2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINPUN.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINGUJ.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINDEV.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBE2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBE1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINASA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDIC.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDHU1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDHE319.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoer.dll
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDFR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDFO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDFI.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDEST.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDDIV2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDDIV1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDDA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBU.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBHC.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBGPH1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBGPH.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDA3.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDA1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDSN1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDKYR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDIT.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDIR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDHEB.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDHE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDHAU.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGAE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDFA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDDV.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDARMW.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDARME.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDA2.DLL
2009-07-14 00:24 - 2009-07-14 00:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2009-07-14 00:24 - 2009-07-14 00:24 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\discache.sys
2009-07-14 00:23 - 2009-07-14 02:16 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\srhelper.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\vdsvd.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\sdautoplay.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vds_ps.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\srwmi.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sxshared.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 06278656 _____ (Microsoft Corporation) C:\Windows\system32\DDORes.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\dmdlgs.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\DeviceMetadataParsers.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\blb_ps.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dmintf.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\dmutil.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDisplayStatusManager.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\defragproxy.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\DDOIProxy.dll
2009-07-14 00:23 - 2009-07-14 02:14 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00176128 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\vssadmin.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\dmview.ocx
2009-07-14 00:23 - 2009-07-14 02:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\vdsldr.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\srdelayed.exe
2009-07-14 00:23 - 2009-07-14 02:04 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\dmdskres.dll
2009-07-14 00:23 - 2009-07-14 02:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\dmdskres2.dll
2009-07-14 00:23 - 2009-07-14 02:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\blbres.dll
2009-07-14 00:23 - 2009-07-14 00:23 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\blbdrive.sys
2009-07-14 00:22 - 2009-07-14 02:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\verifier.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\sperror.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\SSShim.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssoc.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssocPrx.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\NcdProp.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\osbaseln.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\spcmsg.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\fundisc.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingHandler.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\IPBusEnum.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\fdPnp.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\FDResPub.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\fdWNet.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\fdPHost.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\IPBusEnumProxy.dll
2009-07-14 00:22 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\secinit.exe
2009-07-14 00:22 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\RmClient.exe
2009-07-14 00:22 - 2009-07-14 02:06 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2009-07-14 00:22 - 2009-07-14 02:06 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-processor-power-events.dll
2009-07-14 00:22 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-hal-events.dll
2009-07-14 00:21 - 2009-07-14 02:20 - 00058448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys
2009-07-14 00:21 - 2009-07-14 02:16 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2009-07-14 00:21 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\SensApi.dll
2009-07-14 00:21 - 2009-07-14 02:14 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm.exe
2009-07-14 00:21 - 2009-07-14 02:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\csrstub.exe
2009-07-14 00:20 - 2009-07-14 02:16 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\wow32.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\racpldlg.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\radardt.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\radarrs.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\whealogr.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\pots.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\vdmredir.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\vdmdbg.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\ntvdmd.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\pnpts.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\fthsvc.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\msrahc.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dfdts.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\MsiCofire.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\cofiredm.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\memdiag.dll
2009-07-14 00:20 - 2009-07-14 02:14 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\msdt.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\psr.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00536576 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\raserver.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MdRes.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\DFDWiz.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\sdchange.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\rdrleakdiag.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll
2009-07-14 00:20 - 2009-07-14 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\amxread.dll
2009-07-14 00:20 - 2009-07-14 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\cofire.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\apilogen.dll
2009-07-14 00:20 - 2009-07-14 02:03 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\aeevts.dll
2009-07-14 00:20 - 2009-07-14 00:20 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\graftabl.com
2009-07-14 00:20 - 2009-07-14 00:20 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\win.com
2009-07-14 00:19 - 2009-07-14 02:26 - 00025168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\battc.sys
2009-07-14 00:19 - 2009-07-14 02:26 - 00019024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\compbatt.sys
2009-07-14 00:19 - 2009-07-14 02:20 - 00046656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\isapnp.sys
2009-07-14 00:19 - 2009-07-14 02:20 - 00028240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mssmbios.sys
2009-07-14 00:19 - 2009-07-14 02:19 - 00180288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pcmcia.sys
2009-07-14 00:19 - 2009-07-14 02:16 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\sdiagprv.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sdiageng.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\scext.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\sdiagschd.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\signdrv.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\perfctrs.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\perfproc.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\sdhcinst.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\perfos.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\perfnet.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\regidle.dll
2009-07-14 00:19 - 2009-07-14 02:15 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\loadperf.dll
2009-07-14 00:19 - 2009-07-14 02:15 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\pcwutl.dll
2009-07-14 00:19 - 2009-07-14 02:14 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\lodctr.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\sc.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\sdiagnhost.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\svchost.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\pcwrun.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2009-07-14 00:19 - 2009-07-14 02:10 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\setupetw.dll
2009-07-14 00:19 - 2009-07-14 00:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbatt.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00014080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CmBatt.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wmiacpi.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\MsraLegacy.tlb
2009-07-14 00:19 - 2009-07-14 00:19 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\errdev.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\rendezvousSession.tlb
2009-07-14 00:18 - 2009-07-14 02:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll
2009-07-14 00:18 - 2009-07-14 02:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\osuninst.dll
2009-07-14 00:18 - 2009-07-14 02:14 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2009-07-14 00:17 - 2009-07-14 02:20 - 00091728 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2009-07-14 00:17 - 2009-07-14 02:19 - 00019008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2009-07-14 00:17 - 2009-07-14 02:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\spwinsat.dll
2009-07-14 00:17 - 2009-07-14 02:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spnet.dll
2009-07-14 00:17 - 2009-07-14 02:14 - 00398336 _____ (Microsoft Corporation) C:\Windows\regedit.exe
2009-07-14 00:17 - 2009-07-14 02:10 - 08338432 _____ (Microsoft Corporation) C:\Windows\system32\spwizimg.dll
2009-07-14 00:17 - 2009-07-14 02:10 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\uxlibres.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00379904 _____ (Microsoft Corporation) C:\Windows\system32\pnpui.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\spfileq.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\SPInf.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\devmgr.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\difxapi.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\cmipnpinstall.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\dmrc.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\devobj.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\cmicryptinstall.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\hotplug.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\gacinstall.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\devrtl.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\dmocx.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\chkwudrv.dll
2009-07-14 00:16 - 2009-07-14 02:14 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.cpl
2009-07-14 00:16 - 2009-07-14 02:14 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\newdev.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ndadmin.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\sigverif.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\PnPutil.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\sxstrace.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEject.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\InfDefaultInstall.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\dinotify.exe
2009-07-14 00:16 - 2009-07-14 02:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\pnpsetup.dll
2009-07-14 00:15 - 2009-07-14 02:20 - 00046160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fsdepends.sys
2009-07-14 00:15 - 2009-07-14 02:16 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\SortWindows6Compat.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\sfc_os.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\SortServer2003Compat.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Nlsdl.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sxssrv.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\sxsstore.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\virtdisk.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\psapi.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\elslad.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2009-07-14 00:15 - 2009-07-14 02:15 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\ELSCore.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\idndl.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\kernelceip.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\clb.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2009-07-14 00:15 - 2009-07-14 02:14 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\driverquery.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\setx.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\whoami.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\forfiles.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\xcopy.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\where.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\sfc.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\waitfor.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\choice.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\timeout.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\icacls.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\clip.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\cacls.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\comp.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\sort.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fc.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\compact.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\runas.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\convert.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\replace.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\chkntfs.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\chkdsk.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\attrib.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\doskey.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\ktmutil.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\label.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\subst.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\print.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\find.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mountvol.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\recover.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\regedt32.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\acproxy.dll
2009-07-14 00:15 - 2009-07-14 02:14 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\help.exe
2009-07-14 00:15 - 2009-07-14 02:10 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\sfc.dll
2009-07-14 00:15 - 2009-07-14 02:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\normaliz.dll
2009-07-14 00:15 - 2009-07-14 00:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2009-07-14 00:15 - 2009-07-14 00:15 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\format.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\filetrace.sys
2009-07-14 00:15 - 2009-07-14 00:15 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\mode.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\more.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\tree.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\diskcomp.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\chcp.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\diskcopy.com
2009-07-14 00:14 - 2009-07-14 02:20 - 00049728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2009-07-14 00:14 - 2009-07-14 02:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\uudf.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\ufat.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00084992 _____ (Microsoft) C:\Windows\system32\SMBHelperClass.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\uexfat.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\ureg.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\msrdc.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\cnvfat.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\fmifs.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\davhlpr.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\fltLib.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\ifsutilx.dll
2009-07-14 00:14 - 2009-07-14 02:14 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\fltMC.exe
2009-07-14 00:14 - 2009-07-14 00:14 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2009-07-14 00:14 - 2009-07-14 00:14 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2009-07-14 00:13 - 2009-07-14 02:20 - 00031824 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_AuthenticAMD.dll
2009-07-14 00:13 - 2009-07-14 02:20 - 00017488 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2009-07-14 00:13 - 2009-07-14 02:16 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\wmiprop.dll
2009-07-14 00:13 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\procinst.dll
2009-07-14 00:13 - 2009-07-14 02:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\TimeDateMUICallback.dll
2009-07-14 00:13 - 2009-07-14 02:15 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2009-07-14 00:13 - 2009-07-14 02:14 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerWizardElev.exe
2009-07-14 00:13 - 2009-07-14 02:14 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerWizard.exe
2009-07-14 00:13 - 2009-07-14 02:14 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\bcdprov.dll
2009-07-14 00:13 - 2009-07-14 02:14 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\ucsvc.exe
2009-07-14 00:13 - 2009-07-14 02:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\BdeUISrv.exe
2009-07-14 00:13 - 2009-07-14 02:04 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\bootstr.dll
2009-07-14 00:12 - 2009-07-14 02:20 - 00162896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2009-07-14 00:12 - 2009-07-14 02:17 - 00055584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2009-07-14 00:12 - 2009-07-14 02:16 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\tbssvc.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\RpcEpMap.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\tpmcompc.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\profapi.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wship6.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\WSHTCPIP.DLL
2009-07-14 00:12 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\msdelta.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\fveRecover.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\mspatcha.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\fvecerts.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\makecab.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\BdeUnlockWizard.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\TpmInit.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\diantz.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\bderepair.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\extrac32.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\expand.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\fveupdate.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\aecache.dll
