 2014-01-29 02:32 484864 ----a-w- c:\windows\system32\wer.dll
2014-11-28 13:50 . 2014-01-29 02:06 381440 ----a-w- c:\windows\SysWow64\wer.dll
2014-11-28 13:50 . 2014-06-18 22:23 1943696 ----a-w- c:\windows\system32\dfshim.dll
2014-11-28 13:50 . 2014-06-18 22:23 156312 ----a-w- c:\windows\system32\mscorier.dll
2014-11-28 13:50 . 2014-06-18 22:23 156824 ----a-w- c:\windows\SysWow64\mscorier.dll
2014-11-28 13:50 . 2014-06-18 22:23 1131664 ----a-w- c:\windows\SysWow64\dfshim.dll
2014-11-28 13:50 . 2014-06-18 22:23 73880 ----a-w- c:\windows\system32\mscories.dll
2014-11-28 13:50 . 2014-06-18 22:23 81560 ----a-w- c:\windows\SysWow64\mscories.dll
2014-11-28 13:49 . 2013-10-19 02:18 81408 ----a-w- c:\windows\system32\imagehlp.dll
2014-11-28 13:49 . 2013-10-19 01:36 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll
2014-11-28 13:49 . 2013-10-05 20:25 1474048 ----a-w- c:\windows\system32\crypt32.dll
2014-11-28 13:49 . 2013-10-05 19:57 1168384 ----a-w- c:\windows\SysWow64\crypt32.dll
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-28 13:53 . 2011-07-12 14:37 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-11-28 10:43 . 2010-06-24 18:33 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-11-28 05:48 . 2014-11-28 05:48 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui
2014-11-28 05:48 . 2014-11-28 05:48 5632 ----a-w- c:\windows\SysWow64\drivers\de-DE\ndiscap.sys.mui
2014-11-28 05:48 . 2014-11-28 05:48 2560 ----a-w- c:\windows\SysWow64\drivers\de-DE\scfilter.sys.mui
2014-11-28 05:48 . 2014-11-28 05:48 51712 ----a-w- c:\windows\SysWow64\drivers\de-DE\tcpip.sys.mui
2014-11-28 05:48 . 2014-11-28 05:48 29696 ----a-w- c:\windows\SysWow64\drivers\de-DE\bfe.dll.mui
2014-11-28 05:48 . 2014-11-28 05:48 16896 ----a-w- c:\windows\SysWow64\drivers\de-DE\pacer.sys.mui
2014-11-24 13:04 . 2010-11-21 03:27 275080 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-04-02 340848]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2011-03-29 408432]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-12-02 5226600]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" -d
"Hotkey Utility"=c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
"Norton Online Backup"=c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 netr28x;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 AMD_RAIDXpert;AMD RAIDXpert;c:\program files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe;c:\program files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [x]
R4 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]
R4 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [x]
R4 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R4 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R4 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
R4 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
R4 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 ahcix64s;ahcix64s;c:\windows\system32\drivers\ahcix64s.sys;c:\windows\SYSNATIVE\drivers\ahcix64s.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [x]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys;c:\windows\SYSNATIVE\DRIVERS\amdhub30.sys [x]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys;c:\windows\SYSNATIVE\DRIVERS\amdxhc.sys [x]
S3 athur;Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-28 11:00 1087304 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-12-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-28 13:53]
.
2014-11-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28 10:59]
.
2014-11-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28 10:59]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-12-02 17:37 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-09 11860072]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jürgen\AppData\Roaming\Mozilla\Firefox\Profiles\6tk087w5.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-mcui_exe - c:\program files\McAfee.com\Agent\mcagent.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_239_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_239_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_239_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_239_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_239.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.15"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_239.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_239.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_239.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-12-07 16:06:20
ComboFix-quarantined-files.txt 2014-12-07 15:06
.
Vor Suchlauf: 17 Verzeichnis(se), 304.659.095.552 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 304.349.257.728 Bytes frei
.
- - End Of File - - 72DB2A928A15BBAB9B70EE83F4C724CC
Hallo, endlich geschafft...hoffe alles ist richtig. LG Brigitte |
|
08.12.2014, 15:17
| #19 |
| /// TB-Ausbilder | sec_error_unknown_issuer Servus, 
 danach:
|
|
08.12.2014, 16:59
| #20 |
| | sec_error_unknown_issuer Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-12-2014 02 Ran by Brigitte 1 (administrator) on BRIGITTE-PC on 08-12-2014 16:52:52 Running from C:\Users\Brigitte 1\Downloads Loaded Profile: Brigitte 1 (Available profiles: Brigitte & Brigitte 1 & Jürgen) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLMSService.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-02] (AVAST Software) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x248C3E669D0DD001 HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-2250872989-3983632255-1168934311-1001 -> DefaultScope {C1B0A9B3-2A28-4C1D-91C0-F040FD14EF05} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE662D20141127&p={SearchTerms} SearchScopes: HKU\S-1-5-21-2250872989-3983632255-1168934311-1001 -> {C1B0A9B3-2A28-4C1D-91C0-F040FD14EF05} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE662D20141127&p={SearchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default FF DefaultSearchEngine: Ask Web Search FF SearchEngineOrder.1: Sichere Suche FF SelectedSearchEngine: Ask Web Search FF Homepage: hxxp://home.tb.ask.com/index.jhtml?ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&p2=^AYY^xdm070^LADEDE^de&si=flvrunner FF Keyword.URL: hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&ind=2014120804&p2=^AYY^xdm070^LADEDE^de&si=flvrunner&searchfor= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default\searchplugins\ask-web-search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml FF Extension: Allin1Convert - C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default\Extensions\8hffxtbr@Allin1Convert_8h.com [2014-12-08] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-02] Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Profile: C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-02] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-02] CHR Extension: (Google Search) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-02] CHR Extension: (Avast Online Security) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-02] CHR Extension: (Google Wallet) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-02] CHR Extension: (Google Mail) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-02] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-02] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-02] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-02] (Avast Software) S4 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-02] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-02] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-02] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-02] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-02] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-02] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-02] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-02] () S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-07-19] (TuneUp Software) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-02] (Avast Software) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-08 16:52 - 2014-12-08 16:53 - 00012374 _____ () C:\Users\Brigitte 1\Downloads\FRST.txt 2014-12-08 16:52 - 2014-12-08 16:52 - 02119680 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST64.exe 2014-12-08 16:29 - 2014-12-08 16:29 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-BRIGITTE-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat 2014-12-08 16:29 - 2014-12-08 16:29 - 00000000 ____D () C:\RegBackup 2014-12-08 16:18 - 2014-12-08 16:18 - 00002167 _____ () C:\Users\Brigitte 1\Desktop\Tweaking.com - Windows Repair (All in One).lnk 2014-12-08 16:17 - 2014-12-08 16:17 - 09817304 _____ () C:\Users\Brigitte 1\Downloads\tweaking.com_windows_repair_aio_setup.exe 2014-12-08 16:17 - 2014-12-08 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com 2014-12-08 16:17 - 2014-12-08 16:17 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com 2014-12-08 16:08 - 2014-12-08 16:08 - 00002023 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk 2014-12-07 16:22 - 2014-12-07 16:22 - 00006656 ____N () C:\bootsqm.dat 2014-12-07 16:09 - 2014-12-07 16:09 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Macromedia 2014-12-07 16:08 - 2014-12-07 16:08 - 00000000 ____D () C:\Users\Jürgen\Documents\Computer 2014-12-07 16:06 - 2014-12-07 16:06 - 00026863 _____ () C:\ComboFix.txt 2014-12-07 15:46 - 2014-12-07 15:46 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\TuneUp Software 2014-12-07 15:45 - 2014-12-07 15:45 - 05600430 ____R (Swearware) C:\Users\Jürgen\Downloads\ComboFix.exe 2014-12-07 15:42 - 2014-12-07 15:42 - 00001429 _____ () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Mozilla 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\CyberLink 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\AVAST Software 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Adobe 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Mozilla 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\MediaServer 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Google 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\clear.fi 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Acer 2014-12-07 15:41 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\VirtualStore 2014-12-07 15:41 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000020 ___SH () C:\Users\Jürgen\ntuser.ini 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Vorlagen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Startmenü 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Netzwerkumgebung 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Lokale Einstellungen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Eigene Dateien 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Druckumgebung 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Documents\Eigene Musik 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Documents\Eigene Bilder 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Local\Verlauf 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Local\Anwendungsdaten 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Anwendungsdaten 2014-12-07 15:41 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Macromedia 2014-12-07 15:41 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-12-07 15:41 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-12-04 10:23 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-12-04 10:23 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-12-04 10:23 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-12-04 10:18 - 2014-12-04 10:19 - 05600127 ____R (Swearware) C:\Users\Brigitte\Downloads\ComboFix.exe 2014-12-04 10:13 - 2014-12-04 10:13 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\AVAST Software 2014-12-02 22:31 - 2014-11-27 18:50 - 00000000 ____D () C:\AdwCleaner 2014-12-02 22:12 - 2014-12-08 16:52 - 00000000 ____D () C:\FRST 2014-12-02 19:22 - 2014-12-08 16:05 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Adobe 2014-12-02 18:37 - 2014-12-02 18:37 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-12-02 18:37 - 2014-12-02 18:37 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-12-02 18:33 - 2014-12-07 15:38 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-12-02 18:33 - 2014-12-02 18:37 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00001968 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-12-02 18:33 - 2014-12-02 18:33 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\AVAST Software 2014-12-02 18:33 - 2014-12-02 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-12-02 18:32 - 2014-12-02 18:32 - 00060248 _____ () C:\Users\Brigitte 1\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-02 18:32 - 2014-12-02 18:32 - 00000000 ____D () C:\Program Files\AVAST Software 2014-12-02 18:31 - 2014-12-02 18:32 - 131078000 _____ (AVAST Software) C:\Users\Brigitte 1\Downloads\avast_free_antivirus_setup.exe 2014-12-02 18:28 - 2014-12-02 18:28 - 00244264 _____ () C:\Users\Brigitte 1\Downloads\Firefox Setup Stub 34.0.5.exe 2014-12-02 18:27 - 2014-12-02 18:27 - 00571560 _____ () C:\Users\Brigitte 1\Downloads\avast-free-antivirus.exe 2014-12-02 18:17 - 2014-12-02 18:17 - 01056056 _____ (TuneUp Software) C:\Users\Brigitte 1\Downloads\Integrator.exe 2014-12-02 18:10 - 2014-12-07 16:06 - 00000000 ____D () C:\Qoobox 2014-12-02 18:10 - 2014-12-07 16:04 - 00000000 ____D () C:\Windows\erdnt 2014-12-02 10:15 - 2014-12-07 15:34 - 05600430 _____ (Swearware) C:\Users\Brigitte 1\Downloads\ComboFix.exe 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieUserList 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieSiteList 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieBrowserModeList 2014-12-01 10:35 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-12-01 10:35 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-12-01 09:25 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-01 09:25 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-12-01 09:25 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-12-01 09:25 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-12-01 09:25 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-12-01 09:25 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-12-01 09:25 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-12-01 09:24 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-01 09:24 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-01 09:24 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2014-12-01 09:24 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-12-01 09:24 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2014-12-01 09:24 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2014-12-01 09:24 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2014-12-01 09:24 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-11-30 18:21 - 2014-11-30 18:29 - 00000000 ____D () C:\Windows\system32\MRT 2014-11-30 18:20 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-11-30 17:29 - 2014-11-30 17:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series 2014-11-30 14:53 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLM9Z.DLL 2014-11-30 14:53 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC550C.dll 2014-11-30 14:53 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC550I.dll 2014-11-30 14:53 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC550L.dll 2014-11-30 14:53 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC550L.dll 2014-11-30 14:53 - 2008-12-01 11:21 - 00012800 _____ () C:\Windows\SysWOW64\CNC173DD.TBL 2014-11-30 14:53 - 2008-12-01 11:21 - 00012800 _____ () C:\Windows\system32\CNC173DD.TBL 2014-11-30 14:53 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2014-11-30 14:52 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC550U.dll 2014-11-30 14:52 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2014-11-30 14:14 - 2014-11-30 14:14 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\TuneUp Software 2014-11-30 14:13 - 2014-11-30 14:13 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Macromedia 2014-11-30 14:10 - 2014-11-30 14:10 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Mozilla 2014-11-30 14:10 - 2014-11-30 14:10 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Mozilla 2014-11-30 14:09 - 2014-12-08 16:05 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Adobe 2014-11-30 14:09 - 2014-12-01 16:02 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\VirtualStore 2014-11-30 14:09 - 2014-11-30 14:09 - 00001429 _____ () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-30 14:09 - 2014-11-30 14:09 - 00000020 ___SH () C:\Users\Brigitte 1\ntuser.ini 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Vorlagen 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Startmenü 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Lokale Einstellungen 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Local\Verlauf 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Local\Anwendungsdaten 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\CyberLink 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\MediaServer 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Google 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\clear.fi 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Acer 2014-11-30 14:08 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Netzwerkumgebung 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Eigene Dateien 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Druckumgebung 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Documents\Eigene Musik 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Documents\Eigene Bilder 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Anwendungsdaten 2014-11-30 14:08 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Macromedia 2014-11-30 14:08 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-30 14:08 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-30 11:53 - 2014-12-08 16:47 - 00001736 _____ () C:\Windows\setupact.log 2014-11-30 11:53 - 2014-11-30 11:53 - 00000000 _____ () C:\Windows\setuperr.log 2014-11-30 11:49 - 2014-11-30 11:49 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-11-30 11:37 - 2014-12-01 10:39 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-11-30 11:26 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-11-30 11:19 - 2014-11-30 11:19 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-11-30 11:19 - 2014-11-30 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-11-30 11:19 - 2014-11-30 11:19 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-11-30 11:19 - 2014-11-30 11:19 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-11-30 11:19 - 2014-11-30 11:19 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-11-30 11:19 - 2014-11-30 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-11-30 11:19 - 2014-11-30 11:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-11-30 11:19 - 2014-11-30 11:19 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-11-30 11:19 - 2014-11-30 11:19 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-11-30 11:19 - 2014-11-30 11:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-11-30 11:19 - 2014-11-30 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-11-30 11:14 - 2014-11-30 11:27 - 00011799 _____ () C:\Windows\IE11_main.log 2014-11-30 09:57 - 2014-11-30 17:30 - 00289424 _____ () C:\Windows\msxml4-KB973688-enu.LOG 2014-11-30 09:22 - 2014-11-30 17:29 - 00292648 _____ () C:\Windows\msxml4-KB954430-enu.LOG 2014-11-30 09:06 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-11-30 09:06 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-11-30 09:06 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-11-30 09:06 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-11-30 09:06 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-11-29 17:18 - 2014-11-29 17:18 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Kromtech 2014-11-29 17:11 - 2014-11-29 17:18 - 00000000 ____D () C:\ProgramData\Kromtech 2014-11-29 17:11 - 2014-11-29 17:11 - 01220904 _____ (Kromtech) C:\Users\Brigitte\Downloads\PCKeeper Installer.exe 2014-11-29 17:00 - 2014-11-29 17:00 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-29 16:58 - 2014-11-29 16:59 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Brigitte\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-29 16:58 - 2014-11-29 16:58 - 00000000 _____ () C:\Users\Brigitte\Downloads\mbam-setup-2.0.3.1025_CB-DL-Manager.exe 2014-11-29 14:45 - 2014-11-29 14:45 - 00262144 _____ () C:\Windows\system32\config\ELAM 2014-11-29 13:14 - 2014-11-29 16:41 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Nico Mak Computing 2014-11-29 13:14 - 2014-11-29 13:14 - 04892480 _____ (WinZip International LLC ) C:\Users\Brigitte\Downloads\wzmp_8.exe 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-11-29 12:44 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-11-29 12:44 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls 2014-11-29 12:44 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-11-29 12:44 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe 2014-11-29 12:44 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-11-29 12:44 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-11-29 12:30 - 2014-11-29 12:31 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige 2014-11-29 12:24 - 2014-11-29 12:24 - 00000889 _____ () C:\Users\Brigitte\Desktop\services.lnk 2014-11-29 10:51 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-11-29 10:51 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-11-29 10:51 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-11-29 10:51 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-11-29 10:42 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-11-29 10:33 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-11-29 10:33 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-11-29 10:33 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-11-29 09:53 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-11-29 09:53 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-11-29 09:53 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-11-29 09:53 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-11-29 09:53 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-11-29 09:53 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-11-29 09:52 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-11-29 09:52 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-11-29 09:48 - 2014-11-29 09:48 - 00000197 _____ () C:\Window |
|
08.12.2014, 17:00
| #21 |
| | sec_error_unknown_issuer 2014-11-28 16:11 - 2014-11-28 16:11 - 00000197 _____ () C:\Windows\system32\2014-11-28-15-11-14.053-AvastVBoxSVC.exe-3308.log 2014-11-28 15:38 - 2014-11-28 15:38 - 00000197 _____ () C:\Windows\system32\2014-11-28-14-38-42.071-AvastVBoxSVC.exe-416.log 2014-11-28 15:27 - 2014-11-28 15:27 - 00000247 _____ () C:\Windows\system32\2014-11-28-14-27-23.007-aswFe.exe-5408.log 2014-11-28 15:19 - 2014-11-28 15:27 - 00000247 _____ () C:\Windows\system32\2014-11-28-14-19-26.035-aswFe.exe-5876.log 2014-11-28 15:19 - 2014-11-28 15:19 - 00000197 _____ () C:\Windows\system32\2014-11-28-14-19-18.077-AvastVBoxSVC.exe-3980.log 2014-11-28 15:12 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-11-28 15:12 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-11-28 15:12 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-11-28 15:12 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2014-11-28 15:11 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-11-28 15:11 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-11-28 15:11 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-11-28 15:11 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-11-28 15:10 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-11-28 15:10 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-11-28 15:10 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2014-11-28 15:10 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2014-11-28 15:10 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2014-11-28 15:10 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2014-11-28 15:08 - 2014-11-28 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-11-28 15:08 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-11-28 15:08 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-11-28 15:08 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-11-28 15:08 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-11-28 15:08 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2014-11-28 15:08 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-11-28 15:08 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-11-28 15:07 - 2014-11-28 15:07 - 13087456 _____ (Microsoft Corporation) C:\Users\Brigitte\Downloads\Silverlight_x64.exe 2014-11-28 15:07 - 2014-11-28 15:07 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-11-28 15:07 - 2014-11-28 15:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-11-28 14:57 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-11-28 14:57 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2014-11-28 14:57 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-11-28 14:57 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-11-28 14:57 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-11-28 14:57 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-11-28 14:57 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2014-11-28 14:57 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2014-11-28 14:57 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2014-11-28 14:57 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2014-11-28 14:56 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-11-28 14:56 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-11-28 14:56 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-11-28 14:56 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-11-28 14:56 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-11-28 14:56 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-11-28 14:56 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-11-28 14:56 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-11-28 14:56 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-11-28 14:55 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-11-28 14:55 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-11-28 14:55 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-11-28 14:55 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2014-11-28 14:50 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-11-28 14:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-11-28 14:50 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-11-28 14:50 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2014-11-28 14:49 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-11-28 14:49 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-11-28 14:49 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-11-28 14:49 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-11-28 14:49 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-11-28 14:49 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-11-28 14:49 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-11-28 14:49 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-11-28 14:47 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-11-28 14:47 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2014-11-28 14:47 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-11-28 14:47 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2014-11-28 14:47 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2014-11-28 14:46 - 2014-11-28 14:46 - 17711760 _____ (Adobe Systems Inc.) C:\Users\Brigitte\Downloads\AdobeAIRInstaller.exe 2014-11-28 14:46 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-11-28 14:46 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-11-28 14:46 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-11-28 14:46 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-11-28 14:46 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-11-28 14:46 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-11-28 14:46 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-11-28 14:40 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-11-28 14:40 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-11-28 14:40 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-11-28 14:40 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-11-28 14:40 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-11-28 14:21 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-11-28 14:21 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-11-28 14:21 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-11-28 14:21 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-11-28 14:21 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2014-11-28 14:21 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2014-11-28 14:21 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2014-11-28 14:21 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-11-28 14:21 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-11-28 14:21 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-11-28 14:20 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-11-28 14:20 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-11-28 14:20 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2014-11-28 14:20 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2014-11-28 14:19 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-11-28 14:19 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-11-28 14:19 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-11-28 14:19 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-11-28 14:19 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-11-28 14:19 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-11-28 14:19 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-11-28 14:19 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-11-28 14:19 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-11-28 14:19 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-11-28 14:19 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-11-28 14:19 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-11-28 14:19 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-11-28 14:19 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-11-28 14:19 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-11-28 14:18 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-11-28 14:18 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-11-28 14:18 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-11-28 14:18 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-11-28 14:18 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-11-28 14:18 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-11-28 14:18 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-11-28 14:18 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-11-28 14:18 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-11-28 14:18 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-11-28 14:18 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-11-28 14:18 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2014-11-28 14:17 - 2014-03-04 10:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-11-28 14:17 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-11-28 14:17 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-11-28 14:17 - 2014-03-04 10:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-11-28 14:17 - 2014-03-04 10:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-11-28 14:17 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-11-28 14:17 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-11-28 14:17 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-11-28 14:17 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-11-28 14:16 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-11-28 14:16 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-11-28 14:16 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-11-28 14:16 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-11-28 14:16 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-11-28 14:15 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-11-28 14:15 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-11-28 14:15 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-11-28 14:15 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-11-28 14:15 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-11-28 14:15 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-11-28 14:15 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-11-28 14:15 - 2012-11-28 23:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-11-28 14:15 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-11-28 14:15 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2014-11-28 14:15 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-11-28 14:15 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2014-11-28 14:15 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2014-11-28 14:15 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2014-11-28 14:15 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2014-11-28 14:15 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-11-28 14:15 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-11-28 14:15 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-11-28 14:15 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2014-11-28 14:13 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-11-28 14:13 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-11-28 14:13 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-11-28 14:13 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-11-28 14:13 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-11-28 14:13 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2014-11-28 14:13 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-11-28 14:13 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-11-28 14:13 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-11-28 14:07 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-11-28 14:07 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-11-28 14:07 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-11-28 14:07 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2014-11-28 14:07 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2014-11-28 13:58 - 2014-11-28 13:58 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Macromedia 2014-11-28 13:23 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-11-28 13:23 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-11-28 13:23 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2014-11-28 13:23 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2014-11-28 13:23 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-11-28 13:23 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-11-28 13:23 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-11-28 13:23 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-11-28 13:23 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-11-28 13:23 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-11-28 13:23 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-11-28 13:23 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-11-28 13:23 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-11-28 13:23 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-11-28 13:22 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-11-28 13:22 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-11-28 13:22 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-11-28 13:22 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-11-28 13:22 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-11-28 13:22 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-11-28 13:22 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2014-11-28 13:22 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2014-11-28 13:20 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-11-28 13:20 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-11-28 13:20 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-11-28 13:20 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-11-28 13:20 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-11-28 13:20 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-11-28 13:20 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-11-28 13:20 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-11-28 13:20 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-11-28 13:19 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2014-11-28 13:19 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-11-28 13:19 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2014-11-28 13:19 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-11-28 13:19 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-11-28 13:19 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-11-28 13:19 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-11-28 13:19 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-11-28 13:19 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-11-28 13:19 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-11-28 13:19 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-11-28 13:18 - 2014-12-08 16:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-11-28 13:18 - 2014-11-28 14:53 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-11-28 13:18 - 2014-11-28 14:53 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-11-28 13:18 - 2014-11-28 13:18 - 00000000 ____D () C:\Windows\system32\Macromed 2014-11-28 13:17 - 2014-11-28 15:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Adobe 2014-11-28 13:16 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2014-11-28 13:16 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2014-11-28 13:16 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2014-11-28 13:16 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2014-11-28 13:16 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-11-28 13:16 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-11-28 13:16 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-11-28 13:16 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-11-28 13:16 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-11-28 13:15 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-11-28 13:15 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-11-28 13:14 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2014-11-28 13:14 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-11-28 13:13 - 2014-09-09 23:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-11-28 13:13 - 2014-09-09 22:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-11-28 13:12 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-11-28 13:12 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2014-11-28 13:12 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-11-28 13:12 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-11-28 13:12 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-11-28 13:12 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2014-11-28 13:12 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-11-28 13:12 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-11-28 13:12 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-11-28 13:10 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-11-28 13:10 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2014-11-28 13:10 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2014-11-28 13:10 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2014-11-28 13:10 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2014-11-28 13:09 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-11-28 13:09 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-11-28 13:09 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-11-28 13:05 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-11-28 13:05 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-11-28 13:04 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-11-28 13:04 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-11-28 13:04 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-11-28 13:04 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2014-11-28 13:04 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-11-28 13:04 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2014-11-28 13:04 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-11-28 13:04 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-11-28 13:04 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-11-28 13:04 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-11-28 13:04 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-11-28 13:04 - 2013-02-15 07:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-11-28 13:04 - 2013-02-15 07:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-11-28 13:04 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00038200 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00030520 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2014-11-28 12:38 - 2014-01-28 12:32 - 00035640 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2014-11-28 12:37 - 2014-11-28 12:37 - 00002217 _____ () C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk 2014-11-28 12:37 - 2014-11-28 12:37 - 00002209 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk 2014-11-28 12:37 - 2014-11-28 12:37 - 00002197 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2013.lnk 2014-11-28 12:37 - 2014-11-28 12:37 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\TuneUp Software 2014-11-28 12:37 - 2014-11-28 12:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013 2014-11-28 12:36 - 2014-12-02 09:59 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2013 2014-11-28 12:35 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-11-28 12:35 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-11-28 12:35 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-11-28 12:35 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-11-28 12:35 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-11-28 12:35 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-11-28 12:35 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-11-28 12:35 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-11-28 12:35 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-11-28 12:35 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-11-28 12:35 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-11-28 12:35 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-11-28 12:35 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-11-28 12:35 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-11-28 12:35 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-11-28 12:35 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-11-28 12:35 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-11-28 12:34 - 2014-11-28 12:42 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-11-28 12:34 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-11-28 12:34 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-11-28 12:34 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-11-28 12:34 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2014-11-28 12:34 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2014-11-28 12:34 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-11-28 12:34 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-11-28 12:34 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-11-28 12:34 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-11-28 12:34 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2014-11-28 12:34 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-11-28 12:34 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2014-11-28 12:34 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-11-28 12:34 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2014-11-28 12:33 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-11-28 12:33 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-11-28 12:33 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2014-11-28 12:33 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-11-28 12:33 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-11-28 12:33 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-11-28 12:33 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2014-11-28 12:33 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-11-28 12:33 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-11-28 12:32 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-11-28 12:32 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-11-28 12:32 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-11-28 12:32 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-11-28 12:32 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-11-28 12:32 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-11-28 12:32 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-11-28 12:32 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-11-28 12:32 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-11-28 12:32 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-11-28 12:32 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2014-11-28 12:32 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-11-28 12:32 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2014-11-28 12:31 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-11-28 12:31 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-11-28 12:31 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2014-11-28 12:31 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2014-11-28 12:30 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-11-28 12:30 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-11-28 12:02 - 2014-11-28 12:03 - 00000000 ____D () C:\Windows\SysWOW64\vbox 2014-11-28 12:02 - 2014-11-28 12:03 - 00000000 ____D () C:\Windows\system32\vbox 2014-11-28 12:00 - 2014-11-28 12:00 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-11-28 12:00 - 2014-11-28 12:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-11-28 11:59 - 2014-11-29 10:29 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-11-28 11:59 - 2014-11-29 10:29 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-11-28 11:59 - 2014-11-28 12:11 - 00004118 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-11-28 11:59 - 2014-11-28 12:11 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-11-28 11:59 - 2014-11-28 12:07 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Google 2014-11-28 11:59 - 2014-11-28 12:00 - 00000000 ____D () C:\Program Files (x86)\Google 2014-11-28 11:53 - 2014-12-02 18:32 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-11-28 11:51 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-11-28 11:51 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-11-28 11:51 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-11-28 11:50 - 2014-11-28 11:52 - 131078000 _____ (AVAST Software) C:\Users\Brigitte\Downloads\avast_free_antivirus_setup.exe 2014-11-28 11:47 - 2014-12-04 10:15 - 00001143 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-11-28 11:47 - 2014-12-04 10:15 - 00001143 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-11-28 11:47 - 2014-12-04 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-28 11:47 - 2014-12-04 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-28 11:47 - 2014-11-28 11:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Mozilla 2014-11-28 11:47 - 2014-11-28 11:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Mozilla 2014-11-28 11:47 - 2014-11-28 11:47 - 00000000 ____D () C:\ProgramData\Mozilla 2014-11-28 11:46 - 2014-11-28 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2014-11-28 11:43 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-11-28 11:43 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-11-28 11:43 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-11-28 11:43 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-11-28 11:43 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-11-28 11:43 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-11-28 11:43 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-11-28 11:43 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-11-28 11:43 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-11-28 11:42 - 2014-11-28 15:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Adobe 2014-11-28 11:40 - 2014-11-28 11:40 - 00000000 ____D () C:\Windows\Options 2014-11-28 11:40 - 2010-04-20 13:54 - 01847296 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys 2014-11-28 11:40 - 2010-04-20 13:54 - 01847296 _____ (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys 2014-11-28 11:40 - 2010-04-20 13:54 - 00007986 _____ () C:\Windows\system32\athurextx.cat 2014-11-28 11:39 - 2010-04-20 09:55 - 00769024 _____ (Atheros Communications, Inc.) C:\Windows\system32\arusb_win7x.sys 2014-11-28 11:39 - 2010-04-20 09:55 - 00008826 _____ () C:\Windows\system32\arusb_win7x.cat 2014-11-28 11:38 - 2014-11-28 11:40 - 00000000 ____D () C:\ProgramData\TP-LINK 2014-11-28 11:36 - 2014-12-07 16:24 - 00000000 ____D () C:\ProgramData\clear.fi 2014-11-28 06:49 - 2014-12-08 16:51 - 00684980 _____ () C:\Windows\system32\perfh007.dat 2014-11-28 06:49 - 2014-12-08 16:51 - 00144812 _____ () C:\Windows\system32\perfc007.dat 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\system32\de 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\system32\0407 2014-11-28 06:49 - 2014-11-28 06:48 - 00295922 _____ () C:\Windows\system32\perfi007.dat 2014-11-28 06:49 - 2014-11-28 06:48 - 00038104 _____ () C:\Windows\system32\perfd007.dat 2014-11-28 06:45 - 2014-11-28 06:45 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-11-28 05:30 - 2014-11-28 05:31 - 00000000 ___RD () C:\Backup 2014-11-27 23:05 - 2014-11-30 12:02 - 00001429 _____ () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-27 23:05 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\OEM 2014-11-27 23:05 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\EgisTec IPS 2014-11-27 23:03 - 2014-12-02 10:09 - 00060248 _____ () C:\Users\Brigitte\AppData\Local\GDIPFONTCACHEV1.DAT 2014-11-27 23:03 - 2014-11-27 23:03 - 00002609 _____ () C:\Users\Public\Desktop\eBay.lnk 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\CyberLink 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\VirtualStore 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\MediaServer 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\clear.fi 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Acer 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files\Accessory Store 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-11-27 23:02 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte 2014-11-27 23:02 - 2014-11-27 23:02 - 00000020 ___SH () C:\Users\Brigitte\ntuser.ini 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Netzwerkumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Lokale Einstellungen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Eigene Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Druckumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 ____D () C:\Recovery 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Family Protection 2014-11-27 23:02 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Macromedia 2014-11-27 23:02 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-27 23:02 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-27 22:30 - 2014-11-27 22:31 - 00002490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-11-27 22:28 - 2014-11-27 22:29 - 00003751 _____ () C:\Windows\IE9_main.log 2014-11-27 22:27 - 2014-11-27 22:27 - 00001874 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fooz Kids.lnk 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\ProgramData\Fooz Kids 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Program Files (x86)\Fooz Kids 2014-11-27 22:26 - 2014-11-27 22:26 - 00003418 _____ () C:\Windows\System32\Tasks\clear.fi 2014-11-27 22:26 - 2014-11-27 22:26 - 00003366 _____ () C:\Windows\System32\Tasks\DMREngine 2014-11-27 22:26 - 2014-11-27 22:26 - 00003348 _____ () C:\Windows\System32\Tasks\clear.fiAgent 2014-11-27 22:26 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\CLSK 2014-11-27 22:25 - 2014-11-27 22:37 - 00000000 ____D () C:\ProgramData\CyberLink 2014-11-27 22:25 - 2014-11-27 22:26 - 00002640 _____ () C:\ProgramData\ArcadeDeluxe5.log 2014-11-27 22:25 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\Temp 2014-11-27 22:25 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\install_clap 2014-11-27 22:25 - 2014-11-27 22:25 - 00000000 ____D () C:\Program Files (x86)\Cyberlink 2014-11-27 22:22 - 2014-11-27 22:26 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\clear.fi 2014-11-27 22:21 - 2014-11-27 22:21 - 00002435 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk 2014-11-27 22:21 - 2014-11-27 22:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-11-27 22:19 - 2014-11-27 22:19 - 00003986 _____ () C:\Windows\System32\Tasks\UALU notificatin 2014-11-27 22:06 - 2014-11-27 22:10 - 00003765 _____ () C:\Windows\WinRE_Settings.log 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Evernote 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\EgisTec 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\Program Files (x86)\Evernote 2014-11-27 22:04 - 2014-11-27 22:04 - 00000000 _____ () C:\Windows\ativpsrm.bin 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ____D () C:\Program Files\Realtek 2014-11-27 22:01 - 2011-06-14 12:38 - 02899176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-11-27 22:01 - 2011-06-14 06:40 - 01483264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-11-27 22:01 - 2011-06-13 12:04 - 01560680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-11-27 22:01 - 2011-06-10 10:35 - 00603472 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-11-27 22:01 - 2011-06-07 10:09 - 02405992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-11-27 22:01 - 2011-06-03 07:11 - 01805928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-11-27 22:01 - 2011-06-02 10:03 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2014-11-27 22:01 - 2011-05-31 03:09 - 03114088 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-11-27 22:01 - 2011-05-27 10:58 - 01284712 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-11-27 22:01 - 2011-05-23 10:12 - 01245288 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-11-27 22:01 - 2011-05-05 08:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-11-27 22:01 - 2011-05-05 07:15 - 00220512 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-11-27 22:01 - 2011-05-05 07:14 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-11-27 22:01 - 2011-05-05 07:14 - 00078176 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-11-27 22:01 - 2011-04-18 11:50 - 02601816 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2014-11-27 22:01 - 2011-04-18 11:50 - 02238296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2014-11-27 22:01 - 2010-11-18 04:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-11-27 22:01 - 2010-11-03 11:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-11-27 22:01 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-11-27 22:01 - 2010-10-03 06:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-11-27 22:01 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-11-27 22:01 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-11-27 22:01 - 2010-07-22 09:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-11-27 22:01 - 2010-05-06 10:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-11-27 22:01 - 2009-11-18 11:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2014-11-27 22:01 - 2009-11-17 11:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-11-27 22:00 - 2014-11-27 22:00 - 00000000 ____D () C:\Program Files (x86)\AMD APP 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-11-27 21:56 - 2014-12-08 16:52 - 01327711 _____ () C:\Windows\WindowsUpdate.log 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Program Files\ATI 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Program Files (x86)\AMD 2014-11-27 21:56 - 2011-03-17 13:04 - 00188544 _____ (Advanced Micro Devices, INC.) C:\Windows\system32\Drivers\amdxhc.sys 2014-11-27 21:56 - 2011-03-17 13:04 - 00087168 _____ (Advanced Micro Devices, INC.) C:\Windows\system32\Drivers\amdhub30.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-08 16:52 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-08 16:52 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-08 16:51 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-08 16:47 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-12-08 16:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-08 16:47 - 2009-07-14 05:45 - 00265248 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-08 16:46 - 2010-11-21 04:47 - 00552908 _____ () C:\Windows\PFRO.log 2014-12-08 16:42 - 2009-07-14 03:34 - 00000471 _____ () C:\Windows\win.ini 2014-12-08 16:08 - 2011-07-12 15:36 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-12-08 16:05 - 2011-07-12 15:36 - 00000000 ____D () C:\ProgramData\Adobe 2014-12-07 16:06 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-12-07 16:01 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-12-05 23:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-12-04 14:02 - 2009-07-14 03:34 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_182 2014-12-04 11:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\ProgramData\McAfee 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\Program Files\mcafee 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\Program Files\Common Files\mcafee 2014-11-30 14:53 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media 2014-11-30 11:53 - 2011-07-12 15:18 - 00000000 ____D () C:\Program Files (x86)\Acer 2014-11-30 11:49 - 2010-11-21 08:17 - 00000000 ____D () C:\Program Files\Windows Journal 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-11-30 11:48 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-11-30 11:48 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-11-30 10:33 - 2011-07-12 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2014-11-30 09:44 - 2011-07-12 15:37 - 00002734 _____ () C:\Windows\System32\Tasks\Adobe ARM 2014-11-30 09:44 - 2011-07-12 15:37 - 00002732 _____ () C:\Windows\System32\Tasks\Adobe Reader Speed Launcher 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-11-29 09:53 - 2011-07-12 15:15 - 00000000 ____D () C:\ProgramData\Skype 2014-11-28 14:53 - 2011-07-12 15:37 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-11-28 11:40 - 2011-07-12 14:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-28 11:38 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing 2014-11-28 06:49 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-11-28 06:49 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-11-28 06:49 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME 2014-11-28 06:42 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-11-28 06:42 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-11-27 23:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-11-27 23:05 - 2011-07-12 15:36 - 00018077 _____ () C:\Windows\patch.log 2014-11-27 23:05 - 2011-07-12 15:35 - 00000000 ____D () C:\ProgramData\oem 2014-11-27 23:05 - 2008-04-21 03:56 - 00000000 ____D () C:\OEM 2014-11-27 23:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery 2014-11-27 23:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-11-27 22:58 - 2009-07-14 05:46 - 00004059 _____ () C:\Windows\DtcInstall.log 2014-11-27 22:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-11-27 22:58 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther 2014-11-27 22:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-11-27 22:30 - 2011-07-12 15:21 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2014-11-27 22:30 - 2011-07-12 15:20 - 00000582 _____ () C:\Windows\DirectX.log 2014-11-27 22:27 - 2011-07-12 15:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-11-27 22:21 - 2011-07-12 15:31 - 00000000 ____D () C:\Windows\OEMTemp 2014-11-27 22:21 - 2011-07-12 14:49 - 00000000 ____D () C:\Program Files (x86)\Acer Games 2014-11-27 22:21 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-11-27 22:11 - 2011-02-12 04:43 - 00000000 ____D () C:\Windows\DeployWinRE2 2014-11-27 22:05 - 2011-07-12 15:30 - 00000000 ____D () C:\ProgramData\EgisTec IPS 2014-11-27 22:01 - 2011-07-12 14:46 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-11-27 21:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-11-27 21:57 - 2013-07-16 13:49 - 00000000 ____D () C:\CIMTEMP 2014-11-27 21:55 - 2011-07-12 14:31 - 00003652 _____ () C:\Windows\TSSysprep.log 2014-11-24 14:04 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-07 14:41 ==================== End Of Log ============================ 2014-11-27 23:05 - 2014-11-30 12:02 - 00001429 _____ () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-27 23:05 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\OEM 2014-11-27 23:05 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\EgisTec IPS 2014-11-27 23:03 - 2014-12-02 10:09 - 00060248 _____ () C:\Users\Brigitte\AppData\Local\GDIPFONTCACHEV1.DAT 2014-11-27 23:03 - 2014-11-27 23:03 - 00002609 _____ () C:\Users\Public\Desktop\eBay.lnk 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\CyberLink 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\VirtualStore 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\MediaServer 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\clear.fi 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Acer 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files\Accessory Store 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-11-27 23:02 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte 2014-11-27 23:02 - 2014-11-27 23:02 - 00000020 ___SH () C:\Users\Brigitte\ntuser.ini 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Netzwerkumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Lokale Einstellungen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Eigene Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Druckumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 ____D () C:\Recovery 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Family Protection 2014-11-27 23:02 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Macromedia 2014-11-27 23:02 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-27 23:02 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-27 22:30 - 2014-11-27 22:31 - 00002490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-11-27 22:28 - 2014-11-27 22:29 - 00003751 _____ () C:\Windows\IE9_main.log 2014-11-27 22:27 - 2014-11-27 22:27 - 00001874 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fooz Kids.lnk 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\ProgramData\Fooz Kids 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Program Files (x86)\Fooz Kids 2014-11-27 22:26 - 2014-11-27 22:26 - 00003418 _____ () C:\Windows\System32\Tasks\clear.fi 2014-11-27 22:26 - 2014-11-27 22:26 - 00003366 _____ () C:\Windows\System32\Tasks\DMREngine 2014-11-27 22:26 - 2014-11-27 22:26 - 00003348 _____ () C:\Windows\System32\Tasks\clear.fiAgent 2014-11-27 22:26 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\CLSK 2014-11-27 22:25 - 2014-11-27 22:37 - 00000000 ____D () C:\ProgramData\CyberLink 2014-11-27 22:25 - 2014-11-27 22:26 - 00002640 _____ () C:\ProgramData\ArcadeDeluxe5.log 2014-11-27 22:25 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\Temp 2014-11-27 22:25 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\install_clap 2014-11-27 22:25 - 2014-11-27 22:25 - 00000000 ____D () C:\Program Files (x86)\Cyberlink 2014-11-27 22:22 - 2014-11-27 22:26 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\clear.fi 2014-11-27 22:21 - 2014-11-27 22:21 - 00002435 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk 2014-11-27 22:21 - 2014-11-27 22:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-11-27 22:19 - 2014-11-27 22:19 - 00003986 _____ () C:\Windows\System32\Tasks\UALU notificatin 2014-11-27 22:06 - 2014-11-27 22:10 - 00003765 _____ () C:\Windows\WinRE_Settings.log 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Evernote 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\EgisTec 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\Program Files (x86)\Evernote 2014-11-27 22:04 - 2014-11-27 22:04 - 00000000 _____ () C:\Windows\ativpsrm.bin 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ____D () C:\Program Files\Realtek 2014-11-27 22:01 - 2011-06-14 12:38 - 02899176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-11-27 22:01 - 2011-06-14 06:40 - 01483264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-11-27 22:01 - 2011-06-13 12:04 - 01560680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-11-27 22:01 - 2011-06-10 10:35 - 00603472 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-11-27 22:01 - 2011-06-07 10:09 - 02405992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-11-27 22:01 - 2011-06-03 07:11 - 01805928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-11-27 22:01 - 2011-06-02 10:03 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2014-11-27 22:01 - 2011-05-31 03:09 - 03114088 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-11-27 22:01 - 2011-05-27 10:58 - 01284712 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-11-27 22:01 - 2011-05-23 10:12 - 01245288 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-11-27 22:01 - 2011-05-05 08:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-11-27 22:01 - 2011-05-05 07:15 - 00220512 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-11-27 22:01 - 2011-05-05 07:14 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-11-27 22:01 - 2011-05-05 07:14 - 00078176 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-11-27 22:01 - 2011-04-18 11:50 - 02601816 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2014-11-27 22:01 - 2011-04-18 11:50 - 02238296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2014-11-27 22:01 - 2010-11-18 04:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-11-27 22:01 - 2010-11-03 11:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-11-27 22:01 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-11-27 22:01 - 2010-10-03 06:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-11-27 22:01 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-11-27 22:01 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-11-27 22:01 - 2010-07-22 09:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-11-27 22:01 - 2010-05-06 10:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-11-27 22:01 - 2009-11-18 11:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2014-11-27 22:01 - 2009-11-17 11:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-11-27 22:00 - 2014-11-27 22:00 - 00000000 ____D () C:\Program Files (x86)\AMD APP 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-11-27 21:56 - 2014-12-08 16:52 - 01327711 _____ () C:\Windows\WindowsUpdate.log 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Program Files\ATI 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Program Files (x86)\AMD 2014-11-27 21:56 - 2011-03-17 13:04 - 00188544 _____ (Advanced Micro Devices, INC.) C:\Windows\system32\Drivers\amdxhc.sys 2014-11-27 21:56 - 2011-03-17 13:04 - 00087168 _____ (Advanced Micro Devices, INC.) C:\Windows\system32\Drivers\amdhub30.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-08 16:52 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-08 16:52 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-08 16:51 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-08 16:47 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-12-08 16:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-08 16:47 - 2009-07-14 05:45 - 00265248 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-08 16:46 - 2010-11-21 04:47 - 00552908 _____ () C:\Windows\PFRO.log 2014-12-08 16:42 - 2009-07-14 03:34 - 00000471 _____ () C:\Windows\win.ini 2014-12-08 16:08 - 2011-07-12 15:36 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-12-08 16:05 - 2011-07-12 15:36 - 00000000 ____D () C:\ProgramData\Adobe 2014-12-07 16:06 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-12-07 16:01 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-12-05 23:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-12-04 14:02 - 2009-07-14 03:34 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_182 2014-12-04 11:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\ProgramData\McAfee 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\Program Files\mcafee 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\Program Files\Common Files\mcafee 2014-11-30 14:53 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media 2014-11-30 11:53 - 2011-07-12 15:18 - 00000000 ____D () C:\Program Files (x86)\Acer 2014-11-30 11:49 - 2010-11-21 08:17 - 00000000 ____D () C:\Program Files\Windows Journal 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-11-30 11:48 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-11-30 11:48 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-11-30 10:33 - 2011-07-12 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2014-11-30 09:44 - 2011-07-12 15:37 - 00002734 _____ () C:\Windows\System32\Tasks\Adobe ARM 2014-11-30 09:44 - 2011-07-12 15:37 - 00002732 _____ () C:\Windows\System32\Tasks\Adobe Reader Speed Launcher 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-11-29 09:53 - 2011-07-12 15:15 - 00000000 ____D () C:\ProgramData\Skype 2014-11-28 14:53 - 2011-07-12 15:37 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-11-28 11:40 - 2011-07-12 14:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-28 11:38 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing 2014-11-28 06:49 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-11-28 06:49 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-11-28 06:49 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME 2014-11-28 06:42 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-11-28 06:42 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-11-27 23:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-11-27 23:05 - 2011-07-12 15:36 - 00018077 _____ () C:\Windows\patch.log 2014-11-27 23:05 - 2011-07-12 15:35 - 00000000 ____D () C:\ProgramData\oem 2014-11-27 23:05 - 2008-04-21 03:56 - 00000000 ____D () C:\OEM 2014-11-27 23:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery 2014-11-27 23:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-11-27 22:58 - 2009-07-14 05:46 - 00004059 _____ () C:\Windows\DtcInstall.log 2014-11-27 22:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-11-27 22:58 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther 2014-11-27 22:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-11-27 22:30 - 2011-07-12 15:21 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2014-11-27 22:30 - 2011-07-12 15:20 - 00000582 _____ () C:\Windows\DirectX.log 2014-11-27 22:27 - 2011-07-12 15:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-11-27 22:21 - 2011-07-12 15:31 - 00000000 ____D () C:\Windows\OEMTemp 2014-11-27 22:21 - 2011-07-12 14:49 - 00000000 ____D () C:\Program Files (x86)\Acer Games 2014-11-27 22:21 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-11-27 22:11 - 2011-02-12 04:43 - 00000000 ____D () C:\Windows\DeployWinRE2 2014-11-27 22:05 - 2011-07-12 15:30 - 00000000 ____D () C:\ProgramData\EgisTec IPS 2014-11-27 22:01 - 2011-07-12 14:46 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-11-27 21:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-11-27 21:57 - 2013-07-16 13:49 - 00000000 ____D () C:\CIMTEMP 2014-11-27 21:55 - 2011-07-12 14:31 - 00003652 _____ () C:\Windows\TSSysprep.log 2014-11-24 14:04 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-07 14:41 ==================== End Of Log ============================ |
|
08.12.2014, 17:03
| #22 |
| | sec_error_unknown_issuer FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-12-2014 02
Ran by Brigitte 1 at 2014-12-08 16:53:50
Running from C:\Users\Brigitte 1\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
clear.fi (x32 Version: 1.5.1717_38186 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8031 - CyberLink Corp.) Hidden
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3505 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3503 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
AMD Catalyst Install Manager (HKLM\...\{682EBE5A-58A4-37ED-7D1B-5AB6182BF8D5}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{C28D96C0-6A90-459E-A077-A6706F4EC0FC}) (Version: 7.0.765.0 - Microsoft Corporation)
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version: - )
clear.fi (HKLM-x32\...\InstallShield_{37126D87-E4FD-4614-B908-A0BB7ECE3992}) (Version: 1.5.2428.35 - CyberLink Corp.)