2009-07-14 00:12 - 2009-07-14 02:06 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\lz32.dll
2009-07-14 00:12 - 2009-07-14 00:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00140864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00021584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\atapi.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00021584 _____ (Microsoft Corporation) C:\Windows\system32\BOOTVID.DLL
2009-07-14 00:11 - 2009-07-14 02:26 - 00015952 _____ (CMD Technology, Inc.) C:\Windows\system32\Drivers\cmdide.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00014912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdide.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00014400 _____ (Acer Laboratories Inc.) C:\Windows\system32\Drivers\aliide.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00198208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00057424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00042576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00041552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00026704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpata.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00016960 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2009-07-14 00:11 - 2009-07-14 02:20 - 00015952 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2009-07-14 00:11 - 2009-07-14 02:20 - 00015424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelide.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00013888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msisadrv.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00012368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciide.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00297040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00052816 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL
2009-07-14 00:11 - 2009-07-14 02:19 - 00043088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pcw.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00042560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciidex.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00019024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wd.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00016976 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\viaide.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00014912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wmilib.sys
2009-07-14 00:11 - 2009-07-14 02:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2009-07-14 00:11 - 2009-07-14 02:16 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\pcwum.dll
2009-07-14 00:11 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\txfw32.dll
2009-07-14 00:11 - 2009-07-14 02:15 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll
2009-07-14 00:11 - 2009-07-14 02:15 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\msvcirt.dll
2009-07-14 00:11 - 2009-07-14 02:15 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\ktmw32.dll
2009-07-14 00:11 - 2009-07-14 02:14 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2009-07-14 00:11 - 2009-07-14 02:14 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\csrss.exe
2009-07-14 00:11 - 2009-07-14 00:11 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\viac7.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msfs.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\null.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-lsalookup-l1-1-0.dll
2009-07-14 00:11 - 2009-07-14 00:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-sddl-l1-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:09 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\prflbmsg.dll
2009-07-14 00:10 - 2009-07-14 02:07 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt40.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-winsvc-l1-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-management-l2-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-management-l1-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-core-l1-1-0.dll
2009-07-14 00:08 - 2009-06-10 22:39 - 00003577 _____ () C:\Windows\system32\sysprtj.sep
2009-07-14 00:08 - 2009-06-10 22:39 - 00000114 _____ () C:\Windows\system32\pcl.sep
2009-07-14 00:08 - 2009-06-10 22:39 - 00000051 _____ () C:\Windows\system32\pscript.sep
2009-07-14 00:06 - 2009-07-14 00:06 - 00004453 _____ () C:\Windows\system32\odbcconf.rsp
2009-07-14 00:00 - 2009-06-10 22:21 - 00109456 _____ (Microsoft Corporation) C:\Windows\system32\avifile.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00109456 _____ (Microsoft Corporation) C:\Windows\system\avifile.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00073376 _____ (Microsoft Corporation) C:\Windows\system32\mciavi.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00073376 _____ (Microsoft Corporation) C:\Windows\system\mciavi.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00069584 _____ (Microsoft Corporation) C:\Windows\system32\avicap.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00069584 _____ (Microsoft Corporation) C:\Windows\system\avicap.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\mciwave.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00028160 _____ (Microsoft Corporation) C:\Windows\system\mciwave.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00025264 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00025264 _____ (Microsoft Corporation) C:\Windows\system\mciseq.drv
2009-07-13 23:54 - 2009-07-13 23:54 - 00026624 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw85cir.sys
2009-07-13 23:53 - 2009-06-10 22:40 - 00146389 _____ () C:\Windows\system32\printmanagement.msc
2009-07-13 23:47 - 2009-06-10 22:41 - 00049680 _____ (Twain Working Group) C:\Windows\twunk_16.exe
2009-07-13 23:41 - 2009-06-10 22:17 - 00026224 _____ (Microsoft Corporation) C:\Windows\system32\odbc16gt.dll
2009-07-13 23:41 - 2009-06-10 22:16 - 00002233 _____ () C:\Windows\system32\12520850.cpx
2009-07-13 23:25 - 2009-07-14 02:15 - 00746496 _____ (Intel Corporation) C:\Windows\system32\ir50_32.dll
2009-07-13 23:25 - 2009-07-14 02:15 - 00200192 _____ (Intel Corporation.) C:\Windows\system32\ir50_qcx.dll
2009-07-13 23:25 - 2009-07-14 02:15 - 00200192 _____ (Intel Corporation.) C:\Windows\system32\ir50_qc.dll
2009-07-13 23:25 - 2009-07-14 02:15 - 00197632 _____ (Intel(R) Corporation) C:\Windows\system32\ir32_32.dll
2009-07-13 23:25 - 2009-07-14 02:14 - 00839680 _____ (Intel Corporation) C:\Windows\system32\ir41_32.ax
2009-07-13 23:25 - 2009-07-14 02:14 - 00197632 _____ (Intel Corporation) C:\Windows\system32\iac25_32.ax
2009-07-13 23:25 - 2009-07-14 02:14 - 00146944 _____ (Intel Corporation) C:\Windows\system32\ivfsrc.ax
2009-07-13 23:24 - 2009-06-10 22:14 - 00000646 _____ () C:\Windows\system32\Drivers\gmreadme.txt
2009-07-13 23:12 - 2009-06-10 22:25 - 00063411 _____ () C:\Windows\system32\NAPCLCFG.MSC
2009-07-13 23:11 - 2009-07-14 02:20 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWWizFwk.dll
2009-07-13 23:11 - 2009-06-10 22:27 - 00115091 _____ () C:\Windows\system32\WF.msc
2009-07-13 23:10 - 2009-06-10 22:19 - 00021812 _____ () C:\Windows\system32\NetTrace.PLA.Diagnostics.xml
2009-07-13 23:09 - 2009-07-14 02:26 - 00297552 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\adpahci.sys
2009-07-13 23:09 - 2009-07-14 02:26 - 00146512 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\adpu320.sys
2009-07-13 23:09 - 2009-07-14 02:26 - 00086608 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\arcsas.sys
2009-07-13 23:09 - 2009-07-14 02:26 - 00076368 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\arc.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00235584 _____ (LSI Corporation, Inc.) C:\Windows\system32\Drivers\MegaSR.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00096848 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_scsi.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00095824 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_fc.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00089168 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_sas.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00067152 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00054864 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_sas2.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00044624 _____ (IBM Corporation) C:\Windows\system32\Drivers\nfrd960.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00041040 _____ (Intel Corp./ICP vortex GmbH) C:\Windows\system32\Drivers\iirsp.sys
2009-07-13 23:09 - 2009-07-14 02:19 - 00106064 _____ (QLogic Corporation) C:\Windows\system32\Drivers\ql40xx.sys
2009-07-13 23:09 - 2009-07-14 02:19 - 00077888 _____ (Silicon Integrated Systems) C:\Windows\system32\Drivers\sisraid4.sys
2009-07-13 23:09 - 2009-07-14 02:19 - 00021072 _____ (Promise Technology) C:\Windows\system32\Drivers\stexstor.sys
2009-07-13 23:06 - 2009-06-10 22:40 - 00201034 _____ () C:\Windows\system32\winrm.vbs
2009-07-13 23:06 - 2009-06-10 22:40 - 00004675 _____ () C:\Windows\system32\wsmanconfig_schema.xml
2009-07-13 23:06 - 2009-06-10 22:40 - 00002426 _____ () C:\Windows\system32\WsmTxt.xsl
2009-07-13 23:06 - 2009-06-10 22:40 - 00001559 _____ () C:\Windows\system32\WsmPty.xsl
2009-07-13 23:02 - 2009-07-13 23:02 - 00229888 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\b57nd60x.sys
2009-07-13 23:02 - 2009-07-13 23:02 - 00118784 _____ (Intel Corporation) C:\Windows\system32\Drivers\E1G60I32.sys
2009-07-13 23:01 - 2009-06-10 22:17 - 00124118 _____ () C:\Windows\system32\comexp.msc
2009-07-13 23:00 - 2009-06-10 22:25 - 00169520 _____ (Microsoft Corporation) C:\Windows\system32\ole2disp.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00153008 _____ (Microsoft Corporation) C:\Windows\system32\ole2nls.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00042592 _____ (Microsoft Corporation) C:\Windows\system32\ole2.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00027792 _____ (Microsoft Corporation) C:\Windows\system32\compobj.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00005532 _____ (Microsoft Corporation) C:\Windows\system\stdole.tlb
2009-07-13 23:00 - 2009-06-10 22:25 - 00004208 _____ (Microsoft Corporation) C:\Windows\system32\storage.dll
2009-07-13 22:55 - 2009-06-10 22:26 - 00144998 _____ () C:\Windows\system32\lusrmgr.msc
2009-07-13 22:53 - 2009-06-10 22:28 - 00147439 _____ () C:\Windows\system32\gpedit.msc
2009-07-13 22:53 - 2009-06-10 22:28 - 00043566 _____ () C:\Windows\system32\rsop.msc
2009-07-13 22:47 - 2009-06-10 22:36 - 00063070 _____ () C:\Windows\system32\certmgr.msc
2009-07-13 22:46 - 2009-06-10 22:39 - 00144673 _____ () C:\Windows\system32\WmiMgmt.msc
2009-07-13 22:46 - 2009-06-10 22:38 - 00145127 _____ () C:\Windows\system32\eventvwr.msc
2009-07-13 22:46 - 2009-06-10 22:38 - 00145059 _____ () C:\Windows\system32\taskschd.msc
2009-07-13 22:46 - 2009-06-10 22:38 - 00017935 _____ () C:\Windows\system32\EventViewer_EventDetails.xsl
2009-07-13 22:44 - 2009-06-10 22:35 - 00120458 _____ () C:\Windows\system32\secpol.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00144909 _____ () C:\Windows\system32\fsmgmt.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00113256 _____ () C:\Windows\system32\compmgmt.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00092745 _____ () C:\Windows\system32\services.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00041587 _____ () C:\Windows\system32\azman.msc
2009-07-13 22:41 - 2009-07-13 22:41 - 00092320 _____ (Microsoft Corporation) C:\Windows\system32\krnl386.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00068992 _____ (Microsoft Corporation) C:\Windows\system32\MMSYSTEM.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00068992 _____ (Microsoft Corporation) C:\Windows\system\MMSYSTEM.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00047840 _____ (Microsoft Corporation) C:\Windows\system32\USER.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\DDEML.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00032816 _____ (Microsoft Corporation) C:\Windows\system32\COMMDLG.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00032816 _____ (Microsoft Corporation) C:\Windows\system\COMMDLG.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00028112 _____ (Microsoft Corporation) C:\Windows\system32\DRWATSON.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\GDI.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\OLESVR.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00024064 _____ (Microsoft Corporation) C:\Windows\system\OLESVR.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00019694 _____ () C:\Windows\system32\GRAPHICS.COM
2009-07-13 22:41 - 2009-07-13 22:41 - 00013888 _____ (Microsoft Corporation) C:\Windows\system32\TOOLHELP.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00012704 _____ (Microsoft Corporation) C:\Windows\system32\WFWNET.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00012704 _____ (Microsoft Corporation) C:\Windows\system\WFWNET.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00010544 _____ (Microsoft Corporation) C:\Windows\system32\COMM.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\WIFEMAN.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00008960 _____ (Microsoft Corporation) C:\Windows\system32\WOWEXEC.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\WINNLS.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\SHELL.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system\SHELL.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00004048 _____ (Microsoft Corporation) C:\Windows\system32\TIMER.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00004048 _____ (Microsoft Corporation) C:\Windows\system\TIMER.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00003360 _____ (Microsoft Corporation) C:\Windows\system32\system.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00003360 _____ (Microsoft Corporation) C:\Windows\system\system.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002864 _____ (Microsoft Corporation) C:\Windows\system32\WOWDEB.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00002864 _____ (Microsoft Corporation) C:\Windows\system32\WINSOCK.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00002842 _____ () C:\Windows\system32\redir.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00002176 _____ (Microsoft Corporation) C:\Windows\system32\vga.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002176 _____ (Microsoft Corporation) C:\Windows\system\vga.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002112 _____ (Microsoft Corporation) C:\Windows\system32\WINSPOOL.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00002080 _____ (Microsoft Corporation) C:\Windows\system32\WINOLDAP.MOD
2009-07-13 22:41 - 2009-07-13 22:41 - 00002032 _____ (Microsoft Corporation) C:\Windows\system32\mouse.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002032 _____ (Microsoft Corporation) C:\Windows\system\mouse.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002000 _____ (Microsoft Corporation) C:\Windows\system32\keyboard.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002000 _____ (Microsoft Corporation) C:\Windows\system\keyboard.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00001744 _____ (Microsoft Corporation) C:\Windows\system32\sound.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00001744 _____ (Microsoft Corporation) C:\Windows\system\sound.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00001152 _____ (Microsoft Corporation) C:\Windows\system32\mmtask.tsk
2009-07-13 22:41 - 2009-07-13 22:41 - 00001152 _____ (Microsoft Corporation) C:\Windows\system\mmtask.tsk
2009-07-13 22:41 - 2009-07-13 22:41 - 00000882 _____ () C:\Windows\system32\share.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00000882 _____ () C:\Windows\system32\fastopen.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00000718 _____ () C:\Windows\system32\mscdexnt.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00050648 _____ () C:\Windows\system32\COMMAND.COM
2009-07-13 22:40 - 2009-07-13 22:40 - 00042809 _____ () C:\Windows\system32\KEY01.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00042537 _____ () C:\Windows\system32\KEYBOARD.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00039274 _____ () C:\Windows\system32\mem.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00035776 _____ () C:\Windows\system32\NTIO411.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00035536 _____ () C:\Windows\system32\NTIO412.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00034672 _____ () C:\Windows\system32\NTIO804.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00034672 _____ () C:\Windows\system32\NTIO404.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00033952 _____ () C:\Windows\system32\NTIO.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029370 _____ () C:\Windows\system32\NTDOS411.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029274 _____ () C:\Windows\system32\NTDOS412.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029146 _____ () C:\Windows\system32\NTDOS804.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029146 _____ () C:\Windows\system32\NTDOS404.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00027866 _____ () C:\Windows\system32\NTDOS.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00027097 _____ () C:\Windows\system32\country.sys
2009-07-13 22:40 - 2009-07-13 22:40 - 00020634 _____ () C:\Windows\system32\debug.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00014710 _____ () C:\Windows\system32\KB16.COM
2009-07-13 22:40 - 2009-07-13 22:40 - 00012642 _____ () C:\Windows\system32\edlin.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00012498 _____ () C:\Windows\system32\append.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00011753 _____ () C:\Windows\system32\setver.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00009029 _____ () C:\Windows\system32\ANSI.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00008424 _____ () C:\Windows\system32\exe2bin.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00007052 _____ () C:\Windows\system32\nlsfunc.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00004768 _____ () C:\Windows\system32\HIMEM.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00001131 _____ () C:\Windows\system32\LOADFIX.COM
2009-07-13 22:38 - 2009-07-13 22:38 - 00000610 _____ () C:\Windows\system32\WdsUnattendTemplate.xml
2009-07-13 22:38 - 2009-06-10 22:41 - 00024114 _____ () C:\Windows\system32\lcptr.tbl
2009-07-13 22:34 - 2009-06-10 22:47 - 00047679 _____ () C:\Windows\system32\diskmgmt.msc
2009-07-13 22:33 - 2009-07-13 21:29 - 00000714 _____ () C:\Windows\system32\RestartManager.mof
2009-07-13 22:33 - 2009-07-13 21:29 - 00000176 _____ () C:\Windows\system32\RestartManagerUninstall.mof
2009-07-13 22:30 - 2009-06-10 22:42 - 00018832 _____ () C:\Windows\system32\v7vga.rom
2009-07-13 22:30 - 2009-06-10 22:42 - 00008191 _____ () C:\Windows\system32\bios4.rom
2009-07-13 22:30 - 2009-06-10 22:42 - 00000707 _____ () C:\Windows\_default.pif
2009-07-13 22:28 - 2009-06-10 22:31 - 00145519 _____ () C:\Windows\system32\perfmon.msc
2009-07-13 22:23 - 2009-06-10 22:48 - 00067808 _____ () C:\Windows\system32\normnfkc.nls
2009-07-13 22:23 - 2009-06-10 22:48 - 00061718 _____ () C:\Windows\system32\normnfkd.nls
2009-07-13 22:23 - 2009-06-10 22:48 - 00047076 _____ () C:\Windows\system32\normnfc.nls
2009-07-13 22:23 - 2009-06-10 22:48 - 00040566 _____ () C:\Windows\system32\normnfd.nls
2009-07-13 22:23 - 2009-06-10 22:46 - 00145640 _____ () C:\Windows\system32\devmgmt.msc
2009-07-13 22:20 - 2009-06-10 22:43 - 00144862 _____ () C:\Windows\system32\tpm.msc
2009-07-13 22:07 - 2009-07-14 02:15 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt20.dll
2009-07-13 22:07 - 2009-07-14 02:15 - 00149019 _____ (Microsoft Corporation) C:\Windows\system32\crtdll.dll
2009-07-13 22:07 - 2009-07-14 02:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\ctl3d32.dll
2009-07-13 22:04 - 2009-07-14 02:16 - 00030749 _____ (Microsoft Corporation) C:\Windows\system32\vbajet32.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00380957 _____ (Microsoft Corporation) C:\Windows\system32\expsrv.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
2009-07-13 22:04 - 2009-07-13 22:04 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.tlb
2009-07-13 22:04 - 2009-07-13 22:04 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\amcompat.tlb
2009-07-13 22:03 - 2009-07-14 02:16 - 00024603 _____ (Microsoft Corporation) C:\Windows\system32\sqlwid.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 01589248 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\system32\msjetoledb40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2009-07-13 22:03 - 2009-07-13 22:03 - 00049179 _____ (Microsoft Corporation) C:\Windows\system32\sqlwoa.dll