clear.fi (x32 Version: 1.5.2428.35 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.05.3002 - Acer Incorporated)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG)
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.5.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.3.1540.3 - AMD)
RAIDXpert (x32 Version: 3.3.1540.3 - AMD) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
TP-LINK-Clientinstallationsprogramm (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.4000.260 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.10.2 - Tweaking.com)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
28-11-2014 10:38:52 Installiert TL-WN821N-Drahtlos-Tool
28-11-2014 10:39:17 Gerätetreiber-Paketinstallation: TP-LINK Netzwerkadapter
28-11-2014 10:40:37 Gerätetreiber-Paketinstallation: TP-LINK Netzwerkadapter
28-11-2014 10:42:56 Windows Update
28-11-2014 10:53:55 avast! antivirus system restore point
28-11-2014 11:16:23 avast! antivirus system restore point
28-11-2014 11:35:38 TuneUp Utilities 2013 wird installiert
28-11-2014 12:05:18 Windows-Sicherung
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2014-12-08 16:42 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {045155C1-E747-4CC7-AC63-38DEDC2DE799} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {225632C6-7724-4431-B60A-0AB39A57E07A} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-12-28] (CyberLink Corp.)
Task: {601C9D06-438C-46C5-B2CF-5B3EA2322049} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-12-28] (Acer Incorporated)
Task: {712CB9AB-A9E3-4B18-B434-4DB115829148} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2011-09-05] (Acer)
Task: {8431A5BB-295F-4B30-9588-F2A08E3F5F3C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28] (Google Inc.)
Task: {9BD68435-7DAD-4BDB-B296-397B4FEB8E70} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-12-28] (CyberLink)
Task: {B0E3552C-329E-4F5D-A95F-B72BC659E408} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-02] (AVAST Software)
Task: {C2A0BED8-175D-4007-925C-FF0EB63A458C} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-09-04] (Adobe Systems Incorporated)
Task: {C44DBA1A-B389-497F-8036-046B470F0F6C} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-06] (Acer Incorporated)
Task: {DDC060F6-0393-4BD7-B4F7-45546CB8FE90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-28] (Adobe Systems Incorporated)
Task: {FC53D2A2-102C-4D59-ADE0-00D735CCC33E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-28 12:34 - 2014-01-28 12:34 - 00741176 _____ () C:\Program Files (x86)\TuneUp Utilities 2013\avgrepliba.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-12-08 09:48 - 2014-12-08 09:48 - 02905088 _____ () C:\Program Files\AVAST Software\Avast\defs\14120800\algo.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-12-02 18:37 - 2014-12-02 18:37 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-27 22:25 - 2011-12-28 03:47 - 00370984 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2014-11-28 11:47 - 2014-11-26 17:40 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-2250872989-3983632255-1168934311-500 - Administrator - Disabled)
Brigitte (S-1-5-21-2250872989-3983632255-1168934311-1000 - Limited - Enabled) => C:\Users\Brigitte
Brigitte 1 (S-1-5-21-2250872989-3983632255-1168934311-1001 - Administrator - Enabled) => C:\Users\Brigitte 1
Gast (S-1-5-21-2250872989-3983632255-1168934311-501 - Limited - Disabled)
Jürgen (S-1-5-21-2250872989-3983632255-1168934311-1003 - Administrator - Enabled) => C:\Users\Jürgen
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:26:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 03:56:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 09:56:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (12/08/2014 09:46:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 04:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 03:46:41 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\wbem\wmiprvse.exe; Beschreibung = ComboFix created restore point; Fehler = 0x80042302).
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "GetProviderMgmtInterface" ist ein unerwarteter Fehler aufgetreten. hr = 0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
.
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 12292) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
] ist ein Fehler aufgetreten.
Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen
Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
System errors:
=============
Error: (12/08/2014 04:47:16 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 04:45:58 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (12/08/2014 04:45:21 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (12/08/2014 04:45:17 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (12/08/2014 04:42:43 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/08/2014 04:41:27 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (12/08/2014 04:41:10 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Error: (12/08/2014 04:26:33 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows-Bilderfassung (WIA)" ist vom Dienst "Shellhardwareerkennung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (12/08/2014 04:26:32 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 04:20:25 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Microsoft Office Sessions:
=========================
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:26:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 03:56:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 09:56:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: G:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (12/08/2014 09:46:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 04:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 03:46:41 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x80042302
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 8193) (User: )
Description: GetProviderMgmtInterface0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 12292) (User: )
Description: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen
Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
CodeIntegrity Errors:
===================================
Date: 2014-12-04 10:42:16.364
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-12-04 10:42:16.286
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: AMD A8-3850 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 36%
Total physical RAM: 3987.7 MB
Available physical RAM: 2550.18 MB
Total Pagefile: 7973.58 MB
Available Pagefile: 6458.27 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:454.95 GB) (Free:284.81 GB) NTFS
Drive d: (DATA) (Fixed) (Total:455.46 GB) (Free:195.84 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: E080AA7D)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=455.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Hallo, habe alles erledigt, und diesesmal war es sogar schon einfacher...dank des Computerkurs den ich hier bekomme. Das sind für mich alles Sachen die ich nie gewußt hätte, oder je wissen werde. Deshalb ein ganz großes Dankeschön bis jetzt. Ich hoffe ich habe alles richtig gemacht. Gruß Brigitte |
|
08.12.2014, 19:38
| #23 |
| /// TB-Ausbilder | sec_error_unknown_issuer Servus, kommt immer noch die Meldung, von der du von Beginn an berichtet hast? Schritt 1 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 Bitte deaktiviere dein Anti-Viren-Programm, da es das Ergebnis beeinflussen oder ggf. die Bereinigung stören kann. Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/ und speichere die Datei auf deinem Desktop.
Schritt 4
Bitte poste mit deiner nächsten Antwort
|
|
10.12.2014, 13:58
| #24 |
| | sec_error_unknown_issuer Hallo, nein die Meldung kommt nicht mehr. Der Computer hat sich im ganzen verändert. Er läuft viel besser, bis jetzt hat alles geholfen. Jetzt werde ich die aufbekommene Tagesarbeit verichten. Mal schauen ob ich klar komme. LG Brigitte AdwCleaner Logfile: AdwCleaner Logfile: AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.101 - Bericht erstellt am 02/12/2014 um 22:38:40
# Aktualisiert 09/11/2014 von Xplode
# Database : 2014-11-07.1 [Local]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : User - USER-PC
# Gestartet von : C:\Users\User\Downloads\AdwCleaner_4.101(1).exe
# Option : Suchen
***** [ Dienste ] *****
Dienst Gefunden : WindowsMangerProtect
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk
Ordner Gefunden : C:\Program Files (x86)\SupTab
Ordner Gefunden : C:\ProgramData\apn
Ordner Gefunden : C:\ProgramData\Systweak
Ordner Gefunden : C:\ProgramData\WindowsMangerProtect
Ordner Gefunden : C:\Users\User\AppData\Local\Temp\apn
Ordner Gefunden : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\wpo8jc4k.default\Extensions\faststartff@gmail.com
Ordner Gefunden : C:\Users\User\AppData\Roaming\Systweak
Ordner Gefunden : C:\Users\User\AppData\Roaming\webssearches
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Daten Gefunden : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command [(Default)] - "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://istart.webssearches.com/?type=sc&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Daten Gefunden : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect
Schlüssel Gefunden : HKLM\SOFTWARE\SupDp
Schlüssel Gefunden : HKLM\SOFTWARE\supWindowsMangerProtect
Schlüssel Gefunden : HKLM\SOFTWARE\webssearchesSoftware
Schlüssel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16660
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?type=ds&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560&q={searchTerms}
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?type=ds&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560&q={searchTerms}
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?type=ds&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560&q={searchTerms}
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?type=ds&ts=1417526252&from=cvs&uid=395049983_3149584_A40E8560&q={searchTerms}
-\\ Mozilla Firefox v33.1.1 (x86 de)
[wpo8jc4k.default] - Zeile gefunden : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[wpo8jc4k.default] - Zeile gefunden : user_pref("browser.search.defaultenginename", "webssearches");
[wpo8jc4k.default] - Zeile gefunden : user_pref("browser.search.selectedEngine", "webssearches");
[wpo8jc4k.default] - Zeile gefunden : user_pref("extensions.quick_start.enable_search1", false);
[wpo8jc4k.default] - Zeile gefunden : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
-\\ Google Chrome v
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] - Gefunden [Search Provider] : hxxp://de.ask.com/web?q={searchTerms}
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : hphibigbodkkohoglgfkddblldpfohjl
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : kincjchfokkeneeofpeefomkikfkiedl
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gefunden [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc
*************************
AdwCleaner[R0].txt - [6667 octets] - [02/12/2014 22:38:40]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [6727 octets] ##########
--- --- --- --- --- --- --- --- ---AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.105 - Bericht erstellt am 10/12/2014 um 11:22:51
# Aktualisiert 08/12/2014 von Xplode
# Database : 2014-12-08.2 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Brigitte 1 - BRIGITTE-PC
# Gestartet von : C:\Users\Brigitte\Downloads\AdwCleaner_4.105(1).exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gefunden : C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default\searchplugins\ask-web-search.xml
Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk
Datei Gefunden : C:\Users\Public\Desktop\eBay.lnk
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gefunden : HKLM\SOFTWARE\Nico Mak Computing
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}]
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v34.0.5 (x86 de)
[0qniwz70.default] - Zeile gefunden : user_pref("browser.search.defaultenginename", "Ask Web Search");
[0qniwz70.default] - Zeile gefunden : user_pref("browser.search.selectedEngine", "Ask Web Search");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.mywebsearch.prevKwdURL", "hxxps://de.search.yahoo.com/search?fr=mcafee&type=B111DE662D20141127&p=");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.BUTTON_STRUCTURE", "[{\"b\":221525069,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221525070,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.prev", "Sichere Suche");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.savedPrev", "true");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.prev", "Sichere Suche");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.savedPrev", "true");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.prev", "about:home");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.savedPrev", "true");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&p2=^AYY^xdm070^LADEDE^de&si=fl[...]
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.savedPrev", 1);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.tb", 1);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.version.last", "34.0");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.firstKnownVersion", "6.83.5.45395");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&p2=^AYY^xdm070^LADEDE^de&si=flvrunner");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.enabled", false);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.guardType", "HPR");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.user.defined", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.initialized", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installKeysSource", "LocalStorage");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installType", "XPI");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.contextKey", "");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.installDate", "2014120804");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerId", "^AYY^xdm070^LADEDE^de");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId", "flvrunner");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.pixelUrl", "hxxp://download.allin1convert.com/install_pixels.jhtml?partner=^AYY^xdm070^LADEDE^de&sub_id=flvrunner&coId=0d75c04054fd4d48[...]
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.success", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.toolbarId", "F5BB0AEE-32B5-433F-9420-A632C098CCE5");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.isCompliantUninstallImplementation", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.lastActivePing", "1418051569187");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.lastKnownVersion", "6.83.5.45395");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.defaultSearch", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.options.tabEnabled", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.partnerPixelFired", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.searchHistory", "FRST.exe");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.successUrl", "hxxp://flvrunner.com/thankyou.php");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbar.ownSearch", true);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbarCollapsed", false);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark._8hMembers_.weather.location", "10001");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
[0qniwz70.default] - Zeile gefunden : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");
[0qniwz70.default] - Zeile gefunden : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&ind=2014120804&p2=^AYY^xdm070^LADEDE^de&si=flvrunner&searchfor=");
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [15483 octets] - [02/12/2014 22:38:40]
AdwCleaner[R1].txt - [935 octets] - [27/11/2014 18:48:58]
AdwCleaner[S0].txt - [6199 octets] - [02/12/2014 22:40:05]
AdwCleaner[S1].txt - [995 octets] - [27/11/2014 18:50:44]
AdwCleaner Logfile:
--- --- --- AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.101 - Bericht erstellt am 02/12/2014 um 22:40:05
# Aktualisiert 09/11/2014 von Xplode
# Database : 2014-11-07.1 [Local]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : User - USER-PC
# Gestartet von : C:\Users\User\Downloads\AdwCleaner_4.101(1).exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : WindowsMangerProtect
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\WindowsMangerProtect
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Users\User\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\User\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\User\AppData\Roaming\webssearches
Ordner Gelöscht : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\wpo8jc4k.default\Extensions\faststartff@gmail.com
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\supWindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\webssearchesSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16660
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v33.1.1 (x86 de)
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "webssearches");
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "webssearches");
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
-\\ Google Chrome v
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://de.ask.com/web?q={searchTerms}
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : hphibigbodkkohoglgfkddblldpfohjl
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : kincjchfokkeneeofpeefomkikfkiedl
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc
*************************
AdwCleaner[R0].txt - [6839 octets] - [02/12/2014 22:38:40]
AdwCleaner[S0].txt - [6035 octets] - [02/12/2014 22:40:05]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6095 octets] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.105 - Bericht erstellt am 10/12/2014 um 11:27:52
# Aktualisiert 08/12/2014 von Xplode
# Database : 2014-12-08.2 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Brigitte 1 - BRIGITTE-PC
# Gestartet von : C:\Users\Brigitte\Downloads\AdwCleaner_4.105(1).exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default\searchplugins\ask-web-search.xml
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Nico Mak Computing
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v34.0.5 (x86 de)
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdURL", "hxxps://de.search.yahoo.com/search?fr=mcafee&type=B111DE662D20141127&p=");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.BUTTON_STRUCTURE", "[{\"b\":221525069,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221525070,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.prev", "Sichere Suche");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.savedPrev", "true");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.prev", "Sichere Suche");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.savedPrev", "true");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.prev", "about:home");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.savedPrev", "true");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&p2=^AYY^xdm070^LADEDE^de&si=fl[...]
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.savedPrev", 1);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.tb", 1);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.version.last", "34.0");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.firstKnownVersion", "6.83.5.45395");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&p2=^AYY^xdm070^LADEDE^de&si=flvrunner");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.enabled", false);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.guardType", "HPR");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.user.defined", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.initialized", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installKeysSource", "LocalStorage");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installType", "XPI");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.contextKey", "");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.installDate", "2014120804");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerId", "^AYY^xdm070^LADEDE^de");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId", "flvrunner");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.pixelUrl", "hxxp://download.allin1convert.com/install_pixels.jhtml?partner=^AYY^xdm070^LADEDE^de&sub_id=flvrunner&coId=0d75c04054fd4d48[...]
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.success", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.toolbarId", "F5BB0AEE-32B5-433F-9420-A632C098CCE5");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.isCompliantUninstallImplementation", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastActivePing", "1418051569187");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastKnownVersion", "6.83.5.45395");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.defaultSearch", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.tabEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.partnerPixelFired", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.searchHistory", "FRST.exe");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.successUrl", "hxxp://flvrunner.com/thankyou.php");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbar.ownSearch", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbarCollapsed", false);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.weather.location", "10001");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&ind=2014120804&p2=^AYY^xdm070^LADEDE^de&si=flvrunner&searchfor=");
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [15803 octets] - [02/12/2014 22:38:40]
AdwCleaner[R1].txt - [935 octets] - [27/11/2014 18:48:58]
AdwCleaner[S0].txt - [15354 octets] - [02/12/2014 22:40:05]
AdwCleaner[S1].txt - [995 octets] - [27/11/2014 18:50:44]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15474 octets] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.102 - Bericht erstellt am 27/11/2014 um 18:50:44
# Aktualisiert 23/11/2014 von Xplode
# Database : 2014-11-27.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : User - USER-PC
# Gestartet von : C:\Users\User\Downloads\adwcleaner_4.102.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16660
-\\ Mozilla Firefox v33.1.1 (x86 de)
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [6839 octets] - [02/12/2014 22:38:40]
AdwCleaner[R1].txt - [935 octets] - [27/11/2014 18:48:58]
AdwCleaner[S0].txt - [6199 octets] - [02/12/2014 22:40:05]
AdwCleaner[S1].txt - [857 octets] - [27/11/2014 18:50:44]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [916 octets] ##########
Malwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Scan Date: 10.12.2014 Scan Time: 11:59:21 Logfile: Malware.txt Administrator: No Version: 2.00.4.1028 Malware Database: v2014.12.10.05 Rootkit Database: v2014.12.08.03 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Brigitte Scan Type: Threat Scan Result: Completed Objects Scanned: 274592 Time Elapsed: 9 min, 1 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) alwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Update, 10.12.2014 11:38:10, SYSTEM, BRIGITTE-PC, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1, Update, 10.12.2014 11:38:10, SYSTEM, BRIGITTE-PC, Manual, Rootkit Database, 2014.11.18.1, 2014.12.8.3, Protection, 10.12.2014 11:38:12, SYSTEM, BRIGITTE-PC, Protection, Malware Protection, Starting, Protection, 10.12.2014 11:38:12, SYSTEM, BRIGITTE-PC, Protection, Malware Protection, Started, Protection, 10.12.2014 11:38:12, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Starting, Protection, 10.12.2014 11:38:15, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Started, Update, 10.12.2014 11:38:17, SYSTEM, BRIGITTE-PC, Manual, Malware Database, 2014.11.20.6, 2014.12.10.5, Protection, 10.12.2014 11:38:17, SYSTEM, BRIGITTE-PC, Protection, Refresh, Starting, Protection, 10.12.2014 11:38:17, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Stopping, Protection, 10.12.2014 11:38:18, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Stopped, Protection, 10.12.2014 11:38:24, SYSTEM, BRIGITTE-PC, Protection, Refresh, Success, Protection, 10.12.2014 11:38:24, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Starting, Protection, 10.12.2014 11:38:24, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Started, Scan, 10.12.2014 11:54:36, SYSTEM, BRIGITTE-PC, Manual, Start:10.12.2014 11:38:18, Duration:15 min 32 sec, Threat Scan, Completed, 0 Malware Detections, 3 Non-Malware Detections, Protection, 10.12.2014 11:56:38, SYSTEM, BRIGITTE-PC, Protection, Malware Protection, Starting, Protection, 10.12.2014 11:56:38, SYSTEM, BRIGITTE-PC, Protection, Malware Protection, Started, Protection, 10.12.2014 11:56:38, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Starting, Protection, 10.12.2014 11:57:02, SYSTEM, BRIGITTE-PC, Protection, Malicious Website Protection, Started, Scan, 10.12.2014 12:08:23, SYSTEM, BRIGITTE-PC, Manual, Start:10.12.2014 11:59:21, Duration:9 min 1 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, (end) Malwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Scan Date: 10.12.2014 Scan Time: 11:38:18 Logfile: Malware 3.txt Administrator: Yes Version: 2.00.4.1028 Malware Database: v2014.12.10.05 Rootkit Database: v2014.12.08.03 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Brigitte 1 Scan Type: Threat Scan Result: Completed Objects Scanned: 419237 Time Elapsed: 15 min, 32 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 1 PUP.Optional.MindSpark.A, C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default\Allin1Convert_8h, Quarantined, [58d594cda5d7ca6c955648d9b94a6f91], Files: 2 PUP.Optional.OutBrowse, C:\Users\Brigitte 1\Downloads\avast-free-antivirus.exe, Quarantined, [30fda1c0c8b47cbaf46fb5125ea4f907], PUP.Optional.MindSpark.A, C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default\Allin1Convert_8h\F5BB0AEE-32B5-433F-9420-A632C098CCE5.sqlite, Quarantined, [58d594cda5d7ca6c955648d9b94a6f91], Physical Sectors: 0 (No malicious items detected) (end) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.101 - Bericht erstellt am 02/12/2014 um 22:40:05
# Aktualisiert 09/11/2014 von Xplode
# Database : 2014-11-07.1 [Local]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : User - USER-PC
# Gestartet von : C:\Users\User\Downloads\AdwCleaner_4.101(1).exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : WindowsMangerProtect
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\WindowsMangerProtect
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Users\User\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\User\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\User\AppData\Roaming\webssearches
Ordner Gelöscht : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\wpo8jc4k.default\Extensions\faststartff@gmail.com
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\supWindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\webssearchesSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16660
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v33.1.1 (x86 de)
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "webssearches");
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "webssearches");
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[wpo8jc4k.default\prefs.js] - Zeile gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
-\\ Google Chrome v
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://de.ask.com/web?q={searchTerms}
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : hphibigbodkkohoglgfkddblldpfohjl
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : kincjchfokkeneeofpeefomkikfkiedl
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc
*************************
AdwCleaner[R0].txt - [6839 octets] - [02/12/2014 22:38:40]
AdwCleaner[S0].txt - [6035 octets] - [02/12/2014 22:40:05]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6095 octets] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v4.105 - Bericht erstellt am 10/12/2014 um 11:27:52
# Aktualisiert 08/12/2014 von Xplode
# Database : 2014-12-08.2 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Brigitte 1 - BRIGITTE-PC
# Gestartet von : C:\Users\Brigitte\Downloads\AdwCleaner_4.105(1).exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default\searchplugins\ask-web-search.xml
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Nico Mak Computing
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v34.0.5 (x86 de)
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.mywebsearch.prevKwdURL", "hxxps://de.search.yahoo.com/search?fr=mcafee&type=B111DE662D20141127&p=");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.BUTTON_STRUCTURE", "[{\"b\":221525069,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221525070,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.prev", "Sichere Suche");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.savedPrev", "true");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.prev", "Sichere Suche");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.savedPrev", "true");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.prev", "about:home");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.savedPrev", "true");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&p2=^AYY^xdm070^LADEDE^de&si=fl[...]
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.savedPrev", 1);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.startup.page.tb", 1);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.browser.version.last", "34.0");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.firstKnownVersion", "6.83.5.45395");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&p2=^AYY^xdm070^LADEDE^de&si=flvrunner");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.enabled", false);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.guardType", "HPR");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.hp.user.defined", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.initialized", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installKeysSource", "LocalStorage");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installType", "XPI");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.contextKey", "");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.installDate", "2014120804");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerId", "^AYY^xdm070^LADEDE^de");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.partnerSubId", "flvrunner");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.pixelUrl", "hxxp://download.allin1convert.com/install_pixels.jhtml?partner=^AYY^xdm070^LADEDE^de&sub_id=flvrunner&coId=0d75c04054fd4d48[...]
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.success", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.installation.toolbarId", "F5BB0AEE-32B5-433F-9420-A632C098CCE5");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.isCompliantUninstallImplementation", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastActivePing", "1418051569187");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.lastKnownVersion", "6.83.5.45395");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.defaultSearch", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.homePageEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.keywordEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.options.tabEnabled", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.partnerPixelFired", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.searchHistory", "FRST.exe");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.successUrl", "hxxp://flvrunner.com/thankyou.php");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbar.ownSearch", true);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.toolbarCollapsed", false);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark._8hMembers_.weather.location", "10001");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("extensions.toolbar.mindspark.lastInstalled", "allin1convert@mindspark.com");
[0qniwz70.default\prefs.js] - Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=F5BB0AEE-32B5-433F-9420-A632C098CCE5&n=780d0b64&ind=2014120804&p2=^AYY^xdm070^LADEDE^de&si=flvrunner&searchfor=");
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [15803 octets] - [02/12/2014 22:38:40]
AdwCleaner[R1].txt - [935 octets] - [27/11/2014 18:48:58]
AdwCleaner[S0].txt - [15354 octets] - [02/12/2014 22:40:05]
AdwCleaner[S1].txt - [995 octets] - [27/11/2014 18:50:44]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15474 octets] ##########
Download zoek.exe version 5.0.0.0 hat nicht geklappt bei mir... FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-12-2014
Ran by Brigitte 1 at 2014-12-10 13:52:36
Running from C:\Users\Brigitte 1\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
clear.fi (x32 Version: 1.5.1717_38186 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8031 - CyberLink Corp.) Hidden
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3505 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3503 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
AMD Catalyst Install Manager (HKLM\...\{682EBE5A-58A4-37ED-7D1B-5AB6182BF8D5}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{C28D96C0-6A90-459E-A077-A6706F4EC0FC}) (Version: 7.0.765.0 - Microsoft Corporation)
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version: - )
clear.fi (HKLM-x32\...\InstallShield_{37126D87-E4FD-4614-B908-A0BB7ECE3992}) (Version: 1.5.2428.35 - CyberLink Corp.)
clear.fi (x32 Version: 1.5.2428.35 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.05.3002 - Acer Incorporated)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG)
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.5.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.3.1540.3 - AMD)
RAIDXpert (x32 Version: 3.3.1540.3 - AMD) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
TP-LINK-Clientinstallationsprogramm (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.4000.260 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.10.2 - Tweaking.com)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
28-11-2014 10:38:52 Installiert TL-WN821N-Drahtlos-Tool
28-11-2014 10:39:17 Gerätetreiber-Paketinstallation: TP-LINK Netzwerkadapter
28-11-2014 10:40:37 Gerätetreiber-Paketinstallation: TP-LINK Netzwerkadapter
28-11-2014 10:42:56 Windows Update
28-11-2014 10:53:55 avast! antivirus system restore point
28-11-2014 11:16:23 avast! antivirus system restore point
28-11-2014 11:35:38 TuneUp Utilities 2013 wird installiert
28-11-2014 12:05:18 Windows-Sicherung
10-12-2014 10:45:10 Windows Update
10-12-2014 11:32:47 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2014-12-08 16:42 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {045155C1-E747-4CC7-AC63-38DEDC2DE799} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {225632C6-7724-4431-B60A-0AB39A57E07A} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-12-28] (CyberLink Corp.)
Task: {601C9D06-438C-46C5-B2CF-5B3EA2322049} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-12-28] (Acer Incorporated)
Task: {712CB9AB-A9E3-4B18-B434-4DB115829148} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2011-09-05] (Acer)
Task: {8431A5BB-295F-4B30-9588-F2A08E3F5F3C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28] (Google Inc.)
Task: {9BD68435-7DAD-4BDB-B296-397B4FEB8E70} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-12-28] (CyberLink)
Task: {B0E3552C-329E-4F5D-A95F-B72BC659E408} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-02] (AVAST Software)
Task: {C2A0BED8-175D-4007-925C-FF0EB63A458C} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-09-04] (Adobe Systems Incorporated)
Task: {C44DBA1A-B389-497F-8036-046B470F0F6C} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-06] (Acer Incorporated)
Task: {DDC060F6-0393-4BD7-B4F7-45546CB8FE90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {FC53D2A2-102C-4D59-ADE0-00D735CCC33E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-28 12:34 - 2014-01-28 12:34 - 00741176 _____ () C:\Program Files (x86)\TuneUp Utilities 2013\avgrepliba.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-12-10 10:54 - 2014-12-10 10:54 - 02905088 _____ () C:\Program Files\AVAST Software\Avast\defs\14121000\algo.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-12-02 18:37 - 2014-12-02 18:37 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-27 22:25 - 2011-12-28 03:47 - 00370984 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2014-11-28 11:47 - 2014-11-26 17:40 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-2250872989-3983632255-1168934311-500 - Administrator - Disabled)
Brigitte (S-1-5-21-2250872989-3983632255-1168934311-1000 - Limited - Enabled) => C:\Users\Brigitte
Brigitte 1 (S-1-5-21-2250872989-3983632255-1168934311-1001 - Administrator - Enabled) => C:\Users\Brigitte 1
Gast (S-1-5-21-2250872989-3983632255-1168934311-501 - Limited - Disabled)
Jürgen (S-1-5-21-2250872989-3983632255-1168934311-1003 - Administrator - Enabled) => C:\Users\Jürgen
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:26:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 03:56:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 09:56:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (12/08/2014 09:46:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 04:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 03:46:41 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\wbem\wmiprvse.exe; Beschreibung = ComboFix created restore point; Fehler = 0x80042302).
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "GetProviderMgmtInterface" ist ein unerwarteter Fehler aufgetreten. hr = 0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
.
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 12292) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
] ist ein Fehler aufgetreten.
Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen
Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
System errors:
=============
Error: (12/10/2014 01:40:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Defender" wurde mit folgendem Fehler beendet:
%%-2147023113
Error: (12/10/2014 01:38:25 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/10/2014 11:56:17 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/10/2014 11:29:05 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/10/2014 10:54:02 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 07:07:41 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 05:10:35 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 04:47:16 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 04:45:58 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (12/08/2014 04:45:21 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Microsoft Office Sessions:
=========================
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:26:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 03:56:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 09:56:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: G:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (12/08/2014 09:46:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 04:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 03:46:41 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x80042302
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 8193) (User: )
Description: GetProviderMgmtInterface0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 12292) (User: )
Description: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen
Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
CodeIntegrity Errors:
===================================
Date: 2014-12-04 10:42:16.364
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-12-04 10:42:16.286
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: AMD A8-3850 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 37%
Total physical RAM: 3987.7 MB
Available physical RAM: 2498.64 MB
Total Pagefile: 7973.58 MB
Available Pagefile: 6114.79 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:454.95 GB) (Free:279.34 GB) NTFS
Drive d: (DATA) (Fixed) (Total:455.46 GB) (Free:195.84 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: E080AA7D)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=455.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-12-2014
Ran by Brigitte 1 at 2014-12-10 13:52:36
Running from C:\Users\Brigitte 1\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
clear.fi (x32 Version: 1.5.1717_38186 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8031 - CyberLink Corp.) Hidden
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3505 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3503 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.246 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
AMD Catalyst Install Manager (HKLM\...\{682EBE5A-58A4-37ED-7D1B-5AB6182BF8D5}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.0.2208 - AVAST Software)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{C28D96C0-6A90-459E-A077-A6706F4EC0FC}) (Version: 7.0.765.0 - Microsoft Corporation)
Canon MP550 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series) (Version: - )
clear.fi (HKLM-x32\...\InstallShield_{37126D87-E4FD-4614-B908-A0BB7ECE3992}) (Version: 1.5.2428.35 - CyberLink Corp.)
clear.fi (x32 Version: 1.5.2428.35 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.05.3002 - Acer Incorporated)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.25 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.15 - Egis Technology Inc.) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG)
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.5.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG)
Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
RAIDXpert (HKLM-x32\...\InstallShield_{8B76B8E9-F773-4B75-A08C-120079EB765E}) (Version: 3.3.1540.3 - AMD)
RAIDXpert (x32 Version: 3.3.1540.3 - AMD) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
TP-LINK-Clientinstallationsprogramm (HKLM-x32\...\{7A2A107B-9695-423F-9462-8F17C178BD35}) (Version: 7.0 - TP-LINK)
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.4000.260 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.260 - TuneUp Software) Hidden
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 2.10.2 - Tweaking.com)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (Acer Games) (x32 Version: 4.0.5.14 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
28-11-2014 10:38:52 Installiert TL-WN821N-Drahtlos-Tool
28-11-2014 10:39:17 Gerätetreiber-Paketinstallation: TP-LINK Netzwerkadapter
28-11-2014 10:40:37 Gerätetreiber-Paketinstallation: TP-LINK Netzwerkadapter
28-11-2014 10:42:56 Windows Update
28-11-2014 10:53:55 avast! antivirus system restore point
28-11-2014 11:16:23 avast! antivirus system restore point
28-11-2014 11:35:38 TuneUp Utilities 2013 wird installiert
28-11-2014 12:05:18 Windows-Sicherung
10-12-2014 10:45:10 Windows Update
10-12-2014 11:32:47 Windows Update
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2014-12-08 16:42 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {045155C1-E747-4CC7-AC63-38DEDC2DE799} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {225632C6-7724-4431-B60A-0AB39A57E07A} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-12-28] (CyberLink Corp.)
Task: {601C9D06-438C-46C5-B2CF-5B3EA2322049} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-12-28] (Acer Incorporated)
Task: {712CB9AB-A9E3-4B18-B434-4DB115829148} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2011-09-05] (Acer)
Task: {8431A5BB-295F-4B30-9588-F2A08E3F5F3C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28] (Google Inc.)
Task: {9BD68435-7DAD-4BDB-B296-397B4FEB8E70} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-12-28] (CyberLink)
Task: {B0E3552C-329E-4F5D-A95F-B72BC659E408} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-12-02] (AVAST Software)
Task: {C2A0BED8-175D-4007-925C-FF0EB63A458C} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2014-09-04] (Adobe Systems Incorporated)
Task: {C44DBA1A-B389-497F-8036-046B470F0F6C} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-06] (Acer Incorporated)
Task: {DDC060F6-0393-4BD7-B4F7-45546CB8FE90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10] (Adobe Systems Incorporated)
Task: {FC53D2A2-102C-4D59-ADE0-00D735CCC33E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-28] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-28 12:34 - 2014-01-28 12:34 - 00741176 _____ () C:\Program Files (x86)\TuneUp Utilities 2013\avgrepliba.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 00388208 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxDDU.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 05851328 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxRT.dll
2014-12-10 10:54 - 2014-12-10 10:54 - 02905088 _____ () C:\Program Files\AVAST Software\Avast\defs\14121000\algo.dll
2014-12-02 18:36 - 2014-12-02 18:36 - 04495336 _____ () C:\Program Files\AVAST Software\Avast\ng\vbox\x86\VBoxRT-x86.dll
2014-12-02 18:37 - 2014-12-02 18:37 - 38562088 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-11-27 22:25 - 2011-12-28 03:47 - 00370984 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll
2014-11-28 11:47 - 2014-11-26 17:40 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
========================= Accounts: ==========================
Administrator (S-1-5-21-2250872989-3983632255-1168934311-500 - Administrator - Disabled)
Brigitte (S-1-5-21-2250872989-3983632255-1168934311-1000 - Limited - Enabled) => C:\Users\Brigitte
Brigitte 1 (S-1-5-21-2250872989-3983632255-1168934311-1001 - Administrator - Enabled) => C:\Users\Brigitte 1
Gast (S-1-5-21-2250872989-3983632255-1168934311-501 - Limited - Disabled)
Jürgen (S-1-5-21-2250872989-3983632255-1168934311-1003 - Administrator - Enabled) => C:\Users\Jürgen
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:26:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 03:56:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 09:56:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "G:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"
Error: (12/08/2014 09:46:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 04:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 03:46:41 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\wbem\wmiprvse.exe; Beschreibung = ComboFix created restore point; Fehler = 0x80042302).
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "GetProviderMgmtInterface" ist ein unerwarteter Fehler aufgetreten. hr = 0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
.
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 12292) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Erstellen der Schattenkopieanbieter-COM-Klasse mit CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
] ist ein Fehler aufgetreten.
Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen
Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
System errors:
=============
Error: (12/10/2014 01:40:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Defender" wurde mit folgendem Fehler beendet:
%%-2147023113
Error: (12/10/2014 01:38:25 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/10/2014 11:56:17 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/10/2014 11:29:05 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/10/2014 10:54:02 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 07:07:41 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 05:10:35 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 04:47:16 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.
Modulpfad: C:\Windows\system32\athExt.dll
Fehlercode: 126
Error: (12/08/2014 04:45:58 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (12/08/2014 04:45:21 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "Start" aufgrund folgenden Fehlers fehlgeschlagen:
%%5
Microsoft Office Sessions:
=========================
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:47:35 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_64) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown
Error: (12/08/2014 04:26:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 03:56:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/08/2014 09:56:18 AM) (Source: Windows Backup) (EventID: 4103) (User: )
Description: G:\Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)
Error: (12/08/2014 09:46:24 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 04:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/07/2014 03:46:41 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\wbem\wmiprvse.exeComboFix created restore point0x80042302
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 8193) (User: )
Description: GetProviderMgmtInterface0x8004230f, Unerwarteter Fehler beim Schattenkopieanbieter bei dem Versuch, den angegebenen Vorgang zu verarbeiten.
Error: (12/07/2014 03:46:41 PM) (Source: VSS) (EventID: 12292) (User: )
Description: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a}0x80070422, Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Vorgang:
Für diesen Anbieter eine aufrufbare Schnittstelle abrufen
Anbieterverwaltungsschnittstelle wird abgerufen
Kontext:
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Klassen-ID: {00000000-0000-0000-0000-000000000000}
Snapshotkontext: -1
Anbieter-ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
CodeIntegrity Errors:
===================================
Date: 2014-12-04 10:42:16.364
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-12-04 10:42:16.286
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Processor: AMD A8-3850 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 37%
Total physical RAM: 3987.7 MB
Available physical RAM: 2498.64 MB
Total Pagefile: 7973.58 MB
Available Pagefile: 6114.79 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:454.95 GB) (Free:279.34 GB) NTFS
Drive d: (DATA) (Fixed) (Total:455.46 GB) (Free:195.84 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: E080AA7D)
Partition 1: (Not Active) - (Size=21 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=455.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
10.12.2014, 14:05
| #25 |
| | sec_error_unknown_issuer ST.txt) (x64) Version: 10-12-2014 Ran by Brigitte 1 (administrator) on BRIGITTE-PC on 10-12-2014 13:51:45 Running from C:\Users\Brigitte 1\Downloads Loaded Profile: Brigitte 1 (Available profiles: Brigitte & Brigitte 1 & Jürgen) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (AMD) C:\Windows\System32\atieclxx.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLMSService.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Farbar) C:\Users\Brigitte 1\Downloads\FRST64(1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-02] (AVAST Software) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2250872989-3983632255-1168934311-1001 -> {C1B0A9B3-2A28-4C1D-91C0-F040FD14EF05} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE662D20141127&p={SearchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default FF SearchEngineOrder.1: Sichere Suche FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-02] Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Profile: C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-02] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-02] CHR Extension: (Google Search) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-02] CHR Extension: (Avast Online Security) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-02] CHR Extension: (Google Wallet) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-02] CHR Extension: (Google Mail) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-02] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-02] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2009-07-14] (Microsoft Corporation) [File not signed] S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-14] (Microsoft Corporation) [File not signed] R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [204288 2011-10-26] (AMD) [File not signed] S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [32256 2009-07-14] (Microsoft Corporation) [File not signed] R3 Appinfo; C:\Windows\System32\appinfo.dll [70144 2013-02-27] (Microsoft Corporation) [File not signed] R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed] R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-02] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-02] (Avast Software) S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-21] (Microsoft Corporation) [File not signed] S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-14] (Microsoft Corporation) [File not signed] R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-21] (Microsoft Corporation) [File not signed] R2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-21] (Microsoft Corporation) [File not signed] R3 Browser; C:\Windows\System32\browser.dll [136704 2012-07-04] (Microsoft Corporation) [File not signed] S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-14] (Microsoft Corporation) [File not signed] S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed] S3 COMSysApp; C:\Windows\system32\dllhost.exe [9728 2009-07-14] (Microsoft Corporation) [File not signed] S3 COMSysApp; C:\Windows\SysWOW64\dllhost.exe [7168 2009-07-14] (Microsoft Corporation) [File not signed] R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [187904 2014-07-07] (Microsoft Corporation) [File not signed] R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [143872 2014-07-07] (Microsoft Corporation) [File not signed] R2 DcomLaunch; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed] S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Microsoft Corporation) [File not signed] R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-21] (Microsoft Corporation) [File not signed] R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-21] (Microsoft Corporation) [File not signed] R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2011-03-03] (Microsoft Corporation) [File not signed] S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-21] (Microsoft Corporation) [File not signed] R2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-21] (Microsoft Corporation) [File not signed] R3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-14] (Microsoft Corporation) [File not signed] S3 EFS; C:\Windows\System32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S2 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-21] (Microsoft Corporation) [File not signed] S2 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-14] (Microsoft Corporation) [File not signed] R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-21] (Microsoft Corporation) [File not signed] R2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-14] (Microsoft Corporation) [File not signed] R2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-14] (Microsoft Corporation) [File not signed] S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-21] (Microsoft Corporation) [File not signed] S3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-14] (Microsoft Corporation) [File not signed] R2 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-14] (Microsoft Corporation) [File not signed] R2 FontCache; C:\Windows\system32\FntCache.dll [1175552 2014-11-30] (Microsoft Corporation) [File not signed] R2 gpsvc; C:\Windows\System32\gpsvc.dll [777728 2010-11-21] (Microsoft Corporation) [File not signed] R3 hidserv; C:\Windows\system32\hidserv.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed] R3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-14] (Microsoft Corporation) [File not signed] S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-11-21] (Microsoft Corporation) [File not signed] S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2014-11-22] (Microsoft Corporation) [File not signed] S3 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-12] (Microsoft Corporation) [File not signed] S3 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-14] (Microsoft Corporation) [File not signed] R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2012-10-03] (Microsoft Corporation) [File not signed] R3 KeyIso; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-14] (Microsoft Corporation) [File not signed] R2 LanmanServer; C:\Windows\System32\srvsvc.dll [236032 2010-11-21] (Microsoft Corporation) [File not signed] R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-21] (Microsoft Corporation) [File not signed] S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-14] (Microsoft Corporation) [File not signed] R2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-14] (Microsoft Corporation) [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-21] (Microsoft Corporation) [File not signed] R2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed] R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-21] (Microsoft Corporation) [File not signed] S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-14] (Microsoft Corporation) [File not signed] S3 msiserver; C:\Windows\System32\msiexec.exe [128000 2010-11-21] (Microsoft Corporation) [File not signed] S3 msiserver; C:\Windows\SysWOW64\msiexec.exe [73216 2010-11-21] (Microsoft Corporation) [File not signed] S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-21] (Microsoft Corporation) [File not signed] S3 Netlogon; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed] R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-14] (Microsoft Corporation) [File not signed] R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed] R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303104 2012-10-03] (Microsoft Corporation) [File not signed] S4 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-14] (Microsoft Corporation) [File not signed] S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed] S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-14] (Microsoft Corporation) [File not signed] R2 PcaSvc; C:\Windows\System32\pcasvc.dll [186368 2009-07-14] (Microsoft Corporation) [File not signed] S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-14] (Microsoft Corporation) [File not signed] S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-21] (Microsoft Corporation) [File not signed] S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-21] (Microsoft Corporation) [File not signed] R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2011-05-24] (Microsoft Corporation) [File not signed] S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-14] (Microsoft Corporation) [File not signed] S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed] R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [501248 2010-11-21] (Microsoft Corporation) [File not signed] R2 Power; C:\Windows\system32\umpo.dll [163840 2009-07-14] (Microsoft Corporation) [File not signed] R2 ProfSvc; C:\Windows\system32\profsvc.dll [209920 2012-05-01] (Microsoft Corporation) [File not signed] S3 ProtectedStorage; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed] S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-21] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-14] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed] S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-14] (Microsoft Corporation) [File not signed] R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-14] (Microsoft Corporation) [File not signed] S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-14] (Microsoft Corporation) [File not signed] R2 RpcSs; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed] R2 SamSs; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-14] (Microsoft Corporation) [File not signed] R2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2010-11-21] (Microsoft Corporation) [File not signed] S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed] R3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-21] (Microsoft Corporation) [File not signed] S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2010-11-21] (Microsoft Corporation) [File not signed] R2 SENS; C:\Windows\system32\sens.dll [64512 2009-07-14] (Microsoft Corporation) [File not signed] R2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-14] (Microsoft Corporation) [File not signed] S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-14] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-21] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-21] (Microsoft Corporation) [File not signed] S4 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-14] (Microsoft Corporation) [File not signed] R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-21] (Microsoft Corporation) [File not signed] R2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-11-21] (Microsoft Corporation) [File not signed] S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-14] (Microsoft Corporation) [File not signed] R2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2012-02-11] (Microsoft Corporation) [File not signed] S2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-21] (Microsoft Corporation) [File not signed] S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed] R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-14] (Microsoft Corporation) [File not signed] R3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed] R2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-21] (Microsoft Corporation) [File not signed] S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-14] (Microsoft Corporation) [File not signed] R2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2010-11-21] (Microsoft Corporation) [File not signed] S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-21] (Microsoft Corporation) [File not signed] R3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-21] (Microsoft Corporation) [File not signed] R3 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-21] (Microsoft Corporation) [File not signed] S3 TBS; C:\Windows\System32\tbssvc.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed] R2 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-14] (Microsoft Corporation) [File not signed] R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation) [File not signed] S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed] R2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-14] (Microsoft Corporation) [File not signed] R3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-21] (Microsoft Corporation) [File not signed] R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software) S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-14] (Microsoft Corporation) [File not signed] R3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-14] (Microsoft Corporation) [File not signed] R3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-14] (Microsoft Corporation) [File not signed] R2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed] S3 VaultSvc; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-21] (Microsoft Corporation) [File not signed] S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-21] (Microsoft Corporation) [File not signed] S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-14] (Microsoft Corporation) [File not signed] S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-21] (Microsoft Corporation) [File not signed] S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-14] (Microsoft Corporation) [File not signed] S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-21] (Microsoft Corporation) [File not signed] S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-21] (Microsoft Corporation) [File not signed] S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-14] (Microsoft Corporation) [File not signed] S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiServiceHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiSystemHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed] S3 WebClient; C:\Windows\System32\webclnt.dll [259584 2013-07-04] (Microsoft Corporation) [File not signed] S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [205824 2013-07-04] (Microsoft Corporation) [File not signed] S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-14] (Microsoft Corporation) [File not signed] S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-14] (Microsoft Corporation) [File not signed] S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-14] (Microsoft Corporation) [File not signed] S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) [File not signed] R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444416 2010-11-21] (Microsoft Corporation) [File not signed] R3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-21] (Microsoft Corporation) [File not signed] R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed] S3 WinRM; C:\Windows\system32\WsmSvc.dll [2020352 2014-10-03] (Microsoft Corporation) [File not signed] S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1177088 2014-10-03] (Microsoft Corporation) [File not signed] R2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-14] (Microsoft Corporation) [File not signed] S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-14] (Microsoft Corporation) [File not signed] S2 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-21] (Microsoft Corporation) [File not signed] S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Microsoft Corporation) [File not signed] S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Microsoft Corporation) [File not signed] R3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-21] (Microsoft Corporation) [File not signed] R2 wscsvc; C:\Windows\system32\wscsvc.dll [97280 2009-07-14] (Microsoft Corporation) [File not signed] R2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2011-05-04] (Microsoft Corporation) [File not signed] R2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2011-05-04] (Microsoft Corporation) [File not signed] R3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-26] (Microsoft Corporation) [File not signed] S3 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-28] (Microsoft Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-21] (Microsoft Corporation) [File not signed] S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-21] (Microsoft Corporation) [File not signed] R1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-30] (Microsoft Corporation) [File not signed] S3 AmdK8; C:\Windows\system32\drivers\amdk8.sys [64512 2009-07-14] (Microsoft Corporation) [File not signed] R3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [10496512 2011-10-26] (ATI Technologies Inc.) [File not signed] R3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [326656 2011-10-26] (Advanced Micro Devices, Inc.) [File not signed] R3 AmdPPM; C:\Windows\System32\DRIVERS\amdppm.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed] S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2010-11-21] (Microsoft Corporation) [File not signed] U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) [File not signed] R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-02] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-02] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-02] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-02] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-02] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-02] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-02] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-02] () S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] (Microsoft Corporation) [File not signed] R3 athur; C:\Windows\System32\DRIVERS\athurx.sys [1847296 2010-04-20] (Atheros Communications, Inc.) [File not signed] S3 b06bdrv; C:\Windows\system32\drivers\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation) [File not signed] S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation) [File not signed] R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] (Microsoft Corporation) [File not signed] R1 blbdrive; C:\Windows\system32\drivers\blbdrive.sys [45056 2009-07-14] (Microsoft Corporation) [File not signed] R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] (Microsoft Corporation) [File not signed] S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) [File not signed] S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) [File not signed] S3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-14] (Microsoft Corporation) [File not signed] S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] (Brother Industries Ltd.) [File not signed] S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BTHMODEM; C:\Windows\system32\drivers\bthmodem.sys [72192 2009-07-14] (Microsoft Corporation) [File not signed] S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] (Microsoft Corporation) [File not signed] R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-21] (Microsoft Corporation) [File not signed] S3 circlass; C:\Windows\system32\drivers\circlass.sys [45568 2009-07-14] (Microsoft Corporation) [File not signed] S3 CmBatt; C:\Windows\system32\drivers\CmBatt.sys [17664 2009-07-14] (Microsoft Corporation) [File not signed] R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-21] (Microsoft Corporation) [File not signed] R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-21] (Microsoft Corporation) [File not signed] R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed] S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] (Microsoft Corporation) [File not signed] S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) [File not signed] S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed] S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] (Microsoft Corporation) [File not signed] S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] (Microsoft Corporation) [File not signed] S3 fdc; C:\Windows\system32\drivers\fdc.sys [29696 2009-07-14] (Microsoft Corporation) [File not signed] S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] (Microsoft Corporation) [File not signed] S3 flpydisk; C:\Windows\system32\drivers\flpydisk.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [File not signed] S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208 2010-11-21] (Microsoft Corporation) [File not signed] R3 HDAudBus; C:\Windows\System32\DRIVERS\HDAudBus.sys [122368 2010-11-21] (Microsoft Corporation) [File not signed] S3 HidBatt; C:\Windows\system32\drivers\HidBatt.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed] S3 HidBth; C:\Windows\system32\drivers\hidbth.sys [100864 2009-07-14] (Microsoft Corporation) [File not signed] S3 HidIr; C:\Windows\system32\drivers\hidir.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed] R3 HidUsb; C:\Windows\system32\drivers\hidusb.sys [30208 2010-11-21] (Microsoft Corporation) [File not signed] R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [753664 2010-11-21] (Microsoft Corporation) [File not signed] S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] (Microsoft Corporation) [File not signed] S3 intelppm; C:\Windows\system32\drivers\intelppm.sys [62464 2009-07-14] (Microsoft Corporation) [File not signed] S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-21] (Microsoft Corporation) [File not signed] S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-21] (Microsoft Corporation) [File not signed] S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] (Microsoft Corporation) [File not signed] S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] (Microsoft Corporation) [File not signed] R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-21] (Microsoft Corporation) [File not signed] R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] (Microsoft Corporation) [File not signed] R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed] R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] (Microsoft Corporation) [File not signed] R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-10] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed] R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] (Microsoft Corporation) [File not signed] R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] (Microsoft Corporation) [File not signed] R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] (Microsoft Corporation) [File not signed] S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [140800 2013-07-04] (Microsoft Corporation) [File not signed] R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2011-04-27] (Microsoft Corporation) [File not signed] R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2011-07-09] (Microsoft Corporation) [File not signed] R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2011-04-27] (Microsoft Corporation) [File not signed] R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] (Microsoft Corporation) [File not signed] S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] (Microsoft Corporation) [File not signed] S3 MTConfig; C:\Windows\system32\drivers\MTConfig.sys [15360 2009-07-14] (Microsoft Corporation) [File not signed] R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] (Microsoft Corporation) [File not signed] S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] (Microsoft Corporation) [File not signed] R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed] R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-21] (Microsoft Corporation) [File not signed] R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-21] (Microsoft Corporation) [File not signed] R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-21] (Microsoft Corporation) [File not signed] R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] (Microsoft Corporation) [File not signed] R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-21] (Microsoft Corporation) [File not signed] S3 netr28x; C:\Windows\System32\DRIVERS\netr28x.sys [620544 2009-06-10] (Ralink Technology, Corp.) [File not signed] R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] (Microsoft Corporation) [File not signed] R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] (Microsoft Corporation) [File not signed] S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] (Microsoft Corporation) [File not signed] S3 Parport; C:\Windows\system32\drivers\parport.sys [97280 2009-07-14] (Microsoft Corporation) [File not signed] R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [651264 2009-07-14] (Microsoft Corporation) [File not signed] R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-21] (Microsoft Corporation) [File not signed] S3 Processor; C:\Windows\system32\drivers\processr.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed] R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-21] (Microsoft Corporation) [File not signed] S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed] S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed] R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-21] (Microsoft Corporation) [File not signed] R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] (Microsoft Corporation) [File not signed] R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-21] (Microsoft Corporation) [File not signed] S3 rdpbus; C:\Windows\system32\drivers\rdpbus.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed] S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] (Microsoft Corporation) [File not signed] R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] (Microsoft Corporation) [File not signed] S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-21] (Microsoft Corporation) [File not signed] R2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed] S3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-14] (Microsoft Corporation) [File not signed] S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Microsoft Corporation) [File not signed] S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-21] (Microsoft Corporation) [File not signed] S3 sfloppy; C:\Windows\system32\drivers\sfloppy.sys [16896 2009-07-14] (Microsoft Corporation) [File not signed] S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] (Microsoft Corporation) [File not signed] R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] (Microsoft Corporation) [File not signed] R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] (Microsoft Corporation) [File not signed] R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] (Microsoft Corporation) [File not signed] R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] (Microsoft Corporation) [File not signed] S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] (Microsoft Corporation) [File not signed] S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] (Microsoft Corporation) [File not signed] R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] (Microsoft Corporation) [File not signed] S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] (Microsoft Corporation) [File not signed] S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [59392 2010-11-21] (Microsoft Corporation) [File not signed] S3 TsUsbGD; C:\Windows\system32\drivers\TsUsbGD.sys [31232 2010-11-21] (Microsoft Corporation) [File not signed] R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-07-19] (TuneUp Software) R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-21] (Microsoft Corporation) [File not signed] S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-21] (Microsoft Corporation) [File not signed] R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-21] (Microsoft Corporation) [File not signed] S3 UmPass; C:\Windows\system32\drivers\umpass.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed] R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation) [File not signed] R3 usbehci; C:\Windows\System32\DRIVERS\usbehci.sys [53248 2013-11-27] (Microsoft Corporation) [File not signed] R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] (Microsoft Corporation) [File not signed] R3 usbohci; C:\Windows\System32\DRIVERS\usbohci.sys [25600 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-14] (Microsoft Corporation) [File not signed] S3 usbscan; C:\Windows\System32\DRIVERS\usbscan.sys [42496 2013-07-03] (Microsoft Corporation) [File not signed] R3 USBSTOR; C:\Windows\system32\drivers\USBSTOR.SYS [91648 2011-03-11] (Microsoft Corporation) [File not signed] S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2009-07-14] (Microsoft Corporation) [File not signed] R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-02] (Avast Software) S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed] R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed] R3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-14] (Microsoft Corporation) [File not signed] S3 WacomPen; C:\Windows\system32\drivers\wacompen.sys [27776 2009-07-14] (Microsoft Corporation) [File not signed] S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed] R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed] R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] (Microsoft Corporation) [File not signed] S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-21] (Microsoft Corporation) [File not signed] R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed] R1 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] (Microsoft Corporation) [File not signed] R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] (Microsoft Corporation) [File not signed] R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) [File not signed] S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-10 13:51 - 2014-12-10 13:51 - 02119680 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST64(1).exe 2014-12-10 13:50 - 2014-12-10 13:50 - 01111040 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST.exe 2014-12-10 13:50 - 2014-12-10 13:50 - 01111040 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST(1).exe 2014-12-10 13:46 - 2014-12-10 13:46 - 00003146 _____ () C:\Windows\System32\Tasks\{13A5207C-4131-49B3-AEEA-55652BB0E56C} 2014-12-10 13:44 - 2014-12-10 13:44 - 01295360 _____ () C:\Users\Brigitte 1\Downloads\zoek.exe 2014-12-10 13:36 - 2014-12-10 13:36 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-10 12:33 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-10 12:33 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-10 12:33 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-12-10 12:33 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2014-12-10 12:33 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-12-10 12:33 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2014-12-10 12:33 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2014-12-10 12:33 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2014-12-10 12:33 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2014-12-10 12:33 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2014-12-10 12:32 - 2014-12-10 12:32 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(4).exe 2014-12-10 12:31 - 2014-12-10 12:31 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(3).exe 2014-12-10 12:30 - 2014-12-10 12:30 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(2).exe 2014-12-10 12:22 - 2014-12-10 12:22 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(1).exe 2014-12-10 12:22 - 2014-12-10 12:22 - 00000000 ____D () C:\zoek_backup 2014-12-10 12:21 - 2014-12-10 12:21 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek.exe 2014-12-10 12:17 - 2014-12-10 12:17 - 00002163 _____ () C:\Users\Brigitte\Desktop\Marlware 2.txt 2014-12-10 12:17 - 2014-12-10 12:17 - 00001524 _____ () C:\Users\Brigitte\Desktop\Malware 3.txt 2014-12-10 12:16 - 2014-12-10 12:16 - 00001058 _____ () C:\Users\Brigitte\Desktop\Malware.txt 2014-12-10 11:49 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-10 11:49 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-10 11:49 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-10 11:49 - 2014-10-30 03:04 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-12-10 11:49 - 2014-10-30 02:46 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-12-10 11:49 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-12-10 11:49 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-12-10 11:48 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-10 11:48 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-10 11:48 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-10 11:48 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-10 11:48 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-10 11:48 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-10 11:48 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-10 11:48 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-10 11:48 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-10 11:48 - 2014-11-22 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-10 11:48 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-10 11:48 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-10 11:48 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-10 11:48 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-10 11:48 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-10 11:48 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-10 11:48 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-10 11:48 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-10 11:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-10 11:48 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-10 11:48 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-10 11:48 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-10 11:48 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-10 11:48 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-10 11:48 - 2014-11-22 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-10 11:48 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-10 11:48 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-10 11:48 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-10 11:48 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-10 11:48 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-10 11:48 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-10 11:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-10 11:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-10 11:48 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-10 11:48 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-10 11:48 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-10 11:48 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-10 11:48 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-10 11:48 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-10 11:48 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-10 11:48 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-10 11:48 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-10 11:48 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-10 11:48 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-10 11:48 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-10 11:48 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-10 11:47 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-10 11:47 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-10 11:47 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-10 11:47 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-10 11:47 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-10 11:47 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-10 11:47 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-10 11:47 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-10 11:47 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-10 11:47 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-10 11:47 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-10 11:47 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-10 11:47 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-10 11:47 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-10 11:47 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-10 11:47 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-10 11:47 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-10 11:47 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-10 11:47 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-10 11:47 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-10 11:47 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-10 11:47 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-10 11:47 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-10 11:47 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-10 11:47 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2014-12-10 11:46 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-10 11:46 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-10 11:38 - 2014-12-10 13:41 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-12-10 11:37 - 2014-12-10 11:37 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-12-10 11:37 - 2014-12-10 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-12-10 11:37 - 2014-12-10 11:37 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-12-10 11:37 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-12-10 11:37 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-12-10 11:37 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-12-10 11:36 - 2014-12-10 11:37 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Brigitte\Downloads\mbam-setup-2.0.4.1028.exe 2014-12-10 11:22 - 2014-12-10 11:22 - 02166272 _____ () C:\Users\Brigitte\Downloads\AdwCleaner_4.105(1).exe 2014-12-10 11:21 - 2014-12-10 11:21 - 02166272 _____ () C:\Users\Brigitte\Downloads\AdwCleaner_4.105.exe 2014-12-10 10:56 - 2014-12-10 10:56 - 01079976 _____ ( ) C:\Users\Brigitte 1\Downloads\FirefoxSetup.exe 2014-12-08 16:53 - 2014-12-08 17:05 - 00027292 _____ () C:\Users\Brigitte 1\Downloads\Addition.txt 2014-12-08 16:52 - 2014-12-10 13:51 - 00045519 _____ () C:\Users\Brigitte 1\Downloads\FRST.txt 2014-12-08 16:52 - 2014-12-08 16:52 - 02119680 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST64.exe 2014-12-08 16:29 - 2014-12-08 16:29 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-BRIGITTE-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat 2014-12-08 16:29 - 2014-12-08 16:29 - 00000000 ____D () C:\RegBackup 2014-12-08 16:18 - 2014-12-08 16:18 - 00002167 _____ () C:\Users\Brigitte 1\Desktop\Tweaking.com - Windows Repair (All in One).lnk 2014-12-08 16:17 - 2014-12-08 16:17 - 09817304 _____ () C:\Users\Brigitte 1\Downloads\tweaking.com_windows_repair_aio_setup.exe 2014-12-08 16:17 - 2014-12-08 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com 2014-12-08 16:17 - 2014-12-08 16:17 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com 2014-12-08 16:08 - 2014-12-08 16:08 - 00002023 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk 2014-12-07 16:22 - 2014-12-07 16:22 - 00006656 ____N () C:\bootsqm.dat 2014-12-07 16:09 - 2014-12-07 16:09 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Macromedia 2014-12-07 16:08 - 2014-12-07 16:08 - 00000000 ____D () C:\Users\Jürgen\Documents\Computer 2014-12-07 16:06 - 2014-12-07 16:06 - 00026863 _____ () C:\ComboFix.txt 2014-12-07 15:46 - 2014-12-07 15:46 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\TuneUp Software 2014-12-07 15:45 - 2014-12-07 15:45 - 05600430 ____R (Swearware) C:\Users\Jürgen\Downloads\ComboFix.exe 2014-12-07 15:42 - 2014-12-07 15:42 - 00001429 _____ () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Mozilla 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\CyberLink 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\AVAST Software 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Adobe 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Mozilla 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\MediaServer 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Google 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\clear.fi 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Acer 2014-12-07 15:41 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\VirtualStore 2014-12-07 15:41 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000020 ___SH () C:\Users\Jürgen\ntuser.ini 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Vorlagen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Startmenü 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Netzwerkumgebung 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Lokale Einstellungen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Eigene Dateien 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Druckumgebung 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Documents\Eigene Musik 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Documents\Eigene Bilder 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Local\Verlauf 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Local\Anwendungsdaten 