2009-07-13 21:34 - 2009-07-14 02:19 - 00017472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spldr.sys
2009-07-13 21:31 - 2009-06-10 22:26 - 00127213 _____ () C:\Windows\system32\ega.cpi
2009-07-13 21:30 - 2009-06-10 22:42 - 00000843 _____ () C:\Windows\system32\onlinesetup.cmd
2009-07-13 21:29 - 2009-06-10 22:42 - 00256192 _____ (Microsoft Corporation) C:\Windows\winhelp.exe
2009-07-13 21:29 - 2009-06-10 22:42 - 00221600 _____ (Microsoft Corporation) C:\Windows\system32\lanman.drv
2009-07-13 21:29 - 2009-06-10 22:42 - 00108464 _____ (Microsoft Corporation) C:\Windows\system32\netapi.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\olecli.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00082944 _____ (Microsoft Corporation) C:\Windows\system\olecli.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pmspl.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00027200 _____ (Microsoft Corporation) C:\Windows\system32\ctl3dv2.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00018896 _____ (Microsoft Corporation) C:\Windows\system32\sysedit.exe
2009-07-13 21:29 - 2009-06-10 22:42 - 00013312 _____ () C:\Windows\system32\win87em.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009936 _____ (Microsoft Corporation) C:\Windows\system32\lzexpand.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009936 _____ (Microsoft Corporation) C:\Windows\system\lzexpand.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009008 _____ (Microsoft Corporation) C:\Windows\system32\ver.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009008 _____ (Microsoft Corporation) C:\Windows\system\ver.dll
2009-07-13 21:22 - 2009-06-10 22:48 - 00196642 _____ () C:\Windows\system32\C_950.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00196642 _____ () C:\Windows\system32\C_949.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00196642 _____ () C:\Windows\system32\C_936.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00195618 _____ () C:\Windows\system32\C_10002.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00189986 _____ () C:\Windows\system32\C_1361.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00187938 _____ () C:\Windows\system32\C_20005.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00186402 _____ () C:\Windows\system32\C_20001.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00185378 _____ () C:\Windows\system32\C_20003.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00180770 _____ () C:\Windows\system32\C_20932.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00180258 _____ () C:\Windows\system32\C_20004.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00180258 _____ () C:\Windows\system32\C_20000.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00177698 _____ () C:\Windows\system32\C_20949.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00177698 _____ () C:\Windows\system32\C_10003.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00173602 _____ () C:\Windows\system32\C_20936.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00173602 _____ () C:\Windows\system32\C_20002.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00173602 _____ () C:\Windows\system32\C_10008.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00162850 _____ () C:\Windows\system32\C_932.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00162850 _____ () C:\Windows\system32\C_10001.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00139810 _____ () C:\Windows\system32\C_20261.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_874.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_869.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_866.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_865.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_864.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_863.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_862.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_861.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_860.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_858.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_857.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_855.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_852.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_850.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_775.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_737.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_720.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_437.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_875.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_870.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_708.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_500.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28605.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\c_28603.nls
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28599.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28598.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28597.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28596.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28595.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28594.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28593.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28592.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28591.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_21866.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_21027.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_21025.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20924.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20905.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20880.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20871.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20866.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20838.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20833.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20424.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20423.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20420.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20297.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20290.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20285.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20284.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20280.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20278.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20277.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20273.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20269.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20127.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20108.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20107.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20106.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20105.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1258.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1257.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1256.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1255.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1254.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1253.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1252.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1251.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1149.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1148.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1147.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1146.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1145.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1144.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1143.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1142.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1141.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1140.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1047.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1026.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10082.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10081.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10079.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10029.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10021.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10017.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10010.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10007.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10006.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10005.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10004.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10000.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_037.NLS
2009-07-13 21:22 - 2009-06-10 22:43 - 00000874 _____ () C:\Windows\system32\manage-bde.wsf
2009-06-10 22:48 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1250.NLS
2009-06-10 22:48 - 2009-06-10 22:48 - 00059342 _____ () C:\Windows\system32\normidna.nls
2009-06-10 22:48 - 2009-06-10 22:48 - 00009958 _____ () C:\Windows\system32\l_intl.nls
2009-06-10 22:46 - 2009-06-10 22:46 - 00008280 _____ () C:\Windows\system32\spcinstrumentation.man
2009-06-10 22:44 - 2009-06-10 22:44 - 03170304 _____ () C:\Windows\system32\boot.sdi
2009-06-10 22:42 - 2009-06-10 22:42 - 00069886 _____ () C:\Windows\system32\edit.com
2009-06-10 22:42 - 2009-06-10 22:42 - 00028420 _____ () C:\Windows\system32\bios1.rom
2009-06-10 22:42 - 2009-06-10 22:42 - 00021232 _____ () C:\Windows\system32\graphics.pro
2009-06-10 22:42 - 2009-06-10 22:42 - 00010790 _____ () C:\Windows\system32\EDIT.HLP
2009-06-10 22:42 - 2009-06-10 22:42 - 00004041 _____ () C:\Windows\system32\xwizard.dtd
2009-06-10 22:41 - 2009-07-14 02:15 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2009-06-10 22:41 - 2009-06-10 22:41 - 00211938 _____ () C:\Windows\system32\lcphrase.tbl
2009-06-10 22:41 - 2009-06-10 22:41 - 00094784 _____ (Twain Working Group) C:\Windows\twain.dll
2009-06-10 22:41 - 2009-06-10 22:41 - 00019216 _____ (Microsoft Corporation) C:\Windows\system32\tapi.dll
2009-06-10 22:40 - 2009-06-10 22:40 - 00000035 _____ () C:\Windows\system32\winrm.cmd
2009-06-10 22:39 - 2009-06-10 22:39 - 00060124 _____ () C:\Windows\system32\tcpmon.ini
2009-06-10 22:39 - 2009-06-10 22:39 - 00003214 _____ () C:\Windows\system32\sysprint.sep
2009-06-10 22:39 - 2009-06-10 22:39 - 00001820 _____ () C:\Windows\system32\rasctrnm.h
2009-06-10 22:39 - 2009-06-10 22:39 - 00001041 _____ () C:\Windows\system32\tcpbidi.xml
2009-06-10 22:38 - 2009-07-14 02:15 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\msvbvm60.dll
2009-06-10 22:38 - 2009-06-10 22:38 - 00113629 _____ () C:\Windows\system32\slmgr.vbs
2009-06-10 22:34 - 2009-06-10 22:34 - 00316640 _____ () C:\Windows\WMSysPr9.prx
2009-06-10 22:32 - 2009-06-10 22:32 - 00002060 _____ () C:\Windows\system32\noise.jpn
2009-06-10 22:30 - 2009-07-13 21:34 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spsys.sys
2009-06-10 22:30 - 2009-06-10 22:30 - 00022984 _____ () C:\Windows\system32\bopomofo.uce
2009-06-10 22:29 - 2009-06-10 22:29 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\stdole32.tlb
2009-06-10 22:26 - 2009-06-10 22:26 - 00673088 _____ () C:\Windows\system32\mlang.dat
2009-06-10 22:25 - 2009-06-10 22:25 - 00177856 _____ (Microsoft Corporation) C:\Windows\system32\typelib.dll
2009-06-10 22:22 - 2009-06-10 22:22 - 00061168 _____ (Microsoft Corporation) C:\Windows\system32\msacm.dll
2009-06-10 22:21 - 2009-06-10 22:21 - 00126912 _____ (Microsoft Corporation) C:\Windows\system32\msvideo.dll
2009-06-10 22:21 - 2009-06-10 22:21 - 00126912 _____ (Microsoft Corporation) C:\Windows\system\msvideo.dll
2009-06-10 22:20 - 2009-07-14 02:26 - 00159312 _____ (AMD Technologies Inc.) C:\Windows\system32\Drivers\amdsbs.sys
2009-06-10 22:20 - 2009-07-14 02:20 - 00070720 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\djsvs.sys
2009-06-10 22:20 - 2009-07-14 02:19 - 01383488 _____ (QLogic Corporation) C:\Windows\system32\Drivers\ql2300.sys
2009-06-10 22:20 - 2009-07-14 02:19 - 00141904 _____ (VIA Technologies Inc.,Ltd) C:\Windows\system32\Drivers\vsmraid.sys
2009-06-10 22:20 - 2009-07-14 02:19 - 00040016 _____ (Silicon Integrated Systems Corp.) C:\Windows\system32\Drivers\sisraid2.sys
2009-06-10 22:19 - 2013-02-19 20:32 - 15413704 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2009-06-10 22:19 - 2009-07-14 02:26 - 00422976 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\adp94xx.sys
2009-06-10 22:19 - 2009-07-14 02:20 - 00453712 _____ (Emulex) C:\Windows\system32\Drivers\elxstor.sys
2009-06-10 22:19 - 2009-07-14 02:20 - 00030800 _____ (LSI Corporation) C:\Windows\system32\Drivers\megasas.sys
2009-06-10 22:19 - 2009-06-10 22:19 - 00040552 _____ () C:\Windows\system32\gatherNetworkInfo.vbs
2009-06-10 22:18 - 2009-07-14 02:15 - 00120320 _____ (Intel Corporation.) C:\Windows\system32\ir41_qcx.dll
2009-06-10 22:18 - 2009-07-14 02:15 - 00120320 _____ (Intel Corporation.) C:\Windows\system32\ir41_qc.dll
2009-06-10 22:18 - 2009-06-10 22:18 - 00000565 _____ () C:\Windows\system32\NdfEventView.xml
2009-06-10 22:17 - 2009-07-13 23:02 - 03100160 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\evbdx.sys
2009-06-10 22:17 - 2009-07-13 23:02 - 00430080 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bxvbdx.sys
2009-06-10 22:17 - 2009-06-10 22:17 - 00004656 _____ (Microsoft Corporation) C:\Windows\system32\ds16gt.dLL
2009-06-10 22:16 - 2009-07-14 02:16 - 00180800 _____ (Microsoft Corporation) C:\Windows\system32\sqlunirl.dll
2009-06-10 22:16 - 2009-06-10 22:16 - 00002727 _____ () C:\Windows\system32\locationnotificationsview.xml
2009-06-10 22:16 - 2009-06-10 22:16 - 00002151 _____ () C:\Windows\system32\12520437.cpx
2009-06-10 22:15 - 2009-06-10 22:15 - 00076060 _____ () C:\Windows\system32\xpsrchvw.xml
2009-06-10 22:14 - 2009-06-10 22:14 - 03440660 _____ () C:\Windows\system32\Drivers\gm.dls
2005-04-06 16:28 - 2005-04-06 16:28 - 00061440 _____ () C:\Windows\system32\xvid.ax
2005-04-06 16:27 - 2005-04-06 16:27 - 00237568 _____ () C:\Windows\system32\xvidvfw.dll
2005-04-06 16:24 - 2005-04-06 16:24 - 01216512 _____ () C:\Windows\system32\xvidcore.dll
2005-01-31 09:18 - 2005-01-31 09:18 - 00372736 _____ (Logitech Inc.) C:\Windows\system32\LVUI2RC.dll
2005-01-31 09:13 - 2005-01-31 09:13 - 00163328 _____ () C:\Windows\system32\Drivers\LV532AV.SYS
2005-01-31 09:12 - 2005-01-31 09:12 - 00022016 _____ (Logitech Inc.) C:\Windows\system32\Drivers\LVUSBSta.sys
2005-01-31 09:10 - 2005-01-31 09:10 - 00204800 _____ (Logitech Inc.) C:\Windows\system32\LVUI2.dll
2005-01-31 09:08 - 2005-01-31 09:08 - 00204800 _____ (Logitech Inc.) C:\Windows\system32\lvcodec2.dll
2005-01-31 09:00 - 2005-01-31 09:00 - 00106496 _____ (Logitech Inc.) C:\Windows\system32\lvcoinst.dll
2005-01-31 07:37 - 2005-01-31 07:37 - 00009255 _____ () C:\Windows\system32\lvcoinst.ini
2003-04-18 15:29 - 2003-04-18 15:29 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\msxml4r.dll
2002-03-04 09:16 - 2002-03-04 09:16 - 00110592 ____R () C:\Windows\system32\Jpeg32.dll
2002-02-13 14:35 - 2002-02-13 14:35 - 00000000 _____ () C:\Windows\system32\Biport
2002-01-01 20:28 - 2002-01-01 20:30 - 00011778 _____ () C:\Users\Mex\Desktop\FRST.txt
2002-01-01 20:28 - 2002-01-01 20:28 - 00000000 ____D () C:\FRST
2002-01-01 20:27 - 2002-01-01 20:27 - 01141248 _____ (Farbar) C:\Users\Mex\Desktop\FRST.exe
2002-01-01 05:35 - 2002-01-01 05:35 - 00000893 _____ () C:\Users\Mex\Desktop\eset.txt
2002-01-01 04:08 - 2002-01-01 04:08 - 02347384 _____ (ESET) C:\Users\Mex\Downloads\esetsmartinstaller_deu.exe
2002-01-01 04:08 - 2002-01-01 04:08 - 00000000 ____D () C:\Program Files\ESET
2002-01-01 01:42 - 2002-01-01 01:42 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Mex\Desktop\tdsskiller.exe
2002-01-01 01:41 - 2002-01-01 03:30 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2002-01-01 01:41 - 2002-01-01 01:41 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2002-01-01 01:40 - 2002-01-01 03:29 - 00000000 ____D () C:\Users\Mex\Desktop\mbar
2002-01-01 01:40 - 2002-01-01 01:40 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Mex\Downloads\mbar-1.09.1.1004.exe
2002-01-01 01:40 - 2002-01-01 01:40 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2002-01-01 01:39 - 2002-01-01 01:39 - 00561248 _____ (Oracle Corporation) C:\Users\Mex\Downloads\jxpiinstall.exe
2001-12-31 23:53 - 2001-12-31 23:53 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Avira
2001-12-31 23:52 - 2001-12-31 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2001-12-31 23:51 - 2015-03-17 13:02 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2001-12-31 23:51 - 2015-03-17 13:01 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2001-12-31 23:51 - 2015-03-17 13:01 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2001-12-31 23:51 - 2015-03-17 13:01 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2001-12-31 23:51 - 2001-12-31 23:51 - 00000000 ____D () C:\ProgramData\Avira
2001-12-31 23:51 - 2001-12-31 23:51 - 00000000 ____D () C:\Program Files\Avira
2001-12-31 23:48 - 2001-12-31 23:50 - 165283560 _____ () C:\Users\Mex\Downloads\avira_free_antivirus_de_15.0.9.504.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)


Some content of TEMP:
====================
C:\Users\Mex\AppData\Local\Temp\AskSLib.dll
C:\Users\Mex\AppData\Local\Temp\avgnt.exe
C:\Users\Mex\AppData\Local\Temp\iv_uninstall.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Mex\AppData\Local\Temp\ose00000.exe
C:\Users\Mex\AppData\Local\Temp\proxy_vole2583229197283602247.dll
C:\Users\Mex\AppData\Local\Temp\Quarantine.exe
C:\Users\Mex\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Mex\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Mex\AppData\Local\Temp\sqlite3.dll
C:\Users\Mex\AppData\Local\Temp\tmd_34011736.exe
C:\Users\Mex\AppData\Local\Temp\tmd_34015858.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-04 10:01

==================== End Of Log ============================
         

zu meinem desktop pc.
ich transportiere ihn alle paar tage von a nach b. kann das mit meinem problem zusammenhängen? nach dem transport heute kam beim hochfahren wieder der bildschirm bei dem ich f1 drücken sollte um weiter zu kommen genau wie beim letzten mal. ich habe diesmal erkannt das er auf die csmo batterie und das datum hingwiesen hat. durch f1 bin ich dann nicht ins bios wie beim ertsen mal gedacht gekommen sondern anscheinend in ein menü für die batterie bzw. uhr. kann ich die batterie einfach rausnehmen und mir im supermarkt eine identische holen oder bekomm ich sowas nur im fachmarkt oder internet?

Die bekommste überall. Aber erst ausbauen wenn die neue da ist, die muss innerhalb 30 sekunden getauscht sein,.


Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 01.01.2002
Suchlauf-Zeit: 20:10:02
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.05.14.04
Rootkit Datenbank: v2015.04.21.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Mex

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 364884
Verstrichene Zeit: 22 Min, 43 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         

# AdwCleaner v4.204 - Bericht erstellt 01/01/2002 um 20:41:22
# Aktualisiert 12/05/2015 von Xplode
# Datenbank : 2015-05-12.2 [Server]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (x86)
# Benutzername : Mex - MEX-PC
# Gestarted von : C:\Users\Mex\Desktop\AdwCleaner_4.204.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17728


-\\ Mozilla Firefox v37.0.2 (x86 de)


*************************

AdwCleaner[R0].txt - [2095 Bytes] - [07/05/2015 15:14:09]
AdwCleaner[R1].txt - [900 Bytes] - [01/01/2002 20:39:28]
AdwCleaner[S0].txt - [1940 Bytes] - [07/05/2015 15:15:33]
AdwCleaner[S1].txt - [821 Bytes] - [01/01/2002 20:41:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [879  Bytes] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.1 (05.14.2015:1)
OS: Windows 7 Ultimate x86
Ran by Mex on 01.01.2002 at 20:46:39,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.01.2002 at 20:48:32,46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-05-2015 01
Ran by Mex (administrator) on MEX-PC on 01-01-2002 20:54:02
Running from C:\Users\Mex\Desktop
Loaded Profiles: Mex (Available profiles: Mex & UpdatusUser)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [APSDaemon] => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [SSBkgdUpdate] => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [155648 2003-10-14] (Scansoft, Inc.)
HKLM\...\Run: [PaperPort PTD] => C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [57393 2005-03-17] (ScanSoft, Inc.)
HKLM\...\Run: [IndexSearch] => C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [40960 2005-03-17] (ScanSoft, Inc.)