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Anwendungsdaten 2014-12-07 15:41 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Macromedia 2014-12-07 15:41 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-12-07 15:41 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-12-04 10:23 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-12-04 10:23 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-12-04 10:23 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-12-04 10:18 - 2014-12-04 10:19 - 05600127 ____R (Swearware) C:\Users\Brigitte\Downloads\ComboFix.exe 2014-12-04 10:13 - 2014-12-04 10:13 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\AVAST Software 2014-12-02 22:31 - 2014-12-10 11:27 - 00000000 ____D () C:\AdwCleaner 2014-12-02 22:12 - 2014-12-10 13:51 - 00000000 ____D () C:\FRST 2014-12-02 19:22 - 2014-12-10 11:31 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Adobe 2014-12-02 18:37 - 2014-12-02 18:37 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-12-02 18:37 - 2014-12-02 18:37 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-12-02 18:33 - 2014-12-10 10:54 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-12-02 18:33 - 2014-12-02 18:37 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00001968 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-12-02 18:33 - 2014-12-02 18:33 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\AVAST Software 2014-12-02 18:33 - 2014-12-02 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-12-02 18:32 - 2014-12-02 18:32 - 00060248 _____ () C:\Users\Brigitte 1\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-02 18:32 - 2014-12-02 18:32 - 00000000 ____D () C:\Program Files\AVAST Software 2014-12-02 18:31 - 2014-12-02 18:32 - 131078000 _____ (AVAST Software) C:\Users\Brigitte 1\Downloads\avast_free_antivirus_setup.exe 2014-12-02 18:28 - 2014-12-02 18:28 - 00244264 _____ () C:\Users\Brigitte 1\Downloads\Firefox Setup Stub 34.0.5.exe 2014-12-02 18:17 - 2014-12-02 18:17 - 01056056 _____ (TuneUp Software) C:\Users\Brigitte 1\Downloads\Integrator.exe 2014-12-02 18:10 - 2014-12-07 16:06 - 00000000 ____D () C:\Qoobox 2014-12-02 18:10 - 2014-12-07 16:04 - 00000000 ____D () C:\Windows\erdnt 2014-12-02 10:15 - 2014-12-07 15:34 - 05600430 _____ (Swearware) C:\Users\Brigitte 1\Downloads\ComboFix.exe 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieUserList 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieSiteList 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieBrowserModeList 2014-12-01 10:35 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-12-01 10:35 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-12-01 09:25 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-12-01 09:25 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-12-01 09:25 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-12-01 09:25 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-12-01 09:25 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-12-01 09:25 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-12-01 09:24 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2014-12-01 09:24 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-12-01 09:24 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2014-12-01 09:24 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2014-12-01 09:24 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2014-12-01 09:24 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-11-30 18:21 - 2014-11-30 18:29 - 00000000 ____D () C:\Windows\system32\MRT 2014-11-30 18:20 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-11-30 17:29 - 2014-11-30 17:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series 2014-11-30 14:53 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLM9Z.DLL 2014-11-30 14:53 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC550C.dll 2014-11-30 14:53 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC550I.dll 2014-11-30 14:53 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC550L.dll 2014-11-30 14:53 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC550L.dll 2014-11-30 14:53 - 2008-12-01 11:21 - 00012800 _____ () C:\Windows\SysWOW64\CNC173DD.TBL 2014-11-30 14:53 - 2008-12-01 11:21 - 00012800 _____ () C:\Windows\system32\CNC173DD.TBL 2014-11-30 14:53 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2014-11-30 14:52 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC550U.dll 2014-11-30 14:52 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2014-11-30 14:14 - 2014-11-30 14:14 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\TuneUp Software 2014-11-30 14:13 - 2014-11-30 14:13 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Macromedia 2014-11-30 14:10 - 2014-11-30 14:10 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Mozilla 2014-11-30 14:10 - 2014-11-30 14:10 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Mozilla 2014-11-30 14:09 - 2014-12-08 16:05 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Adobe 2014-11-30 14:09 - 2014-12-01 16:02 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\VirtualStore 2014-11-30 14:09 - 2014-11-30 14:09 - 00001429 _____ () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-30 14:09 - 2014-11-30 14:09 - 00000020 ___SH () C:\Users\Brigitte 1\ntuser.ini 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Vorlagen 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Startmenü 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Lokale Einstellungen 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Local\Verlauf 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Local\Anwendungsdaten 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\CyberLink 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\MediaServer 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Google 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\clear.fi 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Acer 2014-11-30 14:08 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Netzwerkumgebung 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Eigene Dateien 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Druckumgebung 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Documents\Eigene Musik 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Documents\Eigene Bilder 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Anwendungsdaten 2014-11-30 14:08 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Macromedia 2014-11-30 14:08 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-30 14:08 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-30 11:53 - 2014-12-10 13:38 - 00002072 _____ () C:\Windows\setupact.log 2014-11-30 11:53 - 2014-11-30 11:53 - 00000000 _____ () C:\Windows\setuperr.log 2014-11-30 11:49 - 2014-12-10 13:36 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-11-30 11:37 - 2014-12-01 10:39 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-11-30 11:26 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-11-30 11:19 - 2014-11-30 11:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-11-30 11:19 - 2014-11-30 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-11-30 11:19 - 2014-11-30 11:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-11-30 11:19 - 2014-11-30 11:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-11-30 11:19 - 2014-11-30 11:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-11-30 11:19 - 2014-11-30 11:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-11-30 11:19 - 2014-11-30 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-11-30 11:16 - 2014-11-30 11:16 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-11-30 11:14 - 2014-11-30 11:27 - 00011799 _____ () C:\Windows\IE11_main.log 2014-11-30 09:57 - 2014-11-30 17:30 - 00289424 _____ () C:\Windows\msxml4-KB973688-enu.LOG 2014-11-30 09:22 - 2014-11-30 17:29 - 00292648 _____ () C:\Windows\msxml4-KB954430-enu.LOG 2014-11-30 09:06 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-11-30 09:06 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-11-30 09:06 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-11-30 09:06 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-11-30 09:06 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-11-29 17:18 - 2014-11-29 17:18 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Kromtech 2014-11-29 17:11 - 2014-11-29 17:18 - 00000000 ____D () C:\ProgramData\Kromtech 2014-11-29 17:11 - 2014-11-29 17:11 - 01220904 _____ (Kromtech) C:\Users\Brigitte\Downloads\PCKeeper Installer.exe 2014-11-29 17:00 - 2014-11-29 17:00 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-29 16:58 - 2014-11-29 16:59 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Brigitte\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-29 16:58 - 2014-11-29 16:58 - 00000000 _____ () C:\Users\Brigitte\Downloads\mbam-setup-2.0.3.1025_CB-DL-Manager.exe 2014-11-29 14:45 - 2014-11-29 14:45 - 00262144 _____ () C:\Windows\system32\config\ELAM 2014-11-29 13:14 - 2014-11-29 16:41 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Nico Mak Computing 2014-11-29 13:14 - 2014-11-29 13:14 - 04892480 _____ (WinZip International LLC ) C:\Users\Brigitte\Downloads\wzmp_8.exe 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-11-29 12:44 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-11-29 12:44 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls 2014-11-29 12:44 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-11-29 12:44 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe 2014-11-29 12:44 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-11-29 12:44 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-11-29 12:30 - 2014-11-29 12:31 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige 2014-11-29 12:24 - 2014-11-29 12:24 - 00000889 _____ () C:\Users\Brigitte\Desktop\services.lnk 2014-11-29 10:51 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-11-29 10:51 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-11-29 10:51 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-11-29 10:51 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-11-29 10:42 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-11-29 10:33 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-11-29 10:33 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-11-29 10:33 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-11-29 09:53 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-11-29 09:53 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-11-29 09:53 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-11-29 09:53 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-11-29 09:53 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-11-29 09:53 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-11-29 09:52 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-11-29 09:52 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe |
|
10.12.2014, 14:05
| #26 |
| | sec_error_unknown_issuer ST.txt) (x64) Version: 10-12-2014 Ran by Brigitte 1 (administrator) on BRIGITTE-PC on 10-12-2014 13:51:45 Running from C:\Users\Brigitte 1\Downloads Loaded Profile: Brigitte 1 (Available profiles: Brigitte & Brigitte 1 & Jürgen) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (AMD) C:\Windows\System32\atieclxx.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLMSService.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Farbar) C:\Users\Brigitte 1\Downloads\FRST64(1).exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [340848 2011-04-02] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [408432 2011-03-29] (Egis Technology Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5226600 2014-12-02] (AVAST Software) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid} ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-2250872989-3983632255-1168934311-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2250872989-3983632255-1168934311-1001 -> {C1B0A9B3-2A28-4C1D-91C0-F040FD14EF05} URL = https://de.search.yahoo.com/search?fr=mcafee&type=B011DE662D20141127&p={SearchTerms} BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Brigitte 1\AppData\Roaming\Mozilla\Firefox\Profiles\0qniwz70.default FF SearchEngineOrder.1: Sichere Suche FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-12-02] Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Profile: C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-02] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-12-02] CHR Extension: (Google Search) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-02] CHR Extension: (Avast Online Security) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-12-02] CHR Extension: (Google Wallet) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-02] CHR Extension: (Google Mail) - C:\Users\Brigitte 1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-02] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-02] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [72192 2009-07-14] (Microsoft Corporation) [File not signed] S3 ALG; C:\Windows\System32\alg.exe [79360 2009-07-14] (Microsoft Corporation) [File not signed] R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [204288 2011-10-26] (AMD) [File not signed] S3 AppIDSvc; C:\Windows\System32\appidsvc.dll [32256 2009-07-14] (Microsoft Corporation) [File not signed] R3 Appinfo; C:\Windows\System32\appinfo.dll [70144 2013-02-27] (Microsoft Corporation) [File not signed] R2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed] R2 AudioSrv; C:\Windows\System32\Audiosrv.dll [680960 2014-10-03] (Microsoft Corporation) [File not signed] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-12-02] (AVAST Software) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4012248 2014-12-02] (Avast Software) S3 AxInstSV; C:\Windows\System32\AxInstSV.dll [114688 2010-11-21] (Microsoft Corporation) [File not signed] S3 BDESVC; C:\Windows\System32\bdesvc.dll [100864 2009-07-14] (Microsoft Corporation) [File not signed] R2 BFE; C:\Windows\System32\bfe.dll [705024 2010-11-21] (Microsoft Corporation) [File not signed] R2 BITS; C:\Windows\System32\qmgr.dll [849920 2010-11-21] (Microsoft Corporation) [File not signed] R3 Browser; C:\Windows\System32\browser.dll [136704 2012-07-04] (Microsoft Corporation) [File not signed] S3 bthserv; C:\Windows\system32\bthserv.dll [83968 2009-07-14] (Microsoft Corporation) [File not signed] S3 CertPropSvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed] S3 COMSysApp; C:\Windows\system32\dllhost.exe [9728 2009-07-14] (Microsoft Corporation) [File not signed] S3 COMSysApp; C:\Windows\SysWOW64\dllhost.exe [7168 2009-07-14] (Microsoft Corporation) [File not signed] R2 CryptSvc; C:\Windows\system32\cryptsvc.dll [187904 2014-07-07] (Microsoft Corporation) [File not signed] R2 CryptSvc; C:\Windows\SysWOW64\cryptsvc.dll [143872 2014-07-07] (Microsoft Corporation) [File not signed] R2 DcomLaunch; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed] S3 defragsvc; C:\Windows\System32\defragsvc.dll [291328 2009-07-14] (Microsoft Corporation) [File not signed] R2 Dhcp; C:\Windows\system32\dhcpcore.dll [317952 2010-11-21] (Microsoft Corporation) [File not signed] R2 Dhcp; C:\Windows\SysWOW64\dhcpcore.dll [254464 2010-11-21] (Microsoft Corporation) [File not signed] R2 Dnscache; C:\Windows\System32\dnsrslvr.dll [183296 2011-03-03] (Microsoft Corporation) [File not signed] S3 dot3svc; C:\Windows\System32\dot3svc.dll [252416 2010-11-21] (Microsoft Corporation) [File not signed] R2 DPS; C:\Windows\system32\dps.dll [162816 2010-11-21] (Microsoft Corporation) [File not signed] R3 EapHost; C:\Windows\System32\eapsvc.dll [111104 2009-07-14] (Microsoft Corporation) [File not signed] S3 EFS; C:\Windows\System32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S2 ehRecvr; C:\Windows\ehome\ehRecvr.exe [696832 2010-11-21] (Microsoft Corporation) [File not signed] S2 ehSched; C:\Windows\ehome\ehsched.exe [127488 2009-07-14] (Microsoft Corporation) [File not signed] R2 eventlog; C:\Windows\System32\wevtsvc.dll [1646080 2010-11-21] (Microsoft Corporation) [File not signed] R2 EventSystem; C:\Windows\system32\es.dll [402944 2009-07-14] (Microsoft Corporation) [File not signed] R2 EventSystem; C:\Windows\SysWOW64\es.dll [271360 2009-07-14] (Microsoft Corporation) [File not signed] S3 Fax; C:\Windows\system32\fxssvc.exe [689152 2010-11-21] (Microsoft Corporation) [File not signed] S3 fdPHost; C:\Windows\system32\fdPHost.dll [16384 2009-07-14] (Microsoft Corporation) [File not signed] R2 FDResPub; C:\Windows\system32\fdrespub.dll [34816 2009-07-14] (Microsoft Corporation) [File not signed] R2 FontCache; C:\Windows\system32\FntCache.dll [1175552 2014-11-30] (Microsoft Corporation) [File not signed] R2 gpsvc; C:\Windows\System32\gpsvc.dll [777728 2010-11-21] (Microsoft Corporation) [File not signed] R3 hidserv; C:\Windows\system32\hidserv.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed] R3 hidserv; C:\Windows\SysWOW64\hidserv.dll [49152 2009-07-14] (Microsoft Corporation) [File not signed] S3 hkmsvc; C:\Windows\system32\kmsvc.dll [90624 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupListener; C:\Windows\system32\ListSvc.dll [232448 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupProvider; C:\Windows\system32\provsvc.dll [187904 2010-11-21] (Microsoft Corporation) [File not signed] S3 HomeGroupProvider; C:\Windows\SysWOW64\provsvc.dll [165376 2010-11-21] (Microsoft Corporation) [File not signed] S3 IEEtwCollectorService; C:\Windows\system32\IEEtwCollector.exe [114688 2014-11-22] (Microsoft Corporation) [File not signed] S3 IKEEXT; C:\Windows\System32\ikeext.dll [859648 2013-10-12] (Microsoft Corporation) [File not signed] S3 IPBusEnum; C:\Windows\system32\ipbusenum.dll [101888 2009-07-14] (Microsoft Corporation) [File not signed] R2 iphlpsvc; C:\Windows\System32\iphlpsvc.dll [569344 2012-10-03] (Microsoft Corporation) [File not signed] R3 KeyIso; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 KtmRm; C:\Windows\system32\msdtckrm.dll [368640 2009-07-14] (Microsoft Corporation) [File not signed] R2 LanmanServer; C:\Windows\System32\srvsvc.dll [236032 2010-11-21] (Microsoft Corporation) [File not signed] R2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [118784 2010-11-21] (Microsoft Corporation) [File not signed] S3 lltdsvc; C:\Windows\System32\lltdsvc.dll [300032 2009-07-14] (Microsoft Corporation) [File not signed] R2 lmhosts; C:\Windows\System32\lmhsvc.dll [23552 2009-07-14] (Microsoft Corporation) [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) S4 Mcx2Svc; C:\Windows\system32\Mcx2Svc.dll [84992 2010-11-21] (Microsoft Corporation) [File not signed] R2 MMCSS; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed] R2 MpsSvc; C:\Windows\system32\mpssvc.dll [828416 2010-11-21] (Microsoft Corporation) [File not signed] S3 MSDTC; C:\Windows\System32\msdtc.exe [141824 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSiSCSI; C:\Windows\system32\iscsiexe.dll [156672 2009-07-14] (Microsoft Corporation) [File not signed] S3 msiserver; C:\Windows\System32\msiexec.exe [128000 2010-11-21] (Microsoft Corporation) [File not signed] S3 msiserver; C:\Windows\SysWOW64\msiexec.exe [73216 2010-11-21] (Microsoft Corporation) [File not signed] S3 napagent; C:\Windows\system32\qagentRT.dll [476160 2010-11-21] (Microsoft Corporation) [File not signed] S3 Netlogon; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] R3 Netman; C:\Windows\System32\netman.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed] R3 netprofm; C:\Windows\System32\netprofm.dll [459776 2009-07-14] (Microsoft Corporation) [File not signed] R3 netprofm; C:\Windows\SysWOW64\netprofm.dll [360448 2009-07-14] (Microsoft Corporation) [File not signed] R2 NlaSvc; C:\Windows\System32\nlasvc.dll [303104 2012-10-03] (Microsoft Corporation) [File not signed] S4 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 nsi; C:\Windows\system32\nsisvc.dll [25600 2009-07-14] (Microsoft Corporation) [File not signed] S3 p2pimsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed] S3 p2psvc; C:\Windows\system32\p2psvc.dll [438784 2009-07-14] (Microsoft Corporation) [File not signed] R2 PcaSvc; C:\Windows\System32\pcasvc.dll [186368 2009-07-14] (Microsoft Corporation) [File not signed] S3 PerfHost; C:\Windows\SysWow64\perfhost.exe [20992 2009-07-14] (Microsoft Corporation) [File not signed] S3 pla; C:\Windows\system32\pla.dll [1389056 2010-11-21] (Microsoft Corporation) [File not signed] S3 pla; C:\Windows\SysWOW64\pla.dll [1508864 2010-11-21] (Microsoft Corporation) [File not signed] R2 PlugPlay; C:\Windows\system32\umpnpmgr.dll [404480 2011-05-24] (Microsoft Corporation) [File not signed] S3 PNRPAutoReg; C:\Windows\system32\pnrpauto.dll [25088 2009-07-14] (Microsoft Corporation) [File not signed] S3 PNRPsvc; C:\Windows\system32\pnrpsvc.dll [327168 2009-07-14] (Microsoft Corporation) [File not signed] R3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [501248 2010-11-21] (Microsoft Corporation) [File not signed] R2 Power; C:\Windows\system32\umpo.dll [163840 2009-07-14] (Microsoft Corporation) [File not signed] R2 ProfSvc; C:\Windows\system32\profsvc.dll [209920 2012-05-01] (Microsoft Corporation) [File not signed] S3 ProtectedStorage; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 QWAVE; C:\Windows\system32\qwave.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed] S3 RasAuto; C:\Windows\System32\rasauto.dll [99328 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasMan; C:\Windows\System32\rasmans.dll [344064 2010-11-21] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\Windows\System32\mprdim.dll [97792 2009-07-14] (Microsoft Corporation) [File not signed] S4 RemoteAccess; C:\Windows\SysWOW64\mprdim.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed] S3 RemoteRegistry; C:\Windows\system32\regsvc.dll [159232 2009-07-14] (Microsoft Corporation) [File not signed] R2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [67072 2009-07-14] (Microsoft Corporation) [File not signed] S3 RpcLocator; C:\Windows\system32\locator.exe [10240 2009-07-14] (Microsoft Corporation) [File not signed] R2 RpcSs; C:\Windows\system32\rpcss.dll [512000 2010-11-21] (Microsoft Corporation) [File not signed] R2 SamSs; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 SCardSvr; C:\Windows\System32\SCardSvr.dll [190976 2009-07-14] (Microsoft Corporation) [File not signed] R2 Schedule; C:\Windows\system32\schedsvc.dll [1110016 2010-11-21] (Microsoft Corporation) [File not signed] S3 SCPolicySvc; C:\Windows\System32\certprop.dll [80384 2010-11-21] (Microsoft Corporation) [File not signed] R3 SDRSVC; C:\Windows\System32\SDRSVC.dll [170496 2010-11-21] (Microsoft Corporation) [File not signed] S3 seclogon; C:\Windows\system32\seclogon.dll [30720 2010-11-21] (Microsoft Corporation) [File not signed] R2 SENS; C:\Windows\system32\sens.dll [64512 2009-07-14] (Microsoft Corporation) [File not signed] R2 SENS; C:\Windows\SysWOW64\sens.dll [49664 2009-07-14] (Microsoft Corporation) [File not signed] S3 SensrSvc; C:\Windows\system32\sensrsvc.dll [29184 2009-07-14] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\Windows\system32\sessenv.dll [121856 2010-11-21] (Microsoft Corporation) [File not signed] S3 SessionEnv; C:\Windows\SysWOW64\sessenv.dll [113664 2010-11-21] (Microsoft Corporation) [File not signed] S4 SharedAccess; C:\Windows\System32\ipnathlp.dll [359424 2009-07-14] (Microsoft Corporation) [File not signed] R2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [370688 2010-11-21] (Microsoft Corporation) [File not signed] R2 ShellHWDetection; C:\Windows\SysWOW64\shsvcs.dll [328192 2010-11-21] (Microsoft Corporation) [File not signed] S3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [14336 2009-07-14] (Microsoft Corporation) [File not signed] R2 Spooler; C:\Windows\System32\spoolsv.exe [559104 2012-02-11] (Microsoft Corporation) [File not signed] S2 sppsvc; C:\Windows\system32\sppsvc.exe [3524608 2010-11-21] (Microsoft Corporation) [File not signed] S3 sppuinotify; C:\Windows\system32\sppuinotify.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed] R3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [193024 2009-07-14] (Microsoft Corporation) [File not signed] R3 SstpSvc; C:\Windows\system32\sstpsvc.dll [75264 2009-07-14] (Microsoft Corporation) [File not signed] R2 stisvc; C:\Windows\System32\wiaservc.dll [580096 2010-11-21] (Microsoft Corporation) [File not signed] S3 swprv; C:\Windows\System32\swprv.dll [524288 2009-07-14] (Microsoft Corporation) [File not signed] R2 SysMain; C:\Windows\system32\sysmain.dll [1743360 2010-11-21] (Microsoft Corporation) [File not signed] S3 TabletInputService; C:\Windows\System32\TabSvc.dll [92672 2010-11-21] (Microsoft Corporation) [File not signed] R3 TapiSrv; C:\Windows\System32\tapisrv.dll [316928 2010-11-21] (Microsoft Corporation) [File not signed] R3 TapiSrv; C:\Windows\SysWOW64\tapisrv.dll [242176 2010-11-21] (Microsoft Corporation) [File not signed] S3 TBS; C:\Windows\System32\tbssvc.dll [65536 2009-07-14] (Microsoft Corporation) [File not signed] R2 TermService; C:\Windows\System32\termsrv.dll [683520 2014-10-14] (Microsoft Corporation) [File not signed] R2 Themes; C:\Windows\system32\themeservice.dll [44544 2009-07-14] (Microsoft Corporation) [File not signed] S3 THREADORDER; C:\Windows\system32\mmcss.dll [67584 2009-07-14] (Microsoft Corporation) [File not signed] R2 TrkWks; C:\Windows\System32\trkwks.dll [119808 2009-07-14] (Microsoft Corporation) [File not signed] R3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [194048 2010-11-21] (Microsoft Corporation) [File not signed] R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software) S3 UI0Detect; C:\Windows\system32\UI0Detect.exe [40960 2009-07-14] (Microsoft Corporation) [File not signed] R3 upnphost; C:\Windows\System32\upnphost.dll [353792 2009-07-14] (Microsoft Corporation) [File not signed] R3 upnphost; C:\Windows\SysWOW64\upnphost.dll [266752 2009-07-14] (Microsoft Corporation) [File not signed] R2 UxSms; C:\Windows\System32\uxsms.dll [38912 2009-07-14] (Microsoft Corporation) [File not signed] S3 VaultSvc; C:\Windows\system32\lsass.exe [31232 2014-04-12] (Microsoft Corporation) [File not signed] S3 vds; C:\Windows\System32\vds.exe [533504 2010-11-21] (Microsoft Corporation) [File not signed] S3 VSS; C:\Windows\system32\vssvc.exe [1600512 2010-11-21] (Microsoft Corporation) [File not signed] S3 W32Time; C:\Windows\system32\w32time.dll [381952 2009-07-14] (Microsoft Corporation) [File not signed] S3 wbengine; C:\Windows\system32\wbengine.exe [1504256 2010-11-21] (Microsoft Corporation) [File not signed] S3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [202240 2009-07-14] (Microsoft Corporation) [File not signed] S3 wcncsvc; C:\Windows\System32\wcncsvc.dll [367104 2010-11-21] (Microsoft Corporation) [File not signed] S3 wcncsvc; C:\Windows\SysWOW64\wcncsvc.dll [276992 2010-11-21] (Microsoft Corporation) [File not signed] S3 WcsPlugInService; C:\Windows\System32\WcsPlugInService.dll [40960 2009-07-14] (Microsoft Corporation) [File not signed] S3 WcsPlugInService; C:\Windows\SysWOW64\WcsPlugInService.dll [32768 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiServiceHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiServiceHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiSystemHost; C:\Windows\system32\wdi.dll [90624 2009-07-14] (Microsoft Corporation) [File not signed] R3 WdiSystemHost; C:\Windows\SysWOW64\wdi.dll [76288 2009-07-14] (Microsoft Corporation) [File not signed] S3 WebClient; C:\Windows\System32\webclnt.dll [259584 2013-07-04] (Microsoft Corporation) [File not signed] S3 WebClient; C:\Windows\SysWOW64\webclnt.dll [205824 2013-07-04] (Microsoft Corporation) [File not signed] S3 Wecsvc; C:\Windows\system32\wecsvc.dll [237568 2009-07-14] (Microsoft Corporation) [File not signed] S3 wercplsupport; C:\Windows\System32\wercplsupport.dll [84480 2009-07-14] (Microsoft Corporation) [File not signed] S3 WerSvc; C:\Windows\System32\WerSvc.dll [76800 2009-07-14] (Microsoft Corporation) [File not signed] S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) [File not signed] R3 WinHttpAutoProxySvc; C:\Windows\system32\winhttp.dll [444416 2010-11-21] (Microsoft Corporation) [File not signed] R3 WinHttpAutoProxySvc; C:\Windows\SysWOW64\winhttp.dll [351232 2010-11-21] (Microsoft Corporation) [File not signed] R2 Winmgmt; C:\Windows\system32\wbem\WMIsvc.dll [242688 2009-07-14] (Microsoft Corporation) [File not signed] S3 WinRM; C:\Windows\system32\WsmSvc.dll [2020352 2014-10-03] (Microsoft Corporation) [File not signed] S3 WinRM; C:\Windows\SysWOW64\WsmSvc.dll [1177088 2014-10-03] (Microsoft Corporation) [File not signed] R2 Wlansvc; C:\Windows\System32\wlansvc.dll [886784 2009-07-14] (Microsoft Corporation) [File not signed] S3 wmiApSrv; C:\Windows\system32\wbem\WmiApSrv.exe [203264 2009-07-14] (Microsoft Corporation) [File not signed] S2 WMPNetworkSvc; C:\Program Files\Windows Media Player\wmpnetwk.exe [1525248 2010-11-21] (Microsoft Corporation) [File not signed] S3 WPCSvc; C:\Windows\System32\wpcsvc.dll [12288 2009-07-14] (Microsoft Corporation) [File not signed] S3 WPCSvc; C:\Windows\SysWOW64\wpcsvc.dll [10752 2009-07-14] (Microsoft Corporation) [File not signed] R3 WPDBusEnum; C:\Windows\system32\wpdbusenum.dll [117248 2010-11-21] (Microsoft Corporation) [File not signed] R2 wscsvc; C:\Windows\system32\wscsvc.dll [97280 2009-07-14] (Microsoft Corporation) [File not signed] R2 WSearch; C:\Windows\system32\SearchIndexer.exe [591872 2011-05-04] (Microsoft Corporation) [File not signed] R2 WSearch; C:\Windows\SysWOW64\SearchIndexer.exe [427520 2011-05-04] (Microsoft Corporation) [File not signed] R3 wudfsvc; C:\Windows\System32\WUDFSvc.dll [84992 2012-07-26] (Microsoft Corporation) [File not signed] S3 WwanSvc; C:\Windows\System32\wwansvc.dll [228864 2014-01-28] (Microsoft Corporation) [File not signed] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [229888 2010-11-21] (Microsoft Corporation) [File not signed] S3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [12800 2010-11-21] (Microsoft Corporation) [File not signed] R1 AFD; C:\Windows\system32\drivers\afd.sys [497152 2014-05-30] (Microsoft Corporation) [File not signed] S3 AmdK8; C:\Windows\system32\drivers\amdk8.sys [64512 2009-07-14] (Microsoft Corporation) [File not signed] R3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [10496512 2011-10-26] (ATI Technologies Inc.) [File not signed] R3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [326656 2011-10-26] (Advanced Micro Devices, Inc.) [File not signed] R3 AmdPPM; C:\Windows\System32\DRIVERS\amdppm.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed] S3 AppID; C:\Windows\system32\drivers\appid.sys [61440 2010-11-21] (Microsoft Corporation) [File not signed] U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) [File not signed] R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-12-02] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-12-02] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-12-02] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-12-02] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-12-02] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-12-02] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-12-02] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-12-02] () S3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [23040 2009-07-14] (Microsoft Corporation) [File not signed] R3 athur; C:\Windows\System32\DRIVERS\athurx.sys [1847296 2010-04-20] (Atheros Communications, Inc.) [File not signed] S3 b06bdrv; C:\Windows\system32\drivers\bxvbda.sys [468480 2009-06-10] (Broadcom Corporation) [File not signed] S3 b57nd60a; C:\Windows\System32\DRIVERS\b57nd60a.sys [270848 2009-06-10] (Broadcom Corporation) [File not signed] R1 Beep; C:\Windows\System32\Drivers\Beep.sys [6656 2009-07-14] (Microsoft Corporation) [File not signed] R1 blbdrive; C:\Windows\system32\drivers\blbdrive.sys [45056 2009-07-14] (Microsoft Corporation) [File not signed] R3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [90624 2011-02-23] (Microsoft Corporation) [File not signed] S3 BrFiltLo; C:\Windows\system32\drivers\BrFiltLo.sys [18432 2009-06-10] (Brother Industries, Ltd.) [File not signed] S3 BrFiltUp; C:\Windows\system32\drivers\BrFiltUp.sys [8704 2009-06-10] (Brother Industries, Ltd.) [File not signed] S3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [95232 2009-07-14] (Microsoft Corporation) [File not signed] S3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [286720 2009-07-14] (Brother Industries Ltd.) [File not signed] S3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [47104 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [14976 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [14720 2009-06-10] (Brother Industries Ltd.) [File not signed] S3 BTHMODEM; C:\Windows\system32\drivers\bthmodem.sys [72192 2009-07-14] (Microsoft Corporation) [File not signed] S4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [92160 2009-07-14] (Microsoft Corporation) [File not signed] R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-21] (Microsoft Corporation) [File not signed] S3 circlass; C:\Windows\system32\drivers\circlass.sys [45568 2009-07-14] (Microsoft Corporation) [File not signed] S3 CmBatt; C:\Windows\system32\drivers\CmBatt.sys [17664 2009-07-14] (Microsoft Corporation) [File not signed] R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-21] (Microsoft Corporation) [File not signed] R1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [102400 2010-11-21] (Microsoft Corporation) [File not signed] R1 discache; C:\Windows\System32\drivers\discache.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed] S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2009-07-14] (Microsoft Corporation) [File not signed] S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) [File not signed] S3 ErrDev; C:\Windows\system32\drivers\errdev.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed] S3 exfat; C:\Windows\System32\Drivers\exfat.sys [195072 2009-07-14] (Microsoft Corporation) [File not signed] S3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [204800 2009-07-14] (Microsoft Corporation) [File not signed] S3 fdc; C:\Windows\system32\drivers\fdc.sys [29696 2009-07-14] (Microsoft Corporation) [File not signed] S3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [34304 2009-07-14] (Microsoft Corporation) [File not signed] S3 flpydisk; C:\Windows\system32\drivers\flpydisk.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] S3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [31232 2009-06-10] (Hauppauge Computer Works, Inc.) [File not signed] S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [350208 2010-11-21] (Microsoft Corporation) [File not signed] R3 HDAudBus; C:\Windows\System32\DRIVERS\HDAudBus.sys [122368 2010-11-21] (Microsoft Corporation) [File not signed] S3 HidBatt; C:\Windows\system32\drivers\HidBatt.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed] S3 HidBth; C:\Windows\system32\drivers\hidbth.sys [100864 2009-07-14] (Microsoft Corporation) [File not signed] S3 HidIr; C:\Windows\system32\drivers\hidir.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed] R3 HidUsb; C:\Windows\system32\drivers\hidusb.sys [30208 2010-11-21] (Microsoft Corporation) [File not signed] R3 HTTP; C:\Windows\System32\drivers\HTTP.sys [753664 2010-11-21] (Microsoft Corporation) [File not signed] S3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] (Microsoft Corporation) [File not signed] S3 intelppm; C:\Windows\system32\drivers\intelppm.sys [62464 2009-07-14] (Microsoft Corporation) [File not signed] S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [82944 2010-11-21] (Microsoft Corporation) [File not signed] S3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [78848 2010-11-21] (Microsoft Corporation) [File not signed] S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [116224 2009-07-14] (Microsoft Corporation) [File not signed] S3 IRENUM; C:\Windows\System32\drivers\irenum.sys [17920 2009-07-14] (Microsoft Corporation) [File not signed] R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-21] (Microsoft Corporation) [File not signed] R3 ksthunk; C:\Windows\system32\drivers\ksthunk.sys [20992 2009-07-14] (Microsoft Corporation) [File not signed] R2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [60928 2009-07-14] (Microsoft Corporation) [File not signed] R2 luafv; C:\Windows\system32\drivers\luafv.sys [113152 2009-07-14] (Microsoft Corporation) [File not signed] R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-10] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) S3 Modem; C:\Windows\System32\drivers\modem.sys [40448 2009-07-14] (Microsoft Corporation) [File not signed] R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] (Microsoft Corporation) [File not signed] R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] (Microsoft Corporation) [File not signed] R3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [77312 2009-07-14] (Microsoft Corporation) [File not signed] S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [140800 2013-07-04] (Microsoft Corporation) [File not signed] R3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [158208 2011-04-27] (Microsoft Corporation) [File not signed] R3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [288768 2011-07-09] (Microsoft Corporation) [File not signed] R3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [128000 2011-04-27] (Microsoft Corporation) [File not signed] R1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [26112 2009-07-14] (Microsoft Corporation) [File not signed] S3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [11136 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [7168 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [6784 2009-07-14] (Microsoft Corporation) [File not signed] S3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [8064 2009-07-14] (Microsoft Corporation) [File not signed] S3 MTConfig; C:\Windows\system32\drivers\MTConfig.sys [15360 2009-07-14] (Microsoft Corporation) [File not signed] R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [318976 2009-07-14] (Microsoft Corporation) [File not signed] S3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [35328 2009-07-14] (Microsoft Corporation) [File not signed] R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed] R3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [56832 2010-11-21] (Microsoft Corporation) [File not signed] R3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [164352 2010-11-21] (Microsoft Corporation) [File not signed] R3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [57856 2010-11-21] (Microsoft Corporation) [File not signed] R1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [44544 2009-07-14] (Microsoft Corporation) [File not signed] R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [261632 2010-11-21] (Microsoft Corporation) [File not signed] S3 netr28x; C:\Windows\System32\DRIVERS\netr28x.sys [620544 2009-06-10] (Ralink Technology, Corp.) [File not signed] R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [44032 2009-07-14] (Microsoft Corporation) [File not signed] R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] R1 Null; C:\Windows\System32\Drivers\Null.sys [6144 2009-07-14] (Microsoft Corporation) [File not signed] S3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [72832 2009-07-14] (Microsoft Corporation) [File not signed] S3 Parport; C:\Windows\system32\drivers\parport.sys [97280 2009-07-14] (Microsoft Corporation) [File not signed] R2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [651264 2009-07-14] (Microsoft Corporation) [File not signed] R3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [111104 2010-11-21] (Microsoft Corporation) [File not signed] S3 Processor; C:\Windows\system32\drivers\processr.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed] R1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [131584 2010-11-21] (Microsoft Corporation) [File not signed] S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [46592 2009-07-14] (Microsoft Corporation) [File not signed] S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [14848 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [60416 2009-07-14] (Microsoft Corporation) [File not signed] R3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [129536 2010-11-21] (Microsoft Corporation) [File not signed] R3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [92672 2009-07-14] (Microsoft Corporation) [File not signed] R3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [83968 2009-07-14] (Microsoft Corporation) [File not signed] R1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [309248 2010-11-21] (Microsoft Corporation) [File not signed] S3 rdpbus; C:\Windows\system32\drivers\rdpbus.sys [24064 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [7680 2009-07-14] (Microsoft Corporation) [File not signed] R1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [8192 2009-07-14] (Microsoft Corporation) [File not signed] S3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [212480 2014-07-17] (Microsoft Corporation) [File not signed] R2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [76800 2009-07-14] (Microsoft Corporation) [File not signed] S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [29696 2010-11-21] (Microsoft Corporation) [File not signed] R2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [23040 2009-06-10] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed] S3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-14] (Microsoft Corporation) [File not signed] S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Microsoft Corporation) [File not signed] S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [13824 2009-07-14] (Microsoft Corporation) [File not signed] S3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [14336 2010-11-21] (Microsoft Corporation) [File not signed] S3 sfloppy; C:\Windows\system32\drivers\sfloppy.sys [16896 2009-07-14] (Microsoft Corporation) [File not signed] S3 Smb; C:\Windows\System32\DRIVERS\smb.sys [93184 2009-07-14] (Microsoft Corporation) [File not signed] R3 srv; C:\Windows\System32\DRIVERS\srv.sys [467456 2011-04-29] (Microsoft Corporation) [File not signed] R3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [410112 2011-04-29] (Microsoft Corporation) [File not signed] R3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [168448 2011-04-29] (Microsoft Corporation) [File not signed] R2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [45568 2012-10-03] (Microsoft Corporation) [File not signed] S3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [15872 2009-07-14] (Microsoft Corporation) [File not signed] S3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [23552 2012-02-17] (Microsoft Corporation) [File not signed] R1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [119296 2014-11-11] (Microsoft Corporation) [File not signed] S3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [39936 2014-07-17] (Microsoft Corporation) [File not signed] S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [59392 2010-11-21] (Microsoft Corporation) [File not signed] S3 TsUsbGD; C:\Windows\system32\drivers\TsUsbGD.sys [31232 2010-11-21] (Microsoft Corporation) [File not signed] R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-07-19] (TuneUp Software) R3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [125440 2010-11-21] (Microsoft Corporation) [File not signed] S4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [328192 2010-11-21] (Microsoft Corporation) [File not signed] R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-21] (Microsoft Corporation) [File not signed] S3 UmPass; C:\Windows\system32\drivers\umpass.sys [9728 2009-07-14] (Microsoft Corporation) [File not signed] R3 usbccgp; C:\Windows\System32\DRIVERS\usbccgp.sys [99840 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbcir; C:\Windows\system32\drivers\usbcir.sys [100864 2013-07-12] (Microsoft Corporation) [File not signed] R3 usbehci; C:\Windows\System32\DRIVERS\usbehci.sys [53248 2013-11-27] (Microsoft Corporation) [File not signed] R3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [343040 2013-11-27] (Microsoft Corporation) [File not signed] R3 usbohci; C:\Windows\System32\DRIVERS\usbohci.sys [25600 2013-11-27] (Microsoft Corporation) [File not signed] S3 usbprint; C:\Windows\System32\DRIVERS\usbprint.sys [25088 2009-07-14] (Microsoft Corporation) [File not signed] S3 usbscan; C:\Windows\System32\DRIVERS\usbscan.sys [42496 2013-07-03] (Microsoft Corporation) [File not signed] R3 USBSTOR; C:\Windows\system32\drivers\USBSTOR.SYS [91648 2011-03-11] (Microsoft Corporation) [File not signed] S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2009-07-14] (Microsoft Corporation) [File not signed] R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [271752 2014-12-02] (Avast Software) S3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed] R1 VgaSave; C:\Windows\System32\drivers\vga.sys [29184 2009-07-14] (Microsoft Corporation) [File not signed] R3 vwifibus; C:\Windows\System32\DRIVERS\vwifibus.sys [24576 2009-07-14] (Microsoft Corporation) [File not signed] R1 vwififlt; C:\Windows\System32\DRIVERS\vwififlt.sys [59904 2009-07-14] (Microsoft Corporation) [File not signed] S3 WacomPen; C:\Windows\system32\drivers\wacompen.sys [27776 2009-07-14] (Microsoft Corporation) [File not signed] S3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed] R1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [88576 2010-11-21] (Microsoft Corporation) [File not signed] R1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [12800 2009-07-14] (Microsoft Corporation) [File not signed] S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-21] (Microsoft Corporation) [File not signed] R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] (Microsoft Corporation) [File not signed] R1 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [21504 2009-07-14] (Microsoft Corporation) [File not signed] R3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [87040 2012-07-26] (Microsoft Corporation) [File not signed] R3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) [File not signed] S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-10 13:51 - 2014-12-10 13:51 - 02119680 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST64(1).exe 2014-12-10 13:50 - 2014-12-10 13:50 - 01111040 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST.exe 2014-12-10 13:50 - 2014-12-10 13:50 - 01111040 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST(1).exe 2014-12-10 13:46 - 2014-12-10 13:46 - 00003146 _____ () C:\Windows\System32\Tasks\{13A5207C-4131-49B3-AEEA-55652BB0E56C} 2014-12-10 13:44 - 2014-12-10 13:44 - 01295360 _____ () C:\Users\Brigitte 1\Downloads\zoek.exe 2014-12-10 13:36 - 2014-12-10 13:36 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-10 12:33 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-10 12:33 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-10 12:33 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-12-10 12:33 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2014-12-10 12:33 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-12-10 12:33 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2014-12-10 12:33 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2014-12-10 12:33 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2014-12-10 12:33 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2014-12-10 12:33 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2014-12-10 12:32 - 2014-12-10 12:32 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(4).exe 2014-12-10 12:31 - 2014-12-10 12:31 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(3).exe 2014-12-10 12:30 - 2014-12-10 12:30 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(2).exe 2014-12-10 12:22 - 2014-12-10 12:22 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek(1).exe 2014-12-10 12:22 - 2014-12-10 12:22 - 00000000 ____D () C:\zoek_backup 2014-12-10 12:21 - 2014-12-10 12:21 - 01295360 _____ () C:\Users\Brigitte\Downloads\zoek.exe 2014-12-10 12:17 - 2014-12-10 12:17 - 00002163 _____ () C:\Users\Brigitte\Desktop\Marlware 2.txt 2014-12-10 12:17 - 2014-12-10 12:17 - 00001524 _____ () C:\Users\Brigitte\Desktop\Malware 3.txt 2014-12-10 12:16 - 2014-12-10 12:16 - 00001058 _____ () C:\Users\Brigitte\Desktop\Malware.txt 2014-12-10 11:49 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-10 11:49 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-10 11:49 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-10 11:49 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-10 11:49 - 2014-10-30 03:04 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-12-10 11:49 - 2014-10-30 02:46 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-12-10 11:49 - 2014-07-07 03:06 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-12-10 11:49 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-12-10 11:48 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-10 11:48 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-10 11:48 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-10 11:48 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-10 11:48 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-10 11:48 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-10 11:48 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-10 11:48 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-10 11:48 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-10 11:48 - 2014-11-22 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-10 11:48 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-10 11:48 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-10 11:48 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-10 11:48 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-10 11:48 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-10 11:48 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-10 11:48 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-10 11:48 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-10 11:48 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-10 11:48 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-10 11:48 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-10 11:48 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-10 11:48 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-10 11:48 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-10 11:48 - 2014-11-22 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-10 11:48 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-10 11:48 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-10 11:48 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-10 11:48 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-10 11:48 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-10 11:48 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-10 11:48 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-10 11:48 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-10 11:48 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-10 11:48 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-10 11:48 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-10 11:48 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-10 11:48 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-10 11:48 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-10 11:48 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-10 11:48 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-10 11:48 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-10 11:48 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-10 11:48 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-10 11:48 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-10 11:48 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-10 11:47 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-10 11:47 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-10 11:47 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-10 11:47 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-10 11:47 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-10 11:47 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-10 11:47 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-10 11:47 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-10 11:47 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-10 11:47 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-10 11:47 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-10 11:47 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-10 11:47 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-10 11:47 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-10 11:47 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-10 11:47 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-10 11:47 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-10 11:47 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-10 11:47 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-10 11:47 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-10 11:47 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-10 11:47 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-10 11:47 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-10 11:47 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-10 11:47 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2014-12-10 11:46 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-10 11:46 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-10 11:38 - 2014-12-10 13:41 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-12-10 11:37 - 2014-12-10 11:37 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-12-10 11:37 - 2014-12-10 11:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-12-10 11:37 - 2014-12-10 11:37 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-12-10 11:37 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-12-10 11:37 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-12-10 11:37 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-12-10 11:36 - 2014-12-10 11:37 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Brigitte\Downloads\mbam-setup-2.0.4.1028.exe 2014-12-10 11:22 - 2014-12-10 11:22 - 02166272 _____ () C:\Users\Brigitte\Downloads\AdwCleaner_4.105(1).exe 2014-12-10 11:21 - 2014-12-10 11:21 - 02166272 _____ () C:\Users\Brigitte\Downloads\AdwCleaner_4.105.exe 2014-12-10 10:56 - 2014-12-10 10:56 - 01079976 _____ ( ) C:\Users\Brigitte 1\Downloads\FirefoxSetup.exe 2014-12-08 16:53 - 2014-12-08 17:05 - 00027292 _____ () C:\Users\Brigitte 1\Downloads\Addition.txt 2014-12-08 16:52 - 2014-12-10 13:51 - 00045519 _____ () C:\Users\Brigitte 1\Downloads\FRST.txt 2014-12-08 16:52 - 2014-12-08 16:52 - 02119680 _____ (Farbar) C:\Users\Brigitte 1\Downloads\FRST64.exe 2014-12-08 16:29 - 2014-12-08 16:29 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-BRIGITTE-PC-Microsoft-Windows-7-Home-Premium-(64-bit).dat 2014-12-08 16:29 - 2014-12-08 16:29 - 00000000 ____D () C:\RegBackup 2014-12-08 16:18 - 2014-12-08 16:18 - 00002167 _____ () C:\Users\Brigitte 1\Desktop\Tweaking.com - Windows Repair (All in One).lnk 2014-12-08 16:17 - 2014-12-08 16:17 - 09817304 _____ () C:\Users\Brigitte 1\Downloads\tweaking.com_windows_repair_aio_setup.exe 2014-12-08 16:17 - 2014-12-08 16:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com 2014-12-08 16:17 - 2014-12-08 16:17 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com 2014-12-08 16:08 - 2014-12-08 16:08 - 00002023 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk 2014-12-07 16:22 - 2014-12-07 16:22 - 00006656 ____N () C:\bootsqm.dat 2014-12-07 16:09 - 2014-12-07 16:09 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Macromedia 2014-12-07 16:08 - 2014-12-07 16:08 - 00000000 ____D () C:\Users\Jürgen\Documents\Computer 2014-12-07 16:06 - 2014-12-07 16:06 - 00026863 _____ () C:\ComboFix.txt 2014-12-07 15:46 - 2014-12-07 15:46 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\TuneUp Software 2014-12-07 15:45 - 2014-12-07 15:45 - 05600430 ____R (Swearware) C:\Users\Jürgen\Downloads\ComboFix.exe 2014-12-07 15:42 - 2014-12-07 15:42 - 00001429 _____ () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Mozilla 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\CyberLink 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\AVAST Software 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Adobe 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Mozilla 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\MediaServer 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Google 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\clear.fi 2014-12-07 15:42 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\Acer 2014-12-07 15:41 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen\AppData\Local\VirtualStore 2014-12-07 15:41 - 2014-12-07 15:42 - 00000000 ____D () C:\Users\Jürgen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000020 ___SH () C:\Users\Jürgen\ntuser.ini 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Vorlagen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Startmenü 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Netzwerkumgebung 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Lokale Einstellungen 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Eigene Dateien 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Druckumgebung 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Documents\Eigene Musik 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Documents\Eigene Bilder 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Local\Verlauf 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\AppData\Local\Anwendungsdaten 2014-12-07 15:41 - 2014-12-07 15:41 - 00000000 _SHDL () C:\Users\Jürgen\Anwendungsdaten 2014-12-07 15:41 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Jürgen\AppData\Roaming\Macromedia 2014-12-07 15:41 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-12-07 15:41 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-12-04 10:23 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-12-04 10:23 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-12-04 10:23 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-12-04 10:23 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-12-04 10:18 - 2014-12-04 10:19 - 05600127 ____R (Swearware) C:\Users\Brigitte\Downloads\ComboFix.exe 2014-12-04 10:13 - 2014-12-04 10:13 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\AVAST Software 2014-12-02 22:31 - 2014-12-10 11:27 - 00000000 ____D () C:\AdwCleaner 2014-12-02 22:12 - 2014-12-10 13:51 - 00000000 ____D () C:\FRST 2014-12-02 19:22 - 2014-12-10 11:31 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Adobe 2014-12-02 18:37 - 2014-12-02 18:37 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-12-02 18:37 - 2014-12-02 18:37 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-12-02 18:33 - 2014-12-10 10:54 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-12-02 18:33 - 2014-12-02 18:37 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-12-02 18:33 - 2014-12-02 18:37 - 00001968 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2014-12-02 18:33 - 2014-12-02 18:33 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\AVAST Software 2014-12-02 18:33 - 2014-12-02 18:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2014-12-02 18:32 - 2014-12-02 18:32 - 00060248 _____ () C:\Users\Brigitte 1\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-02 18:32 - 2014-12-02 18:32 - 00000000 ____D () C:\Program Files\AVAST Software 2014-12-02 18:31 - 2014-12-02 18:32 - 131078000 _____ (AVAST Software) C:\Users\Brigitte 1\Downloads\avast_free_antivirus_setup.exe 2014-12-02 18:28 - 2014-12-02 18:28 - 00244264 _____ () C:\Users\Brigitte 1\Downloads\Firefox Setup Stub 34.0.5.exe 2014-12-02 18:17 - 2014-12-02 18:17 - 01056056 _____ (TuneUp Software) C:\Users\Brigitte 1\Downloads\Integrator.exe 2014-12-02 18:10 - 2014-12-07 16:06 - 00000000 ____D () C:\Qoobox 2014-12-02 18:10 - 2014-12-07 16:04 - 00000000 ____D () C:\Windows\erdnt 2014-12-02 10:15 - 2014-12-07 15:34 - 05600430 _____ (Swearware) C:\Users\Brigitte 1\Downloads\ComboFix.exe 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieUserList 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieSiteList 2014-12-01 20:31 - 2014-12-01 20:31 - 00000000 __SHD () C:\Users\Brigitte 1\AppData\Local\EmieBrowserModeList 2014-12-01 10:35 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-12-01 10:35 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-12-01 09:25 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-12-01 09:25 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-12-01 09:25 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-12-01 09:25 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-12-01 09:25 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-12-01 09:25 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-12-01 09:24 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2014-12-01 09:24 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2014-12-01 09:24 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-12-01 09:24 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2014-12-01 09:24 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2014-12-01 09:24 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe 2014-12-01 09:24 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-11-30 18:21 - 2014-11-30 18:29 - 00000000 ____D () C:\Windows\system32\MRT 2014-11-30 18:20 - 2014-10-31 23:26 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-11-30 17:29 - 2014-11-30 17:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ___HD () C:\ProgramData\CanonBJ 2014-11-30 14:55 - 2014-11-30 14:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series 2014-11-30 14:53 - 2010-04-24 05:00 - 00336896 _____ (CANON INC.) C:\Windows\system32\CNMLM9Z.DLL 2014-11-30 14:53 - 2009-04-03 16:01 - 01321984 _____ (CANON INC.) C:\Windows\system32\CNC550C.dll 2014-11-30 14:53 - 2009-04-03 16:00 - 00092672 _____ (CANON INC.) C:\Windows\system32\CNC550I.dll 2014-11-30 14:53 - 2009-03-19 14:39 - 00328192 _____ (CANON INC.) C:\Windows\system32\CNC550L.dll 2014-11-30 14:53 - 2009-03-19 14:38 - 00303104 _____ (CANON INC.) C:\Windows\SysWOW64\CNC550L.dll 2014-11-30 14:53 - 2008-12-01 11:21 - 00012800 _____ () C:\Windows\SysWOW64\CNC173DD.TBL 2014-11-30 14:53 - 2008-12-01 11:21 - 00012800 _____ () C:\Windows\system32\CNC173DD.TBL 2014-11-30 14:53 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2014-11-30 14:52 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\SysWOW64\CNC550U.dll 2014-11-30 14:52 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2014-11-30 14:14 - 2014-11-30 14:14 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\TuneUp Software 2014-11-30 14:13 - 2014-11-30 14:13 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Macromedia 2014-11-30 14:10 - 2014-11-30 14:10 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Mozilla 2014-11-30 14:10 - 2014-11-30 14:10 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Mozilla 2014-11-30 14:09 - 2014-12-08 16:05 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Adobe 2014-11-30 14:09 - 2014-12-01 16:02 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\VirtualStore 2014-11-30 14:09 - 2014-11-30 14:09 - 00001429 _____ () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-30 14:09 - 2014-11-30 14:09 - 00000020 ___SH () C:\Users\Brigitte 1\ntuser.ini 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Vorlagen 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Startmenü 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\Lokale Einstellungen 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Local\Verlauf 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 _SHDL () C:\Users\Brigitte 1\AppData\Local\Anwendungsdaten 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\CyberLink 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\MediaServer 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Google 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\clear.fi 2014-11-30 14:09 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Local\Acer 2014-11-30 14:08 - 2014-11-30 14:09 - 00000000 ____D () C:\Users\Brigitte 1 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Netzwerkumgebung 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Eigene Dateien 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Druckumgebung 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Documents\Eigene Musik 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Documents\Eigene Bilder 2014-11-30 14:08 - 2014-11-30 14:08 - 00000000 _SHDL () C:\Users\Brigitte 1\Anwendungsdaten 2014-11-30 14:08 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Brigitte 1\AppData\Roaming\Macromedia 2014-11-30 14:08 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-30 14:08 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Brigitte 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-30 11:53 - 2014-12-10 13:38 - 00002072 _____ () C:\Windows\setupact.log 2014-11-30 11:53 - 2014-11-30 11:53 - 00000000 _____ () C:\Windows\setuperr.log 2014-11-30 11:49 - 2014-12-10 13:36 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-11-30 11:37 - 2014-12-01 10:39 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-11-30 11:26 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-11-30 11:19 - 2014-11-30 11:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-11-30 11:19 - 2014-11-30 11:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-11-30 11:19 - 2014-11-30 11:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-11-30 11:19 - 2014-11-30 11:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-11-30 11:19 - 2014-11-30 11:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-11-30 11:19 - 2014-11-30 11:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-11-30 11:19 - 2014-11-30 11:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-11-30 11:19 - 2014-11-30 11:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-11-30 11:19 - 2014-11-30 11:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-11-30 11:16 - 2014-11-30 11:16 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-11-30 11:16 - 2014-11-30 11:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-11-30 11:14 - 2014-11-30 11:27 - 00011799 _____ () C:\Windows\IE11_main.log 2014-11-30 09:57 - 2014-11-30 17:30 - 00289424 _____ () C:\Windows\msxml4-KB973688-enu.LOG 2014-11-30 09:22 - 2014-11-30 17:29 - 00292648 _____ () C:\Windows\msxml4-KB954430-enu.LOG 2014-11-30 09:06 - 2012-07-26 04:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-11-30 09:06 - 2012-07-26 04:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-11-30 09:06 - 2012-07-26 04:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-11-30 09:06 - 2012-07-26 03:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-11-30 09:06 - 2012-07-26 03:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-11-30 09:06 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-11-29 17:18 - 2014-11-29 17:18 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Kromtech 2014-11-29 17:11 - 2014-11-29 17:18 - 00000000 ____D () C:\ProgramData\Kromtech 2014-11-29 17:11 - 2014-11-29 17:11 - 01220904 _____ (Kromtech) C:\Users\Brigitte\Downloads\PCKeeper Installer.exe 2014-11-29 17:00 - 2014-11-29 17:00 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-11-29 16:58 - 2014-11-29 16:59 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Brigitte\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-29 16:58 - 2014-11-29 16:58 - 00000000 _____ () C:\Users\Brigitte\Downloads\mbam-setup-2.0.3.1025_CB-DL-Manager.exe 2014-11-29 14:45 - 2014-11-29 14:45 - 00262144 _____ () C:\Windows\system32\config\ELAM 2014-11-29 13:14 - 2014-11-29 16:41 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Nico Mak Computing 2014-11-29 13:14 - 2014-11-29 13:14 - 04892480 _____ (WinZip International LLC ) C:\Users\Brigitte\Downloads\wzmp_8.exe 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-11-29 12:44 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-11-29 12:44 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-11-29 12:44 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-11-29 12:44 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls 2014-11-29 12:44 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2014-11-29 12:44 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe 2014-11-29 12:44 - 2011-02-25 07:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2014-11-29 12:44 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2014-11-29 12:30 - 2014-11-29 12:31 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige 2014-11-29 12:24 - 2014-11-29 12:24 - 00000889 _____ () C:\Users\Brigitte\Desktop\services.lnk 2014-11-29 10:51 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-11-29 10:51 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-11-29 10:51 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-11-29 10:51 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-11-29 10:42 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-11-29 10:33 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2014-11-29 10:33 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2014-11-29 10:33 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll 2014-11-29 09:53 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-11-29 09:53 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-11-29 09:53 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-11-29 09:53 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-11-29 09:53 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-11-29 09:53 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-11-29 09:52 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-11-29 09:52 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe |
|
10.12.2014, 14:09
| #27 |
| | sec_error_unknown_issuer 2014-11-29 09:48 - 2014-11-29 09:48 - 00000197 _____ () C:\Windows\system32\2014-11-29-08-48-10.011-AvastVBoxSVC.exe-3332.log 2014-11-28 16:11 - 2014-11-28 16:11 - 00000197 _____ () C:\Windows\system32\2014-11-28-15-11-14.053-AvastVBoxSVC.exe-3308.log 2014-11-28 15:38 - 2014-11-28 15:38 - 00000197 _____ () C:\Windows\system32\2014-11-28-14-38-42.071-AvastVBoxSVC.exe-416.log 2014-11-28 15:27 - 2014-11-28 15:27 - 00000247 _____ () C:\Windows\system32\2014-11-28-14-27-23.007-aswFe.exe-5408.log 2014-11-28 15:19 - 2014-11-28 15:27 - 00000247 _____ () C:\Windows\system32\2014-11-28-14-19-26.035-aswFe.exe-5876.log 2014-11-28 15:19 - 2014-11-28 15:19 - 00000197 _____ () C:\Windows\system32\2014-11-28-14-19-18.077-AvastVBoxSVC.exe-3980.log 2014-11-28 15:12 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-11-28 15:12 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-11-28 15:12 - 2011-06-16 06:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2014-11-28 15:12 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2014-11-28 15:12 - 2011-06-15 11:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll 2014-11-28 15:12 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll 2014-11-28 15:11 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-11-28 15:11 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-11-28 15:11 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-11-28 15:11 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-11-28 15:10 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-11-28 15:10 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-11-28 15:10 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2014-11-28 15:10 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2014-11-28 15:10 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2014-11-28 15:10 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2014-11-28 15:08 - 2014-11-28 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-11-28 15:08 - 2011-10-26 06:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2014-11-28 15:08 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2014-11-28 15:08 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-11-28 15:08 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-11-28 15:07 - 2014-11-28 15:07 - 13087456 _____ (Microsoft Corporation) C:\Users\Brigitte\Downloads\Silverlight_x64.exe 2014-11-28 15:07 - 2014-11-28 15:07 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-11-28 15:07 - 2014-11-28 15:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-11-28 14:57 - 2012-01-04 11:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2014-11-28 14:57 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll 2014-11-28 14:57 - 2011-05-04 06:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2014-11-28 14:57 - 2011-05-04 06:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2014-11-28 14:57 - 2011-05-04 06:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2014-11-28 14:57 - 2011-05-04 06:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2014-11-28 14:57 - 2011-05-04 06:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2014-11-28 14:57 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2014-11-28 14:57 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2014-11-28 14:57 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2014-11-28 14:57 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2014-11-28 14:57 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2014-11-28 14:56 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-11-28 14:56 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-11-28 14:56 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-11-28 14:56 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-11-28 14:56 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-11-28 14:56 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-11-28 14:56 - 2011-07-09 03:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2014-11-28 14:56 - 2011-04-27 03:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-11-28 14:56 - 2011-04-27 03:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-11-28 14:55 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-11-28 14:55 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-11-28 14:55 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-11-28 14:55 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2014-11-28 14:50 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2014-11-28 14:50 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-11-28 14:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-11-28 14:50 - 2011-12-30 07:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2014-11-28 14:50 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2014-11-28 14:49 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-11-28 14:49 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-11-28 14:49 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-11-28 14:49 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-11-28 14:47 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-11-28 14:47 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2014-11-28 14:47 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-11-28 14:47 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2014-11-28 14:47 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2014-11-28 14:46 - 2014-11-28 14:46 - 17711760 _____ (Adobe Systems Inc.) C:\Users\Brigitte\Downloads\AdobeAIRInstaller.exe 2014-11-28 14:46 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-11-28 14:46 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-11-28 14:46 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-11-28 14:46 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-11-28 14:46 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-11-28 14:46 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-11-28 14:46 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-11-28 14:40 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-11-28 14:40 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-11-28 14:40 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-11-28 14:40 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-11-28 14:40 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-11-28 14:21 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-11-28 14:21 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-11-28 14:21 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-11-28 14:21 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-11-28 14:21 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2014-11-28 14:21 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2014-11-28 14:21 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2014-11-28 14:21 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-11-28 14:21 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-11-28 14:21 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-11-28 14:20 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-11-28 14:20 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-11-28 14:20 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2014-11-28 14:20 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2014-11-28 14:19 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-11-28 14:19 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-11-28 14:19 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-11-28 14:19 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-11-28 14:19 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-11-28 14:19 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-11-28 14:19 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-11-28 14:19 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-11-28 14:19 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-11-28 14:19 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-11-28 14:19 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-11-28 14:19 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-11-28 14:19 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-11-28 14:19 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-11-28 14:19 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-11-28 14:19 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-11-28 14:18 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-11-28 14:18 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-11-28 14:18 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-11-28 14:18 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-11-28 14:18 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-11-28 14:18 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-11-28 14:18 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-11-28 14:18 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-11-28 14:18 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-11-28 14:18 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2014-11-28 14:18 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-11-28 14:18 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2014-11-28 14:17 - 2014-03-04 10:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-11-28 14:17 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-11-28 14:17 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-11-28 14:17 - 2014-03-04 10:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-11-28 14:17 - 2014-03-04 10:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-11-28 14:17 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-11-28 14:17 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-11-28 14:17 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-11-28 14:17 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-11-28 14:16 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-11-28 14:16 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-11-28 14:16 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-11-28 14:16 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-11-28 14:16 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-11-28 14:16 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-11-28 14:15 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-11-28 14:15 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-11-28 14:15 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-11-28 14:15 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-11-28 14:15 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-11-28 14:15 - 2012-11-28 23:56 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-11-28 14:15 - 2012-11-28 23:56 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2014-11-28 14:15 - 2012-11-28 23:56 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2014-11-28 14:15 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2014-11-28 14:15 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2014-11-28 14:15 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2014-11-28 14:15 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-11-28 14:15 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2014-11-28 14:15 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2014-11-28 14:15 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2014-11-28 14:15 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2014-11-28 14:15 - 2012-05-01 06:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2014-11-28 14:15 - 2012-04-26 06:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-11-28 14:15 - 2012-04-26 06:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-11-28 14:15 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2014-11-28 14:13 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-11-28 14:13 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-11-28 14:13 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-11-28 14:13 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-11-28 14:13 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-11-28 14:13 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2014-11-28 14:13 - 2011-04-29 04:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2014-11-28 14:13 - 2011-04-29 04:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-11-28 14:13 - 2011-04-29 04:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-11-28 14:07 - 2012-07-04 23:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2014-11-28 14:07 - 2012-07-04 23:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2014-11-28 14:07 - 2012-07-04 23:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2014-11-28 14:07 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll 2014-11-28 14:07 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll 2014-11-28 13:58 - 2014-11-28 13:58 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Macromedia 2014-11-28 13:23 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-11-28 13:23 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-11-28 13:23 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2014-11-28 13:23 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2014-11-28 13:23 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-11-28 13:23 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-11-28 13:23 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-11-28 13:23 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-11-28 13:23 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2014-11-28 13:23 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2014-11-28 13:23 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll 2014-11-28 13:23 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll 2014-11-28 13:23 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2014-11-28 13:23 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2014-11-28 13:23 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs 2014-11-28 13:23 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs 2014-11-28 13:23 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-11-28 13:22 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2014-11-28 13:22 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2014-11-28 13:22 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2014-11-28 13:22 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs 2014-11-28 13:22 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs 2014-11-28 13:22 - 2011-08-17 06:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2014-11-28 13:22 - 2011-08-17 06:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2014-11-28 13:22 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll 2014-11-28 13:22 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax 2014-11-28 13:20 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-11-28 13:20 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-11-28 13:20 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-11-28 13:20 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-11-28 13:20 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-11-28 13:20 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-11-28 13:20 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-11-28 13:20 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-11-28 13:20 - 2012-03-17 08:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2014-11-28 13:19 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2014-11-28 13:19 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-11-28 13:19 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2014-11-28 13:19 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-11-28 13:19 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-11-28 13:19 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-11-28 13:19 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-11-28 13:19 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-11-28 13:19 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-11-28 13:19 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-11-28 13:19 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-11-28 13:18 - 2014-12-10 13:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-11-28 13:18 - 2014-12-10 11:45 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-11-28 13:18 - 2014-12-10 11:45 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-11-28 13:18 - 2014-11-28 13:18 - 00000000 ____D () C:\Windows\system32\Macromed 2014-11-28 13:17 - 2014-11-28 15:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Adobe 2014-11-28 13:16 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-11-28 13:16 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2014-11-28 13:16 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2014-11-28 13:16 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2014-11-28 13:16 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2014-11-28 13:16 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-11-28 13:16 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-11-28 13:16 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-11-28 13:16 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-11-28 13:16 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-11-28 13:15 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-11-28 13:15 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-11-28 13:14 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll 2014-11-28 13:14 - 2012-09-25 23:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2014-11-28 13:12 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-11-28 13:12 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2014-11-28 13:12 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-11-28 13:12 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-11-28 13:12 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-11-28 13:12 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2014-11-28 13:12 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-11-28 13:12 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-11-28 13:12 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-11-28 13:10 - 2011-05-24 12:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2014-11-28 13:10 - 2011-05-24 11:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll 2014-11-28 13:10 - 2011-05-24 11:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll 2014-11-28 13:10 - 2011-05-24 11:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll 2014-11-28 13:10 - 2011-05-24 11:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe 2014-11-28 13:09 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-11-28 13:09 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-11-28 13:09 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-11-28 13:09 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-11-28 13:09 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-11-28 13:05 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-11-28 13:05 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-11-28 13:04 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-11-28 13:04 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-11-28 13:04 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-11-28 13:04 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2014-11-28 13:04 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-11-28 13:04 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2014-11-28 13:04 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-11-28 13:04 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-11-28 13:04 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-11-28 13:04 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-11-28 13:04 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-11-28 13:04 - 2013-02-15 07:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2014-11-28 13:04 - 2013-02-15 07:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll 2014-11-28 13:04 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00038200 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00030520 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll 2014-11-28 12:42 - 2014-01-28 12:32 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll 2014-11-28 12:38 - 2014-01-28 12:32 - 00035640 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe 2014-11-28 12:37 - 2014-11-28 12:37 - 00002217 _____ () C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk 2014-11-28 12:37 - 2014-11-28 12:37 - 00002209 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013.lnk 2014-11-28 12:37 - 2014-11-28 12:37 - 00002197 _____ () C:\Users\Public\Desktop\TuneUp Utilities 2013.lnk 2014-11-28 12:37 - 2014-11-28 12:37 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\TuneUp Software 2014-11-28 12:37 - 2014-11-28 12:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013 2014-11-28 12:36 - 2014-12-02 09:59 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2013 2014-11-28 12:35 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-11-28 12:35 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-11-28 12:35 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-11-28 12:35 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-11-28 12:35 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-11-28 12:35 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-11-28 12:35 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-11-28 12:35 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-11-28 12:35 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-11-28 12:35 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-11-28 12:35 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-11-28 12:35 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-11-28 12:35 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-11-28 12:35 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-11-28 12:35 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-11-28 12:35 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-11-28 12:35 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-11-28 12:35 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-11-28 12:35 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-11-28 12:34 - 2014-11-28 12:42 - 00000000 ____D () C:\ProgramData\TuneUp Software 2014-11-28 12:34 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-11-28 12:34 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-11-28 12:34 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-11-28 12:34 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2014-11-28 12:34 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2014-11-28 12:34 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-11-28 12:34 - 2012-05-05 09:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2014-11-28 12:34 - 2012-05-05 08:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2014-11-28 12:34 - 2011-12-16 09:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2014-11-28 12:34 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll 2014-11-28 12:34 - 2011-05-03 06:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2014-11-28 12:34 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2014-11-28 12:34 - 2011-02-18 11:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2014-11-28 12:34 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe 2014-11-28 12:33 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-11-28 12:33 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-11-28 12:33 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2014-11-28 12:33 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-11-28 12:33 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-11-28 12:33 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-11-28 12:33 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2014-11-28 12:33 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-11-28 12:33 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-11-28 12:32 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-11-28 12:32 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-11-28 12:32 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-11-28 12:32 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-11-28 12:32 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-11-28 12:32 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-11-28 12:32 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-11-28 12:32 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-11-28 