HKLM\...\Run: [BrMfcWnd] => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM\...\Run: [ControlCenter3] => C:\Program Files\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM\...\Run: [PowerDVD13Agent] => C:\Program Files\CyberLink\PowerDVD13\PowerDVD13Agent.exe [513048 2013-03-20] (CyberLink Corp.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2014-02-07] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [704512 2015-03-17] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3692795522-2443571778-2170560698-1000\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-3692795522-2443571778-2170560698-1000\...\Run: [Spotify Web Helper] => C:\Users\Mex\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-22] (Spotify Ltd)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-04-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mex\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mex\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Mex\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll [2013-09-11] (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Mex\AppData\Roaming\Mozilla\Firefox\Profiles\ktjfex7a.default-1424108997824
FF Homepage: google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2013-02-25] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-12-19] (Nero AG)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2013-02-25] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-04-11] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3692795522-2443571778-2170560698-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2013-02-25] (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-25]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2015-03-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2015-03-17] (Avira Operations GmbH & Co. KG)
S2 Brother XP spl Service; C:\Windows\system32\brsvc01a.exe [57344 2004-06-13] (brother Industries Ltd)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-03-20] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [323336 2013-03-20] (CyberLink)
S2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
S2 RealtekCU; C:\Program Files\REALTEK\USB Wireless LAN Utility\RtlService.exe [36864 2012-05-10] (Realtek Semiconductor Corp.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1564160 2010-10-11] (Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-03-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-03-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2015-03-17] (Avira Operations GmbH & Co. KG)
R3 LVUSBSta; C:\Windows\System32\DRIVERS\LVUSBSta.sys [22016 2005-01-31] (Logitech Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl.sys [18432 2012-09-10] (Apple Inc.) [File not signed]
S3 PID_0920; C:\Windows\System32\DRIVERS\LV532AV.SYS [163328 2005-01-31] ()
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1345168 2012-11-07] (Realtek Semiconductor Corporation                           )
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2015-03-17] (Avira GmbH)
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2012-12-13] (Apple, Inc.) [File not signed]
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [76560 2013-03-19] (CyberLink Corp.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-07 15:55 - 2015-05-07 15:55 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-MEX-PC-Windows-7-Ultimate-(32-bit).dat
2015-05-07 15:55 - 2015-05-07 15:55 - 00000000 ____D () C:\RegBackup
2015-05-07 15:35 - 2002-01-01 01:42 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-07 15:14 - 2002-01-01 20:41 - 00000000 ____D () C:\AdwCleaner
2015-05-07 15:06 - 2015-05-07 15:06 - 02716843 _____ (Thisisu) C:\Users\Mex\Downloads\JRT.exe
2015-05-07 15:05 - 2015-05-07 15:07 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Mex\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-07 15:05 - 2015-05-07 15:05 - 02204160 _____ () C:\Users\Mex\Downloads\AdwCleaner_4.203.exe
2015-05-04 10:30 - 2015-05-04 10:30 - 00000000 ____D () C:\Users\Mex\restore
2015-05-04 10:10 - 2015-05-04 10:46 - 00000000 ____D () C:\ProgramData\tmp
2015-05-04 10:10 - 2015-05-04 10:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\dm-Fotowelt
2015-05-04 10:10 - 2015-05-04 10:10 - 00000000 ____D () C:\ProgramData\hps
2015-05-04 09:31 - 2015-05-04 09:31 - 01627112 _____ () C:\Users\Mex\Downloads\setup_dm_Fotowelt.exe
2015-04-25 13:46 - 2015-04-25 13:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-16 18:23 - 2015-04-16 18:23 - 18178736 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2015-04-14 21:32 - 2015-04-02 00:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-14 21:32 - 2015-03-13 04:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-14 21:32 - 2015-03-13 04:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-14 21:32 - 2015-03-13 04:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-14 21:32 - 2015-03-13 04:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-14 21:32 - 2015-03-13 04:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-14 21:32 - 2015-03-13 04:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-14 21:32 - 2015-03-13 04:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-14 21:32 - 2015-03-13 04:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-14 21:32 - 2015-03-13 04:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-14 21:32 - 2015-03-13 04:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-14 21:32 - 2015-03-13 04:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-14 21:32 - 2015-03-13 04:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-14 21:32 - 2015-03-13 04:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-14 21:32 - 2015-03-13 03:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-14 21:32 - 2015-03-13 03:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-14 21:32 - 2015-03-13 03:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-14 21:32 - 2015-03-13 03:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-14 21:32 - 2015-03-13 03:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-14 21:32 - 2015-03-13 03:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-14 21:32 - 2015-03-13 03:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-14 21:32 - 2015-03-13 03:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-14 21:31 - 2015-03-23 04:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-14 21:31 - 2015-03-23 04:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-14 21:31 - 2015-03-23 04:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-14 21:31 - 2015-03-23 04:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-14 21:31 - 2015-03-23 04:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-14 21:31 - 2015-03-23 04:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-14 21:31 - 2015-03-23 04:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-14 21:31 - 2015-03-23 03:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-14 21:31 - 2015-03-17 06:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-14 21:31 - 2015-03-17 06:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-14 21:31 - 2015-03-17 06:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-14 21:31 - 2015-03-17 06:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-14 21:31 - 2015-03-17 05:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-14 21:31 - 2015-03-17 05:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-14 21:31 - 2015-03-17 05:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-14 21:31 - 2015-03-17 05:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-14 21:31 - 2015-03-17 05:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-14 21:31 - 2015-03-17 05:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-14 21:31 - 2015-03-17 05:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-14 21:31 - 2015-03-17 05:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-14 21:31 - 2015-03-17 05:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-14 21:31 - 2015-03-17 05:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-14 21:31 - 2015-03-17 05:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-14 21:31 - 2015-03-17 05:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-14 21:31 - 2015-03-13 04:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-14 21:31 - 2015-03-13 04:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-14 21:31 - 2015-03-13 04:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-14 21:31 - 2015-03-13 04:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-14 21:31 - 2015-03-13 04:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-14 21:31 - 2015-03-13 03:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-14 21:31 - 2015-03-13 03:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-14 21:31 - 2015-03-13 03:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-14 21:31 - 2015-03-13 03:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-14 21:31 - 2015-03-04 05:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-14 21:31 - 2015-03-04 05:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-14 21:30 - 2015-03-25 04:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-14 21:30 - 2015-03-25 04:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-14 21:30 - 2015-03-25 04:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-14 21:30 - 2015-03-05 05:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-14 21:30 - 2015-02-25 04:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-14 21:29 - 2015-03-10 04:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-14 21:29 - 2015-03-10 04:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-09 17:12 - 2015-05-07 15:13 - 00000000 ____D () C:\Users\Mex\Desktop\Thesis
2015-04-07 21:13 - 2015-04-07 21:13 - 00000000 ___SD () C:\Windows\system32\GWX
2015-03-20 19:40 - 2015-03-26 22:38 - 00000000 ____D () C:\Users\Mex\Desktop\cd
2015-03-11 17:53 - 2015-02-26 04:11 - 02381312 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 17:53 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 17:53 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 17:53 - 2015-01-31 04:32 - 00919552 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-03-11 17:53 - 2015-01-31 03:52 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2015-03-11 17:53 - 2015-01-31 03:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2015-03-11 17:53 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 17:52 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 17:52 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 17:52 - 2015-02-20 05:13 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 17:52 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 17:52 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 17:52 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 17:52 - 2015-02-03 04:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 17:52 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 17:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 17:52 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 17:52 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 17:52 - 2015-02-03 04:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 17:52 - 2015-02-03 04:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 17:52 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 17:52 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 17:52 - 2015-02-03 04:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 17:52 - 2015-02-03 04:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 17:52 - 2015-02-03 04:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 17:52 - 2015-02-03 04:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 17:52 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 17:52 - 2015-02-03 04:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 17:52 - 2015-02-03 03:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 17:52 - 2015-01-31 00:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 17:52 - 2014-10-31 23:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 17:52 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-03-11 17:52 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-03-04 19:39 - 2015-03-04 19:39 - 00000000 ____D () C:\Users\Mex\AppData\Local\TGE
2015-03-04 19:36 - 2015-03-04 19:37 - 44631824 _____ (Telefónica Germany GmbH & Co. OHG ) C:\Users\Mex\Downloads\dsl_soforthilfe.exe
2015-03-01 21:56 - 2015-01-09 00:44 - 00419936 _____ () C:\Windows\system32\locale.nls
2015-02-16 21:17 - 2015-05-10 19:28 - 00000053 _____ () C:\Users\Mex\Desktop\neue pws.txt
2015-02-16 18:53 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll
2015-02-16 18:53 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll
2015-02-16 18:53 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll
2015-02-16 18:48 - 2015-01-28 00:36 - 01167520 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-02-16 18:48 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-02-16 18:48 - 2014-10-04 02:42 - 03221504 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-02-16 18:48 - 2014-10-04 02:42 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2015-02-16 18:45 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-02-04 11:23 - 2015-02-04 11:23 - 00875688 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2015-01-31 19:32 - 2015-01-31 19:33 - 34792128 _____ (DVDVideoSoft Ltd. ) C:\Users\Mex\Downloads\FreeYouTubeToMP354Converter.exe
2015-01-25 17:19 - 2015-01-25 17:19 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-01-16 12:08 - 2015-01-16 12:08 - 00000000 ____D () C:\Users\Mex\AppData\Local\WinZip
2015-01-16 12:07 - 2015-01-16 12:07 - 00000000 ____D () C:\ProgramData\WinZip
2015-01-16 12:07 - 2015-01-16 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2015-01-16 12:07 - 2015-01-16 12:07 - 00000000 ____D () C:\Program Files\WinZip
2015-01-16 12:00 - 2015-01-16 12:02 - 62967296 _____ () C:\Users\Mex\Downloads\wz190gev-64.msi
2015-01-16 11:51 - 2015-01-16 11:51 - 07559454 _____ () C:\Users\Mex\Downloads\marketing.zip
2015-01-14 01:57 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 01:57 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-14 01:57 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 01:57 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-12-22 18:40 - 2015-01-04 14:32 - 00000000 ____D () C:\Users\Mex\AppData\Local\Spotify
2014-12-22 18:40 - 2014-12-22 18:40 - 00001779 _____ () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-12-22 18:39 - 2015-01-06 13:06 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Spotify
2014-12-22 18:37 - 2015-01-03 20:12 - 00000000 ____D () C:\Users\Mex\AppData\Local\Google
2014-12-22 18:37 - 2015-01-03 20:12 - 00000000 ____D () C:\Program Files\Google
2014-12-22 18:36 - 2014-12-22 18:36 - 00880784 _____ (Google Inc.) C:\Users\Mex\Downloads\ChromeSetup.exe
2014-12-22 18:36 - 2014-12-22 18:36 - 00137888 _____ (Spotify Ltd) C:\Users\Mex\Downloads\SpotifySetup.exe
2014-12-14 17:27 - 2015-04-15 19:06 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-11 08:42 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-11 08:41 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-11 08:41 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-11 08:41 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-11 08:41 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-11 08:41 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-11 08:41 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-11 08:41 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-11-26 10:12 - 2014-11-26 10:12 - 00000809 _____ () C:\Users\Mex\Downloads\032021.xml
2014-11-26 10:12 - 2014-11-26 10:12 - 00000000 __SHD () C:\Users\Mex\AppData\Local\EmieUserList
2014-11-26 10:12 - 2014-11-26 10:12 - 00000000 __SHD () C:\Users\Mex\AppData\Local\EmieSiteList
2014-11-26 10:12 - 2014-11-26 10:12 - 00000000 __SHD () C:\Users\Mex\AppData\Local\EmieBrowserModeList
2014-11-19 14:07 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-17 13:03 - 2014-11-17 13:03 - 01125200 _____ () C:\Users\Mex\Downloads\Image Resizer - CHIP-Installer.exe
2014-11-17 13:00 - 2014-11-18 08:52 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\IrfanView
2014-11-17 13:00 - 2014-11-17 13:00 - 02197648 _____ (Irfan Skiljan) C:\Users\Mex\Downloads\iview438g_setup.exe
2014-11-17 12:17 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\system32\dhRichClient3.dll
2014-11-17 12:17 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\system32\sqlite36_engine.dll
2014-11-17 12:16 - 2014-11-17 12:17 - 01125200 _____ () C:\Users\Mex\Downloads\Free Image Convert and Resize - CHIP-Installer.exe
2014-11-12 09:58 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 09:57 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 09:57 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 09:57 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-10 16:38 - 2014-11-10 16:38 - 00000135 _____ () C:\Windows\system32\debug.log
2014-10-16 19:44 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 19:44 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 19:44 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-16 19:44 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 19:44 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 19:44 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 19:44 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 19:44 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 19:44 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 19:44 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 20:38 - 2014-10-15 20:38 - 00000000 ____D () C:\Windows\Sun
2014-10-15 20:38 - 2014-10-15 20:38 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Oracle
2014-10-15 20:05 - 2015-01-25 17:18 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-15 20:04 - 2015-01-25 17:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-15 20:04 - 2015-01-25 17:18 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-15 20:04 - 2015-01-25 17:18 - 00176552 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-15 20:04 - 2015-01-25 17:18 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-09 19:24 - 2014-10-09 20:31 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\TeamViewer
2014-10-09 19:24 - 2014-10-09 19:24 - 00001020 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-10-09 18:55 - 2014-10-09 18:56 - 00000000 ___RD () C:\Program Files\Skype
2014-10-09 18:55 - 2014-10-09 18:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-09 18:55 - 2014-10-09 18:55 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-10-09 18:47 - 2014-10-09 18:47 - 01125200 _____ () C:\Users\Mex\Downloads\Skype - CHIP-Installer.exe
2014-09-30 22:54 - 2014-09-30 22:55 - 00004611 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-09-30 22:51 - 2015-04-24 20:36 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Skype
2014-09-30 22:51 - 2014-11-17 13:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-09-30 22:51 - 2014-09-30 22:51 - 00000000 ____D () C:\Users\Mex\AppData\Local\Skype
2014-09-30 22:50 - 2014-12-03 19:50 - 00000000 ____D () C:\ProgramData\Skype
2014-09-30 22:50 - 2014-11-17 13:04 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-09-11 20:14 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-11 18:20 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-11 18:20 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 19:59 - 2014-09-10 20:01 - 01054912 _____ (Adobe) C:\Users\Mex\Downloads\install_flashplayer15x32au_mssa_aaa_aih.exe
2014-08-14 18:17 - 2014-08-14 18:18 - 01058200 _____ (Adobe) C:\Users\Mex\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-08-12 20:59 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-12 20:59 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-12 20:59 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-12 20:59 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-12 19:52 - 2014-07-14 02:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-12 19:52 - 2014-06-16 02:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-12 19:52 - 2014-06-16 02:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-12 19:52 - 2014-06-16 02:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-12 19:51 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-12 19:51 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-12 19:51 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-12 19:51 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-12 19:51 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-12 19:51 - 2014-06-03 10:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-12 19:51 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-12 19:51 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-11 19:50 - 2002-01-01 20:43 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-08-11 17:35 - 2014-08-11 17:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REALTEK USB Wireless LAN Utility
2014-08-11 17:35 - 2014-08-11 17:35 - 00000000 ____D () C:\Program Files\Cisco
2014-08-11 17:34 - 2012-11-07 08:34 - 01345168 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTWlanU.sys
2014-08-11 17:34 - 2012-09-25 15:25 - 00405504 _____ (Realtek) C:\Windows\SwUSB.exe
2014-08-11 17:34 - 2012-09-20 09:00 - 00036864 _____ () C:\Windows\runSW.exe
2014-08-11 17:34 - 2012-02-14 18:37 - 00535040 _____ (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
2014-08-11 17:34 - 2010-12-01 08:31 - 00451072 _____ () C:\Windows\system32\ISSRemoveSP.exe
2014-08-11 17:34 - 2009-03-31 13:31 - 00380928 _____ (Realtek) C:\Windows\RtlUI2.exe
2014-08-11 17:34 - 2009-01-05 19:31 - 00000901 _____ () C:\Windows\RtlUI2.exe.manifest
2014-08-11 17:34 - 2007-04-26 13:05 - 00100000 _____ () C:\Windows\system32\EAPPkt9x.VXD
2014-08-11 17:34 - 2001-09-26 10:03 - 00012981 _____ () C:\Windows\system32\REALPKT.VXD
2014-08-11 17:33 - 2014-08-11 17:33 - 00000000 ____D () C:\Program Files\REALTEK
2014-08-02 08:26 - 2014-08-02 08:26 - 00000000 ____D () C:\output
2014-07-30 13:12 - 2014-07-30 13:12 - 00000000 ____D () C:\Users\Mex\Documents\SelfMV
2014-07-30 13:08 - 2014-06-16 07:01 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-07-30 13:08 - 2014-06-16 07:01 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-07-30 13:07 - 2014-05-07 16:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\system32\secman.dll
2014-07-30 11:16 - 2014-07-30 11:16 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-07-30 10:48 - 2014-07-30 13:07 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Samsung
2014-07-30 10:48 - 2014-07-30 10:48 - 00000000 ____D () C:\Users\Public\Documents\NativeFus_Log
2014-07-30 10:48 - 2014-07-30 10:48 - 00000000 ____D () C:\Users\Mex\AppData\Local\Samsung
2014-07-30 10:47 - 2014-07-30 10:47 - 00000000 ____D () C:\Users\Mex\Documents\samsung
2014-07-30 10:45 - 2014-07-30 13:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-07-30 10:45 - 2014-02-07 15:33 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\system32\Redemption.dll
2014-07-30 10:45 - 2014-01-23 17:31 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\system32\dgderapi.dll
2014-07-30 10:44 - 2014-07-30 13:07 - 00000000 ____D () C:\Program Files\Samsung
2014-07-30 10:44 - 2014-07-30 10:46 - 00000000 ____D () C:\ProgramData\Samsung
2014-07-30 10:43 - 2014-07-30 10:43 - 00000000 ____D () C:\Users\Mex\AppData\Local\Downloaded Installations
2014-07-30 10:40 - 2014-07-30 10:43 - 75211320 _____ (Samsung Electronics Co., Ltd.) C:\Users\Mex\Downloads\KiesSetup.exe
2014-07-11 11:11 - 2014-07-11 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-07-11 11:11 - 2014-07-11 11:11 - 00000000 ____D () C:\Program Files\MyDrive Connect
2014-07-09 19:50 - 2014-11-17 13:05 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-07-09 18:11 - 2014-07-09 18:14 - 34488000 _____ (DVDVideoSoft Ltd. ) C:\Users\Mex\Downloads\FreeYouTubeToMP3Converter.exe
2014-07-09 14:32 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 14:32 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 14:32 - 2014-05-30 07:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-07 20:55 - 2014-07-07 20:56 - 33255536 _____ (DVDVideoSoft Ltd. ) C:\Users\Mex\Downloads\FreeAVIVideoConverter.exe
2014-07-07 20:25 - 2014-07-07 20:28 - 55880192 _____ () C:\Users\Mex\Downloads\wz185gev-32.msi
2014-06-25 18:31 - 2014-06-25 18:31 - 27843432 _____ (pdfforge ) C:\Users\Mex\Downloads\PDFCreator-1_7_3_setup.exe
2014-06-21 14:16 - 2014-07-11 11:11 - 00000000 ____D () C:\Users\Mex\AppData\Local\TomTom
2014-06-21 14:16 - 2014-06-21 14:16 - 00000000 ____D () C:\Program Files\TomTom International B.V
2014-06-20 15:17 - 2015-03-19 18:37 - 00000000 ____D () C:\Users\Mex\AppData\Local\Adobe
2014-06-11 08:01 - 2014-09-01 07:22 - 00010240 ____H () C:\Users\Mex\Desktop\photothumb.db
2014-06-11 08:00 - 2014-08-02 08:19 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\PhotoScape
2014-06-10 22:16 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-10 22:16 - 2014-04-05 03:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-10 22:16 - 2014-04-05 03:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-10 22:16 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-10 22:16 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-05 17:10 - 2014-06-05 17:10 - 00208390 _____ () C:\Users\Mex\Downloads\FRITZ.Box 7312 (UI) 117.06.03_01.01.70_0150.export
2014-05-30 14:37 - 2014-12-10 15:22 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-30 14:36 - 2014-05-30 14:37 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-05-30 14:36 - 2014-05-30 14:36 - 00000000 ____D () C:\Program Files\Adobe
2014-05-29 11:48 - 2014-06-25 18:44 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-05-29 11:46 - 2014-06-25 18:44 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-05-14 17:37 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 17:37 - 2014-03-04 10:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 17:37 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 17:37 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 17:37 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 17:37 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 17:37 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 17:37 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-12 20:44 - 2014-05-12 20:44 - 00000000 ___RD () C:\Users\Mex\AppData\Roaming\Brother
2014-05-11 23:54 - 2015-04-15 19:06 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-28 22:30 - 2014-04-28 22:30 - 00004241 _____ () C:\Windows\system32\jupdate-1.7.0_55-b14.log
2014-04-15 19:29 - 2014-04-15 19:29 - 00150560 _____ () C:\Windows\Minidump\041514-21484-01.dmp
2014-04-15 19:29 - 2014-04-15 19:29 - 00000000 ____D () C:\Windows\Minidump
2014-04-15 19:28 - 2014-04-15 19:28 - 169921619 _____ () C:\Windows\MEMORY.DMP
2014-04-11 23:08 - 2014-04-11 23:08 - 00536768 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2014-04-11 23:08 - 2014-04-11 23:08 - 00028352 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2014-04-11 23:08 - 2014-04-11 23:08 - 00018088 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110_clr0400.dll
2014-04-11 23:08 - 2014-04-11 23:08 - 00018088 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2014-04-11 23:08 - 2014-04-11 23:08 - 00018088 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110_clr0400.dll
2014-04-09 07:45 - 2014-03-04 10:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 07:45 - 2014-02-04 03:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 07:45 - 2014-02-04 03:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 07:45 - 2014-02-04 03:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 07:45 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 07:45 - 2014-01-24 03:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-03-14 14:31 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-14 14:31 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-02-12 13:03 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 13:03 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 13:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 13:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 13:03 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 13:03 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 13:03 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 13:03 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 13:03 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:02 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-03 14:01 - 2015-01-25 17:20 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-03 14:00 - 2014-02-03 14:01 - 00005921 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-01-23 17:31 - 2014-01-23 17:31 - 00974848 _____ () C:\Windows\system32\cis-2.4.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00569344 _____ ((c) MusicCity) C:\Windows\system32\muzdecode.ax
2014-01-23 17:31 - 2014-01-23 17:31 - 00491520 _____ (Musiccity Co.Ltd.) C:\Windows\system32\muzapp.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00352256 _____ (Sample Corporation) C:\Windows\system32\MSLUR71.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00330240 _____ ((주)마크애니) C:\Windows\MASetupCaller.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00258048 _____ ((c) PeeringPortal) C:\Windows\system32\muzoggsp.ax
2014-01-23 17:31 - 2014-01-23 17:31 - 00245760 _____ (Teruten Inc.) C:\Windows\system32\MSCLib.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00200704 _____ ( (c) MusicCity) C:\Windows\system32\muzwmts.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00172032 _____ (Musiccity Co.Ltd.) C:\Windows\system32\muzapp.exe
2014-01-23 17:31 - 2014-01-23 17:31 - 00155648 _____ (Teruten Inc.) C:\Windows\system32\MSFLib.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00143360 _____ () C:\Windows\system32\3DAudio.ax
2014-01-23 17:31 - 2014-01-23 17:31 - 00135168 _____ (Musiccity Co.Ltd.) C:\Windows\system32\muzaf1.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00131072 _____ ((c) MusicCity) C:\Windows\system32\muzmpgsp.ax
2014-01-23 17:31 - 2014-01-23 17:31 - 00122880 _____ ((c) MUSICCITY) C:\Windows\system32\muzeffect.ax
2014-01-23 17:31 - 2014-01-23 17:31 - 00118784 _____ ((주)마크애니) C:\Windows\system32\MaDRM.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00110592 _____ ((c) MusicCity) C:\Windows\system32\muzmp4sp.ax
2014-01-23 17:31 - 2014-01-23 17:31 - 00090112 _____ ((주)마크애니) C:\Windows\MAMCityDownload.ocx
2014-01-23 17:31 - 2014-01-23 17:31 - 00081920 _____ () C:\Windows\system32\issacapi_bs-2.3.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00065536 _____ () C:\Windows\system32\issacapi_pe-2.3.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00057344 _____ (Marktek) C:\Windows\system32\MK_Lyric.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00057344 _____ (Marktek Inc.) C:\Windows\system32\MTXSYNCICON.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00057344 _____ () C:\Windows\system32\issacapi_se-2.3.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00049152 _____ ((주) 마크애니) C:\Windows\system32\MaJGUILib.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00045320 _____ (MARKANY) C:\Windows\system32\MAMACExtract.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00045056 _____ ((주) 마크애니) C:\Windows\system32\MaXMLProto.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00045056 _____ ((주) 마크애니) C:\Windows\system32\MACXMLProto.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00040960 _____ (Telechips Inc.,) C:\Windows\system32\MTTELECHIP.dll
2014-01-23 17:31 - 2014-01-23 17:31 - 00030568 _____ () C:\Windows\MusiccityDownload.exe
2014-01-23 17:31 - 2014-01-23 17:31 - 00024576 _____ ((주)마크애니) C:\Windows\system32\MASetupCleaner.exe
2014-01-18 12:05 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-18 12:04 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-18 12:04 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-18 12:04 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-18 12:04 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-18 12:04 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-18 12:04 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-18 12:04 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-13 21:52 - 2013-12-13 21:52 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-13 21:52 - 2013-12-13 21:52 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-13 21:52 - 2013-12-13 21:52 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-13 21:52 - 2013-12-13 21:52 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-13 21:52 - 2013-12-13 21:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-13 21:52 - 2013-12-13 21:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-13 21:52 - 2013-12-13 21:52 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-13 21:52 - 2013-12-13 21:52 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-13 21:52 - 2013-12-13 21:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-13 21:51 - 2013-12-13 21:55 - 00010261 _____ () C:\Windows\IE11_main.log
2013-12-13 14:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-13 14:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-13 14:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-13 14:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-13 14:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-13 14:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-13 14:38 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-13 14:38 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-11-22 15:22 - 2013-11-22 15:22 - 00000000 ____D () C:\ProgramData\McAfee
2013-11-17 17:59 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-17 17:59 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-17 17:59 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-17 17:59 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-17 17:59 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-10-10 20:20 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 20:20 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 20:20 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 20:20 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 20:20 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 20:20 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 20:20 - 2013-07-12 11:07 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-10 20:20 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 20:20 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 20:20 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 20:20 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-10 20:20 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 20:20 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 20:20 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-07 09:27 - 2014-02-19 17:06 - 00000000 ___RD () C:\Users\Mex\Dropbox
2013-10-07 09:25 - 2014-02-07 13:38 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-07 09:24 - 2014-02-19 17:06 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Dropbox
2013-09-19 14:49 - 2014-07-07 23:19 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\vlc
2013-09-16 16:00 - 2013-09-16 16:00 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_netaapl_01009.Wdf
2013-09-12 23:26 - 2015-04-14 21:35 - 00000000 ____D () C:\Windows\system32\MRT
2013-09-12 15:01 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-09-12 15:00 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-12 15:00 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-12 15:00 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 15:00 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 15:00 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-07-31 16:31 - 2013-07-31 16:31 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XviD
2013-07-31 16:31 - 2013-07-31 16:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XviD
2013-07-31 16:31 - 2013-07-31 16:31 - 00000000 ____D () C:\Program Files\XviD
2013-07-31 16:02 - 2015-01-25 17:20 - 00000000 ____D () C:\Program Files\Java
2013-07-29 15:14 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-08 12:36 - 2013-07-08 12:36 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Canneverbe Limited
2013-07-08 12:36 - 2013-07-08 12:36 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2013-07-04 17:52 - 2013-07-04 17:52 - 00034064 _____ (Microsoft Corporation) C:\Windows\system32\lhacm.acm
2013-07-04 17:52 - 2013-07-04 17:52 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\teamspeak2
2013-07-04 17:51 - 2013-07-04 17:52 - 00000000 ____D () C:\Program Files\Teamspeak2_RC2
2013-07-04 17:51 - 2013-07-04 17:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teamspeak2 RC2
2013-07-04 16:25 - 2013-07-04 16:25 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\FreeHideIP
2013-07-04 16:25 - 2013-07-04 16:25 - 00000000 ____D () C:\ProgramData\FreeHideIP
2013-06-16 11:30 - 2013-06-29 15:37 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2013
2013-06-16 11:30 - 2013-06-16 11:30 - 00000000 __SHD () C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-06-16 11:30 - 2013-06-16 11:30 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\TuneUp Software
2013-06-16 11:30 - 2013-06-16 11:30 - 00000000 ____D () C:\ProgramData\TuneUp Software
2013-06-15 09:21 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-06-15 09:21 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-15 09:21 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-06-15 09:20 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-15 09:20 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-06-03 11:04 - 2013-06-03 11:04 - 00002713 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk
2013-06-03 11:04 - 2013-06-03 11:04 - 00000000 ____D () C:\Program Files\MSECache
2013-05-19 00:03 - 2013-05-19 00:18 - 114041379 _____ () C:\Users\Mex\Downloads\Nero.Burning.ROM.v12.5.01100.Multilingual-P2P.rar
2013-05-18 09:25 - 2013-05-18 09:26 - 00000000 ____D () C:\spiele
2013-05-18 09:25 - 2013-05-18 09:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2013-05-18 09:23 - 2013-05-18 09:23 - 00000000 ____D () C:\Windows\system32\appmgmt
2013-05-18 09:22 - 2014-06-25 20:50 - 00000000 ____D () C:\Program Files\Common Files\Steam
2013-05-17 14:16 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-05-17 14:16 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-05-17 14:06 - 2013-05-17 14:06 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\CyberLink
2013-05-17 14:06 - 2013-05-17 14:06 - 00000000 ____D () C:\Users\Mex\AppData\Local\Cyberlink SoftDMA
2013-05-13 12:39 - 2013-05-13 12:39 - 00003991 _____ () C:\Windows\system32\jupdate-1.7.0_21-b11.log
2013-05-13 12:15 - 2013-05-13 12:15 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2013-05-13 12:15 - 2013-05-13 12:15 - 00000000 ____D () C:\Users\Mex\AppData\Local\MediaServer
2013-05-13 12:14 - 2013-05-13 12:15 - 00000000 ____D () C:\ProgramData\PDVD
2013-05-13 12:14 - 2013-05-13 12:15 - 00000000 ____D () C:\ProgramData\CyberLink
2013-05-13 12:14 - 2013-05-13 12:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 13
2013-05-13 12:14 - 2013-05-13 12:14 - 00000000 ____D () C:\Users\Public\CyberLink
2013-05-13 12:14 - 2013-05-13 12:14 - 00000000 ____D () C:\Users\Mex\AppData\Local\CyberLink
2013-05-13 12:12 - 2013-05-13 12:12 - 00000000 ____D () C:\ProgramData\Temp
2013-05-13 12:12 - 2013-05-13 12:12 - 00000000 ____D () C:\Program Files\CyberLink
2013-05-13 12:11 - 2013-05-13 12:11 - 00000000 ____D () C:\ProgramData\install_clap
2013-05-13 12:01 - 2013-05-13 12:01 - 00000425 _____ () C:\Windows\BRWMARK.INI
2013-05-13 12:01 - 2013-05-13 12:01 - 00000184 _____ () C:\Windows\system32\brsvc01a.bsi
2013-05-13 12:01 - 2013-05-13 12:01 - 00000050 _____ () C:\Windows\system32\bridf05a.dat
2013-05-13 12:01 - 2013-05-13 12:01 - 00000030 _____ () C:\Windows\system32\brss01a.ini
2013-05-13 12:01 - 2013-05-13 12:01 - 00000027 _____ () C:\Windows\BRPP2KA.INI
2013-05-13 12:01 - 2013-05-13 12:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2013-05-13 11:59 - 2013-05-13 11:59 - 00000000 ____D () C:\Program Files\Brother
2013-05-13 11:59 - 2009-07-21 23:00 - 00045056 _____ (brother Industries Ltd) C:\Windows\system32\brss01a.exe
2013-05-13 11:59 - 2009-07-21 15:23 - 00154624 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09a.dll
2013-05-13 11:59 - 2009-02-24 09:37 - 00053760 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrUsi09a.dll
2013-05-13 11:59 - 2009-01-15 18:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2S.dll
2013-05-13 11:59 - 2008-06-17 14:33 - 00167936 ____N (brother) C:\Windows\system32\NSSearch.dll
2013-05-13 11:59 - 2007-12-13 21:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2.dll
2013-05-13 11:59 - 2007-12-13 21:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\system32\BrDctF2L.dll
2013-05-13 11:59 - 2006-12-28 12:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\system32\BroSNMP.dll
2013-05-13 11:59 - 2006-10-30 23:00 - 00139264 _____ (Brother Industries,ltd) C:\Windows\system32\bsplmf01.exe
2013-05-13 11:59 - 2004-06-13 23:00 - 00057344 _____ (brother Industries Ltd) C:\Windows\system32\brsvc01a.exe
2013-05-13 11:59 - 2001-02-05 10:16 - 00258048 _____ (Brother Industries, Ltd) C:\Windows\system32\bsplmf01.dll
2013-05-13 11:49 - 2013-05-13 11:49 - 00000000 ____D () C:\ProgramData\ScanSoft
2013-05-13 11:49 - 2013-05-13 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 9.0
2013-05-13 11:49 - 2013-05-13 11:49 - 00000000 ____D () C:\ProgramData\InstallShield
2013-05-13 11:49 - 2013-05-13 11:49 - 00000000 ____D () C:\Program Files\ScanSoft
2013-05-13 11:49 - 2013-05-13 11:49 - 00000000 ____D () C:\Program Files\Common Files\ScanSoft Shared
2013-05-13 11:49 - 2003-09-24 10:37 - 00027114 _____ () C:\Windows\maxlink.ini
2013-05-13 11:48 - 2013-05-13 11:50 - 00000000 ____D () C:\Program Files\Common Files\InstallShield
2013-05-13 11:48 - 2013-05-13 11:48 - 00000000 ____D () C:\ProgramData\Brother
2013-05-12 23:52 - 2014-11-17 12:18 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\DVDVideoSoft
2013-05-12 22:12 - 2002-01-01 15:08 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\TV-Browser
2013-05-12 22:11 - 2013-05-12 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TV-Browser
2013-05-12 22:11 - 2013-05-12 22:11 - 00000000 ____D () C:\Program Files\TV-Browser
2013-05-01 02:03 - 2013-05-01 02:03 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-01 02:03 - 2013-05-01 02:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-01 02:00 - 2013-05-01 02:07 - 00010187 _____ () C:\Windows\IE10_main.log
2013-04-28 15:36 - 2013-04-28 15:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2013-04-28 15:36 - 2013-04-28 15:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2013-04-28 15:34 - 2013-04-28 15:34 - 00000000 ____D () C:\Program Files\Microsoft Synchronization Services
2013-04-28 15:34 - 2013-04-28 15:34 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2013-04-28 15:33 - 2013-04-28 15:33 - 00000000 ____D () C:\Windows\PCHEALTH
2013-04-28 15:33 - 2013-04-28 15:33 - 00000000 ____D () C:\Program Files\Microsoft Visual Studio 8
2013-04-28 15:33 - 2013-04-28 15:33 - 00000000 ____D () C:\Program Files\Microsoft Sync Framework
2013-04-28 15:33 - 2013-04-28 15:33 - 00000000 ____D () C:\Program Files\Microsoft SQL Server Compact Edition
2013-04-28 15:32 - 2013-04-28 15:32 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2013-04-28 15:31 - 2015-01-26 12:15 - 00000000 ____D () C:\ProgramData\Microsoft Help
2013-04-28 15:31 - 2014-04-16 12:30 - 00000000 ____D () C:\Users\Mex\AppData\Local\Microsoft Help
2013-04-28 15:31 - 2013-06-03 11:04 - 00000000 ____D () C:\Program Files\Microsoft Office
2013-04-28 15:30 - 2013-04-28 15:30 - 00000000 __RHD () C:\MSOCache
2013-04-27 20:20 - 2013-04-27 20:20 - 00000000 ____D () C:\Users\Mex\AppData\Local\libimobiledevice
2013-04-27 17:00 - 2014-03-01 19:30 - 00000000 ____D () C:\Users\Mex\AppData\Local\Apple Computer
2013-04-27 17:00 - 2013-04-27 17:56 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Apple Computer
2013-04-27 16:59 - 2013-04-27 16:59 - 00000000 ____D () C:\ProgramData\Apple Computer
2013-04-27 16:58 - 2013-04-27 16:58 - 00000000 ____D () C:\Users\Mex\AppData\Local\Apple
2013-04-27 16:56 - 2014-06-25 18:41 - 00000000 ____D () C:\ProgramData\Apple