12:32 - 2012-05-14 06:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-11-28 12:32 - 2011-10-15 07:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2014-11-28 12:32 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2014-11-28 12:32 - 2011-08-27 06:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2014-11-28 12:32 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll 2014-11-28 12:31 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-11-28 12:31 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-11-28 12:31 - 2012-06-06 07:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2014-11-28 12:31 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll 2014-11-28 12:30 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-11-28 12:30 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-11-28 12:02 - 2014-11-28 12:03 - 00000000 ____D () C:\Windows\SysWOW64\vbox 2014-11-28 12:02 - 2014-11-28 12:03 - 00000000 ____D () C:\Windows\system32\vbox 2014-11-28 12:00 - 2014-11-28 12:00 - 00002255 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-11-28 12:00 - 2014-11-28 12:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-11-28 11:59 - 2014-11-29 10:29 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-11-28 11:59 - 2014-11-29 10:29 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-11-28 11:59 - 2014-11-28 12:11 - 00004118 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-11-28 11:59 - 2014-11-28 12:11 - 00003866 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-11-28 11:59 - 2014-11-28 12:07 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Google 2014-11-28 11:59 - 2014-11-28 12:00 - 00000000 ____D () C:\Program Files (x86)\Google 2014-11-28 11:53 - 2014-12-02 18:32 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-11-28 11:51 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-11-28 11:51 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-11-28 11:51 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-11-28 11:50 - 2014-11-28 11:52 - 131078000 _____ (AVAST Software) C:\Users\Brigitte\Downloads\avast_free_antivirus_setup.exe 2014-11-28 11:47 - 2014-12-04 10:15 - 00001143 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-11-28 11:47 - 2014-12-04 10:15 - 00001143 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-11-28 11:47 - 2014-12-04 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-28 11:47 - 2014-12-04 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-28 11:47 - 2014-11-28 11:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Mozilla 2014-11-28 11:47 - 2014-11-28 11:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Mozilla 2014-11-28 11:47 - 2014-11-28 11:47 - 00000000 ____D () C:\ProgramData\Mozilla 2014-11-28 11:46 - 2014-11-28 11:46 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2014-11-28 11:43 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-11-28 11:43 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-11-28 11:43 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-11-28 11:43 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-11-28 11:43 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-11-28 11:43 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-11-28 11:43 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-11-28 11:43 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-11-28 11:43 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-11-28 11:43 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-11-28 11:42 - 2014-11-28 15:47 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Adobe 2014-11-28 11:40 - 2014-11-28 11:40 - 00000000 ____D () C:\Windows\Options 2014-11-28 11:40 - 2010-04-20 13:54 - 01847296 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athurx.sys 2014-11-28 11:40 - 2010-04-20 13:54 - 01847296 _____ (Atheros Communications, Inc.) C:\Windows\system32\athurx.sys 2014-11-28 11:40 - 2010-04-20 13:54 - 00007986 _____ () C:\Windows\system32\athurextx.cat 2014-11-28 11:39 - 2010-04-20 09:55 - 00769024 _____ (Atheros Communications, Inc.) C:\Windows\system32\arusb_win7x.sys 2014-11-28 11:39 - 2010-04-20 09:55 - 00008826 _____ () C:\Windows\system32\arusb_win7x.cat 2014-11-28 11:38 - 2014-11-28 11:40 - 00000000 ____D () C:\ProgramData\TP-LINK 2014-11-28 11:36 - 2014-12-10 11:57 - 00000000 ____D () C:\ProgramData\clear.fi 2014-11-28 06:49 - 2014-12-10 13:42 - 00684980 _____ () C:\Windows\system32\perfh007.dat 2014-11-28 06:49 - 2014-12-10 13:42 - 00144812 _____ () C:\Windows\system32\perfc007.dat 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\system32\de 2014-11-28 06:49 - 2014-11-28 06:49 - 00000000 ____D () C:\Windows\system32\0407 2014-11-28 06:49 - 2014-11-28 06:48 - 00295922 _____ () C:\Windows\system32\perfi007.dat 2014-11-28 06:49 - 2014-11-28 06:48 - 00038104 _____ () C:\Windows\system32\perfd007.dat 2014-11-28 06:45 - 2014-11-28 06:45 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-11-28 05:30 - 2014-11-28 05:31 - 00000000 ___RD () C:\Backup 2014-11-27 23:05 - 2014-11-30 12:02 - 00001429 _____ () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-11-27 23:05 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\OEM 2014-11-27 23:05 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\EgisTec IPS 2014-11-27 23:03 - 2014-12-10 11:49 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\VirtualStore 2014-11-27 23:03 - 2014-12-02 10:09 - 00060248 _____ () C:\Users\Brigitte\AppData\Local\GDIPFONTCACHEV1.DAT 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\CyberLink 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\MediaServer 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\clear.fi 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Users\Brigitte\AppData\Local\Acer 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files\Accessory Store 2014-11-27 23:03 - 2014-11-27 23:03 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-11-27 23:02 - 2014-11-27 23:05 - 00000000 ____D () C:\Users\Brigitte 2014-11-27 23:02 - 2014-11-27 23:02 - 00000020 ___SH () C:\Users\Brigitte\ntuser.ini 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Netzwerkumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Lokale Einstellungen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Eigene Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Druckumgebung 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Documents\Eigene Musik 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Documents\Eigene Bilder 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Local\Verlauf 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\AppData\Local\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Users\Brigitte\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 ____D () C:\Recovery 2014-11-27 23:02 - 2014-11-27 23:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Family Protection 2014-11-27 23:02 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Brigitte\AppData\Roaming\Macromedia 2014-11-27 23:02 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-11-27 23:02 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Brigitte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-11-27 22:30 - 2014-11-27 22:31 - 00002490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2014-11-27 22:28 - 2014-11-27 22:29 - 00003751 _____ () C:\Windows\IE9_main.log 2014-11-27 22:27 - 2014-11-27 22:27 - 00001874 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fooz Kids.lnk 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\ProgramData\Fooz Kids 2014-11-27 22:27 - 2014-11-27 22:27 - 00000000 ____D () C:\Program Files (x86)\Fooz Kids 2014-11-27 22:26 - 2014-11-27 22:26 - 00003418 _____ () C:\Windows\System32\Tasks\clear.fi 2014-11-27 22:26 - 2014-11-27 22:26 - 00003366 _____ () C:\Windows\System32\Tasks\DMREngine 2014-11-27 22:26 - 2014-11-27 22:26 - 00003348 _____ () C:\Windows\System32\Tasks\clear.fiAgent 2014-11-27 22:26 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\CLSK 2014-11-27 22:25 - 2014-11-27 22:37 - 00000000 ____D () C:\ProgramData\CyberLink 2014-11-27 22:25 - 2014-11-27 22:26 - 00002640 _____ () C:\ProgramData\ArcadeDeluxe5.log 2014-11-27 22:25 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\Temp 2014-11-27 22:25 - 2014-11-27 22:26 - 00000000 ____D () C:\ProgramData\install_clap 2014-11-27 22:25 - 2014-11-27 22:25 - 00000000 ____D () C:\Program Files (x86)\Cyberlink 2014-11-27 22:22 - 2014-11-27 22:26 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\clear.fi 2014-11-27 22:21 - 2014-11-27 22:21 - 00002435 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk 2014-11-27 22:21 - 2014-11-27 22:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-11-27 22:19 - 2014-11-27 22:19 - 00003986 _____ () C:\Windows\System32\Tasks\UALU notificatin 2014-11-27 22:06 - 2014-11-27 22:10 - 00003765 _____ () C:\Windows\WinRE_Settings.log 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\Evernote 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\ProgramData\EgisTec 2014-11-27 22:06 - 2014-11-27 22:06 - 00000000 ____D () C:\Program Files (x86)\Evernote 2014-11-27 22:04 - 2014-11-27 22:04 - 00000000 _____ () C:\Windows\ativpsrm.bin 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-11-27 22:01 - 2014-11-27 22:01 - 00000000 ____D () C:\Program Files\Realtek 2014-11-27 22:01 - 2011-06-14 12:38 - 02899176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-11-27 22:01 - 2011-06-14 06:40 - 01483264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-11-27 22:01 - 2011-06-13 12:04 - 01560680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-11-27 22:01 - 2011-06-10 10:35 - 00603472 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-11-27 22:01 - 2011-06-07 10:09 - 02405992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-11-27 22:01 - 2011-06-03 07:11 - 01805928 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-11-27 22:01 - 2011-06-02 10:03 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll 2014-11-27 22:01 - 2011-05-31 03:09 - 03114088 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-11-27 22:01 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-11-27 22:01 - 2011-05-27 10:58 - 01284712 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-11-27 22:01 - 2011-05-23 10:12 - 01245288 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-11-27 22:01 - 2011-05-05 08:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-11-27 22:01 - 2011-05-05 07:15 - 00220512 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-11-27 22:01 - 2011-05-05 07:14 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-11-27 22:01 - 2011-05-05 07:14 - 00078176 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-11-27 22:01 - 2011-05-02 07:27 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-11-27 22:01 - 2011-04-18 11:50 - 02601816 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2014-11-27 22:01 - 2011-04-18 11:50 - 02238296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2014-11-27 22:01 - 2010-11-18 04:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-11-27 22:01 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-11-27 22:01 - 2010-11-03 11:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-11-27 22:01 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-11-27 22:01 - 2010-10-03 06:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-11-27 22:01 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-11-27 22:01 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-11-27 22:01 - 2010-07-22 09:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-11-27 22:01 - 2010-05-06 10:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-11-27 22:01 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-11-27 22:01 - 2009-11-18 11:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2014-11-27 22:01 - 2009-11-17 11:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-11-27 22:00 - 2014-11-27 22:00 - 00000000 ____D () C:\Program Files (x86)\AMD APP 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies 2014-11-27 21:59 - 2014-11-27 21:59 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies 2014-11-27 21:56 - 2014-12-10 13:43 - 01922347 _____ () C:\Windows\WindowsUpdate.log 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Program Files\ATI 2014-11-27 21:56 - 2014-11-27 21:56 - 00000000 ____D () C:\Program Files (x86)\AMD 2014-11-27 21:56 - 2011-03-17 13:04 - 00188544 _____ (Advanced Micro Devices, INC.) C:\Windows\system32\Drivers\amdxhc.sys 2014-11-27 21:56 - 2011-03-17 13:04 - 00087168 _____ (Advanced Micro Devices, INC.) C:\Windows\system32\Drivers\amdhub30.sys ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-10 13:43 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-10 13:43 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-10 13:42 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-10 13:38 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-10 13:36 - 2010-11-21 04:47 - 00554700 _____ () C:\Windows\PFRO.log 2014-12-10 13:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-10 13:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-12-10 11:45 - 2011-07-12 15:37 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-12-08 16:47 - 2010-11-21 08:16 - 00000000 ___RD () C:\Users\Public\Recorded TV 2014-12-08 16:47 - 2009-07-14 05:45 - 00265248 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-08 16:42 - 2009-07-14 03:34 - 00000471 _____ () C:\Windows\win.ini 2014-12-08 16:08 - 2011-07-12 15:36 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk 2014-12-08 16:05 - 2011-07-12 15:36 - 00000000 ____D () C:\ProgramData\Adobe 2014-12-07 16:06 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-12-07 16:01 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-12-05 23:54 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-12-04 14:02 - 2009-07-14 03:34 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_182 2014-12-04 11:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\ProgramData\McAfee 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\Program Files\mcafee 2014-12-02 10:08 - 2011-07-12 15:16 - 00000000 ____D () C:\Program Files\Common Files\mcafee 2014-11-30 14:53 - 2009-07-14 04:20 - 00000000 __RSD () C:\Windows\Media 2014-11-30 11:53 - 2011-07-12 15:18 - 00000000 ____D () C:\Program Files (x86)\Acer 2014-11-30 11:49 - 2010-11-21 08:17 - 00000000 ____D () C:\Program Files\Windows Journal 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-11-30 11:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-11-30 11:48 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-11-30 11:48 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-11-30 10:33 - 2011-07-12 15:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2014-11-30 09:44 - 2011-07-12 15:37 - 00002734 _____ () C:\Windows\System32\Tasks\Adobe ARM 2014-11-30 09:44 - 2011-07-12 15:37 - 00002732 _____ () C:\Windows\System32\Tasks\Adobe Reader Speed Launcher 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-11-29 12:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-11-29 09:53 - 2011-07-12 15:15 - 00000000 ____D () C:\ProgramData\Skype 2014-11-28 11:40 - 2011-07-12 14:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-11-28 11:38 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN 2014-11-28 06:51 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-11-28 06:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing 2014-11-28 06:49 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-11-28 06:49 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-11-28 06:49 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-11-28 06:49 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com 2014-11-28 06:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME 2014-11-28 06:42 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-11-28 06:42 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-11-27 23:11 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-11-27 23:05 - 2011-07-12 15:36 - 00018077 _____ () C:\Windows\patch.log 2014-11-27 23:05 - 2011-07-12 15:35 - 00000000 ____D () C:\ProgramData\oem 2014-11-27 23:05 - 2008-04-21 03:56 - 00000000 ____D () C:\OEM 2014-11-27 23:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery 2014-11-27 23:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-11-27 22:58 - 2009-07-14 05:46 - 00004059 _____ () C:\Windows\DtcInstall.log 2014-11-27 22:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-11-27 22:58 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther 2014-11-27 22:37 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-11-27 22:30 - 2011-07-12 15:21 - 00000000 ____D () C:\Program Files (x86)\Windows Live 2014-11-27 22:30 - 2011-07-12 15:20 - 00000582 _____ () C:\Windows\DirectX.log 2014-11-27 22:27 - 2011-07-12 15:36 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-11-27 22:21 - 2011-07-12 15:31 - 00000000 ____D () C:\Windows\OEMTemp 2014-11-27 22:21 - 2011-07-12 14:49 - 00000000 ____D () C:\Program Files (x86)\Acer Games 2014-11-27 22:21 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2014-11-27 22:11 - 2011-02-12 04:43 - 00000000 ____D () C:\Windows\DeployWinRE2 2014-11-27 22:05 - 2011-07-12 15:30 - 00000000 ____D () C:\ProgramData\EgisTec IPS 2014-11-27 22:01 - 2011-07-12 14:46 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-11-27 21:59 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-11-27 21:57 - 2013-07-16 13:49 - 00000000 ____D () C:\CIMTEMP 2014-11-27 21:55 - 2011-07-12 14:31 - 00003652 _____ () C:\Windows\TSSysprep.log 2014-11-24 14:04 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe Some content of TEMP: ==================== C:\Users\Brigitte 1\AppData\Local\temp\Quarantine.exe C:\Users\Brigitte 1\AppData\Local\temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-12-07 14:41 ==================== End Of Log ============================ Hallo, habe hoffentlich alles richtig gemacht. Bis auf das eine Programm habe ich alles geschafft. LG Brigitte |
|
10.12.2014, 17:10
| #28 |
| /// TB-Ausbilder | sec_error_unknown_issuer Servus, kommt immer noch die von dir genannte Meldung? Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
|
|
10.12.2014, 18:42
| #29 |
| | sec_error_unknown_issuer Hallo, nein die Meldung kommt nicht mehr. Gruß Gitti Hallo, da ist nichts gefunden worden. Aber leider kann ich den Text nicht kopieren. er macht es einfach nicht. Ich habe alles versucht. Soory...aber hier weiß ich nicht wieter. LG Gitti 18:24:42.0734 0x13f8 TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34 18:24:59.0348 0x13f8 EULA was not accepted, exiting. For auto accept you could use -accepteula command line parameter. 18:24:59.0348 0x02e8 Deinitialize success 18:25:08.0811 0x10d0 TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34 18:25:10.0371 0x10d0 EULA was not accepted, exiting. For auto accept you could use -accepteula command line parameter. 18:25:10.0371 0x0c74 Deinitialize success 18:25:41.0766 0x0780 TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34 18:25:45.0229 0x0780 EULA was not accepted, exiting. For auto accept you could use -accepteula command line parameter. 18:25:45.0229 0x08ac Deinitialize success 18:26:02.0289 0x1288 TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34 18:26:26.0589 0x1288 KSN EULA was not accepted. For auto accept you could use -accepteulaksn command line parameter. 18:26:26.0590 0x1288 ============================================================ 18:26:26.0590 0x1288 Current date / time: 2014/12/10 18:26:26.0590 18:26:26.0590 0x1288 SystemInfo: 18:26:26.0590 0x1288 18:26:26.0590 0x1288 OS Version: 6.1.7601 ServicePack: 1.0 18:26:26.0590 0x1288 Product type: Workstation 18:26:26.0590 0x1288 ComputerName: BRIGITTE-PC 18:26:26.0590 0x1288 UserName: Brigitte 1 18:26:26.0590 0x1288 Windows directory: C:\Windows 18:26:26.0590 0x1288 System windows directory: C:\Windows 18:26:26.0590 0x1288 Running under WOW64 18:26:26.0590 0x1288 Processor architecture: Intel x64 18:26:26.0590 0x1288 Number of processors: 4 18:26:26.0590 0x1288 Page size: 0x1000 18:26:26.0590 0x1288 Boot type: Normal boot 18:26:26.0590 0x1288 ============================================================ 18:26:27.0294 0x1288 KLMD registered as C:\Windows\system32\drivers\61807217.sys 18:26:27.0954 0x1288 System UUID: {4673423E-8E36-0C90-5CE6-8EC371BABE52} 18:26:27.0956 0x1288 Skipping KSN library initialization due to KSN EULA unacceptance 18:26:28.0250 0x1288 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 18:26:28.0262 0x1288 ============================================================ 18:26:28.0262 0x1288 \Device\Harddisk0\DR0: 18:26:28.0263 0x1288 MBR partitions: 18:26:28.0263 0x1288 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2A00800, BlocksNum 0x32000 18:26:28.0263 0x1288 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2A32800, BlocksNum 0x38DE7000 18:26:28.0263 0x1288 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3B819800, BlocksNum 0x38EEC800 18:26:28.0263 0x1288 ============================================================ 18:26:28.0335 0x1288 C: <-> \Device\Harddisk0\DR0\Partition2 18:26:28.0441 0x1288 D: <-> \Device\Harddisk0\DR0\Partition3 18:26:28.0441 0x1288 ============================================================ 18:26:28.0441 0x1288 Initialize success 18:26:28.0441 0x1288 ============================================================ 18:26:33.0835 0x07ec ============================================================ 18:26:33.0835 0x07ec Scan started 18:26:33.0835 0x07ec Mode: Manual; 18:26:33.0835 0x07ec ============================================================ 18:26:35.0457 0x07ec ================ Scan system memory ======================== 18:26:35.0457 0x07ec System memory - ok 18:26:35.0458 0x07ec ================ Scan services ============================= 18:26:35.0728 0x07ec [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 18:26:35.0747 0x07ec 1394ohci - ok 18:26:35.0782 0x07ec [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys 18:26:35.0789 0x07ec ACPI - ok 18:26:35.0819 0x07ec [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 18:26:35.0821 0x07ec AcpiPmi - ok 18:26:35.0919 0x07ec [ C5679E5186B2FC95BC76A8A9870D5456, 70AC61850B811A0A902532F098AE1D5DF4622455E56C78B89D4ABDBE4A061A48 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 18:26:35.0922 0x07ec AdobeARMservice - ok 18:26:36.0065 0x07ec [ 749F94C424524285DCDA84D695ABC12F, E5AD194AF5B8B4FDB3976D3E3F9EF942DECFEC4EBAA9881A8EF7707BB781E4AD ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 18:26:36.0070 0x07ec AdobeFlashPlayerUpdateSvc - ok 18:26:36.0129 0x07ec [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 18:26:36.0148 0x07ec adp94xx - ok 18:26:36.0179 0x07ec [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys 18:26:36.0188 0x07ec adpahci - ok 18:26:36.0209 0x07ec [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 18:26:36.0214 0x07ec adpu320 - ok 18:26:36.0258 0x07ec [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 18:26:36.0260 0x07ec AeLookupSvc - ok 18:26:36.0295 0x07ec [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys 18:26:36.0309 0x07ec AFD - ok 18:26:36.0323 0x07ec [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys 18:26:36.0325 0x07ec agp440 - ok 18:26:36.0357 0x07ec [ D64EB48F8E5865068674B9EF71D80A21, FA7E4A41502F343666767AE42E69148CDEBB8D76BE7045D75F3DAB4039E516F3 ] ahcix64s C:\Windows\system32\drivers\ahcix64s.sys 18:26:36.0362 0x07ec ahcix64s - ok 18:26:36.0382 0x07ec [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe 18:26:36.0385 0x07ec ALG - ok 18:26:36.0406 0x07ec [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys 18:26:36.0408 0x07ec aliide - ok 18:26:36.0439 0x07ec [ 812349D328EB406815183A5D17B49E7C, EB26EC80587283EE3996C531385F102BEB1396378E1BA5628059B6ED4B2B398D ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 18:26:36.0444 0x07ec AMD External Events Utility - ok 18:26:36.0465 0x07ec [ 30BFEEE0DFFD5BD79D29157CF080DEED, D3176AA5CFD43CAE7180E9E51A2C76DC2AC02897CA730391A54F647D263ED4E0 ] amdhub30 C:\Windows\system32\DRIVERS\amdhub30.sys 18:26:36.0467 0x07ec amdhub30 - ok 18:26:36.0481 0x07ec [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys 18:26:36.0482 0x07ec amdide - ok 18:26:36.0489 0x07ec [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 18:26:36.0491 0x07ec AmdK8 - ok 18:26:36.0882 0x07ec [ 0415FFE1B6A6EA141FEAFCA57567F57F, B3F18608B8C8796988C20BC47B7D3325FFC2CB6EE9FB9012BDB524DB0D07FDF1 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 18:26:37.0158 0x07ec amdkmdag - ok 18:26:37.0265 0x07ec [ DC24D6F38F17C0D643D9AA8A6852F8D0, BDD39D5A7AA82020A5A124B239094A56787B99B1CDBA54F1F67B519517BE2F4F ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 18:26:37.0272 0x07ec amdkmdap - ok 18:26:37.0316 0x07ec [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 18:26:37.0317 0x07ec AmdPPM - ok 18:26:37.0351 0x07ec [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys 18:26:37.0354 0x07ec amdsata - ok 18:26:37.0381 0x07ec [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 18:26:37.0387 0x07ec amdsbs - ok 18:26:37.0404 0x07ec [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys 18:26:37.0406 0x07ec amdxata - ok 18:26:37.0445 0x07ec [ 321533578132C811EC834A1B741C994C, 82B62C52018655B8A596E1E503CB31F0FA581780425A9FF44BE1248C0F3D4B3E ] amdxhc C:\Windows\system32\DRIVERS\amdxhc.sys 18:26:37.0449 0x07ec amdxhc - ok 18:26:37.0508 0x07ec [ 2FCA573860FB9EDE0BEE783F99B57C21, 755C69A0FDB3C4FF5412A417FD4DB898645B2E0D0A5077E477A57B7D6AF22255 ] AMD_RAIDXpert C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe 18:26:37.0527 0x07ec AMD_RAIDXpert - ok 18:26:37.0545 0x07ec [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys 18:26:37.0548 0x07ec AppID - ok 18:26:37.0572 0x07ec [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll 18:26:37.0574 0x07ec AppIDSvc - ok 18:26:37.0602 0x07ec [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll 18:26:37.0604 0x07ec Appinfo - ok 18:26:37.0634 0x07ec [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys 18:26:37.0637 0x07ec arc - ok 18:26:37.0643 0x07ec [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys 18:26:37.0646 0x07ec arcsas - ok 18:26:37.0756 0x07ec [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 18:26:37.0785 0x07ec aspnet_state - ok 18:26:37.0831 0x07ec [ 9BE9F2B83DE80E2752B1405CC427E2EC, 6015CA66553B3B882083B33F24FB338249A110D9769831C3D3D3C681AAFA9411 ] aswHwid C:\Windows\system32\drivers\aswHwid.sys 18:26:37.0833 0x07ec aswHwid - ok 18:26:37.0871 0x07ec [ 2DA1C1AEDF454F8E32A863A1AEACDD8C, F02E4D197AE00B9A9507CF6007A7B7BEA54AF0F255B752FBA7174FA2596D1CA9 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys 18:26:37.0873 0x07ec aswMonFlt - ok 18:26:37.0934 0x07ec [ 4750016EF9CC1DEC6DA3FE5AF9A7F095, C4CF46246D8A3FF9BD8D2FE899685654ADD45EB9B032F33804D0B8131882BC74 ] aswRdr C:\Windows\system32\drivers\aswRdr2.sys 18:26:37.0936 0x07ec aswRdr - ok 18:26:37.0944 0x07ec [ 1323269A92645705DEFA053F3596829D, 83EC58E0577A1E45D1FCBC0C0AF182099FB70B9005B9F8161166EBB4E9F58F35 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys 18:26:37.0947 0x07ec aswRvrt - ok 18:26:38.0038 0x07ec [ E74FD717476B30E23F45354B8F3ACB30, 951D1655E1FA4CF0ACB29F2EEDDB3B42522D392F46DD826C63DCA8941E17ABA8 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys 18:26:38.0058 0x07ec aswSnx - ok 18:26:38.0100 0x07ec [ B1881A01E301990B671694CA1623F1B6, 5299C713EA7CF96F0550943DB37E963CDA09258F65C471CCEEAB44C4736B7A08 ] aswSP C:\Windows\system32\drivers\aswSP.sys 18:26:38.0108 0x07ec aswSP - ok 18:26:38.0115 0x07ec [ 7509F07BA6F84C1E3B2C0D78A1F6F782, A90A36E8E23F58E430DE98B3623688DC09D34B62906EF7796DFC90F581FC385F ] aswStm C:\Windows\system32\drivers\aswStm.sys 18:26:38.0117 0x07ec aswStm - ok 18:26:38.0128 0x07ec [ 1A5BDDE65B648DC3AD48B6ECAA3AE9C8, 858F674C3B775F9C8C782B7AFAC0B02AE9410C9F3B7F5B3AE1C4AD3BF6448C14 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys 18:26:38.0134 0x07ec aswVmm - ok 18:26:38.0173 0x07ec [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 18:26:38.0175 0x07ec AsyncMac - ok 18:26:38.0222 0x07ec [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys 18:26:38.0223 0x07ec atapi - ok 18:26:38.0304 0x07ec [ 36322190763845975E0D001E90687BF2, EA3DB2D112015CA5C744C5A84CDEFF6D02CE7D0E7E6E141AE3E527C2FAB5600E ] athur C:\Windows\system32\DRIVERS\athurx.sys 18:26:38.0361 0x07ec athur - ok 18:26:38.0408 0x07ec [ DBB487D09F56C674430AC454FD8BCAB9, CF6413DD5D4876CE1F65E40115994423804AA5EA5CBDEB433DB751B445C17BB8 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 18:26:38.0412 0x07ec AtiHDAudioService - ok 18:26:38.0469 0x07ec [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 18:26:38.0493 0x07ec AudioEndpointBuilder - ok 18:26:38.0510 0x07ec [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv C:\Windows\System32\Audiosrv.dll 18:26:38.0523 0x07ec AudioSrv - ok 18:26:38.0686 0x07ec [ E3F7EC811923F3F1A77B185F22638E5E, 324041256314C1471B5F123FA8DECC8F374A6B497A6419D4CAF61E68E1733265 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe 18:26:38.0687 0x07ec avast! Antivirus - ok 18:26:39.0314 0x07ec [ 4F4EBF6163D3A02D52A66BBD145B0069, 179B2FD2671F6BB8D3F77B39001F546A0DEBE85BFF9782060AF1DC50DFA071EF ] AvastVBoxSvc C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe 18:26:39.0386 0x07ec AvastVBoxSvc - ok 18:26:39.0433 0x07ec [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll 18:26:39.0436 0x07ec AxInstSV - ok 18:26:39.0477 0x07ec [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 18:26:39.0498 0x07ec b06bdrv - ok 18:26:39.0550 0x07ec [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 18:26:39.0556 0x07ec b57nd60a - ok 18:26:39.0604 0x07ec [ 87F3BCF82A63E900AF896CD930BF7E05, A68141E81D0541DDC1863FAC0DDBF0362641B8B0DBE06D645D00CC0DB36B30BB ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE 18:26:39.0609 0x07ec BBSvc - ok 18:26:39.0632 0x07ec [ 78779EE07231C658B483B1F38B5088DF, 42DE06151DA17C218067CA3A22509BC626CB505F87238E39D024CE29554EF47D ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE 18:26:39.0638 0x07ec BBUpdate - ok 18:26:39.0657 0x07ec [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll 18:26:39.0660 0x07ec BDESVC - ok 18:26:39.0688 0x07ec [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys 18:26:39.0689 0x07ec Beep - ok 18:26:39.0732 0x07ec [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll 18:26:39.0745 0x07ec BFE - ok 18:26:39.0792 0x07ec [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll 18:26:39.0809 0x07ec BITS - ok 18:26:39.0838 0x07ec [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 18:26:39.0840 0x07ec blbdrive - ok 18:26:39.0847 0x07ec [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 18:26:39.0849 0x07ec bowser - ok 18:26:39.0854 0x07ec [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 18:26:39.0855 0x07ec BrFiltLo - ok 18:26:39.0880 0x07ec [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 18:26:39.0881 0x07ec BrFiltUp - ok 18:26:39.0887 0x07ec [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys 18:26:39.0890 0x07ec BridgeMP - ok 18:26:39.0937 0x07ec [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll 18:26:39.0941 0x07ec Browser - ok 18:26:39.0960 0x07ec [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys 18:26:39.0967 0x07ec Brserid - ok 18:26:39.0973 0x07ec [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 18:26:39.0975 0x07ec BrSerWdm - ok 18:26:39.0980 0x07ec [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 18:26:39.0982 0x07ec BrUsbMdm - ok 18:26:39.0988 0x07ec [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 18:26:39.0989 0x07ec BrUsbSer - ok 18:26:40.0007 0x07ec [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 18:26:40.0010 0x07ec BTHMODEM - ok 18:26:40.0031 0x07ec [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll 18:26:40.0034 0x07ec bthserv - ok 18:26:40.0060 0x07ec catchme - ok 18:26:40.0080 0x07ec [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 18:26:40.0083 0x07ec cdfs - ok 18:26:40.0096 0x07ec [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 18:26:40.0100 0x07ec cdrom - ok 18:26:40.0126 0x07ec [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll 18:26:40.0129 0x07ec CertPropSvc - ok 18:26:40.0147 0x07ec [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys 18:26:40.0149 0x07ec circlass - ok 18:26:40.0180 0x07ec [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys 18:26:40.0189 0x07ec CLFS - ok 18:26:40.0246 0x07ec [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 18:26:40.0250 0x07ec clr_optimization_v2.0.50727_32 - ok 18:26:40.0296 0x07ec [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 18:26:40.0301 0x07ec clr_optimization_v2.0.50727_64 - ok 18:26:40.0377 0x07ec [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 18:26:40.0495 0x07ec clr_optimization_v4.0.30319_32 - ok 18:26:40.0511 0x07ec [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 18:26:40.0546 0x07ec clr_optimization_v4.0.30319_64 - ok 18:26:40.0565 0x07ec [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 18:26:40.0567 0x07ec CmBatt - ok 18:26:40.0575 0x07ec [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys 18:26:40.0577 0x07ec cmdide - ok 18:26:40.0611 0x07ec [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG C:\Windows\system32\Drivers\cng.sys 18:26:40.0621 0x07ec CNG - ok 18:26:40.0640 0x07ec [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 18:26:40.0642 0x07ec Compbatt - ok 18:26:40.0655 0x07ec [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 18:26:40.0656 0x07ec CompositeBus - ok 18:26:40.0661 0x07ec COMSysApp - ok 18:26:40.0666 0x07ec [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 18:26:40.0667 0x07ec crcdisk - ok 18:26:40.0711 0x07ec [ 19D511CC455C19DE1ADF60E6C39C85B6, 2A05DD5EF3D0BEC2C9F4EA186E0E2D0F7BE0BF6A473D51194B09D33773AC7FAA ] CryptSvc C:\Windows\system32\cryptsvc.dll 18:26:40.0716 0x07ec CryptSvc - ok 18:26:40.0763 0x07ec [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll 18:26:40.0775 0x07ec DcomLaunch - ok 18:26:40.0798 0x07ec [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll 18:26:40.0805 0x07ec defragsvc - ok 18:26:40.0812 0x07ec [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys 18:26:40.0814 0x07ec DfsC - ok 18:26:40.0842 0x07ec [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll 18:26:40.0850 0x07ec Dhcp - ok 18:26:40.0855 0x07ec [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys 18:26:40.0856 0x07ec discache - ok 18:26:40.0871 0x07ec [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys 18:26:40.0873 0x07ec Disk - ok 18:26:40.0915 0x07ec [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll 18:26:40.0920 0x07ec Dnscache - ok 18:26:40.0944 0x07ec [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll 18:26:40.0951 0x07ec dot3svc - ok 18:26:40.0958 0x07ec [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll 18:26:40.0962 0x07ec DPS - ok 18:26:40.0999 0x07ec [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 18:26:41.0001 0x07ec drmkaud - ok 18:26:41.0050 0x07ec [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 18:26:41.0067 0x07ec DXGKrnl - ok 18:26:41.0083 0x07ec [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll 18:26:41.0086 0x07ec EapHost - ok 18:26:41.0466 0x07ec [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys 18:26:41.0557 0x07ec ebdrv - ok 18:26:41.0663 0x07ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS C:\Windows\System32\lsass.exe 18:26:41.0666 0x07ec EFS - ok 18:26:41.0739 0x07ec [ 18DD872DD46ACB24E106DC2C9C270466, 7531A880DE4EFA08828B7927A687A10B71BA272C9E88631ED39EAE42E2FF9AD2 ] EgisTec Ticket Service C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe 18:26:41.0751 0x07ec EgisTec Ticket Service - ok 18:26:41.0902 0x07ec [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 18:26:41.0925 0x07ec ehRecvr - ok 18:26:41.0932 0x07ec [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe 18:26:41.0935 0x07ec ehSched - ok 18:26:41.0968 0x07ec [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys 18:26:41.0987 0x07ec elxstor - ok 18:26:42.0004 0x07ec [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys 18:26:42.0006 0x07ec ErrDev - ok 18:26:42.0038 0x07ec [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll 18:26:42.0047 0x07ec EventSystem - ok 18:26:42.0062 0x07ec [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys 18:26:42.0067 0x07ec exfat - ok 18:26:42.0076 0x07ec [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys 18:26:42.0081 0x07ec fastfat - ok 18:26:42.0131 0x07ec [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe 18:26:42.0145 0x07ec Fax - ok 18:26:42.0179 0x07ec [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys 18:26:42.0180 0x07ec fdc - ok 18:26:42.0196 0x07ec [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll 18:26:42.0198 0x07ec fdPHost - ok 18:26:42.0213 0x07ec [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll 18:26:42.0216 0x07ec FDResPub - ok 18:26:42.0235 0x07ec [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 18:26:42.0237 0x07ec FileInfo - ok 18:26:42.0243 0x07ec [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 18:26:42.0245 0x07ec Filetrace - ok 18:26:42.0250 0x07ec [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 18:26:42.0252 0x07ec flpydisk - ok 18:26:42.0263 0x07ec [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 18:26:42.0270 0x07ec FltMgr - ok 18:26:42.0362 0x07ec [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll 18:26:42.0397 0x07ec FontCache - ok 18:26:42.0509 0x07ec [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 18:26:42.0519 0x07ec FontCache3.0.0.0 - ok 18:26:42.0525 0x07ec [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 18:26:42.0527 0x07ec FsDepends - ok 18:26:42.0553 0x07ec [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 18:26:42.0554 0x07ec Fs_Rec - ok 18:26:42.0581 0x07ec [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 18:26:42.0587 0x07ec fvevol - ok 18:26:42.0606 0x07ec [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 18:26:42.0609 0x07ec gagp30kx - ok 18:26:42.0680 0x07ec [ C403C5DB49A0F9AAF4F2128EDC0106D8, 3C6948B63278022D8182F773C5FA15784514F76C1546118DDBADBA322B962D12 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe 18:26:42.0685 0x07ec GamesAppService - ok 18:26:42.0721 0x07ec [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll 18:26:42.0755 0x07ec gpsvc - ok 18:26:42.0803 0x07ec [ C9B2D1D3F86FD3673EF847DEF73B6F9E, 9D3822A6464F685F770F8D02A8AE623A676888F135E8425C3BAF1CC077429A7F ] GREGService C:\Program Files (x86)\Acer\Registration\GREGsvc.exe 18:26:42.0805 0x07ec GREGService - ok 18:26:42.0843 0x07ec [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 18:26:42.0846 0x07ec gupdate - ok 18:26:42.0851 0x07ec [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 18:26:42.0854 0x07ec gupdatem - ok 18:26:42.0877 0x07ec [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 18:26:42.0879 0x07ec hcw85cir - ok 18:26:42.0911 0x07ec [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 18:26:42.0920 0x07ec HdAudAddService - ok 18:26:42.0927 0x07ec [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 18:26:42.0930 0x07ec HDAudBus - ok 18:26:42.0951 0x07ec [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 18:26:42.0953 0x07ec HidBatt - ok 18:26:42.0969 0x07ec [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys 18:26:42.0973 0x07ec HidBth - ok 18:26:42.0979 0x07ec [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys 18:26:42.0981 0x07ec HidIr - ok 18:26:42.0998 0x07ec [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll 18:26:43.0000 0x07ec hidserv - ok 18:26:43.0034 0x07ec [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\drivers\hidusb.sys 18:26:43.0035 0x07ec HidUsb - ok 18:26:43.0056 0x07ec [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll 18:26:43.0060 0x07ec hkmsvc - ok 18:26:43.0069 0x07ec [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 18:26:43.0077 0x07ec HomeGroupListener - ok 18:26:43.0119 0x07ec [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 18:26:43.0125 0x07ec HomeGroupProvider - ok 18:26:43.0131 0x07ec [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 18:26:43.0134 0x07ec HpSAMD - ok 18:26:43.0153 0x07ec [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys 18:26:43.0169 0x07ec HTTP - ok 18:26:43.0174 0x07ec [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 18:26:43.0175 0x07ec hwpolicy - ok 18:26:43.0189 0x07ec [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 18:26:43.0192 0x07ec i8042prt - ok 18:26:43.0243 0x07ec [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 18:26:43.0268 0x07ec iaStorV - ok 18:26:43.0321 0x07ec [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 18:26:43.0352 0x07ec idsvc - ok 18:26:43.0368 0x07ec IEEtwCollectorService - ok 18:26:43.0383 0x07ec [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys 18:26:43.0386 0x07ec iirsp - ok 18:26:43.0424 0x07ec [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll 18:26:43.0440 0x07ec IKEEXT - ok 18:26:43.0577 0x07ec [ 718A4008EE5DA174400396B27509EF82, 01F563AFF8156B3B72FB0ED1F25F6F451157FE0C4C5671072FD62FD1ED7F73AA ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 18:26:43.0628 0x07ec IntcAzAudAddService - ok 18:26:43.0653 0x07ec [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys 18:26:43.0654 0x07ec intelide - ok 18:26:43.0661 0x07ec [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\drivers\intelppm.sys 18:26:43.0663 0x07ec intelppm - ok 18:26:43.0680 0x07ec [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll 18:26:43.0684 0x07ec IPBusEnum - ok 18:26:43.0699 0x07ec [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 18:26:43.0702 0x07ec IpFilterDriver - ok 18:26:43.0749 0x07ec [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 18:26:43.0763 0x07ec iphlpsvc - ok 18:26:43.0769 0x07ec [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 18:26:43.0771 0x07ec IPMIDRV - ok 18:26:43.0780 0x07ec [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys 18:26:43.0783 0x07ec IPNAT - ok 18:26:43.0788 0x07ec [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys 18:26:43.0790 0x07ec IRENUM - ok 18:26:43.0811 0x07ec [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys 18:26:43.0812 0x07ec isapnp - ok 18:26:43.0836 0x07ec [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 18:26:43.0843 0x07ec iScsiPrt - ok 18:26:43.0849 0x07ec [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 18:26:43.0851 0x07ec kbdclass - ok 18:26:43.0873 0x07ec [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 18:26:43.0874 0x07ec kbdhid - ok 18:26:43.0885 0x07ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso C:\Windows\system32\lsass.exe 18:26:43.0888 0x07ec KeyIso - ok 18:26:43.0917 0x07ec [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 18:26:43.0936 0x07ec KSecDD - ok 18:26:43.0957 0x07ec [ 41774FF331F609EF442B7398EE6202B1, AD67DA06A74895C384F4A1F1CF47050DAEE9C6CE8AD12F1A116FC977B6C3A864 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 18:26:43.0961 0x07ec KSecPkg - ok 18:26:43.0966 0x07ec [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 18:26:43.0967 0x07ec ksthunk - ok 18:26:44.0003 0x07ec [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll 18:26:44.0014 0x07ec KtmRm - ok 18:26:44.0055 0x07ec [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\System32\srvsvc.dll 18:26:44.0062 0x07ec LanmanServer - ok 18:26:44.0088 0x07ec [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 18:26:44.0094 0x07ec LanmanWorkstation - ok 18:26:44.0202 0x07ec [ 6BB516A31DE232DAB436FF3A117E1E80, 1B91633C9D2FDD27B1712557E95D5642973105F0161D57E074A0601B666F1221 ] Live Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe 18:26:44.0206 0x07ec Live Updater Service - ok 18:26:44.0228 0x07ec [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 18:26:44.0230 0x07ec lltdio - ok 18:26:44.0266 0x07ec [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll 18:26:44.0277 0x07ec lltdsvc - ok 18:26:44.0293 0x07ec [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll 18:26:44.0296 0x07ec lmhosts - ok 18:26:44.0305 0x07ec [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 18:26:44.0309 0x07ec LSI_FC - ok 18:26:44.0316 0x07ec [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 18:26:44.0320 0x07ec LSI_SAS - ok 18:26:44.0335 0x07ec [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 18:26:44.0337 0x07ec LSI_SAS2 - ok 18:26:44.0349 0x07ec [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 18:26:44.0352 0x07ec LSI_SCSI - ok 18:26:44.0359 0x07ec [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys 18:26:44.0362 0x07ec luafv - ok 18:26:44.0401 0x07ec [ CA43F8904E24BBE49982E4C0B29E6579, 2E3E6D02980706061C478C1643F8838310DDAC573C8722AE7F3290CE36B02CB2 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 18:26:44.0402 0x07ec MBAMProtector - ok 18:26:44.0759 0x07ec [ 0BB29DE40C9D9529793DCDB59A43CF5B, 251001A407D32EF22F64915EEFFAAEC229073C4549BF7D9D1D4209B7D15B4681 ] MBAMScheduler C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe 18:26:44.0805 0x07ec MBAMScheduler - ok 18:26:44.0933 0x07ec [ 5F82D8188B370B0CF185D4AE2B9B4A0E, 549B53DD989A069E1C38347C4CEF5283DF9B428CE102799B06A20D3D8F23825F ] MBAMService C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe 18:26:44.0964 0x07ec MBAMService - ok 18:26:45.0027 0x07ec [ 26C43960C99EE861A5D0EDC4DCF3B1C3, 6238FB8E785652040CCE3E7044EA52066CE1BF173A1467474D64A3AB214B6BCD ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys 18:26:45.0030 0x07ec MBAMSwissArmy - ok 18:26:45.0041 0x07ec [ A646C2DDB8C46E9B20A326FAF566646C, F46E3BF392CB4EB53D323BC8CC41EFBB9C5D7C935FECF255F524EB18583A2A37 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys 18:26:45.0043 0x07ec MBAMWebAccessControl - ok 18:26:45.0071 0x07ec [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 18:26:45.0092 0x07ec Mcx2Svc - ok 18:26:45.0111 0x07ec [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys 18:26:45.0113 0x07ec megasas - ok 18:26:45.0132 0x07ec [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 18:26:45.0139 0x07ec MegaSR - ok 18:26:45.0154 0x07ec [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll 18:26:45.0157 0x07ec MMCSS - ok 18:26:45.0163 0x07ec [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys 18:26:45.0165 0x07ec Modem - ok 18:26:45.0170 0x07ec [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 18:26:45.0171 0x07ec monitor - ok 18:26:45.0177 0x07ec [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 18:26:45.0179 0x07ec mouclass - ok 18:26:45.0185 0x07ec [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 18:26:45.0186 0x07ec mouhid - ok 18:26:45.0194 0x07ec [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 18:26:45.0197 0x07ec mountmgr - ok 18:26:45.0246 0x07ec [ B4E9C7383A705628AD491CF0F87D901F, 5C0CD7133D4F5B1E0466CDB2A2210ECA57206A8BC41F37BC6324120AE5501C70 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 18:26:45.0257 0x07ec MozillaMaintenance - ok 18:26:45.0272 0x07ec [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys 18:26:45.0276 0x07ec mpio - ok 18:26:45.0293 0x07ec [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 18:26:45.0295 0x07ec mpsdrv - ok 18:26:45.0354 0x07ec [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll 18:26:45.0371 0x07ec MpsSvc - ok 18:26:45.0435 0x07ec [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 18:26:45.0451 0x07ec MRxDAV - ok 18:26:45.0488 0x07ec [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 18:26:45.0493 0x07ec mrxsmb - ok 18:26:45.0504 0x07ec [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 18:26:45.0516 0x07ec mrxsmb10 - ok 18:26:45.0544 0x07ec [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 18:26:45.0548 0x07ec mrxsmb20 - ok 18:26:45.0575 0x07ec [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys 18:26:45.0578 0x07ec msahci - ok 18:26:45.0588 0x07ec [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys 18:26:45.0593 0x07ec msdsm - ok 18:26:45.0606 0x07ec [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe 18:26:45.0610 0x07ec MSDTC - ok 18:26:45.0629 0x07ec [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys 18:26:45.0643 0x07ec Msfs - ok 18:26:45.0660 0x07ec [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 18:26:45.0662 0x07ec mshidkmdf - ok 18:26:45.0667 0x07ec [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 18:26:45.0668 0x07ec msisadrv - ok 18:26:45.0700 0x07ec [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 18:26:45.0706 0x07ec MSiSCSI - ok 18:26:45.0711 0x07ec msiserver - ok 18:26:45.0717 0x07ec [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 18:26:45.0719 0x07ec MSKSSRV - ok 18:26:45.0750 0x07ec [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 18:26:45.0751 0x07ec MSPCLOCK - ok 18:26:45.0777 0x07ec [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 18:26:45.0779 0x07ec MSPQM - ok 18:26:45.0803 0x07ec [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 18:26:45.0812 0x07ec MsRPC - ok 18:26:45.0820 0x07ec [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 18:26:45.0822 0x07ec mssmbios - ok 18:26:45.0849 0x07ec [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 18:26:45.0850 0x07ec MSTEE - ok 18:26:45.0867 0x07ec [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 18:26:45.0869 0x07ec MTConfig - ok 18:26:45.0875 0x07ec [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys 18:26:45.0876 0x07ec Mup - ok 18:26:45.0881 0x07ec [ C009123B206C56854F4E88596035231D, 670403A40B425F77C90ECB048A0C8BC11FB19E40A8CECC2C3DCF79175B745863 ] mwlPSDFilter C:\Windows\system32\DRIVERS\mwlPSDFilter.sys 18:26:45.0882 0x07ec mwlPSDFilter - ok 18:26:45.0895 0x07ec [ BF3739EEB9F008B1DEBAC115089A53F8, 8546AB69087656259BBE17D6F80F4AB164B04171673CE2BF9FFD1B5C9584E9A4 ] mwlPSDNServ C:\Windows\system32\DRIVERS\mwlPSDNServ.sys 18:26:45.0897 0x07ec mwlPSDNServ - ok 18:26:45.0903 0x07ec [ 38DD143D95E7A01B86F219DDA9C28779, 5FA8C0595CCF835DBCE1CC5322E8FD4BFB6DFB6CF869BB7CB73F919445D469AA ] mwlPSDVDisk C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys 18:26:45.0905 0x07ec mwlPSDVDisk - ok 18:26:45.0933 0x07ec [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll 18:26:45.0946 0x07ec napagent - ok 18:26:45.0965 0x07ec [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 18:26:45.0973 0x07ec NativeWifiP - ok 18:26:46.0009 0x07ec [ 9D1CCE440552500DED3A62F9D779CDB4, C6B3B1C891A8BA3F91CC1EC21919C4F80F4C9CAF88971AB6CA11F09820601EBD ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe 18:26:46.0020 0x07ec NAUpdate - ok 18:26:46.0074 0x07ec [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys 18:26:46.0091 0x07ec NDIS - ok 18:26:46.0111 0x07ec [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 18:26:46.0113 0x07ec NdisCap - ok 18:26:46.0118 0x07ec [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 18:26:46.0120 0x07ec NdisTapi - ok 18:26:46.0126 0x07ec [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 18:26:46.0128 0x07ec Ndisuio - ok 18:26:46.0136 0x07ec [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 18:26:46.0140 0x07ec NdisWan - ok 18:26:46.0145 0x07ec [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 18:26:46.0147 0x07ec NDProxy - ok 18:26:46.0153 0x07ec [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 18:26:46.0155 0x07ec NetBIOS - ok 18:26:46.0165 0x07ec [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 18:26:46.0171 0x07ec NetBT - ok 18:26:46.0185 0x07ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon C:\Windows\system32\lsass.exe 18:26:46.0187 0x07ec Netlogon - ok 18:26:46.0240 0x07ec [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll 18:26:46.0249 0x07ec Netman - ok 18:26:46.0296 0x07ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:26:46.0309 0x07ec NetMsmqActivator - ok 18:26:46.0326 0x07ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:26:46.0329 0x07ec NetPipeActivator - ok 18:26:46.0343 0x07ec [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll 18:26:46.0353 0x07ec netprofm - ok 18:26:46.0394 0x07ec [ B72BB9496A126FCFC7FC5945DED9B411, FA5CC4E93761FB2B59B9B34C699B1486560BDB39280AB1125DE42DB7C4BE303A ] netr28x C:\Windows\system32\DRIVERS\netr28x.sys 18:26:46.0420 0x07ec netr28x - ok 18:26:46.0427 0x07ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:26:46.0430 0x07ec NetTcpActivator - ok 18:26:46.0437 0x07ec [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:26:46.0440 0x07ec NetTcpPortSharing - ok 18:26:46.0469 0x07ec [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 18:26:46.0480 0x07ec nfrd960 - ok 18:26:46.0518 0x07ec [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc C:\Windows\System32\nlasvc.dll 18:26:46.0526 0x07ec NlaSvc - ok 18:26:46.0890 0x07ec [ 5839A8027D6D324A7CD494051A96628C, 474F2D0BB463ABE68D7C4D2C630860AED4B722EC62C616C91EE00AA965378382 ] NOBU C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 18:26:46.0969 0x07ec NOBU - ok 18:26:46.0977 0x07ec [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys 18:26:46.0991 0x07ec Npfs - ok 18:26:47.0010 0x07ec [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll 18:26:47.0013 0x07ec nsi - ok 18:26:47.0018 0x07ec [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 18:26:47.0019 0x07ec nsiproxy - ok 18:26:47.0083 0x07ec [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 18:26:47.0148 0x07ec Ntfs - ok 18:26:47.0188 0x07ec [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys 18:26:47.0205 0x07ec Null - ok 18:26:47.0236 0x07ec [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys 18:26:47.0241 0x07ec nvraid - ok 18:26:47.0282 0x07ec [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys 18:26:47.0291 0x07ec nvstor - ok 18:26:47.0304 0x07ec [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 18:26:47.0308 0x07ec nv_agp - ok 18:26:47.0324 0x07ec [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 18:26:47.0327 0x07ec ohci1394 - ok 18:26:47.0357 0x07ec [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 18:26:47.0366 0x07ec p2pimsvc - ok 18:26:47.0419 0x07ec [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll 18:26:47.0431 0x07ec p2psvc - ok 18:26:47.0483 0x07ec [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\drivers\parport.sys 18:26:47.0496 0x07ec Parport - ok 18:26:47.0528 0x07ec [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys 18:26:47.0531 0x07ec partmgr - ok 18:26:47.0553 0x07ec [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll 18:26:47.0559 0x07ec PcaSvc - ok 18:26:47.0584 0x07ec [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys 18:26:47.0593 0x07ec pci - ok 18:26:47.0614 0x07ec [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys 18:26:47.0616 0x07ec pciide - ok 18:26:47.0629 0x07ec [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 18:26:47.0634 0x07ec pcmcia - ok 18:26:47.0640 0x07ec [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys 18:26:47.0642 0x07ec pcw - ok 18:26:47.0690 0x07ec [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys 18:26:47.0705 0x07ec PEAUTH - ok 18:26:47.0824 0x07ec [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe 18:26:47.0838 0x07ec PerfHost - ok 18:26:48.0147 0x07ec [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll 18:26:48.0180 0x07ec pla - ok 18:26:48.0235 0x07ec [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 18:26:48.0247 0x07ec PlugPlay - ok 18:26:48.0257 0x07ec [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 18:26:48.0261 0x07ec PNRPAutoReg - ok 18:26:48.0280 0x07ec [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 18:26:48.0288 0x07ec PNRPsvc - ok 18:26:48.0363 0x07ec [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 18:26:48.0383 0x07ec PolicyAgent - ok 18:26:48.0412 0x07ec [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll 18:26:48.0417 0x07ec Power - ok 18:26:48.0443 0x07ec [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 18:26:48.0446 0x07ec PptpMiniport - ok 18:26:48.0452 0x07ec [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys 18:26:48.0455 0x07ec Processor - ok 18:26:48.0487 0x07ec [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc C:\Windows\system32\profsvc.dll 18:26:48.0493 0x07ec ProfSvc - ok 18:26:48.0507 0x07ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe 18:26:48.0510 0x07ec ProtectedStorage - ok 18:26:48.0552 0x07ec [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys 18:26:48.0556 0x07ec Psched - ok 18:26:48.0604 0x07ec [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 18:26:48.0661 0x07ec ql2300 - ok 18:26:48.0680 0x07ec [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 18:26:48.0695 0x07ec ql40xx - ok 18:26:48.0715 0x07ec [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll 18:26:48.0723 0x07ec QWAVE - ok 18:26:48.0729 0x07ec [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 18:26:48.0732 0x07ec QWAVEdrv - ok 18:26:48.0745 0x07ec [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 18:26:48.0747 0x07ec RasAcd - ok 18:26:48.0767 0x07ec [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 18:26:48.0769 0x07ec RasAgileVpn - ok 18:26:48.0786 0x07ec [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll 18:26:48.0790 0x07ec RasAuto - ok 18:26:48.0797 0x07ec [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 18:26:48.0801 0x07ec Rasl2tp - ok 18:26:48.0824 0x07ec [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll 18:26:48.0835 0x07ec RasMan - ok 18:26:48.0842 0x07ec [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 18:26:48.0844 0x07ec RasPppoe - ok 18:26:48.0850 0x07ec [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 18:26:48.0854 0x07ec RasSstp - ok 18:26:48.0864 0x07ec [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 18:26:48.0872 0x07ec rdbss - ok 18:26:48.0895 0x07ec [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 18:26:48.0903 0x07ec rdpbus - ok 18:26:48.0915 0x07ec [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 18:26:48.0916 0x07ec RDPCDD - ok 18:26:48.0931 0x07ec [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 18:26:48.0933 0x07ec RDPENCDD - ok 18:26:48.0947 0x07ec [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 18:26:48.0948 0x07ec RDPREFMP - ok 18:26:49.0002 0x07ec [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 18:26:49.0018 0x07ec RDPWD - ok 18:26:49.0028 0x07ec [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 18:26:49.0033 0x07ec rdyboost - ok 18:26:49.0058 0x07ec [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll 18:26:49.0062 0x07ec RemoteAccess - ok 18:26:49.0081 0x07ec [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll 18:26:49.0087 0x07ec RemoteRegistry - ok 18:26:49.0097 0x07ec [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 18:26:49.0102 0x07ec RpcEptMapper - ok 18:26:49.0117 0x07ec [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe 18:26:49.0119 0x07ec RpcLocator - ok 18:26:49.0141 0x07ec [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll 18:26:49.0152 0x07ec RpcSs - ok 18:26:49.0160 0x07ec [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 18:26:49.0162 0x07ec rspndr - ok 18:26:49.0210 0x07ec [ E50CFB92986DCAB49DE93788FD695813, EAE103008B967B0F064EDDA551AA553EE7C22D39D14FA0BBFEF41C4D1B6C99E5 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 18:26:49.0220 0x07ec RTL8167 - ok 18:26:49.0225 0x07ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs C:\Windows\system32\lsass.exe 18:26:49.0228 0x07ec SamSs - ok 18:26:49.0248 0x07ec [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 18:26:49.0251 0x07ec sbp2port - ok 18:26:49.0260 0x07ec [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll 18:26:49.0267 0x07ec SCardSvr - ok 18:26:49.0272 0x07ec [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 18:26:49.0274 0x07ec scfilter - ok 18:26:49.0313 0x07ec [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll 18:26:49.0358 0x07ec Schedule - ok 18:26:49.0381 0x07ec [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll 18:26:49.0383 0x07ec SCPolicySvc - ok 18:26:49.0406 0x07ec [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll 18:26:49.0411 0x07ec SDRSVC - ok 18:26:49.0425 0x07ec [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys 18:26:49.0426 0x07ec secdrv - ok 18:26:49.0438 0x07ec [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll 18:26:49.0442 0x07ec seclogon - ok 18:26:49.0448 0x07ec [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\system32\sens.dll 18:26:49.0452 0x07ec SENS - ok 18:26:49.0470 0x07ec [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll 18:26:49.0485 0x07ec SensrSvc - ok 18:26:49.0490 0x07ec [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\drivers\serenum.sys 18:26:49.0492 0x07ec Serenum - ok 18:26:49.0513 0x07ec [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\drivers\serial.sys 18:26:49.0516 0x07ec Serial - ok 18:26:49.0521 0x07ec [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys 18:26:49.0523 0x07ec sermouse - ok 18:26:49.0537 0x07ec [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll 18:26:49.0542 0x07ec SessionEnv - ok 18:26:49.0562 0x07ec [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 18:26:49.0564 0x07ec sffdisk - ok 18:26:49.0578 0x07ec [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 18:26:49.0579 0x07ec sffp_mmc - ok 18:26:49.0592 0x07ec [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 18:26:49.0594 0x07ec sffp_sd - ok 18:26:49.0598 0x07ec [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 18:26:49.0600 0x07ec sfloppy - ok 18:26:49.0634 0x07ec [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll 18:26:49.0644 0x07ec SharedAccess - ok 18:26:49.0668 0x07ec [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 18:26:49.0677 0x07ec ShellHWDetection - ok 18:26:49.0683 0x07ec [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 18:26:49.0685 0x07ec SiSRaid2 - ok 18:26:49.0691 0x07ec [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 18:26:49.0694 0x07ec SiSRaid4 - ok 18:26:49.0729 0x07ec [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys 18:26:49.0732 0x07ec Smb - ok 18:26:49.0756 0x07ec [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 18:26:49.0760 0x07ec SNMPTRAP - ok 18:26:49.0765 0x07ec [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys 18:26:49.0766 0x07ec spldr - ok 18:26:49.0823 0x07ec [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe 18:26:49.0835 0x07ec Spooler - ok 18:26:50.0329 0x07ec [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe 18:26:50.0423 0x07ec sppsvc - ok 18:26:50.0441 0x07ec [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll 18:26:50.0446 0x07ec sppuinotify - ok 18:26:50.0484 0x07ec [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys 18:26:50.0497 0x07ec srv - ok 18:26:50.0510 0x07ec [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 18:26:50.0520 0x07ec srv2 - ok 18:26:50.0528 0x07ec [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 18:26:50.0532 0x07ec srvnet - ok 18:26:50.0556 0x07ec [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 18:26:50.0563 0x07ec SSDPSRV - ok 18:26:50.0569 0x07ec [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll 18:26:50.0573 0x07ec SstpSvc - ok 18:26:50.0595 0x07ec [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys 18:26:50.0614 0x07ec stexstor - ok 18:26:50.0658 0x07ec [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll 18:26:50.0679 0x07ec stisvc - ok 18:26:50.0692 0x07ec [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys 18:26:50.0693 0x07ec swenum - ok 18:26:50.0722 0x07ec [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll 18:26:50.0741 0x07ec swprv - ok 18:26:50.0795 0x07ec [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll 18:26:50.0862 0x07ec SysMain - ok 18:26:50.0869 0x07ec [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll 18:26:50.0874 0x07ec TabletInputService - ok 18:26:50.0885 0x07ec [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll 18:26:50.0894 0x07ec TapiSrv - ok 18:26:50.0912 0x07ec [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll 18:26:50.0917 0x07ec TBS - ok 18:26:50.0998 0x07ec [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 18:26:51.0054 0x07ec Tcpip - ok 18:26:51.0102 0x07ec [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 18:26:51.0136 0x07ec TCPIP6 - ok 18:26:51.0175 0x07ec [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 18:26:51.0195 0x07ec tcpipreg - ok 18:26:51.0212 0x07ec [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 18:26:51.0213 0x07ec TDPIPE - ok 18:26:51.0234 0x07ec [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 18:26:51.0236 0x07ec TDTCP - ok 18:26:51.0281 0x07ec [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys 18:26:51.0285 0x07ec tdx - ok 18:26:51.0298 0x07ec [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys 18:26:51.0300 0x07ec TermDD - ok 18:26:51.0352 0x07ec [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll 18:26:51.0373 0x07ec TermService - ok 18:26:51.0393 0x07ec [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll 18:26:51.0398 0x07ec Themes - ok 18:26:51.0409 0x07ec [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll 18:26:51.0412 0x07ec THREADORDER - ok 18:26:51.0430 0x07ec [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll 18:26:51.0435 0x07ec TrkWks - ok 18:26:51.0478 0x07ec [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 18:26:51.0482 0x07ec TrustedInstaller - ok 18:26:51.0517 0x07ec [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 18:26:51.0526 0x07ec tssecsrv - ok 18:26:51.0544 0x07ec [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 18:26:51.0547 0x07ec TsUsbFlt - ok 18:26:51.0552 0x07ec [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 18:26:51.0554 0x07ec TsUsbGD - ok 18:26:51.0685 0x07ec [ 3A662A6774405C325BE0CBCFB6BD140F, D175AEDF95B755601D835A54367A7D497BD8FC9162B9A3518B638B8D566942A2 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe 18:26:51.0776 0x07ec TuneUp.UtilitiesSvc - ok 18:26:51.0817 0x07ec [ 7BC3381C0713F613B31ACDE38B71CB53, 275A6CB6A6157270C35FD7D6213D0D99030AEE5AE852E0D929CBE879C63FAB2F ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys 18:26:51.0818 0x07ec TuneUpUtilitiesDrv - ok 18:26:51.0829 0x07ec [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 18:26:51.0832 0x07ec tunnel - ok 18:26:51.0838 0x07ec [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 18:26:51.0841 0x07ec uagp35 - ok 18:26:51.0852 0x07ec [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 18:26:51.0860 0x07ec udfs - ok 18:26:51.0882 0x07ec [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe 18:26:51.0886 0x07ec UI0Detect - ok 18:26:51.0891 0x07ec [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 18:26:51.0894 0x07ec uliagpkx - ok 18:26:51.0899 0x07ec [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys 18:26:51.0901 0x07ec umbus - ok 18:26:51.0906 0x07ec [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys 18:26:51.0907 0x07ec UmPass - ok 18:26:51.0966 0x07ec [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll 18:26:51.0977 0x07ec upnphost - ok 18:26:52.0007 0x07ec [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 18:26:52.0019 0x07ec usbccgp - ok 18:26:52.0058 0x07ec [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys 18:26:52.0062 0x07ec usbcir - ok 18:26:52.0093 0x07ec [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 18:26:52.0096 0x07ec usbehci - ok 18:26:52.0112 0x07ec [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 18:26:52.0120 0x07ec usbhub - ok 18:26:52.0148 0x07ec [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 18:26:52.0161 0x07ec usbohci - ok 18:26:52.0193 0x07ec [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 18:26:52.0195 0x07ec usbprint - ok 18:26:52.0220 0x07ec [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 18:26:52.0223 0x07ec usbscan - ok 18:26:52.0256 0x07ec [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\drivers\USBSTOR.SYS 18:26:52.0259 0x07ec USBSTOR - ok 18:26:52.0276 0x07ec [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 18:26:52.0279 0x07ec usbuhci - ok 18:26:52.0302 0x07ec [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll 18:26:52.0305 0x07ec UxSms - ok 18:26:52.0345 0x07ec [ 09A0C45C7D51A1F80432178F93A39A3D, 254847DCD4B1585CF73C1C67D244C79594A5335289B1E5C059AED9E4B3B00EA7 ] UxTuneUp C:\Windows\System32\uxtuneup.dll 18:26:52.0349 0x07ec UxTuneUp - ok 18:26:52.0362 0x07ec [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc C:\Windows\system32\lsass.exe 18:26:52.0365 0x07ec VaultSvc - ok 18:26:52.0535 0x07ec [ 1352B215BDC5807A5641E7C143796DD7, B54F95307253BB81E4CEE4F2033782210652364DE6A1E833B27ECE7E04A2BD51 ] VBoxAswDrv C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys 18:26:52.0540 0x07ec VBoxAswDrv - ok 18:26:52.0562 0x07ec [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 18:26:52.0564 0x07ec vdrvroot - ok 18:26:52.0594 0x07ec [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe 18:26:52.0621 0x07ec vds - ok 18:26:52.0629 0x07ec [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 18:26:52.0631 0x07ec vga - ok 18:26:52.0636 0x07ec [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys 18:26:52.0638 0x07ec VgaSave - ok 18:26:52.0660 0x07ec [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 18:26:52.0666 0x07ec vhdmp - ok 18:26:52.0686 0x07ec [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys 18:26:52.0688 0x07ec viaide - ok 18:26:52.0694 0x07ec [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys 18:26:52.0696 0x07ec volmgr - ok 18:26:52.0708 0x07ec [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 18:26:52.0717 0x07ec volmgrx - ok 18:26:52.0727 0x07ec [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys 18:26:52.0734 0x07ec volsnap - ok 18:26:52.0756 0x07ec [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 18:26:52.0761 0x07ec vsmraid - ok 18:26:52.0814 0x07ec [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe 18:26:52.0860 0x07ec VSS - ok 18:26:52.0878 0x07ec [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 18:26:52.0880 0x07ec vwifibus - ok 18:26:52.0886 0x07ec [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 18:26:52.0888 0x07ec vwififlt - ok 18:26:52.0900 0x07ec [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll 18:26:52.0912 0x07ec W32Time - ok 18:26:52.0920 0x07ec [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys 18:26:52.0921 0x07ec WacomPen - ok 18:26:52.0928 0x07ec [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 18:26:52.0930 0x07ec WANARP - ok 18:26:52.0935 0x07ec [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 18:26:52.0938 0x07ec Wanarpv6 - ok 18:26:52.0991 0x07ec [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe 18:26:53.0031 0x07ec wbengine - ok 18:26:53.0058 0x07ec [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 18:26:53.0066 0x07ec WbioSrvc - ok 18:26:53.0084 0x07ec [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll 18:26:53.0096 0x07ec wcncsvc - ok 18:26:53.0101 0x07ec [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 18:26:53.0105 0x07ec WcsPlugInService - ok 18:26:53.0111 0x07ec [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys 18:26:53.0113 0x07ec Wd - ok 18:26:53.0183 0x07ec [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 18:26:53.0206 0x07ec Wdf01000 - ok 18:26:53.0233 0x07ec [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll 18:26:53.0238 0x07ec WdiServiceHost - ok 18:26:53.0243 0x07ec [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll 18:26:53.0248 0x07ec WdiSystemHost - ok 18:26:53.0314 0x07ec [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll 18:26:53.0332 0x07ec WebClient - ok 18:26:53.0342 0x07ec [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll 18:26:53.0350 0x07ec Wecsvc - ok 18:26:53.0368 0x07ec [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll 18:26:53.0372 0x07ec wercplsupport - ok 18:26:53.0392 0x07ec [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll 18:26:53.0397 0x07ec WerSvc - ok 18:26:53.0409 0x07ec [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 18:26:53.0411 0x07ec WfpLwf - ok 18:26:53.0418 0x07ec [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys 18:26:53.0420 0x07ec WIMMount - ok 18:26:53.0447 0x07ec WinDefend - ok 18:26:53.0455 0x07ec WinHttpAutoProxySvc - ok 18:26:53.0511 0x07ec [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 18:26:53.0532 0x07ec Winmgmt - ok 18:26:53.0612 0x07ec [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll 18:26:53.0670 0x07ec WinRM - ok 18:26:53.0721 0x07ec [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 18:26:53.0724 0x07ec WinUsb - ok 18:26:53.0764 0x07ec [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll 18:26:53.0786 0x07ec Wlansvc - ok 18:26:53.0829 0x07ec [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 18:26:53.0846 0x07ec wlcrasvc - ok 18:26:54.0192 0x07ec [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 18:26:54.0232 0x07ec wlidsvc - ok 18:26:54.0261 0x07ec [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 18:26:54.0262 0x07ec WmiAcpi - ok 18:26:54.0285 0x07ec [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 18:26:54.0290 0x07ec wmiApSrv - ok 18:26:54.0322 0x07ec WMPNetworkSvc - ok 18:26:54.0340 0x07ec [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll 18:26:54.0348 0x07ec WPCSvc - ok 18:26:54.0367 0x07ec [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 18:26:54.0373 0x07ec WPDBusEnum - ok 18:26:54.0378 0x07ec [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 18:26:54.0379 0x07ec ws2ifsl - ok 18:26:54.0395 0x07ec [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\system32\wscsvc.dll 18:26:54.0400 0x07ec wscsvc - ok 18:26:54.0404 0x07ec WSearch - ok 18:26:54.0497 0x07ec [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv C:\Windows\system32\wuaueng.dll 18:26:54.0544 0x07ec wuauserv - ok 18:26:54.0601 0x07ec [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 18:26:54.0603 0x07ec WudfPf - ok 18:26:54.0649 0x07ec [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 18:26:54.0653 0x07ec WUDFRd - ok 18:26:54.0687 0x07ec [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 18:26:54.0692 0x07ec wudfsvc - ok 18:26:54.0771 0x07ec [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll 18:26:54.0786 0x07ec WwanSvc - ok 18:26:54.0794 0x07ec ================ Scan global =============================== 18:26:54.0807 0x07ec [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll 18:26:54.0836 0x07ec [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll 18:26:54.0858 0x07ec [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll 18:26:54.0925 0x07ec [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll 18:26:54.0988 0x07ec [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe 18:26:55.0002 0x07ec [ Global ] - ok 18:26:55.0003 0x07ec ================ Scan MBR ================================== 18:26:55.0016 0x07ec [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 18:26:56.0761 0x07ec \Device\Harddisk0\DR0 - ok 18:26:56.0761 0x07ec ================ Scan VBR ================================== 18:26:56.0765 0x07ec [ 4514CE3A31B27D12D71B71E1A1A4E197 ] \Device\Harddisk0\DR0\Partition1 18:26:56.0793 0x07ec \Device\Harddisk0\DR0\Partition1 - ok 18:26:56.0812 0x07ec [ B2F72F680D000D23DAAE581B8E9C9529 ] \Device\Harddisk0\DR0\Partition2 18:26:56.0846 0x07ec \Device\Harddisk0\DR0\Partition2 - ok 18:26:56.0866 0x07ec [ 5646E96E3D138A80238359B185AE80D4 ] \Device\Harddisk0\DR0\Partition3 18:26:56.0880 0x07ec \Device\Harddisk0\DR0\Partition3 - ok 18:26:56.0881 0x07ec ================ Scan generic autorun ====================== 18:26:56.0881 0x07ec ============================================================ 18:26:56.0881 0x07ec Scan finished 18:26:56.0881 0x07ec ============================================================ 18:26:56.0893 0x08a0 Detected object count: 0 18:26:56.0893 0x08a0 Actual detected object count: 0 18:27:09.0457 0x0d48 Deinitialize success |
|
10.12.2014, 18:44
| #30 |
| | sec_error_unknown_issuer 18:30:07.0693 0x11b4 TDSS rootkit removing tool 3.0.0.41 Oct 28 2014 17:58:34 18:30:21.0678 0x11b4 ============================================================ 18:30:21.0678 0x11b4 Current date / time: 2014/12/10 18:30:21.0678 18:30:21.0678 0x11b4 SystemInfo: 18:30:21.0678 0x11b4 18:30:21.0678 0x11b4 OS Version: 6.1.7601 ServicePack: 1.0 18:30:21.0678 0x11b4 Product type: Workstation 18:30:21.0678 0x11b4 ComputerName: BRIGITTE-PC 18:30:21.0678 0x11b4 UserName: Brigitte 1 18:30:21.0678 0x11b4 Windows directory: C:\Windows 18:30:21.0678 0x11b4 System windows directory: C:\Windows 18:30:21.0678 0x11b4 Running under WOW64 18:30:21.0678 0x11b4 Processor architecture: Intel x64 18:30:21.0678 0x11b4 Number of processors: 4 18:30:21.0678 0x11b4 Page size: 0x1000 18:30:21.0678 0x11b4 Boot type: Normal boot 18:30:21.0678 0x11b4 ============================================================ 18:30:21.0833 0x11b4 KLMD registered as C:\Windows\system32\drivers\88330287.sys 18:30:22.0256 0x11b4 System UUID: {4673423E-8E36-0C90-5CE6-8EC371BABE52} 18:30:22.0919 0x11b4 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 18:30:22.0933 0x11b4 ============================================================ 18:30:22.0933 0x11b4 \Device\Harddisk0\DR0: 18:30:22.0933 0x11b4 MBR partitions: 18:30:22.0933 0x11b4 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2A00800, BlocksNum 0x32000 18:30:22.0933 0x11b4 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2A32800, BlocksNum 0x38DE7000 18:30:22.0933 0x11b4 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3B819800, BlocksNum 0x38EEC800 18:30:22.0933 0x11b4 ============================================================ 18:30:22.0952 0x11b4 C: <-> \Device\Harddisk0\DR0\Partition2 18:30:22.0988 0x11b4 D: <-> \Device\Harddisk0\DR0\Partition3 18:30:22.0989 0x11b4 ============================================================ 18:30:22.0989 0x11b4 Initialize success 18:30:22.0989 0x11b4 ============================================================ 18:30:53.0726 0x136c ============================================================ 18:30:53.0726 0x136c Scan started 18:30:53.0726 0x136c Mode: Manual; 18:30:53.0726 0x136c ============================================================ 18:30:53.0726 0x136c KSN ping started 18:31:07.0455 0x136c KSN ping finished: true 18:31:07.0900 0x136c ================ Scan system memory ======================== 18:31:07.0900 0x136c System memory - ok 18:31:07.0901 0x136c ================ Scan services ============================= 18:31:08.0041 0x136c [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 18:31:08.0046 0x136c 1394ohci - ok 18:31:08.0096 0x136c [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI C:\Windows\system32\drivers\ACPI.sys 18:31:08.0102 0x136c ACPI - ok 18:31:08.0133 0x136c [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 18:31:08.0134 0x136c AcpiPmi - ok 18:31:08.0211 0x136c [ C5679E5186B2FC95BC76A8A9870D5456, 70AC61850B811A0A902532F098AE1D5DF4622455E56C78B89D4ABDBE4A061A48 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 18:31:08.0213 0x136c AdobeARMservice - ok 18:31:08.0315 0x136c [ 749F94C424524285DCDA84D695ABC12F, E5AD194AF5B8B4FDB3976D3E3F9EF942DECFEC4EBAA9881A8EF7707BB781E4AD ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 18:31:08.0321 0x136c AdobeFlashPlayerUpdateSvc - ok 18:31:08.0353 0x136c [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 18:31:08.0362 0x136c adp94xx - ok 18:31:08.0375 0x136c [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci C:\Windows\system32\drivers\adpahci.sys 18:31:08.0381 0x136c adpahci - ok 18:31:08.0390 0x136c [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 18:31:08.0394 0x136c adpu320 - ok 18:31:08.0427 0x136c [ 4B78B431F225FD8624C5655CB1DE7B61, 198A5AF2125C7C41F531A652D200C083A55A97DC541E3C0B5B253C7329949156 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 18:31:08.0429 0x136c AeLookupSvc - ok 18:31:08.0475 0x136c [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD C:\Windows\system32\drivers\afd.sys 18:31:08.0484 0x136c AFD - ok 18:31:08.0547 0x136c [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440 C:\Windows\system32\drivers\agp440.sys 18:31:08.0549 0x136c agp440 - ok 18:31:08.0581 0x136c [ D64EB48F8E5865068674B9EF71D80A21, FA7E4A41502F343666767AE42E69148CDEBB8D76BE7045D75F3DAB4039E516F3 ] ahcix64s C:\Windows\system32\drivers\ahcix64s.sys 18:31:08.0587 0x136c ahcix64s - ok 18:31:08.0607 0x136c [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG C:\Windows\System32\alg.exe 18:31:08.0609 0x136c ALG - ok 18:31:08.0631 0x136c [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide C:\Windows\system32\drivers\aliide.sys 18:31:08.0632 0x136c aliide - ok 18:31:08.0664 0x136c [ 812349D328EB406815183A5D17B49E7C, EB26EC80587283EE3996C531385F102BEB1396378E1BA5628059B6ED4B2B398D ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 18:31:08.0668 0x136c AMD External Events Utility - ok 18:31:08.0690 0x136c [ 30BFEEE0DFFD5BD79D29157CF080DEED, D3176AA5CFD43CAE7180E9E51A2C76DC2AC02897CA730391A54F647D263ED4E0 ] amdhub30 C:\Windows\system32\DRIVERS\amdhub30.sys 18:31:08.0692 0x136c amdhub30 - ok 18:31:08.0705 0x136c [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide C:\Windows\system32\drivers\amdide.sys 18:31:08.0706 0x136c amdide - ok 18:31:08.0713 0x136c [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 18:31:08.0715 0x136c AmdK8 - ok 18:31:08.0994 0x136c [ 0415FFE1B6A6EA141FEAFCA57567F57F, B3F18608B8C8796988C20BC47B7D3325FFC2CB6EE9FB9012BDB524DB0D07FDF1 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 18:31:09.0182 0x136c amdkmdag - ok 18:31:09.0224 0x136c [ DC24D6F38F17C0D643D9AA8A6852F8D0, BDD39D5A7AA82020A5A124B239094A56787B99B1CDBA54F1F67B519517BE2F4F ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 18:31:09.0230 0x136c amdkmdap - ok 18:31:09.0242 0x136c [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 18:31:09.0244 0x136c AmdPPM - ok 18:31:09.0274 0x136c [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata C:\Windows\system32\drivers\amdsata.sys 18:31:09.0277 0x136c amdsata - ok 18:31:09.0305 0x136c [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 18:31:09.0309 0x136c amdsbs - ok 18:31:09.0328 0x136c [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata C:\Windows\system32\drivers\amdxata.sys 18:31:09.0329 0x136c amdxata - ok 18:31:09.0346 0x136c [ 321533578132C811EC834A1B741C994C, 82B62C52018655B8A596E1E503CB31F0FA581780425A9FF44BE1248C0F3D4B3E ] amdxhc C:\Windows\system32\DRIVERS\amdxhc.sys 18:31:09.0350 0x136c amdxhc - ok 18:31:09.0397 0x136c [ 2FCA573860FB9EDE0BEE783F99B57C21, 755C69A0FDB3C4FF5412A417FD4DB898645B2E0D0A5077E477A57B7D6AF22255 ] AMD_RAIDXpert C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe 18:31:09.0400 0x136c AMD_RAIDXpert - ok 18:31:09.0420 0x136c [ 89A69C3F2F319B43379399547526D952, 8ABDB4B8E106F96EBBA0D4D04C4F432296516E107E7BA5644ED2E50CF9BB491A ] AppID C:\Windows\system32\drivers\appid.sys 18:31:09.0421 0x136c AppID - ok 18:31:09.0440 0x136c [ 0BC381A15355A3982216F7172F545DE1, C33AF13CB218F7BF52E967452573DF2ADD20A95C6BF99229794FEF07C4BBE725 ] AppIDSvc C:\Windows\System32\appidsvc.dll 18:31:09.0442 0x136c AppIDSvc - ok 18:31:09.0470 0x136c [ 9D2A2369AB4B08A4905FE72DB104498F, D6FA1705018BABABFA2362E05691A0D6408D14DE7B76129B16D0A1DAD6378E58 ] Appinfo C:\Windows\System32\appinfo.dll 18:31:09.0472 0x136c Appinfo - ok 18:31:09.0482 0x136c [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc C:\Windows\system32\drivers\arc.sys 18:31:09.0484 0x136c arc - ok 18:31:09.0490 0x136c [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas C:\Windows\system32\drivers\arcsas.sys 18:31:09.0492 0x136c arcsas - ok 18:31:09.0613 0x136c [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 18:31:09.0615 0x136c aspnet_state - ok 18:31:09.0655 0x136c [ 9BE9F2B83DE80E2752B1405CC427E2EC, 6015CA66553B3B882083B33F24FB338249A110D9769831C3D3D3C681AAFA9411 ] aswHwid C:\Windows\system32\drivers\aswHwid.sys 18:31:09.0656 0x136c aswHwid - ok 18:31:09.0695 0x136c [ 2DA1C1AEDF454F8E32A863A1AEACDD8C, F02E4D197AE00B9A9507CF6007A7B7BEA54AF0F255B752FBA7174FA2596D1CA9 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys 18:31:09.0697 0x136c aswMonFlt - ok 18:31:09.0736 0x136c [ 4750016EF9CC1DEC6DA3FE5AF9A7F095, C4CF46246D8A3FF9BD8D2FE899685654ADD45EB9B032F33804D0B8131882BC74 ] aswRdr C:\Windows\system32\drivers\aswRdr2.sys 18:31:09.0738 0x136c aswRdr - ok 18:31:09.0744 0x136c [ 1323269A92645705DEFA053F3596829D, 83EC58E0577A1E45D1FCBC0C0AF182099FB70B9005B9F8161166EBB4E9F58F35 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys 18:31:09.0746 0x136c aswRvrt - ok 18:31:09.0806 0x136c [ E74FD717476B30E23F45354B8F3ACB30, 951D1655E1FA4CF0ACB29F2EEDDB3B42522D392F46DD826C63DCA8941E17ABA8 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys 18:31:09.0825 0x136c aswSnx - ok 18:31:09.0879 0x136c [ B1881A01E301990B671694CA1623F1B6, 5299C713EA7CF96F0550943DB37E963CDA09258F65C471CCEEAB44C4736B7A08 ] aswSP C:\Windows\system32\drivers\aswSP.sys 18:31:09.0887 0x136c aswSP - ok 18:31:09.0895 0x136c [ 7509F07BA6F84C1E3B2C0D78A1F6F782, A90A36E8E23F58E430DE98B3623688DC09D34B62906EF7796DFC90F581FC385F ] aswStm C:\Windows\system32\drivers\aswStm.sys 18:31:09.0898 0x136c aswStm - ok 18:31:09.0908 0x136c [ 1A5BDDE65B648DC3AD48B6ECAA3AE9C8, 858F674C3B775F9C8C782B7AFAC0B02AE9410C9F3B7F5B3AE1C4AD3BF6448C14 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys 18:31:09.0913 0x136c aswVmm - ok 18:31:09.0919 0x136c [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 18:31:09.0920 0x136c AsyncMac - ok 18:31:09.0934 0x136c [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi C:\Windows\system32\drivers\atapi.sys 18:31:09.0935 0x136c atapi - ok 18:31:10.0017 0x136c [ 36322190763845975E0D001E90687BF2, EA3DB2D112015CA5C744C5A84CDEFF6D02CE7D0E7E6E141AE3E527C2FAB5600E ] athur C:\Windows\system32\DRIVERS\athurx.sys 18:31:10.0050 0x136c athur - ok 18:31:10.0087 0x136c [ DBB487D09F56C674430AC454FD8BCAB9, CF6413DD5D4876CE1F65E40115994423804AA5EA5CBDEB433DB751B445C17BB8 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 18:31:10.0092 0x136c AtiHDAudioService - ok 18:31:10.0137 0x136c [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 18:31:10.0150 0x136c AudioEndpointBuilder - ok 18:31:10.0181 0x136c [ DE3E38431B00C2EA247C53675DCF01A0, 8965192096C94203A1F16689DCDA45FE0EDF3A6FB75B70FC378C2008E8E71C9B ] AudioSrv C:\Windows\System32\Audiosrv.dll 18:31:10.0194 0x136c AudioSrv - ok 18:31:10.0276 0x136c [ E3F7EC811923F3F1A77B185F22638E5E, 324041256314C1471B5F123FA8DECC8F374A6B497A6419D4CAF61E68E1733265 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe 18:31:10.0278 0x136c avast! Antivirus - ok 18:31:10.0432 0x136c [ 4F4EBF6163D3A02D52A66BBD145B0069, 179B2FD2671F6BB8D3F77B39001F546A0DEBE85BFF9782060AF1DC50DFA071EF ] AvastVBoxSvc C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe 18:31:10.0503 0x136c AvastVBoxSvc - ok 18:31:10.0534 0x136c [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV C:\Windows\System32\AxInstSV.dll 18:31:10.0537 0x136c AxInstSV - ok 18:31:10.0567 0x136c [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 18:31:10.0576 0x136c b06bdrv - ok 18:31:10.0587 0x136c [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 18:31:10.0593 0x136c b57nd60a - ok 18:31:10.0628 0x136c [ 87F3BCF82A63E900AF896CD930BF7E05, A68141E81D0541DDC1863FAC0DDBF0362641B8B0DBE06D645D00CC0DB36B30BB ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE 18:31:10.0632 0x136c BBSvc - ok 18:31:10.0655 0x136c [ 78779EE07231C658B483B1F38B5088DF, 42DE06151DA17C218067CA3A22509BC626CB505F87238E39D024CE29554EF47D ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE 18:31:10.0660 0x136c BBUpdate - ok 18:31:10.0681 0x136c [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC C:\Windows\System32\bdesvc.dll 18:31:10.0683 0x136c BDESVC - ok 18:31:10.0701 0x136c [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep C:\Windows\system32\drivers\Beep.sys 18:31:10.0702 0x136c Beep - ok 18:31:10.0733 0x136c [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE C:\Windows\System32\bfe.dll 18:31:10.0747 0x136c BFE - ok 18:31:10.0793 0x136c [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS C:\Windows\System32\qmgr.dll 18:31:10.0811 0x136c BITS - ok 18:31:10.0828 0x136c [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 18:31:10.0830 0x136c blbdrive - ok 18:31:10.0841 0x136c [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 18:31:10.0843 0x136c bowser - ok 18:31:10.0861 0x136c [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 18:31:10.0861 0x136c BrFiltLo - ok 18:31:10.0881 0x136c [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 18:31:10.0882 0x136c BrFiltUp - ok 18:31:10.0888 0x136c [ 5C2F352A4E961D72518261257AAE204B, 9EE1001E1D46A414A7A86FE1DBBE232203E26F54D9EF43ED31ED8EACD4D09853 ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys 18:31:10.0891 0x136c BridgeMP - ok 18:31:10.0924 0x136c [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser C:\Windows\System32\browser.dll 18:31:10.0927 0x136c Browser - ok 18:31:10.0950 0x136c [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid C:\Windows\System32\Drivers\Brserid.sys 18:31:10.0956 0x136c Brserid - ok 18:31:10.0962 0x136c [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 18:31:10.0963 0x136c BrSerWdm - ok 18:31:10.0968 0x136c [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 18:31:10.0969 0x136c BrUsbMdm - ok 18:31:10.0974 0x136c [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 18:31:10.0975 0x136c BrUsbSer - ok 18:31:10.0987 0x136c [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 18:31:10.0989 0x136c BTHMODEM - ok 18:31:11.0010 0x136c [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv C:\Windows\system32\bthserv.dll 18:31:11.0013 0x136c bthserv - ok 18:31:11.0016 0x136c catchme - ok 18:31:11.0037 0x136c [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 18:31:11.0039 0x136c cdfs - ok 18:31:11.0046 0x136c [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 18:31:11.0050 0x136c cdrom - ok 18:31:11.0061 0x136c [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc C:\Windows\System32\certprop.dll 18:31:11.0063 0x136c CertPropSvc - ok 18:31:11.0082 0x136c [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass C:\Windows\system32\drivers\circlass.sys 18:31:11.0083 0x136c circlass - ok 18:31:11.0115 0x136c [ FE1EC06F2253F691FE36217C592A0206, B9F122DB5E665ECDF29A5CB8BB6B531236F31A54A95769D6C5C1924C87FE70CE ] CLFS C:\Windows\system32\CLFS.sys 18:31:11.0122 0x136c CLFS - ok 18:31:11.0180 0x136c [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 18:31:11.0182 0x136c clr_optimization_v2.0.50727_32 - ok 18:31:11.0220 0x136c [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 18:31:11.0223 0x136c clr_optimization_v2.0.50727_64 - ok 18:31:11.0290 0x136c [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 18:31:11.0292 0x136c clr_optimization_v4.0.30319_32 - ok 18:31:11.0312 0x136c [ 4AEDAB50F83580D0B4D6CF78191F92AA, D113C47013B018B45161911B96E93AF96A2F3B34FA47061BF6E7A71FBA03194A ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 18:31:11.0315 0x136c clr_optimization_v4.0.30319_64 - ok 18:31:11.0321 0x136c [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 18:31:11.0322 0x136c CmBatt - ok 18:31:11.0332 0x136c [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide C:\Windows\system32\drivers\cmdide.sys 18:31:11.0333 0x136c cmdide - ok 18:31:11.0368 0x136c [ EBF28856F69CF094A902F884CF989706, AD6C9F0BC20AA49EEE5478DA0F856F0EA2B414B63208C5FFB03C9D7F5B59765F ] CNG C:\Windows\system32\Drivers\cng.sys 18:31:11.0376 0x136c CNG - ok 18:31:11.0382 0x136c [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 18:31:11.0383 0x136c Compbatt - ok 18:31:11.0389 0x136c [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 18:31:11.0390 0x136c CompositeBus - ok 18:31:11.0396 0x136c COMSysApp - ok 18:31:11.0402 0x136c [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 18:31:11.0403 0x136c crcdisk - ok 18:31:11.0446 0x136c [ 19D511CC455C19DE1ADF60E6C39C85B6, 2A05DD5EF3D0BEC2C9F4EA186E0E2D0F7BE0BF6A473D51194B09D33773AC7FAA ] CryptSvc C:\Windows\system32\cryptsvc.dll 18:31:11.0450 0x136c CryptSvc - ok 18:31:11.0487 0x136c [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch C:\Windows\system32\rpcss.dll 18:31:11.0499 0x136c DcomLaunch - ok 18:31:11.0522 0x136c [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc C:\Windows\System32\defragsvc.dll 18:31:11.0528 0x136c defragsvc - ok 18:31:11.0549 0x136c [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC C:\Windows\system32\Drivers\dfsc.sys 18:31:11.0551 0x136c DfsC - ok 18:31:11.0566 0x136c [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp C:\Windows\system32\dhcpcore.dll 18:31:11.0572 0x136c Dhcp - ok 18:31:11.0576 0x136c [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache C:\Windows\system32\drivers\discache.sys 18:31:11.0577 0x136c discache - ok 18:31:11.0582 0x136c [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk C:\Windows\system32\drivers\disk.sys 18:31:11.0584 0x136c Disk - ok 18:31:11.0616 0x136c [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache C:\Windows\System32\dnsrslvr.dll 18:31:11.0621 0x136c Dnscache - ok 18:31:11.0646 0x136c [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc C:\Windows\System32\dot3svc.dll 18:31:11.0651 0x136c dot3svc - ok 18:31:11.0660 0x136c [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS C:\Windows\system32\dps.dll 18:31:11.0664 0x136c DPS - ok 18:31:11.0701 0x136c [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 18:31:11.0702 0x136c drmkaud - ok 18:31:11.0752 0x136c [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 18:31:11.0770 0x136c DXGKrnl - ok 18:31:11.0784 0x136c [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost C:\Windows\System32\eapsvc.dll 18:31:11.0788 0x136c EapHost - ok 18:31:11.0889 0x136c [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv C:\Windows\system32\drivers\evbda.sys 18:31:11.0948 0x136c ebdrv - ok 18:31:11.0976 0x136c [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] EFS C:\Windows\System32\lsass.exe 18:31:11.0979 0x136c EFS - ok 18:31:12.0023 0x136c [ 18DD872DD46ACB24E106DC2C9C270466, 7531A880DE4EFA08828B7927A687A10B71BA272C9E88631ED39EAE42E2FF9AD2 ] EgisTec Ticket Service C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe 18:31:12.0027 0x136c EgisTec Ticket Service - ok 18:31:12.0093 0x136c [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 