2013-04-26 21:01 - 2013-04-26 21:01 - 00285502 _____ () C:\Windows\msxml4-KB973688-enu.LOG
2013-04-26 21:01 - 2013-04-26 21:01 - 00279252 _____ () C:\Windows\msxml4-KB954430-enu.LOG
2013-04-26 21:01 - 2013-04-26 21:01 - 00000000 ____D () C:\Program Files\MSXML 4.0
2013-04-26 16:15 - 2013-04-27 17:58 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\redsn0w
2013-04-26 16:14 - 2013-04-26 16:14 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-04-21 14:07 - 2013-04-21 14:13 - 00000000 ____D () C:\Users\Mex\AppData\Local\Nero
2013-04-21 13:59 - 2013-04-21 14:21 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Nero
2013-04-21 13:41 - 2013-04-21 13:57 - 00000000 ____D () C:\ProgramData\Nero
2013-04-21 13:41 - 2013-04-21 13:47 - 00000000 ____D () C:\Program Files\Nero
         

2013-04-21 13:41 - 2013-04-21 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2013-04-21 13:41 - 2013-04-21 13:44 - 00000000 ____D () C:\Program Files\Common Files\Nero
2013-04-20 16:57 - 2013-04-20 17:39 - 326138608 _____ (Nero AG) C:\Users\Mex\Downloads\Nero-12.5.01200_trial.exe
2013-04-20 14:39 - 2014-10-01 13:26 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Winamp
2013-04-20 14:39 - 2013-04-20 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2013-04-20 14:39 - 2013-04-20 14:39 - 00000000 ____D () C:\Program Files\Winamp
2013-04-20 14:39 - 2013-04-20 14:39 - 00000000 ____D () C:\Program Files\Common Files\PX Storage Engine
2013-04-20 10:50 - 2012-08-22 18:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2013-04-20 10:50 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2013-04-20 10:48 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll
2013-04-20 10:48 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2013-04-20 10:48 - 2012-10-03 17:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll
2013-04-20 10:48 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-04-20 10:48 - 2012-10-03 17:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-04-20 10:48 - 2012-10-03 16:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2013-04-20 10:48 - 2012-08-21 21:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe
2013-04-20 10:47 - 2012-11-23 03:48 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2013-04-20 10:47 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2013-04-20 10:47 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2013-04-19 16:55 - 2014-11-10 16:38 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Adobe
2013-04-19 16:55 - 2013-04-19 16:55 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Macromedia
2013-04-19 16:55 - 2013-04-19 16:55 - 00000000 ____D () C:\Users\Mex\AppData\Local\Macromedia
2013-04-19 15:53 - 2002-01-01 20:42 - 00216128 _____ () C:\Windows\PFRO.log
2013-04-19 13:25 - 2013-04-19 13:25 - 00000000 ____D () C:\Windows\system32\SPReview
2013-04-19 13:24 - 2013-04-19 13:24 - 00000000 ____D () C:\Windows\system32\EventProviders
2013-04-19 04:55 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
2013-04-19 04:55 - 2010-11-20 13:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-04-19 04:55 - 2010-11-20 13:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
2013-04-19 04:55 - 2010-11-20 13:21 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2013-04-19 04:55 - 2010-11-20 13:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-04-19 04:55 - 2010-11-20 13:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2013-04-19 04:55 - 2010-11-20 13:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2013-04-19 04:55 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2013-04-19 04:55 - 2010-11-20 13:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2013-04-19 04:55 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2013-04-19 04:55 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2013-04-19 04:55 - 2010-11-20 13:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2013-04-19 04:55 - 2010-11-20 13:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2013-04-19 04:55 - 2010-11-20 13:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll
2013-04-19 04:55 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2013-04-19 04:55 - 2010-11-20 13:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2013-04-19 04:55 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2013-04-19 04:55 - 2010-11-20 13:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2013-04-19 04:55 - 2010-11-20 13:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2013-04-19 04:55 - 2010-11-20 13:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2013-04-19 04:55 - 2010-11-20 13:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2013-04-19 04:55 - 2010-11-20 13:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2013-04-19 04:55 - 2010-11-20 13:17 - 00080896 _____ () C:\Windows\system32\RDVGHelper.exe
2013-04-19 04:55 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe
2013-04-19 04:55 - 2010-11-20 11:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-04-19 04:55 - 2010-11-20 11:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
2013-04-19 04:55 - 2010-11-05 03:20 - 00146852 _____ () C:\Windows\system32\systemsf.ebd
2013-04-19 04:55 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2013-04-19 04:55 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2013-04-19 04:55 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2013-04-19 04:54 - 2010-11-20 13:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2013-04-19 04:54 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
2013-04-19 04:54 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
2013-04-19 04:54 - 2010-11-20 13:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2013-04-19 04:54 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2013-04-19 04:54 - 2010-11-20 13:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
2013-04-19 04:54 - 2010-11-20 13:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2013-04-19 04:54 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2013-04-19 04:54 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2013-04-19 04:54 - 2010-11-20 13:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
2013-04-19 04:54 - 2010-11-20 13:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2013-04-19 04:54 - 2010-11-20 13:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2013-04-19 04:54 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2013-04-19 04:54 - 2010-11-20 13:21 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2013-04-19 04:54 - 2010-11-20 13:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2013-04-19 04:54 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
2013-04-19 04:54 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll
2013-04-19 04:54 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2013-04-19 04:54 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2013-04-19 04:54 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
2013-04-19 04:54 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2013-04-19 04:54 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2013-04-19 04:54 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL
2013-04-19 04:54 - 2010-11-20 13:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll
2013-04-19 04:54 - 2010-11-20 13:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2013-04-19 04:54 - 2010-11-20 13:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2013-04-19 04:54 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL
2013-04-19 04:54 - 2010-11-20 13:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2013-04-19 04:54 - 2010-11-20 13:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL
2013-04-19 04:54 - 2010-11-20 13:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll
2013-04-19 04:54 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-04-19 04:54 - 2010-11-20 13:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll
2013-04-19 04:54 - 2010-11-20 13:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL
2013-04-19 04:54 - 2010-11-20 13:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2013-04-19 04:54 - 2010-11-20 13:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00066048 _____ () C:\Windows\system32\PrintBrmUi.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\rdpsign.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qwinsta.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msg.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\quser.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\query.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe
2013-04-19 04:54 - 2010-11-20 13:17 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr
2013-04-19 04:54 - 2010-11-20 13:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2013-04-19 04:54 - 2010-11-20 13:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2013-04-19 04:54 - 2010-11-20 13:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2013-04-19 04:54 - 2010-11-20 13:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
2013-04-19 04:54 - 2010-11-20 13:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2013-04-19 04:54 - 2010-11-20 13:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr
2013-04-19 04:54 - 2010-11-20 13:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr
2013-04-19 04:54 - 2010-11-20 13:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2013-04-19 04:54 - 2010-11-20 13:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl
2013-04-19 04:54 - 2010-11-20 13:16 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax
2013-04-19 04:54 - 2010-11-20 13:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe
2013-04-19 04:54 - 2010-11-20 13:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\change.exe
2013-04-19 04:54 - 2010-11-20 13:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2013-04-19 04:54 - 2010-11-20 13:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll
2013-04-19 04:54 - 2010-11-20 13:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2013-04-19 04:54 - 2010-11-20 13:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll
2013-04-19 04:54 - 2010-11-20 13:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll
2013-04-19 04:54 - 2010-11-20 13:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll
2013-04-19 04:54 - 2010-11-20 13:03 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll
2013-04-19 04:54 - 2010-11-20 13:03 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll
2013-04-19 04:54 - 2010-11-20 13:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2013-04-19 04:54 - 2010-11-20 13:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2013-04-19 04:54 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll
2013-04-19 04:54 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL
2013-04-19 04:54 - 2010-11-20 13:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL
2013-04-19 04:54 - 2010-11-20 12:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll
2013-04-19 04:54 - 2010-11-20 11:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys
2013-04-19 04:54 - 2010-11-20 11:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2013-04-19 04:54 - 2010-11-20 11:22 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-04-19 04:54 - 2010-11-20 11:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys
2013-04-19 04:54 - 2010-11-20 11:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll
2013-04-19 04:54 - 2010-11-20 11:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2013-04-19 04:54 - 2010-11-20 11:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2013-04-19 04:54 - 2010-11-20 11:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2013-04-19 04:54 - 2010-11-20 11:06 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2013-04-19 04:54 - 2010-11-20 11:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2013-04-19 04:54 - 2010-11-20 11:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys
2013-04-19 04:54 - 2010-11-20 11:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
2013-04-19 04:54 - 2010-11-20 11:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys
2013-04-19 04:54 - 2010-11-20 11:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys
2013-04-19 04:54 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2013-04-19 04:54 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
2013-04-19 04:54 - 2010-11-20 10:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2013-04-19 04:54 - 2010-11-20 10:59 - 00035968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winusb.sys
2013-04-19 04:54 - 2010-11-20 10:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2013-04-19 04:54 - 2010-11-20 10:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2013-04-19 04:54 - 2010-11-20 10:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys
2013-04-19 04:54 - 2010-11-20 10:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2013-04-19 04:54 - 2010-11-20 10:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys
2013-04-19 04:54 - 2010-11-20 10:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
2013-04-19 04:54 - 2010-11-20 10:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2013-04-19 04:54 - 2010-11-20 10:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2013-04-19 04:54 - 2010-11-20 10:14 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll
2013-04-19 04:54 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll
2013-04-19 04:54 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll
2013-04-19 04:54 - 2010-11-20 10:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll
2013-04-19 04:54 - 2010-11-20 10:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys
2013-04-19 04:54 - 2010-11-20 10:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll
2013-04-19 04:54 - 2010-11-20 10:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys
2013-04-19 04:54 - 2010-11-20 09:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys
2013-04-19 04:54 - 2010-11-20 09:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2013-04-19 04:54 - 2010-11-20 09:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2013-04-19 04:54 - 2010-11-20 09:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2013-04-19 04:54 - 2010-11-20 09:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2013-04-19 04:54 - 2010-11-20 09:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2013-04-19 04:54 - 2010-11-20 09:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys
2013-04-19 04:54 - 2010-11-20 09:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2013-04-19 04:54 - 2010-11-20 06:23 - 00053600 _____ () C:\Windows\system32\dosx.exe
2013-04-19 04:54 - 2010-11-10 02:45 - 00010429 _____ () C:\Windows\system32\ScavengeSpace.xml
2013-04-19 04:54 - 2010-11-05 03:20 - 00105559 _____ () C:\Windows\system32\RacRules.xml
2013-04-19 04:54 - 2010-11-05 03:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-04-19 04:54 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2013-04-19 04:53 - 2010-11-20 13:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll
2013-04-19 04:53 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2013-04-19 04:38 - 2011-03-11 06:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2013-04-19 04:38 - 2011-03-11 06:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2013-04-19 04:38 - 2011-03-11 06:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2013-04-19 04:38 - 2011-03-11 06:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2013-04-19 04:38 - 2011-03-11 06:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2013-04-19 04:38 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2013-04-19 04:38 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2013-04-19 04:38 - 2011-03-11 05:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2013-04-19 04:36 - 2013-04-28 15:33 - 00000000 ____D () C:\Program Files\Microsoft.NET
2013-04-19 02:05 - 2013-04-19 02:05 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-04-19 02:05 - 2013-04-19 02:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2013-04-19 02:05 - 2013-01-31 10:01 - 03970848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2013-04-19 02:05 - 2013-01-31 10:01 - 02859296 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2013-04-19 02:05 - 2013-01-31 10:00 - 02557728 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2013-04-19 02:05 - 2013-01-31 10:00 - 00634656 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2013-04-19 02:05 - 2013-01-31 10:00 - 00108832 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2013-04-19 02:05 - 2013-01-31 10:00 - 00062752 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2013-04-19 02:05 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-04-19 02:05 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-04-19 02:04 - 2013-02-19 20:33 - 00053024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-04-19 02:03 - 2013-04-19 02:05 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2013-04-19 02:03 - 2013-04-19 02:03 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2013-04-18 19:30 - 2012-07-26 04:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2013-04-18 19:30 - 2012-07-26 03:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2013-04-18 19:30 - 2012-06-02 15:34 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2013-04-18 19:29 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2013-04-18 19:29 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2013-04-18 19:29 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2013-04-18 19:29 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2013-04-18 19:29 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2013-04-18 19:29 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2013-04-18 19:29 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2013-04-18 19:29 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2013-04-18 19:28 - 2012-03-01 06:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2013-04-18 19:28 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2013-04-18 19:26 - 2013-04-18 19:28 - 00004755 _____ () C:\Windows\IE9_main.log
2013-04-18 19:26 - 2010-02-11 08:10 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2013-04-18 19:19 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2013-04-18 19:19 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-04-18 19:19 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2013-04-18 19:19 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2013-04-18 19:18 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2013-04-18 19:17 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-04-18 19:16 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2013-04-18 19:16 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2013-04-18 19:16 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2013-04-18 19:16 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2013-04-18 19:16 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2013-04-18 19:16 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2013-04-18 19:16 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2013-04-18 19:16 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
         

2013-04-18 19:16 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2013-04-18 19:15 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023x.sys
2013-04-18 19:15 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-04-18 19:15 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rndismpx.sys
2013-04-18 19:15 - 2012-02-11 06:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-04-18 19:15 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2013-04-18 19:15 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2013-04-18 19:15 - 2011-07-09 03:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-04-18 19:15 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2013-04-18 19:15 - 2011-04-29 03:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-04-18 19:15 - 2011-04-29 03:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-04-18 19:15 - 2011-04-29 03:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-04-18 19:15 - 2011-04-27 03:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-04-18 19:15 - 2011-04-27 03:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-04-18 19:15 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-04-18 19:15 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2013-04-18 19:15 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-04-18 19:14 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-04-18 19:14 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2013-04-18 19:14 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2013-04-18 19:14 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-04-18 19:14 - 2012-07-04 22:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2013-04-18 19:14 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll
2013-04-18 19:14 - 2012-04-26 05:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2013-04-18 19:14 - 2012-04-26 05:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe
2013-04-18 19:14 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2013-04-18 19:14 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-04-18 19:14 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2013-04-18 19:14 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2013-04-18 19:14 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2013-04-18 19:14 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2013-04-18 19:14 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2013-04-18 19:14 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2013-04-18 19:14 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll
2013-04-18 19:14 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll
2013-04-18 19:14 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-04-18 19:14 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-04-18 19:14 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-04-18 19:14 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-04-18 19:14 - 2011-03-03 06:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-04-18 19:14 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-04-18 19:14 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-04-18 19:14 - 2011-02-12 06:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2013-04-18 19:14 - 2010-11-20 13:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll
2013-04-18 19:14 - 2010-11-20 13:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2013-04-18 19:14 - 2010-11-20 13:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2013-04-18 19:14 - 2010-11-20 13:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2013-04-18 19:14 - 2010-11-20 13:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2013-04-18 19:14 - 2010-11-20 12:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll
2013-04-18 19:13 - 2012-05-14 05:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-04-18 19:13 - 2012-03-17 08:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2013-04-18 19:13 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl
2013-04-18 19:13 - 2011-05-24 11:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2013-04-18 19:13 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2013-04-18 19:13 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-04-18 19:13 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe
2013-04-18 19:13 - 2010-11-20 13:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll
2013-04-18 18:50 - 2013-04-18 18:50 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\ESET
2013-04-18 18:50 - 2013-04-18 18:50 - 00000000 ____D () C:\Users\Mex\AppData\Local\ESET
2013-04-18 18:48 - 2014-10-11 12:17 - 00109280 _____ () C:\Users\Mex\AppData\Local\GDIPFONTCACHEV1.DAT
2013-04-18 18:45 - 2010-06-02 03:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-04-18 18:45 - 2010-06-02 03:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-04-18 18:45 - 2010-06-02 03:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-04-18 18:45 - 2010-05-26 10:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-04-18 18:45 - 2010-05-26 10:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-04-18 18:45 - 2010-05-26 10:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-04-18 18:45 - 2010-05-26 10:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-04-18 18:45 - 2010-05-26 10:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-04-18 18:45 - 2010-02-04 09:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-04-18 18:45 - 2010-02-04 09:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-04-18 18:45 - 2010-02-04 09:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-04-18 18:45 - 2010-02-04 09:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-04-18 18:45 - 2009-09-04 16:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-04-18 18:45 - 2009-09-04 16:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-04-18 18:45 - 2009-09-04 16:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-04-18 18:45 - 2009-09-04 16:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-04-18 18:45 - 2009-09-04 16:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-04-18 18:45 - 2009-09-04 16:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-04-18 18:45 - 2009-09-04 16:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-04-18 18:45 - 2009-09-04 16:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-04-18 18:45 - 2009-03-16 13:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-04-18 18:45 - 2009-03-16 13:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-04-18 18:45 - 2009-03-16 13:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-04-18 18:45 - 2009-03-09 14:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-04-18 18:45 - 2009-03-09 14:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-04-18 18:45 - 2009-03-09 14:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-04-18 18:45 - 2008-10-27 09:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-04-18 18:45 - 2008-10-27 09:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-04-18 18:45 - 2008-10-27 09:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-04-18 18:45 - 2008-10-27 09:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-04-18 18:45 - 2008-10-15 05:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-04-18 18:45 - 2008-10-15 05:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-04-18 18:45 - 2008-10-15 05:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-04-18 18:45 - 2008-07-31 09:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-04-18 18:45 - 2008-07-31 09:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-04-18 18:45 - 2008-07-31 09:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-04-18 18:45 - 2008-07-10 10:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-04-18 18:45 - 2008-07-10 10:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-04-18 18:45 - 2008-07-10 10:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-04-18 18:45 - 2008-05-30 13:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-04-18 18:45 - 2008-05-30 13:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-04-18 18:45 - 2008-05-30 13:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-04-18 18:45 - 2008-05-30 13:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-04-18 18:45 - 2008-05-30 13:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-04-18 18:45 - 2008-05-30 13:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-04-18 18:45 - 2008-05-30 13:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-04-18 18:45 - 2008-03-05 15:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-04-18 18:45 - 2008-03-05 15:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-04-18 18:45 - 2008-03-05 15:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-04-18 18:45 - 2008-03-05 14:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-04-18 18:45 - 2008-03-05 14:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-04-18 18:45 - 2008-02-05 22:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-04-18 18:45 - 2007-10-22 02:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-04-18 18:45 - 2007-10-22 02:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-04-18 18:45 - 2007-10-12 14:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-04-18 18:45 - 2007-10-12 14:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-04-18 18:45 - 2007-10-02 08:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-04-18 18:45 - 2007-07-19 23:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-04-18 18:45 - 2007-07-19 17:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-04-18 18:45 - 2007-07-19 17:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-04-18 18:45 - 2007-07-19 17:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-04-18 18:45 - 2007-06-20 19:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-04-18 18:45 - 2007-05-16 15:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-04-18 18:45 - 2007-05-16 15:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-04-18 18:45 - 2007-05-16 15:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-04-18 18:45 - 2007-04-04 17:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-04-18 18:45 - 2007-04-04 17:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-04-18 18:45 - 2007-03-15 15:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-04-18 18:45 - 2007-03-12 15:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-04-18 18:45 - 2007-03-12 15:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-04-18 18:45 - 2007-03-05 11:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-04-18 18:45 - 2007-01-24 14:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-04-18 18:45 - 2006-12-08 11:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-04-18 18:45 - 2006-11-29 12:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-04-18 18:45 - 2006-11-29 12:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-04-18 18:45 - 2006-09-28 15:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-04-18 18:45 - 2006-09-28 15:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-04-18 18:45 - 2006-07-28 08:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-04-18 18:45 - 2006-07-28 08:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-04-18 18:45 - 2006-05-31 06:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-04-18 18:45 - 2006-03-31 11:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-04-18 18:45 - 2006-03-31 11:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-04-18 18:45 - 2006-03-31 11:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-04-18 18:45 - 2006-02-03 07:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-04-18 18:45 - 2006-02-03 07:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-04-18 18:45 - 2006-02-03 07:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-04-18 18:45 - 2005-12-05 17:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-04-18 18:45 - 2005-07-22 18:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-04-18 18:45 - 2005-05-26 14:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-04-18 18:45 - 2005-03-18 16:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-04-18 18:45 - 2005-02-05 18:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-04-18 18:44 - 2013-10-07 09:02 - 00000000 ____D () C:\Users\Mex\AppData\Local\Mozilla
2013-04-18 18:44 - 2013-07-08 12:36 - 00001849 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2013-04-18 18:44 - 2013-07-08 12:36 - 00000000 ____D () C:\Program Files\CDBurnerXP
2013-04-18 18:44 - 2013-04-18 18:44 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Mozilla
2013-04-18 18:43 - 2015-04-26 19:49 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2013-04-18 18:43 - 2015-04-16 18:23 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-04-18 18:43 - 2015-04-16 18:23 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-04-18 18:43 - 2014-05-30 15:10 - 00000000 ____D () C:\ProgramData\Adobe
2013-04-18 18:43 - 2013-04-18 18:43 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2013-04-18 18:43 - 2013-04-18 18:43 - 00000000 ____D () C:\Windows\system32\Macromed
2013-04-18 18:43 - 2013-04-18 18:43 - 00000000 ____D () C:\ProgramData\Mozilla
2013-04-18 18:43 - 2002-01-01 20:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-04-18 18:42 - 2013-04-18 18:42 - 00001394 _____ () C:\Windows\system32\lvcoinst.log
2013-04-18 18:42 - 2013-04-18 18:42 - 00000000 ____D () C:\ProgramData\Sun
2013-04-18 18:42 - 2013-04-18 18:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2013-04-18 18:42 - 2013-04-18 18:42 - 00000000 ____D () C:\Program Files\Tracker Software
2013-04-18 18:41 - 2014-10-09 19:24 - 00000000 ____D () C:\Program Files\TeamViewer
2013-04-18 18:41 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2013-04-18 18:41 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2013-04-18 18:41 - 2010-11-20 11:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys
2013-04-18 18:39 - 2013-04-18 18:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2013-04-18 18:39 - 2013-04-18 18:39 - 00000000 ____D () C:\Program Files\VideoLAN
2013-04-18 18:38 - 2013-11-03 19:21 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\WinRAR
2013-04-18 18:38 - 2013-04-18 18:38 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-04-18 18:38 - 2013-04-18 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-04-18 18:38 - 2013-04-18 18:38 - 00000000 ____D () C:\Program Files\WinRAR
2013-04-18 18:32 - 2014-08-11 17:33 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2013-04-18 18:32 - 2013-04-18 18:32 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\InstallShield
2013-04-18 18:32 - 2010-10-11 00:09 - 01564160 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athur.sys
2013-04-18 15:12 - 2013-04-19 02:35 - 00001413 _____ () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-04-18 15:11 - 2015-05-04 10:30 - 00000000 ____D () C:\Users\Mex
2013-04-18 15:11 - 2014-04-01 12:24 - 00000000 ____D () C:\Users\Mex\AppData\Local\VirtualStore
2013-04-18 15:11 - 2013-04-18 15:11 - 00000020 ___SH () C:\Users\Mex\ntuser.ini
2013-04-18 15:11 - 2013-04-18 15:11 - 00000000 _SHDL () C:\Users\Mex\Startmenü
2013-04-18 15:11 - 2013-04-18 15:11 - 00000000 _SHDL () C:\Users\Mex\Netzwerkumgebung
2013-04-18 15:11 - 2013-04-18 15:11 - 00000000 _SHDL () C:\Users\Mex\Druckumgebung
2013-04-18 15:11 - 2013-04-18 15:11 - 00000000 _SHDL () C:\Users\Mex\Documents\Eigene Musik
2013-04-18 15:11 - 2013-04-18 15:11 - 00000000 _SHDL () C:\Users\Mex\Documents\Eigene Bilder
2013-04-18 15:11 - 2013-04-18 15:11 - 00000000 _SHDL () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-04-18 15:11 - 2013-04-18 15:11 - 00000000 _SHDL () C:\Users\Mex\AppData\Local\Verlauf
2013-04-18 15:11 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-04-18 15:11 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default\Startmenü
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\Programme
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\ProgramData\Startmenü
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 _SHDL () C:\ProgramData\Dokumente
2013-04-18 15:08 - 2013-04-18 15:08 - 00000000 __SHD () C:\Recovery
2013-04-18 15:08 - 2002-01-01 20:47 - 02007878 _____ () C:\Windows\WindowsUpdate.log
2013-04-18 14:58 - 2013-04-18 14:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-04-18 14:57 - 2013-04-18 14:57 - 00000000 ____D () C:\Windows\CSC
2013-02-19 20:32 - 2013-02-19 20:32 - 19915552 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 17560352 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 12566808 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 10919200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-02-19 20:32 - 2013-02-19 20:32 - 07754560 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 06162704 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 02577184 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 02446416 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 01869088 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 01010464 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco32.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco32.dll
2013-02-19 20:32 - 2013-02-19 20:32 - 00012724 _____ () C:\Windows\system32\nvinfo.pb
2012-12-13 12:50 - 2012-12-13 12:50 - 06112864 _____ (Apple, Inc.) C:\Windows\system32\usbaaplrc.dll
2012-12-13 12:50 - 2012-12-13 12:50 - 00045056 _____ (Apple, Inc.) C:\Windows\system32\Drivers\usbaapl.sys
2012-09-10 09:41 - 2012-09-10 09:41 - 01461992 _____ (Microsoft Corporation) C:\Windows\system32\wdfcoinstaller01009.dll
2012-09-10 09:41 - 2012-09-10 09:41 - 00018432 _____ (Apple Inc.) C:\Windows\system32\Drivers\netaapl.sys
2011-08-04 08:20 - 2011-08-04 08:20 - 00033656 _____ (ESET) C:\Windows\system32\Drivers\EpfwLWF.sys
2011-06-10 05:34 - 2011-06-10 05:34 - 00394856 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2011-06-10 05:34 - 2011-06-10 05:34 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2011-06-10 05:34 - 2011-06-10 05:34 - 00080416 _____ () C:\Windows\system32\RtNicProp32.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 04422992 _____ (Microsoft Corporation) C:\Windows\system32\mfc100u.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 04397384 _____ (Microsoft Corporation) C:\Windows\system32\mfc100.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00421200 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00138056 _____ (Microsoft Corporation) C:\Windows\system32\atl100.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00081744 _____ (Microsoft Corporation) C:\Windows\system32\mfcm100u.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00081744 _____ (Microsoft Corporation) C:\Windows\system32\mfcm100.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00064336 _____ (Microsoft Corporation) C:\Windows\system32\mfc100fra.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00064336 _____ (Microsoft Corporation) C:\Windows\system32\mfc100deu.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00063824 _____ (Microsoft Corporation) C:\Windows\system32\mfc100esn.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00062288 _____ (Microsoft Corporation) C:\Windows\system32\mfc100ita.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00060752 _____ (Microsoft Corporation) C:\Windows\system32\mfc100rus.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00055120 _____ (Microsoft Corporation) C:\Windows\system32\mfc100enu.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00051024 _____ (Microsoft Corporation) C:\Windows\system32\vcomp100.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00043856 _____ (Microsoft Corporation) C:\Windows\system32\mfc100jpn.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00043344 _____ (Microsoft Corporation) C:\Windows\system32\mfc100kor.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00036176 _____ (Microsoft Corporation) C:\Windows\system32\mfc100cht.dll
2011-02-19 22:03 - 2011-02-19 22:03 - 00036176 _____ (Microsoft Corporation) C:\Windows\system32\mfc100chs.dll
2011-02-18 23:40 - 2011-02-18 23:40 - 00773968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2010-11-25 05:59 - 2010-11-25 05:59 - 00603240 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTL8192su.sys
2010-03-20 19:11 - 2010-03-20 19:11 - 00036736 _____ (Microsoft Corporation) C:\Windows\system32\FM20DEU.DLL
2010-02-20 16:20 - 2010-02-20 16:20 - 01207144 _____ (Microsoft Corporation) C:\Windows\system32\FM20.DLL
2010-02-20 16:20 - 2010-02-20 16:20 - 00031616 _____ (Microsoft Corporation) C:\Windows\system32\FM20ENU.DLL
2010-02-17 20:42 - 2010-02-17 20:42 - 00051584 _____ (Microsoft Corporation) C:\Windows\system32\VBAME.DLL
2009-12-19 13:28 - 2014-04-25 16:44 - 01070152 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX
2009-11-10 19:44 - 2002-01-01 20:48 - 01628044 _____ () C:\Windows\system32\PerfStringBackup.INI
2009-10-14 04:07 - 2013-04-18 14:59 - 00000000 ____D () C:\Windows\Panther
2009-10-14 03:21 - 2015-04-14 21:27 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2009-10-14 03:21 - 2015-02-24 03:23 - 00246920 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2009-10-14 03:11 - 2009-10-14 03:11 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2009-10-14 03:11 - 2009-10-14 03:11 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2009-10-14 03:09 - 2013-04-18 14:59 - 00007994 _____ () C:\Windows\TSSysprep.log
2009-09-14 18:05 - 2009-09-14 18:05 - 01762608 _____ (Pegasus Imaging Corp.) C:\Windows\system32\imagx7.dll
2009-09-14 18:05 - 2009-09-14 18:05 - 00808240 _____ (Pegasus Imaging Corp.) C:\Windows\system32\imagxra7.dll
2009-09-14 18:05 - 2009-09-14 18:05 - 00374064 _____ (Pegasus Imaging Corporation) C:\Windows\system32\twnlib4.dll
2009-09-14 18:05 - 2009-09-14 18:05 - 00263472 _____ (Pegasus Imaging Corp.) C:\Windows\system32\imagxr7.dll
2009-09-14 18:04 - 2009-09-14 18:04 - 00497296 ____R (Pegasus Imaging Corp.) C:\Windows\system32\imagxpr7.dll
2009-07-20 23:05 - 2009-07-20 23:05 - 01348432 _____ (Microsoft Corporation) C:\Windows\system32\msxml4.dll
2009-07-14 09:57 - 2009-06-10 22:14 - 00051867 _____ () C:\Windows\Ultimate.xml
2009-07-14 09:56 - 2014-07-11 10:01 - 00000000 ____D () C:\Program Files\Windows Journal
2009-07-14 09:56 - 2013-04-28 15:35 - 00000000 ____D () C:\Windows\ShellNew
2009-07-14 09:56 - 2013-04-20 10:51 - 00000000 ___RD () C:\Users\Public\Recorded TV
2009-07-14 09:56 - 2013-04-19 15:47 - 00000000 __SHD () C:\Windows\BitLockerDiscoveryVolumeContents
2009-07-14 09:56 - 2009-07-14 09:56 - 00000000 __RHD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
2009-07-14 09:56 - 2009-07-14 09:56 - 00000000 ____D () C:\Windows\RemotePackages
2009-07-14 09:47 - 2013-04-19 15:47 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2009-07-14 09:47 - 2013-04-19 15:47 - 00000000 ____D () C:\Windows\de-DE
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\XPSViewer
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\winrm
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\WCN
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\slmgr
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\de
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\0407
2009-07-14 09:47 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\DigitalLocker
2009-07-14 05:57 - 2013-04-18 15:56 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2009-07-14 05:53 - 2015-05-10 12:06 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2009-07-14 05:53 - 2002-01-01 20:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2009-07-14 05:52 - 2013-07-30 08:08 - 00000000 ____D () C:\Program Files\Windows Defender
2009-07-14 05:52 - 2013-05-13 11:59 - 00000000 ____D () C:\Windows\twain_32
2009-07-14 05:52 - 2013-04-28 15:35 - 00000000 ____D () C:\Program Files\MSBuild
2009-07-14 05:52 - 2013-04-19 15:47 - 00000000 ____D () C:\Program Files\Windows Sidebar
2009-07-14 05:52 - 2013-04-19 15:47 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2009-07-14 05:52 - 2013-04-19 15:47 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2009-07-14 05:52 - 2013-04-19 15:47 - 00000000 ____D () C:\Program Files\DVD Maker
2009-07-14 05:52 - 2013-04-18 15:56 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2009-07-14 05:52 - 2013-04-18 15:41 - 00000000 ____D () C:\Windows\system32\restore
2009-07-14 05:52 - 2009-10-14 03:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2009-07-14 05:52 - 2009-07-14 09:56 - 00000000 ____D () C:\Program Files\Microsoft Games
2009-07-14 05:52 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2009-07-14 05:52 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\WindowsPowerShell
2009-07-14 05:52 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\WinBioDatabase
2009-07-14 05:52 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Performance
2009-07-14 05:52 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Offline Web Pages
2009-07-14 05:52 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\addins
2009-07-14 05:52 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Reference Assemblies
2009-07-14 05:52 - 2009-07-14 05:42 - 00000000 ____D () C:\Windows\system32\FxsTmp
2009-07-14 05:48 - 2009-06-10 22:14 - 00048201 _____ () C:\Windows\Starter.xml