18:31:12.0106 0x136c ehRecvr - ok 18:31:12.0124 0x136c [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched C:\Windows\ehome\ehsched.exe 18:31:12.0127 0x136c ehSched - ok 18:31:12.0159 0x136c [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor C:\Windows\system32\drivers\elxstor.sys 18:31:12.0170 0x136c elxstor - ok 18:31:12.0195 0x136c [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev C:\Windows\system32\drivers\errdev.sys 18:31:12.0199 0x136c ErrDev - ok 18:31:12.0228 0x136c [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem C:\Windows\system32\es.dll 18:31:12.0237 0x136c EventSystem - ok 18:31:12.0246 0x136c [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat C:\Windows\system32\drivers\exfat.sys 18:31:12.0250 0x136c exfat - ok 18:31:12.0259 0x136c [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat C:\Windows\system32\drivers\fastfat.sys 18:31:12.0263 0x136c fastfat - ok 18:31:12.0289 0x136c [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax C:\Windows\system32\fxssvc.exe 18:31:12.0302 0x136c Fax - ok 18:31:12.0314 0x136c [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc C:\Windows\system32\drivers\fdc.sys 18:31:12.0315 0x136c fdc - ok 18:31:12.0331 0x136c [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost C:\Windows\system32\fdPHost.dll 18:31:12.0332 0x136c fdPHost - ok 18:31:12.0348 0x136c [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub C:\Windows\system32\fdrespub.dll 18:31:12.0350 0x136c FDResPub - ok 18:31:12.0370 0x136c [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 18:31:12.0371 0x136c FileInfo - ok 18:31:12.0377 0x136c [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 18:31:12.0378 0x136c Filetrace - ok 18:31:12.0383 0x136c [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 18:31:12.0385 0x136c flpydisk - ok 18:31:12.0397 0x136c [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 18:31:12.0402 0x136c FltMgr - ok 18:31:12.0463 0x136c [ C4C183E6551084039EC862DA1C945E3D, 0874A2ACDD24D64965AA9A76E9C818E216880AE4C9A2E07ED932EE404585CEE6 ] FontCache C:\Windows\system32\FntCache.dll 18:31:12.0485 0x136c FontCache - ok 18:31:12.0533 0x136c [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 18:31:12.0535 0x136c FontCache3.0.0.0 - ok 18:31:12.0540 0x136c [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 18:31:12.0542 0x136c FsDepends - ok 18:31:12.0577 0x136c [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 18:31:12.0578 0x136c Fs_Rec - ok 18:31:12.0605 0x136c [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 18:31:12.0610 0x136c fvevol - ok 18:31:12.0630 0x136c [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 18:31:12.0631 0x136c gagp30kx - ok 18:31:12.0704 0x136c [ C403C5DB49A0F9AAF4F2128EDC0106D8, 3C6948B63278022D8182F773C5FA15784514F76C1546118DDBADBA322B962D12 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe 18:31:12.0707 0x136c GamesAppService - ok 18:31:12.0745 0x136c [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc C:\Windows\System32\gpsvc.dll 18:31:12.0760 0x136c gpsvc - ok 18:31:12.0804 0x136c [ C9B2D1D3F86FD3673EF847DEF73B6F9E, 9D3822A6464F685F770F8D02A8AE623A676888F135E8425C3BAF1CC077429A7F ] GREGService C:\Program Files (x86)\Acer\Registration\GREGsvc.exe 18:31:12.0805 0x136c GREGService - ok 18:31:12.0844 0x136c [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 18:31:12.0847 0x136c gupdate - ok 18:31:12.0853 0x136c [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 18:31:12.0855 0x136c gupdatem - ok 18:31:12.0879 0x136c [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 18:31:12.0880 0x136c hcw85cir - ok 18:31:12.0912 0x136c [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 18:31:12.0919 0x136c HdAudAddService - ok 18:31:12.0926 0x136c [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 18:31:12.0929 0x136c HDAudBus - ok 18:31:12.0942 0x136c [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 18:31:12.0943 0x136c HidBatt - ok 18:31:12.0960 0x136c [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth C:\Windows\system32\drivers\hidbth.sys 18:31:12.0962 0x136c HidBth - ok 18:31:12.0969 0x136c [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr C:\Windows\system32\drivers\hidir.sys 18:31:12.0970 0x136c HidIr - ok 18:31:12.0976 0x136c [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv C:\Windows\system32\hidserv.dll 18:31:12.0978 0x136c hidserv - ok 18:31:13.0013 0x136c [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb C:\Windows\system32\drivers\hidusb.sys 18:31:13.0014 0x136c HidUsb - ok 18:31:13.0025 0x136c [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc C:\Windows\system32\kmsvc.dll 18:31:13.0028 0x136c hkmsvc - ok 18:31:13.0038 0x136c [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll 18:31:13.0044 0x136c HomeGroupListener - ok 18:31:13.0069 0x136c [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 18:31:13.0074 0x136c HomeGroupProvider - ok 18:31:13.0081 0x136c [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 18:31:13.0083 0x136c HpSAMD - ok 18:31:13.0110 0x136c [ 0EA7DE1ACB728DD5A369FD742D6EEE28, 21C489412EB33A12B22290EB701C19BA57006E8702E76F730954F0784DDE9779 ] HTTP C:\Windows\system32\drivers\HTTP.sys 18:31:13.0124 0x136c HTTP - ok 18:31:13.0130 0x136c [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 18:31:13.0131 0x136c hwpolicy - ok 18:31:13.0146 0x136c [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 18:31:13.0149 0x136c i8042prt - ok 18:31:13.0189 0x136c [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 18:31:13.0197 0x136c iaStorV - ok 18:31:13.0245 0x136c [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 18:31:13.0260 0x136c idsvc - ok 18:31:13.0269 0x136c IEEtwCollectorService - ok 18:31:13.0276 0x136c [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp C:\Windows\system32\drivers\iirsp.sys 18:31:13.0278 0x136c iirsp - ok 18:31:13.0315 0x136c [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT C:\Windows\System32\ikeext.dll 18:31:13.0331 0x136c IKEEXT - ok 18:31:13.0445 0x136c [ 718A4008EE5DA174400396B27509EF82, 01F563AFF8156B3B72FB0ED1F25F6F451157FE0C4C5671072FD62FD1ED7F73AA ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys 18:31:13.0496 0x136c IntcAzAudAddService - ok 18:31:13.0521 0x136c [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide C:\Windows\system32\drivers\intelide.sys 18:31:13.0522 0x136c intelide - ok 18:31:13.0528 0x136c [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm C:\Windows\system32\drivers\intelppm.sys 18:31:13.0530 0x136c intelppm - ok 18:31:13.0548 0x136c [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum C:\Windows\system32\ipbusenum.dll 18:31:13.0552 0x136c IPBusEnum - ok 18:31:13.0567 0x136c [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 18:31:13.0570 0x136c IpFilterDriver - ok 18:31:13.0606 0x136c [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 18:31:13.0617 0x136c iphlpsvc - ok 18:31:13.0624 0x136c [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 18:31:13.0626 0x136c IPMIDRV - ok 18:31:13.0634 0x136c [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT C:\Windows\system32\drivers\ipnat.sys 18:31:13.0637 0x136c IPNAT - ok 18:31:13.0642 0x136c [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM C:\Windows\system32\drivers\irenum.sys 18:31:13.0643 0x136c IRENUM - ok 18:31:13.0679 0x136c [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp C:\Windows\system32\drivers\isapnp.sys 18:31:13.0680 0x136c isapnp - ok 18:31:13.0704 0x136c [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 18:31:13.0710 0x136c iScsiPrt - ok 18:31:13.0715 0x136c [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 18:31:13.0717 0x136c kbdclass - ok 18:31:13.0730 0x136c [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 18:31:13.0731 0x136c kbdhid - ok 18:31:13.0742 0x136c [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] KeyIso C:\Windows\system32\lsass.exe 18:31:13.0745 0x136c KeyIso - ok 18:31:13.0774 0x136c [ 353009DEDF918B2A51414F330CF72DEC, BF157D6E329F26E02FA16271B751B421396040DBB1D7BF9B2E0A21BC569672E2 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 18:31:13.0776 0x136c KSecDD - ok 18:31:13.0792 0x136c [ 41774FF331F609EF442B7398EE6202B1, AD67DA06A74895C384F4A1F1CF47050DAEE9C6CE8AD12F1A116FC977B6C3A864 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 18:31:13.0795 0x136c KSecPkg - ok 18:31:13.0800 0x136c [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 18:31:13.0802 0x136c ksthunk - ok 18:31:13.0827 0x136c [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm C:\Windows\system32\msdtckrm.dll 18:31:13.0835 0x136c KtmRm - ok 18:31:13.0866 0x136c [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer C:\Windows\System32\srvsvc.dll 18:31:13.0873 0x136c LanmanServer - ok 18:31:13.0901 0x136c [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 18:31:13.0906 0x136c LanmanWorkstation - ok 18:31:13.0948 0x136c [ 6BB516A31DE232DAB436FF3A117E1E80, 1B91633C9D2FDD27B1712557E95D5642973105F0161D57E074A0601B666F1221 ] Live Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe 18:31:13.0953 0x136c Live Updater Service - ok 18:31:13.0962 0x136c [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 18:31:13.0964 0x136c lltdio - ok 18:31:13.0990 0x136c [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc C:\Windows\System32\lltdsvc.dll 18:31:13.0997 0x136c lltdsvc - ok 18:31:14.0028 0x136c [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts C:\Windows\System32\lmhsvc.dll 18:31:14.0031 0x136c lmhosts - ok 18:31:14.0040 0x136c [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 18:31:14.0042 0x136c LSI_FC - ok 18:31:14.0049 0x136c [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 18:31:14.0052 0x136c LSI_SAS - ok 18:31:14.0070 0x136c [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 18:31:14.0072 0x136c LSI_SAS2 - ok 18:31:14.0079 0x136c [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 18:31:14.0081 0x136c LSI_SCSI - ok 18:31:14.0088 0x136c [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv C:\Windows\system32\drivers\luafv.sys 18:31:14.0091 0x136c luafv - ok 18:31:14.0125 0x136c [ CA43F8904E24BBE49982E4C0B29E6579, 2E3E6D02980706061C478C1643F8838310DDAC573C8722AE7F3290CE36B02CB2 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 18:31:14.0126 0x136c MBAMProtector - ok 18:31:14.0201 0x136c [ 0BB29DE40C9D9529793DCDB59A43CF5B, 251001A407D32EF22F64915EEFFAAEC229073C4549BF7D9D1D4209B7D15B4681 ] MBAMScheduler C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe 18:31:14.0234 0x136c MBAMScheduler - ok 18:31:14.0280 0x136c [ 5F82D8188B370B0CF185D4AE2B9B4A0E, 549B53DD989A069E1C38347C4CEF5283DF9B428CE102799B06A20D3D8F23825F ] MBAMService C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe 18:31:14.0298 0x136c MBAMService - ok 18:31:14.0329 0x136c [ 26C43960C99EE861A5D0EDC4DCF3B1C3, 6238FB8E785652040CCE3E7044EA52066CE1BF173A1467474D64A3AB214B6BCD ] MBAMSwissArmy C:\Windows\system32\drivers\MBAMSwissArmy.sys 18:31:14.0332 0x136c MBAMSwissArmy - ok 18:31:14.0343 0x136c [ A646C2DDB8C46E9B20A326FAF566646C, F46E3BF392CB4EB53D323BC8CC41EFBB9C5D7C935FECF255F524EB18583A2A37 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys 18:31:14.0345 0x136c MBAMWebAccessControl - ok 18:31:14.0362 0x136c [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 18:31:14.0365 0x136c Mcx2Svc - ok 18:31:14.0380 0x136c [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas C:\Windows\system32\drivers\megasas.sys 18:31:14.0381 0x136c megasas - ok 18:31:14.0401 0x136c [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 18:31:14.0406 0x136c MegaSR - ok 18:31:14.0422 0x136c [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS C:\Windows\system32\mmcss.dll 18:31:14.0425 0x136c MMCSS - ok 18:31:14.0431 0x136c [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem C:\Windows\system32\drivers\modem.sys 18:31:14.0432 0x136c Modem - ok 18:31:14.0438 0x136c [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 18:31:14.0439 0x136c monitor - ok 18:31:14.0444 0x136c [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 18:31:14.0446 0x136c mouclass - ok 18:31:14.0451 0x136c [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 18:31:14.0453 0x136c mouhid - ok 18:31:14.0459 0x136c [ 32E7A3D591D671A6DF2DB515A5CBE0FA, 47CED0B9067AE8BF5EEF60B17ADEE5906BEDCC56E4CB460B7BFBC12BB9A69E63 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 18:31:14.0461 0x136c mountmgr - ok 18:31:14.0503 0x136c [ B4E9C7383A705628AD491CF0F87D901F, 5C0CD7133D4F5B1E0466CDB2A2210ECA57206A8BC41F37BC6324120AE5501C70 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 18:31:14.0506 0x136c MozillaMaintenance - ok 18:31:14.0518 0x136c [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio C:\Windows\system32\drivers\mpio.sys 18:31:14.0522 0x136c mpio - ok 18:31:14.0540 0x136c [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 18:31:14.0542 0x136c mpsdrv - ok 18:31:14.0578 0x136c [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc C:\Windows\system32\mpssvc.dll 18:31:14.0595 0x136c MpsSvc - ok 18:31:14.0617 0x136c [ 1A4F75E63C9FB84B85DFFC6B63FD5404, 01AFA6DBB4CDE55FE4EA05BBE8F753A4266F8D072EA1EE01DB79F5126780C21F ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 18:31:14.0620 0x136c MRxDAV - ok 18:31:14.0657 0x136c [ A5D9106A73DC88564C825D317CAC68AC, 0457B2AEA4E05A91D0E43F317894A614434D8CEBE35020785387F307E231FBE4 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 18:31:14.0660 0x136c mrxsmb - ok 18:31:14.0671 0x136c [ D711B3C1D5F42C0C2415687BE09FC163, 9B3013AC60BD2D0FF52086658BA5FF486ADE15954A552D7DD590580E8BAE3EFF ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 18:31:14.0677 0x136c mrxsmb10 - ok 18:31:14.0690 0x136c [ 9423E9D355C8D303E76B8CFBD8A5C30C, 220B33F120C2DD937FE4D5664F4B581DC0ACF78D62EB56B7720888F67B9644CC ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 18:31:14.0693 0x136c mrxsmb20 - ok 18:31:14.0710 0x136c [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci C:\Windows\system32\drivers\msahci.sys 18:31:14.0712 0x136c msahci - ok 18:31:14.0719 0x136c [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm C:\Windows\system32\drivers\msdsm.sys 18:31:14.0722 0x136c msdsm - ok 18:31:14.0741 0x136c [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC C:\Windows\System32\msdtc.exe 18:31:14.0745 0x136c MSDTC - ok 18:31:14.0764 0x136c [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs C:\Windows\system32\drivers\Msfs.sys 18:31:14.0765 0x136c Msfs - ok 18:31:14.0773 0x136c [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 18:31:14.0774 0x136c mshidkmdf - ok 18:31:14.0779 0x136c [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 18:31:14.0781 0x136c msisadrv - ok 18:31:14.0802 0x136c [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 18:31:14.0806 0x136c MSiSCSI - ok 18:31:14.0811 0x136c msiserver - ok 18:31:14.0816 0x136c [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 18:31:14.0818 0x136c MSKSSRV - ok 18:31:14.0841 0x136c [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 18:31:14.0842 0x136c MSPCLOCK - ok 18:31:14.0857 0x136c [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 18:31:14.0858 0x136c MSPQM - ok 18:31:14.0870 0x136c [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 18:31:14.0877 0x136c MsRPC - ok 18:31:14.0886 0x136c [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 18:31:14.0887 0x136c mssmbios - ok 18:31:14.0895 0x136c [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 18:31:14.0896 0x136c MSTEE - ok 18:31:14.0914 0x136c [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 18:31:14.0915 0x136c MTConfig - ok 18:31:14.0920 0x136c [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup C:\Windows\system32\Drivers\mup.sys 18:31:14.0922 0x136c Mup - ok 18:31:14.0927 0x136c [ C009123B206C56854F4E88596035231D, 670403A40B425F77C90ECB048A0C8BC11FB19E40A8CECC2C3DCF79175B745863 ] mwlPSDFilter C:\Windows\system32\DRIVERS\mwlPSDFilter.sys 18:31:14.0928 0x136c mwlPSDFilter - ok 18:31:14.0942 0x136c [ BF3739EEB9F008B1DEBAC115089A53F8, 8546AB69087656259BBE17D6F80F4AB164B04171673CE2BF9FFD1B5C9584E9A4 ] mwlPSDNServ C:\Windows\system32\DRIVERS\mwlPSDNServ.sys 18:31:14.0943 0x136c mwlPSDNServ - ok 18:31:14.0949 0x136c [ 38DD143D95E7A01B86F219DDA9C28779, 5FA8C0595CCF835DBCE1CC5322E8FD4BFB6DFB6CF869BB7CB73F919445D469AA ] mwlPSDVDisk C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys 18:31:14.0951 0x136c mwlPSDVDisk - ok 18:31:14.0980 0x136c [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent C:\Windows\system32\qagentRT.dll 18:31:14.0991 0x136c napagent - ok 18:31:15.0023 0x136c [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 18:31:15.0029 0x136c NativeWifiP - ok 18:31:15.0066 0x136c [ 9D1CCE440552500DED3A62F9D779CDB4, C6B3B1C891A8BA3F91CC1EC21919C4F80F4C9CAF88971AB6CA11F09820601EBD ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe 18:31:15.0075 0x136c NAUpdate - ok 18:31:15.0120 0x136c [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS C:\Windows\system32\drivers\ndis.sys 18:31:15.0137 0x136c NDIS - ok 18:31:15.0158 0x136c [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 18:31:15.0159 0x136c NdisCap - ok 18:31:15.0174 0x136c [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 18:31:15.0175 0x136c NdisTapi - ok 18:31:15.0180 0x136c [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 18:31:15.0182 0x136c Ndisuio - ok 18:31:15.0191 0x136c [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 18:31:15.0194 0x136c NdisWan - ok 18:31:15.0200 0x136c [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 18:31:15.0202 0x136c NDProxy - ok 18:31:15.0208 0x136c [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 18:31:15.0209 0x136c NetBIOS - ok 18:31:15.0219 0x136c [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 18:31:15.0224 0x136c NetBT - ok 18:31:15.0242 0x136c [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] Netlogon C:\Windows\system32\lsass.exe 18:31:15.0245 0x136c Netlogon - ok 18:31:15.0270 0x136c [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman C:\Windows\System32\netman.dll 18:31:15.0279 0x136c Netman - ok 18:31:15.0320 0x136c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:31:15.0323 0x136c NetMsmqActivator - ok 18:31:15.0339 0x136c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:31:15.0342 0x136c NetPipeActivator - ok 18:31:15.0356 0x136c [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm C:\Windows\System32\netprofm.dll 18:31:15.0366 0x136c netprofm - ok 18:31:15.0396 0x136c [ B72BB9496A126FCFC7FC5945DED9B411, FA5CC4E93761FB2B59B9B34C699B1486560BDB39280AB1125DE42DB7C4BE303A ] netr28x C:\Windows\system32\DRIVERS\netr28x.sys 18:31:15.0407 0x136c netr28x - ok 18:31:15.0416 0x136c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:31:15.0420 0x136c NetTcpActivator - ok 18:31:15.0426 0x136c [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 18:31:15.0429 0x136c NetTcpPortSharing - ok 18:31:15.0449 0x136c [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 18:31:15.0451 0x136c nfrd960 - ok 18:31:15.0487 0x136c [ 8AD77806D336673F270DB31645267293, E23F324913554A23CD043DD27D4305AF62F48C0561A0FC7B7811E55B74B1BE79 ] NlaSvc C:\Windows\System32\nlasvc.dll 18:31:15.0494 0x136c NlaSvc - ok 18:31:15.0569 0x136c [ 5839A8027D6D324A7CD494051A96628C, 474F2D0BB463ABE68D7C4D2C630860AED4B722EC62C616C91EE00AA965378382 ] NOBU C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 18:31:15.0619 0x136c NOBU - ok 18:31:15.0635 0x136c [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs C:\Windows\system32\drivers\Npfs.sys 18:31:15.0637 0x136c Npfs - ok 18:31:15.0656 0x136c [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi C:\Windows\system32\nsisvc.dll 18:31:15.0659 0x136c nsi - ok 18:31:15.0665 0x136c [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 18:31:15.0666 0x136c nsiproxy - ok 18:31:15.0741 0x136c [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 18:31:15.0771 0x136c Ntfs - ok 18:31:15.0790 0x136c [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null C:\Windows\system32\drivers\Null.sys 18:31:15.0791 0x136c Null - ok 18:31:15.0827 0x136c [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid C:\Windows\system32\drivers\nvraid.sys 18:31:15.0830 0x136c nvraid - ok 18:31:15.0873 0x136c [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor C:\Windows\system32\drivers\nvstor.sys 18:31:15.0877 0x136c nvstor - ok 18:31:15.0894 0x136c [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 18:31:15.0897 0x136c nv_agp - ok 18:31:15.0915 0x136c [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 18:31:15.0917 0x136c ohci1394 - ok 18:31:15.0936 0x136c [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 18:31:15.0945 0x136c p2pimsvc - ok 18:31:15.0976 0x136c [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc C:\Windows\system32\p2psvc.dll 18:31:15.0986 0x136c p2psvc - ok 18:31:16.0007 0x136c [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport C:\Windows\system32\drivers\parport.sys 18:31:16.0009 0x136c Parport - ok 18:31:16.0041 0x136c [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr C:\Windows\system32\drivers\partmgr.sys 18:31:16.0044 0x136c partmgr - ok 18:31:16.0055 0x136c [ 3AEAA8B561E63452C655DC0584922257, 04C072969B58657602EB0C21CEDF24FCEE14E61B90A0F758F93925EF2C9FC32D ] PcaSvc C:\Windows\System32\pcasvc.dll 18:31:16.0061 0x136c PcaSvc - ok 18:31:16.0079 0x136c [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci C:\Windows\system32\drivers\pci.sys 18:31:16.0083 0x136c pci - ok 18:31:16.0104 0x136c [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide C:\Windows\system32\drivers\pciide.sys 18:31:16.0106 0x136c pciide - ok 18:31:16.0116 0x136c [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 18:31:16.0121 0x136c pcmcia - ok 18:31:16.0127 0x136c [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw C:\Windows\system32\drivers\pcw.sys 18:31:16.0129 0x136c pcw - ok 18:31:16.0147 0x136c [ 68769C3356B3BE5D1C732C97B9A80D6E, FB2D61145980A2899D1B7729184C54070315B0E63C9A22400A76CCD39E00029C ] PEAUTH C:\Windows\system32\drivers\peauth.sys 18:31:16.0159 0x136c PEAUTH - ok 18:31:16.0225 0x136c [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost C:\Windows\SysWow64\perfhost.exe 18:31:16.0228 0x136c PerfHost - ok 18:31:16.0282 0x136c [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla C:\Windows\system32\pla.dll 18:31:16.0309 0x136c pla - ok 18:31:16.0359 0x136c [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 18:31:16.0369 0x136c PlugPlay - ok 18:31:16.0382 0x136c [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 18:31:16.0385 0x136c PNRPAutoReg - ok 18:31:16.0396 0x136c [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 18:31:16.0404 0x136c PNRPsvc - ok 18:31:16.0432 0x136c [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 18:31:16.0443 0x136c PolicyAgent - ok 18:31:16.0469 0x136c [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power C:\Windows\system32\umpo.dll 18:31:16.0475 0x136c Power - ok 18:31:16.0500 0x136c [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 18:31:16.0503 0x136c PptpMiniport - ok 18:31:16.0509 0x136c [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor C:\Windows\system32\drivers\processr.sys 18:31:16.0511 0x136c Processor - ok 18:31:16.0544 0x136c [ 53E83F1F6CF9D62F32801CF66D8352A8, 1225FED810BE8E0729EEAE5B340035CCBB9BACD3EF247834400F9B72D05ACE48 ] ProfSvc C:\Windows\system32\profsvc.dll 18:31:16.0550 0x136c ProfSvc - ok 18:31:16.0564 0x136c [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] ProtectedStorage C:\Windows\system32\lsass.exe 18:31:16.0567 0x136c ProtectedStorage - ok 18:31:16.0587 0x136c [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched C:\Windows\system32\DRIVERS\pacer.sys 18:31:16.0590 0x136c Psched - ok 18:31:16.0640 0x136c [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 18:31:16.0667 0x136c ql2300 - ok 18:31:16.0682 0x136c [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 18:31:16.0685 0x136c ql40xx - ok 18:31:16.0706 0x136c [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE C:\Windows\system32\qwave.dll 18:31:16.0713 0x136c QWAVE - ok 18:31:16.0719 0x136c [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 18:31:16.0720 0x136c QWAVEdrv - ok 18:31:16.0736 0x136c [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 18:31:16.0737 0x136c RasAcd - ok 18:31:16.0758 0x136c [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 18:31:16.0759 0x136c RasAgileVpn - ok 18:31:16.0776 0x136c [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto C:\Windows\System32\rasauto.dll 18:31:16.0781 0x136c RasAuto - ok 18:31:16.0788 0x136c [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 18:31:16.0791 0x136c Rasl2tp - ok 18:31:16.0815 0x136c [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan C:\Windows\System32\rasmans.dll 18:31:16.0824 0x136c RasMan - ok 18:31:16.0832 0x136c [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 18:31:16.0835 0x136c RasPppoe - ok 18:31:16.0841 0x136c [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 18:31:16.0844 0x136c RasSstp - ok 18:31:16.0855 0x136c [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 18:31:16.0861 0x136c rdbss - ok 18:31:16.0886 0x136c [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 18:31:16.0887 0x136c rdpbus - ok 18:31:16.0917 0x136c [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 18:31:16.0918 0x136c RDPCDD - ok 18:31:16.0926 0x136c [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 18:31:16.0927 0x136c RDPENCDD - ok 18:31:16.0934 0x136c [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 18:31:16.0936 0x136c RDPREFMP - ok 18:31:16.0980 0x136c [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 18:31:16.0985 0x136c RDPWD - ok 18:31:17.0006 0x136c [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 18:31:17.0010 0x136c rdyboost - ok 18:31:17.0037 0x136c [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess C:\Windows\System32\mprdim.dll 18:31:17.0041 0x136c RemoteAccess - ok 18:31:17.0078 0x136c [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry C:\Windows\system32\regsvc.dll 18:31:17.0083 0x136c RemoteRegistry - ok 18:31:17.0122 0x136c [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 18:31:17.0125 0x136c RpcEptMapper - ok 18:31:17.0164 0x136c [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator C:\Windows\system32\locator.exe 18:31:17.0166 0x136c RpcLocator - ok 18:31:17.0244 0x136c [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs C:\Windows\system32\rpcss.dll 18:31:17.0256 0x136c RpcSs - ok 18:31:17.0264 0x136c [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 18:31:17.0266 0x136c rspndr - ok 18:31:17.0312 0x136c [ E50CFB92986DCAB49DE93788FD695813, EAE103008B967B0F064EDDA551AA553EE7C22D39D14FA0BBFEF41C4D1B6C99E5 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 18:31:17.0323 0x136c RTL8167 - ok 18:31:17.0330 0x136c [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] SamSs C:\Windows\system32\lsass.exe 18:31:17.0332 0x136c SamSs - ok 18:31:17.0350 0x136c [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 18:31:17.0352 0x136c sbp2port - ok 18:31:17.0361 0x136c [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr C:\Windows\System32\SCardSvr.dll 18:31:17.0367 0x136c SCardSvr - ok 18:31:17.0373 0x136c [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 18:31:17.0374 0x136c scfilter - ok 18:31:17.0414 0x136c [ 262F6592C3299C005FD6BEC90FC4463A, 54095E37F0B6CC677A3E9BDD40F4647C713273D197DB341063AA7F342A60C4A7 ] Schedule C:\Windows\system32\schedsvc.dll 18:31:17.0437 0x136c Schedule - ok 18:31:17.0471 0x136c [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc C:\Windows\System32\certprop.dll 18:31:17.0474 0x136c SCPolicySvc - ok 18:31:17.0489 0x136c [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC C:\Windows\System32\SDRSVC.dll 18:31:17.0494 0x136c SDRSVC - ok 18:31:17.0500 0x136c [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys 18:31:17.0501 0x136c secdrv - ok 18:31:17.0506 0x136c [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon C:\Windows\system32\seclogon.dll 18:31:17.0510 0x136c seclogon - ok 18:31:17.0516 0x136c [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS C:\Windows\system32\sens.dll 18:31:17.0520 0x136c SENS - ok 18:31:17.0550 0x136c [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc C:\Windows\system32\sensrsvc.dll 18:31:17.0553 0x136c SensrSvc - ok 18:31:17.0564 0x136c [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum C:\Windows\system32\drivers\serenum.sys 18:31:17.0565 0x136c Serenum - ok 18:31:17.0572 0x136c [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial C:\Windows\system32\drivers\serial.sys 18:31:17.0574 0x136c Serial - ok 18:31:17.0580 0x136c [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse C:\Windows\system32\drivers\sermouse.sys 18:31:17.0581 0x136c sermouse - ok 18:31:17.0597 0x136c [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv C:\Windows\system32\sessenv.dll 18:31:17.0602 0x136c SessionEnv - ok 18:31:17.0619 0x136c [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 18:31:17.0620 0x136c sffdisk - ok 18:31:17.0635 0x136c [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 18:31:17.0636 0x136c sffp_mmc - ok 18:31:17.0649 0x136c [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 18:31:17.0650 0x136c sffp_sd - ok 18:31:17.0655 0x136c [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 18:31:17.0657 0x136c sfloppy - ok 18:31:17.0691 0x136c [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess C:\Windows\System32\ipnathlp.dll 18:31:17.0699 0x136c SharedAccess - ok 18:31:17.0725 0x136c [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 18:31:17.0735 0x136c ShellHWDetection - ok 18:31:17.0740 0x136c [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 18:31:17.0742 0x136c SiSRaid2 - ok 18:31:17.0748 0x136c [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 18:31:17.0750 0x136c SiSRaid4 - ok 18:31:17.0757 0x136c [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb C:\Windows\system32\DRIVERS\smb.sys 18:31:17.0760 0x136c Smb - ok 18:31:17.0780 0x136c [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 18:31:17.0784 0x136c SNMPTRAP - ok 18:31:17.0788 0x136c [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr C:\Windows\system32\drivers\spldr.sys 18:31:17.0790 0x136c spldr - ok 18:31:17.0824 0x136c [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler C:\Windows\System32\spoolsv.exe 18:31:17.0837 0x136c Spooler - ok 18:31:17.0934 0x136c [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc C:\Windows\system32\sppsvc.exe 18:31:17.0998 0x136c sppsvc - ok 18:31:18.0021 0x136c [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify C:\Windows\system32\sppuinotify.dll 18:31:18.0025 0x136c sppuinotify - ok 18:31:18.0064 0x136c [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv C:\Windows\system32\DRIVERS\srv.sys 18:31:18.0072 0x136c srv - ok 18:31:18.0085 0x136c [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 18:31:18.0093 0x136c srv2 - ok 18:31:18.0101 0x136c [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 18:31:18.0105 0x136c srvnet - ok 18:31:18.0113 0x136c [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 18:31:18.0120 0x136c SSDPSRV - ok 18:31:18.0126 0x136c [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc C:\Windows\system32\sstpsvc.dll 18:31:18.0130 0x136c SstpSvc - ok 18:31:18.0152 0x136c [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor C:\Windows\system32\drivers\stexstor.sys 18:31:18.0154 0x136c stexstor - ok 18:31:18.0193 0x136c [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc C:\Windows\System32\wiaservc.dll 18:31:18.0206 0x136c stisvc - ok 18:31:18.0212 0x136c [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum C:\Windows\system32\drivers\swenum.sys 18:31:18.0214 0x136c swenum - ok 18:31:18.0235 0x136c [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv C:\Windows\System32\swprv.dll 18:31:18.0247 0x136c swprv - ok 18:31:18.0308 0x136c [ BF9CCC0BF39B418C8D0AE8B05CF95B7D, 3C13217548BE61F2BDB8BD41F77345CDDA1F97BF0AE17241C335B9807EB3DBB8 ] SysMain C:\Windows\system32\sysmain.dll 18:31:18.0342 0x136c SysMain - ok 18:31:18.0353 0x136c [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll 18:31:18.0357 0x136c TabletInputService - ok 18:31:18.0369 0x136c [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv C:\Windows\System32\tapisrv.dll 18:31:18.0378 0x136c TapiSrv - ok 18:31:18.0403 0x136c [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS C:\Windows\System32\tbssvc.dll 18:31:18.0407 0x136c TBS - ok 18:31:18.0478 0x136c [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 18:31:18.0512 0x136c Tcpip - ok 18:31:18.0567 0x136c [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 18:31:18.0599 0x136c TCPIP6 - ok 18:31:18.0630 0x136c [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 18:31:18.0645 0x136c tcpipreg - ok 18:31:18.0661 0x136c [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 18:31:18.0661 0x136c TDPIPE - ok 18:31:18.0677 0x136c [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 18:31:18.0692 0x136c TDTCP - ok 18:31:18.0723 0x136c [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx C:\Windows\system32\DRIVERS\tdx.sys 18:31:18.0723 0x136c tdx - ok 18:31:18.0739 0x136c [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD C:\Windows\system32\drivers\termdd.sys 18:31:18.0739 0x136c TermDD - ok 18:31:18.0786 0x136c [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService C:\Windows\System32\termsrv.dll 18:31:18.0801 0x136c TermService - ok 18:31:18.0817 0x136c [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes C:\Windows\system32\themeservice.dll 18:31:18.0833 0x136c Themes - ok 18:31:18.0833 0x136c [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER C:\Windows\system32\mmcss.dll 18:31:18.0833 0x136c THREADORDER - ok 18:31:18.0848 0x136c [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks C:\Windows\System32\trkwks.dll 18:31:18.0848 0x136c TrkWks - ok 18:31:18.0895 0x136c [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 18:31:18.0895 0x136c TrustedInstaller - ok 18:31:18.0942 0x136c [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 18:31:18.0942 0x136c tssecsrv - ok 18:31:18.0957 0x136c [ D11C783E3EF9A3C52C0EBE83CC5000E9, A136C355D4C8945729163D15801364A614E23217B15F9313C85BA45BB71A74EB ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 18:31:18.0957 0x136c TsUsbFlt - ok 18:31:18.0957 0x136c [ 9CC2CCAE8A84820EAECB886D477CBCB8, 50D8AA2D7477A6618A0C31BB4D1C4887B457865FB1105E2E7B984EEFA337B804 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 18:31:18.0957 0x136c TsUsbGD - ok 18:31:19.0098 0x136c [ 3A662A6774405C325BE0CBCFB6BD140F, D175AEDF95B755601D835A54367A7D497BD8FC9162B9A3518B638B8D566942A2 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe 18:31:19.0129 0x136c TuneUp.UtilitiesSvc - ok 18:31:19.0160 0x136c [ 7BC3381C0713F613B31ACDE38B71CB53, 275A6CB6A6157270C35FD7D6213D0D99030AEE5AE852E0D929CBE879C63FAB2F ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys 18:31:19.0176 0x136c TuneUpUtilitiesDrv - ok 18:31:19.0176 0x136c [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 18:31:19.0176 0x136c tunnel - ok 18:31:19.0191 0x136c [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 18:31:19.0191 0x136c uagp35 - ok 18:31:19.0207 0x136c [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 18:31:19.0207 0x136c udfs - ok 18:31:19.0238 0x136c [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect C:\Windows\system32\UI0Detect.exe 18:31:19.0238 0x136c UI0Detect - ok 18:31:19.0238 0x136c [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 18:31:19.0238 0x136c uliagpkx - ok 18:31:19.0254 0x136c [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus C:\Windows\system32\DRIVERS\umbus.sys 18:31:19.0254 0x136c umbus - ok 18:31:19.0254 0x136c [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass C:\Windows\system32\drivers\umpass.sys 18:31:19.0254 0x136c UmPass - ok 18:31:19.0285 0x136c [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost C:\Windows\System32\upnphost.dll 18:31:19.0285 0x136c upnphost - ok 18:31:19.0316 0x136c [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 18:31:19.0332 0x136c usbccgp - ok 18:31:19.0363 0x136c [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir C:\Windows\system32\drivers\usbcir.sys 18:31:19.0363 0x136c usbcir - ok 18:31:19.0394 0x136c [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 18:31:19.0394 0x136c usbehci - ok 18:31:19.0410 0x136c [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 18:31:19.0410 0x136c usbhub - ok 18:31:19.0441 0x136c [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 18:31:19.0441 0x136c usbohci - ok 18:31:19.0472 0x136c [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 18:31:19.0472 0x136c usbprint - ok 18:31:19.0488 0x136c [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 18:31:19.0488 0x136c usbscan - ok 18:31:19.0535 0x136c [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR C:\Windows\system32\drivers\USBSTOR.SYS 18:31:19.0535 0x136c USBSTOR - ok 18:31:19.0550 0x136c [ 81FB2216D3A60D1284455D511797DB3D, 121E52B18A1832E775EA0AE2E053BAA53E5A70E9754724B1449AE5992D63B13E ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 18:31:19.0550 0x136c usbuhci - ok 18:31:19.0581 0x136c [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms C:\Windows\System32\uxsms.dll 18:31:19.0597 0x136c UxSms - ok 18:31:19.0628 0x136c [ 09A0C45C7D51A1F80432178F93A39A3D, 254847DCD4B1585CF73C1C67D244C79594A5335289B1E5C059AED9E4B3B00EA7 ] UxTuneUp C:\Windows\System32\uxtuneup.dll 18:31:19.0628 0x136c UxTuneUp - ok 18:31:19.0644 0x136c [ 204F3F58212B3E422C90BD9691A2DF28, D748A8CEE4D59B4248C9B1ACA5155D0FF6635A29564B4391B7FAC6261F93FE99 ] VaultSvc C:\Windows\system32\lsass.exe 18:31:19.0644 0x136c VaultSvc - ok 18:31:19.0753 0x136c [ 1352B215BDC5807A5641E7C143796DD7, B54F95307253BB81E4CEE4F2033782210652364DE6A1E833B27ECE7E04A2BD51 ] VBoxAswDrv C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys 18:31:19.0769 0x136c VBoxAswDrv - ok 18:31:19.0784 0x136c [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 18:31:19.0784 0x136c vdrvroot - ok 18:31:19.0815 0x136c [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds C:\Windows\System32\vds.exe 18:31:19.0831 0x136c vds - ok 18:31:19.0831 0x136c [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 18:31:19.0831 0x136c vga - ok 18:31:19.0831 0x136c [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave C:\Windows\System32\drivers\vga.sys 18:31:19.0831 0x136c VgaSave - ok 18:31:19.0862 0x136c [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 18:31:19.0878 0x136c vhdmp - ok 18:31:19.0893 0x136c [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide C:\Windows\system32\drivers\viaide.sys 18:31:19.0893 0x136c viaide - ok 18:31:19.0893 0x136c [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr C:\Windows\system32\drivers\volmgr.sys 18:31:19.0909 0x136c volmgr - ok 18:31:19.0909 0x136c [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 18:31:19.0925 0x136c volmgrx - ok 18:31:19.0925 0x136c [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap C:\Windows\system32\drivers\volsnap.sys 18:31:19.0940 0x136c volsnap - ok 18:31:19.0956 0x136c [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 18:31:19.0971 0x136c vsmraid - ok 18:31:20.0018 0x136c [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS C:\Windows\system32\vssvc.exe 18:31:20.0049 0x136c VSS - ok 18:31:20.0081 0x136c [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 18:31:20.0081 0x136c vwifibus - ok 18:31:20.0081 0x136c [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 18:31:20.0081 0x136c vwififlt - ok 18:31:20.0096 0x136c [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time C:\Windows\system32\w32time.dll 18:31:20.0112 0x136c W32Time - ok 18:31:20.0112 0x136c [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen C:\Windows\system32\drivers\wacompen.sys 18:31:20.0112 0x136c WacomPen - ok 18:31:20.0127 0x136c [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 18:31:20.0127 0x136c WANARP - ok 18:31:20.0127 0x136c [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 18:31:20.0127 0x136c Wanarpv6 - ok 18:31:20.0190 0x136c [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine C:\Windows\system32\wbengine.exe 18:31:20.0221 0x136c wbengine - ok 18:31:20.0237 0x136c [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 18:31:20.0237 0x136c WbioSrvc - ok 18:31:20.0252 0x136c [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc C:\Windows\System32\wcncsvc.dll 18:31:20.0268 0x136c wcncsvc - ok 18:31:20.0268 0x136c [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 18:31:20.0283 0x136c WcsPlugInService - ok 18:31:20.0283 0x136c [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd C:\Windows\system32\drivers\wd.sys 18:31:20.0283 0x136c Wd - ok 18:31:20.0330 0x136c [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 18:31:20.0330 0x136c Wdf01000 - ok 18:31:20.0361 0x136c [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiServiceHost C:\Windows\system32\wdi.dll 18:31:20.0361 0x136c WdiServiceHost - ok 18:31:20.0377 0x136c [ BF1FC3F79B863C914687A737C2F3D681, B2DF47AC4931ACFB243775767B77065CC0D98778FC0243C793A3E219EB961209 ] WdiSystemHost C:\Windows\system32\wdi.dll 18:31:20.0377 0x136c WdiSystemHost - ok 18:31:20.0408 0x136c [ 0EB0E5D22B1760F2DBCE632F2DD7A54D, B8A4CC62F88768947FB0A161CF9564DB28FD9C1C037B5475DF192982DE035C22 ] WebClient C:\Windows\System32\webclnt.dll 18:31:20.0424 0x136c WebClient - ok 18:31:20.0424 0x136c [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc C:\Windows\system32\wecsvc.dll 18:31:20.0439 0x136c Wecsvc - ok 18:31:20.0455 0x136c [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport C:\Windows\System32\wercplsupport.dll 18:31:20.0455 0x136c wercplsupport - ok 18:31:20.0471 0x136c [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc C:\Windows\System32\WerSvc.dll 18:31:20.0486 0x136c WerSvc - ok 18:31:20.0486 0x136c [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 18:31:20.0502 0x136c WfpLwf - ok 18:31:20.0502 0x136c [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount C:\Windows\system32\drivers\wimmount.sys 18:31:20.0502 0x136c WIMMount - ok 18:31:20.0533 0x136c WinDefend - ok 18:31:20.0533 0x136c WinHttpAutoProxySvc - ok 18:31:20.0595 0x136c [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 18:31:20.0595 0x136c Winmgmt - ok 18:31:20.0673 0x136c [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM C:\Windows\system32\WsmSvc.dll 18:31:20.0705 0x136c WinRM - ok 18:31:20.0767 0x136c [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 18:31:20.0767 0x136c WinUsb - ok 18:31:20.0798 0x136c [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc C:\Windows\System32\wlansvc.dll 18:31:20.0829 0x136c Wlansvc - ok 18:31:20.0861 0x136c [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 18:31:20.0876 0x136c wlcrasvc - ok 18:31:20.0985 0x136c [ 7E47C328FC4768CB8BEAFBCFAFA70362, C98BD6A0C2F70E069D5FD3BAB31BD028DFEAC0490D180BBC28A14BE375897D8C ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 18:31:21.0017 0x136c wlidsvc - ok 18:31:21.0032 0x136c [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 18:31:21.0032 0x136c WmiAcpi - ok 18:31:21.0063 0x136c [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 18:31:21.0063 0x136c wmiApSrv - ok 18:31:21.0079 0x136c WMPNetworkSvc - ok 18:31:21.0110 0x136c [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc C:\Windows\System32\wpcsvc.dll 18:31:21.0110 0x136c WPCSvc - ok 18:31:21.0126 0x136c [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 18:31:21.0141 0x136c WPDBusEnum - ok 18:31:21.0141 0x136c [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 18:31:21.0141 0x136c ws2ifsl - ok 18:31:21.0157 0x136c [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc C:\Windows\system32\wscsvc.dll 18:31:21.0157 0x136c wscsvc - ok 18:31:21.0173 0x136c WSearch - ok 18:31:21.0251 0x136c [ 61FF576450CCC80564B850BC3FB6713A, B2843BC9E2F62D27DCF6787D063378926748CE75002BADA1873DCB5039883705 ] wuauserv C:\Windows\system32\wuaueng.dll 18:31:21.0297 0x136c wuauserv - ok 18:31:21.0344 0x136c [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 18:31:21.0344 0x136c WudfPf - ok 18:31:21.0360 0x136c [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 18:31:21.0375 0x136c WUDFRd - ok 18:31:21.0407 0x136c [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 18:31:21.0407 0x136c wudfsvc - ok 18:31:21.0438 0x136c [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc C:\Windows\System32\wwansvc.dll 18:31:21.0453 0x136c WwanSvc - ok 18:31:21.0453 0x136c ================ Scan global =============================== 18:31:21.0485 0x136c [ BA0CD8C393E8C9F83354106093832C7B, 18D8A4780A2BAA6CEF7FBBBDA0EF6BF2DADF146E1E578A618DD5859E8ADBF1A8 ] C:\Windows\system32\basesrv.dll 18:31:21.0516 0x136c [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll 18:31:21.0516 0x136c [ 88EDD0B34EED542745931E581AD21A32, DC2B93E1CEF5B0BCEE08D72669BB0F3AD0E8E6E75BDC08858407ED92F6FFA031 ] C:\Windows\system32\winsrv.dll 18:31:21.0547 0x136c [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll 18:31:21.0594 0x136c [ 24ACB7E5BE595468E3B9AA488B9B4FCB, 63541E3432FCE953F266AE553E7A394978D6EE3DB52388D885F668CF42C5E7E2 ] C:\Windows\system32\services.exe 18:31:21.0594 0x136c [ Global ] - ok 18:31:21.0594 0x136c ================ Scan MBR ================================== 18:31:21.0609 0x136c [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 18:31:21.0875 0x136c \Device\Harddisk0\DR0 - ok 18:31:21.0875 0x136c ================ Scan VBR ================================== 18:31:21.0890 0x136c [ 4514CE3A31B27D12D71B71E1A1A4E197 ] \Device\Harddisk0\DR0\Partition1 18:31:21.0906 0x136c \Device\Harddisk0\DR0\Partition1 - ok 18:31:21.0906 0x136c [ B2F72F680D000D23DAAE581B8E9C9529 ] \Device\Harddisk0\DR0\Partition2 18:31:21.0921 0x136c \Device\Harddisk0\DR0\Partition2 - ok 18:31:21.0937 0x136c [ 5646E96E3D138A80238359B185AE80D4 ] \Device\Harddisk0\DR0\Partition3 18:31:21.0937 0x136c \Device\Harddisk0\DR0\Partition3 - ok 18:31:21.0937 0x136c ================ Scan generic autorun ====================== 18:31:21.0937 0x136c Waiting for KSN requests completion. In queue: 337 18:31:22.0951 0x136c Waiting for KSN requests completion. In queue: 337 18:31:23.0965 0x136c Waiting for KSN requests completion. In queue: 25 18:31:25.0010 0x136c AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 10.0.2208.712 ), 0x41000 ( enabled : updated ) 18:31:25.0073 0x136c Win FW state via NFP2: enabled 18:31:27.0818 0x136c ============================================================ 18:31:27.0818 0x136c Scan finished 18:31:27.0818 0x136c ============================================================ 18:31:27.0818 0x0c2c Detected object count: 0 18:31:27.0818 0x0c2c Actual detected object count: 0 Soory doch gefunden: Wurde nur falsch abgespeichert: Danke für die schnelle antwort lg gitti |
|
| Themen zu sec_error_unknown_issuer |
| computer, computern, fehlercode 0x5, fehlercode 0x81000006, fehlercode 126, fehlercode windows, kann nichts mehr öffnen, sec_error_unknown_issuer, super, wirklich |
Linear-Darstellung