2009-07-14 05:46 - 2015-03-24 20:28 - 00001515 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2009-07-14 05:46 - 2009-07-14 05:46 - 00001282 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2009-07-14 05:42 - 2009-07-14 05:42 - 00001330 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2009-07-14 05:42 - 2009-07-14 05:42 - 00001246 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2009-07-14 05:42 - 2009-07-14 05:42 - 00001244 _____ () C:\Windows\system32\migwiz.lnk
2009-07-14 05:42 - 2009-07-14 05:42 - 00001210 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2009-07-14 05:41 - 2009-07-14 05:41 - 00000749 ___RH () C:\Windows\WindowsShell.Manifest
2009-07-14 05:39 - 2009-07-14 05:39 - 00000000 _____ () C:\Windows\setuperr.log
2009-07-14 05:39 - 2002-01-01 20:42 - 00103217 _____ () C:\Windows\setupact.log
2009-07-14 05:37 - 2009-07-14 05:37 - 00001266 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2009-07-14 05:34 - 2013-04-18 14:57 - 00004822 _____ () C:\Windows\DtcInstall.log
2009-07-14 05:34 - 2009-07-14 05:56 - 00021504 _____ () C:\Windows\system32\umstartup.etl
2009-07-14 05:34 - 2009-07-14 05:47 - 00009216 _____ () C:\Windows\system32\umstartup000.etl
2009-07-14 05:34 - 2002-01-01 20:52 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2009-07-14 05:34 - 2002-01-01 20:52 - 00020480 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2009-07-14 05:33 - 2015-03-11 21:58 - 00409064 _____ () C:\Windows\system32\FNTCACHE.DAT
2009-07-14 03:37 - 2015-05-07 14:42 - 00000000 ____D () C:\Windows\tracing
2009-07-14 03:37 - 2015-04-25 12:26 - 00000000 ____D () C:\Windows\rescache
2009-07-14 03:37 - 2015-04-15 21:48 - 00000000 ____D () C:\Windows\system32\de-DE
2009-07-14 03:37 - 2015-04-15 19:46 - 00000000 ____D () C:\Windows\AppCompat
2009-07-14 03:37 - 2015-04-15 19:15 - 00000000 ____D () C:\Windows\Microsoft.NET
2009-07-14 03:37 - 2015-03-03 19:26 - 00000000 ____D () C:\Windows\system32\NDF
2009-07-14 03:37 - 2013-06-03 11:04 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2009-07-14 03:37 - 2013-05-13 12:14 - 00000000 ___RD () C:\Users\Public
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\zh-TW
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\zh-HK
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\zh-CN
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\tr-TR
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\sv-SE
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\ru-RU
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\pt-PT
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\pt-BR
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\pl-PL
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\nl-NL
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\nb-NO
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\ko-KR
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\ja-JP
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\it-IT
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\hu-HU
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\fr-FR
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\fi-FI
2009-07-14 03:37 - 2013-05-01 02:22 - 00000000 ____D () C:\Windows\system32\el-GR
2009-07-14 03:37 - 2013-04-28 15:32 - 00000000 ____D () C:\Program Files\Common Files\System
2009-07-14 03:37 - 2013-04-21 13:47 - 00000000 ____D () C:\Windows\Cursors
2009-07-14 03:37 - 2013-04-19 16:53 - 00000000 __RHD () C:\Users\Public\Libraries
2009-07-14 03:37 - 2013-04-19 15:47 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2009-07-14 03:37 - 2013-04-19 02:05 - 00000000 ____D () C:\Windows\Help
2009-07-14 03:37 - 2013-04-18 18:38 - 00000000 ____D () C:\Windows\system32\LogFiles
2009-07-14 03:37 - 2013-04-18 15:08 - 00000000 __RHD () C:\Users\Default
2009-07-14 03:37 - 2013-04-18 15:08 - 00000000 ____D () C:\Program Files\Windows NT
2009-07-14 03:37 - 2009-10-14 03:11 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2009-07-14 03:37 - 2009-07-14 09:59 - 00000000 ____D () C:\Windows\Globalization
2009-07-14 03:37 - 2009-07-14 09:56 - 00000000 ____D () C:\Windows\security
2009-07-14 03:37 - 2009-07-14 09:49 - 00000000 ____D () C:\Windows\system32\Recovery
2009-07-14 03:37 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\MUI
2009-07-14 03:37 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\system32\com
2009-07-14 03:37 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\Speech
2009-07-14 03:37 - 2009-07-14 09:47 - 00000000 ____D () C:\Windows\IME
2009-07-14 03:37 - 2009-07-14 05:54 - 00000000 ____D () C:\Windows\system32\wfp
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 __RSD () C:\Windows\Media
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Web
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\Speech
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\schemas
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Resources
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\L2Schemas
2009-07-14 03:37 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\Branding
2009-07-14 03:37 - 2009-07-14 05:46 - 00000000 ____D () C:\Windows\TAPI
2009-07-14 03:37 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2009-07-14 03:37 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2009-07-14 03:37 - 2009-07-14 05:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
2009-07-14 03:37 - 2009-07-14 05:41 - 00000000 ____D () C:\Windows\system32\spool
2009-07-14 03:37 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2009-07-14 03:37 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Vss
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\winevt
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\uk-UA
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\th-TH
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\spp
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\SMI
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sl-SI
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sk-SK
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ro-RO
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ras
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NetworkList
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\Msdtc
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\lv-LV
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\lt-LT
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\IME
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\icsxml
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ias
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hr-HR
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\he-IL
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\et-EE
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\bg-BG
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ar-SA
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Registration
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\PLA
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\SpeechEngines
2009-07-14 03:37 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\Services
2009-07-14 03:37 - 2009-07-14 03:05 - 00000000 ____D () C:\Windows\system32\inetsrv
2009-07-14 03:37 - 2009-07-14 03:05 - 00000000 ____D () C:\Windows\SchCache
2009-07-14 03:37 - 2009-07-14 03:04 - 00000000 ____D () C:\Windows\system32\config\Journal
2009-07-14 03:37 - 2009-07-14 03:03 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2009-07-14 03:37 - 2009-07-14 03:03 - 00000000 ____D () C:\Windows\LiveKernelReports
2009-07-14 03:05 - 2013-04-19 15:43 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2009-07-14 03:05 - 2009-07-13 21:50 - 00020480 _____ (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) C:\Windows\system32\Drivers\secdrv.sys
2009-07-14 03:05 - 2009-06-10 22:39 - 00003683 _____ () C:\Windows\system32\Drivers\etc\lmhosts.sam
2009-07-14 03:05 - 2009-06-10 22:32 - 00000741 _____ () C:\Windows\system32\NOISE.DAT
2009-07-14 03:05 - 2009-06-10 22:29 - 11967524 _____ () C:\Windows\system32\korwbrkr.lex
2009-07-14 03:05 - 2009-06-10 22:29 - 00001696 _____ () C:\Windows\system32\NOISE.CHT
2009-07-14 03:05 - 2009-06-10 22:29 - 00001696 _____ () C:\Windows\system32\NOISE.CHS
2009-07-14 03:05 - 2009-06-10 22:29 - 00001486 _____ () C:\Windows\system32\noise.kor
2009-07-14 03:05 - 2009-06-10 22:29 - 00000697 _____ () C:\Windows\system32\NOISE.THA
2009-07-14 03:04 - 2013-04-28 15:32 - 00000478 _____ () C:\Windows\win.ini
2009-07-14 03:04 - 2009-07-14 02:16 - 00020535 _____ (Microsoft Corporation) C:\Windows\system32\vfpodbc.dll
2009-07-14 03:04 - 2009-06-10 22:46 - 00000219 _____ () C:\Windows\system.ini
2009-07-14 03:04 - 2009-06-10 22:42 - 00002577 _____ () C:\Windows\system32\config.nt
2009-07-14 03:04 - 2009-06-10 22:42 - 00001688 _____ () C:\Windows\system32\autoexec.nt
2009-07-14 03:04 - 2009-06-10 22:42 - 00000024 _____ () C:\autoexec.bat
2009-07-14 03:04 - 2009-06-10 22:42 - 00000010 _____ () C:\config.sys
2009-07-14 03:04 - 2009-06-10 22:39 - 00017463 _____ () C:\Windows\system32\Drivers\etc\services
2009-07-14 03:04 - 2009-06-10 22:39 - 00001358 _____ () C:\Windows\system32\Drivers\etc\protocol
2009-07-14 03:04 - 2009-06-10 22:39 - 00000407 _____ () C:\Windows\system32\Drivers\etc\networks
2009-07-14 03:04 - 2009-06-10 22:34 - 00215943 _____ () C:\Windows\system32\dssec.dat
2009-07-14 03:04 - 2009-06-10 22:19 - 00001405 _____ () C:\Windows\msdfmap.ini
2009-07-14 03:03 - 2009-06-10 22:15 - 00008798 _____ () C:\Windows\system32\icrav03.rat
2009-07-14 03:03 - 2009-06-10 22:15 - 00001988 _____ () C:\Windows\system32\ticrf.rat
2009-07-14 01:59 - 2009-07-14 02:15 - 00017408 _____ (Brother Industries Ltd.) C:\Windows\system32\brcoinst.dll
2009-07-14 01:59 - 2009-07-13 23:53 - 00062336 _____ (Brother Industries Ltd.) C:\Windows\system32\Drivers\BrSerWdm.sys
2009-07-14 01:59 - 2009-07-13 23:53 - 00013568 _____ (Brother Industries, Ltd.) C:\Windows\system32\Drivers\BrFiltLo.sys
2009-07-14 01:58 - 2009-07-14 02:15 - 00035840 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrUsbSti.dll
2009-07-14 01:58 - 2009-07-13 23:53 - 00012160 _____ (Brother Industries Ltd.) C:\Windows\system32\Drivers\BrUsbMdm.sys
2009-07-14 01:58 - 2009-07-13 23:53 - 00011904 _____ (Brother Industries Ltd.) C:\Windows\system32\Drivers\BrUsbSer.sys
2009-07-14 01:58 - 2009-07-13 23:53 - 00005248 _____ (Brother Industries, Ltd.) C:\Windows\system32\Drivers\BrFiltUp.sys
2009-07-14 01:57 - 2009-07-14 01:57 - 00272128 _____ (Brother Industries Ltd.) C:\Windows\system32\Drivers\BrSerId.sys
2009-07-14 01:55 - 2009-07-14 02:15 - 00216064 _____ (Brother Industries, Ltd.) C:\Windows\system32\Brmf2wia.dll
2009-07-14 01:41 - 2009-07-14 02:16 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2009-07-14 01:41 - 2009-07-14 01:41 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2009-07-14 01:36 - 2009-06-10 22:14 - 00034120 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl
2009-07-14 01:35 - 2009-06-10 22:14 - 00778096 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2009-07-14 01:24 - 2009-07-14 02:14 - 03405312 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2009-07-14 01:19 - 2009-07-14 02:16 - 00930816 _____ (Microsoft Corporation) C:\Windows\system32\xpssvcs.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\tapi3.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00629760 _____ (Microsoft Corporation) C:\Windows\system32\pmcsnap.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\ppcsnap.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\tapi32.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\TapiMigPlugin.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\tapilua.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\TapiSysprep.dll
2009-07-14 01:19 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\tapiperf.dll
2009-07-14 01:19 - 2009-07-14 02:15 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2009-07-14 01:19 - 2009-07-14 02:15 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\fdprint.dll
2009-07-14 01:19 - 2009-07-14 02:14 - 00448000 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2009-07-14 01:19 - 2009-07-14 02:14 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\telephon.cpl
2009-07-14 01:19 - 2009-07-14 02:14 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\remotesp.tsp
2009-07-14 01:19 - 2009-07-14 02:14 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\dialer.exe
2009-07-14 01:19 - 2009-07-14 02:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\hidphone.tsp
2009-07-14 01:19 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\tcmsetup.exe
2009-07-14 01:19 - 2009-07-14 02:14 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\TapiUnattend.exe
2009-07-14 01:19 - 2009-07-14 02:10 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\tapiui.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\tcpmonui.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\WSDPrintProxy.DLL
2009-07-14 01:18 - 2009-07-14 02:16 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\spoolss.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\tcpmib.dll
2009-07-14 01:18 - 2009-07-14 02:16 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2009-07-14 01:18 - 2009-07-14 02:15 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\findnetprinters.dll
2009-07-14 01:18 - 2009-07-14 02:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\gpprnext.dll
2009-07-14 01:18 - 2009-07-14 02:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2009-07-14 01:18 - 2009-07-14 02:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\localui.dll
2009-07-14 01:18 - 2009-07-14 02:14 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2009-07-14 01:18 - 2009-07-14 02:14 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\printui.exe
2009-07-14 01:18 - 2009-07-14 02:14 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2009-07-14 01:18 - 2009-07-14 02:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\bidispl.dll
2009-07-14 01:18 - 2009-07-14 02:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationHost.exe
2009-07-14 01:17 - 2009-07-14 02:16 - 00601600 _____ (Microsoft Corporation) C:\Windows\system32\XpsFilt.dll
2009-07-14 01:17 - 2009-07-14 01:17 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys
2009-07-14 01:16 - 2009-07-14 02:16 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\XPSSHHDR.dll
2009-07-14 01:15 - 2009-07-14 02:16 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wiashext.dll
2009-07-14 01:15 - 2009-07-14 02:15 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMPOSE.dll
2009-07-14 01:15 - 2009-07-14 02:15 - 00472576 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2009-07-14 01:15 - 2009-07-14 02:15 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2009-07-14 01:15 - 2009-07-14 02:15 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\FXSUTILITY.dll
2009-07-14 01:15 - 2009-07-14 02:15 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOM.dll
2009-07-14 01:15 - 2009-07-14 02:14 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wiaacmgr.exe
2009-07-14 01:15 - 2009-07-14 02:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\FXSUNATD.exe
2009-07-14 01:15 - 2009-07-14 02:11 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\WFSR.dll
2009-07-14 01:15 - 2009-07-14 02:05 - 00925184 _____ (Microsoft Corporation) C:\Windows\system32\FXSRESM.dll
2009-07-14 01:15 - 2009-07-14 02:05 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMPOSERES.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\sti.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\sti_ci.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\wiadss.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\wiascanprofiles.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\WSDScanProxy.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\WinFax.dll
2009-07-14 01:14 - 2009-07-14 02:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wiatrace.dll
2009-07-14 01:14 - 2009-07-14 02:15 - 00848384 _____ (Microsoft Corporation) C:\Windows\system32\FXSST.dll
2009-07-14 01:14 - 2009-07-14 02:15 - 00457216 _____ (Microsoft Corporation) C:\Windows\system32\FXSXP32.dll
2009-07-14 01:14 - 2009-07-14 02:15 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\FXST30.dll
2009-07-14 01:14 - 2009-07-14 02:15 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\FXSROUTE.dll
2009-07-14 01:14 - 2009-07-14 02:15 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\FXSEXT32.dll
2009-07-14 01:14 - 2009-07-14 02:14 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\atl.dll
2009-07-14 01:14 - 2009-07-14 02:14 - 00031232 _____ (Twain Working Group) C:\Windows\twunk_32.exe
2009-07-14 01:14 - 2009-07-14 02:05 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\FXSEVENT.dll
2009-07-14 01:14 - 2009-07-14 02:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\DocumentPerformanceEvents.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 10240512 _____ (Microsoft Corporation) C:\Windows\system32\NlsData000a.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 04888576 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0009.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 04509696 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0019.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 04507648 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0816.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 04507648 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0416.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 04507648 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0414.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 04507648 _____ (Microsoft Corporation) C:\Windows\system32\NlsData001d.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 04507648 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0010.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03476480 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0013.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData004e.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData004c.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData004b.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData004a.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0049.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0047.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0046.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0045.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0039.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 03116544 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0020.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 02670592 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0011.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 02654208 _____ (Microsoft Corporation) C:\Windows\system32\NlsData000c.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 02609664 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0001.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 02353152 _____ (Microsoft Corporation) C:\Windows\system32\NlsData000d.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 02255360 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0007.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01979392 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0027.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0c1a.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData081a.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0026.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0024.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData001b.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData001a.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0018.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData000f.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0003.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01977856 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0002.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01811968 _____ (Microsoft Corporation) C:\Windows\system32\NlsData003e.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01811968 _____ (Microsoft Corporation) C:\Windows\system32\NlsData002a.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01811968 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0022.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01811968 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0021.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 01537536 _____ (Microsoft Corporation) C:\Windows\system32\NlsData0000.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\xmlfilter.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\rtffilt.dll
2009-07-14 01:13 - 2009-07-14 02:16 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\wsepno.dll
2009-07-14 01:13 - 2009-07-14 02:15 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2009-07-14 01:13 - 2009-07-14 02:15 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\msswch.dll
2009-07-14 01:13 - 2009-07-14 02:14 - 01397248 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe
2009-07-14 01:13 - 2009-07-14 02:14 - 00629760 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe
2009-07-14 01:13 - 2009-07-14 02:14 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\AtBroker.exe
2009-07-14 01:13 - 2009-07-14 02:09 - 05071872 _____ (Microsoft Corporation) C:\Windows\system32\NlsModels0011.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 12038656 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 11722752 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0001.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 09892864 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons000a.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 07964672 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0024.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 07042560 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons081a.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 06917120 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0c1a.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 06781440 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0019.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 06585856 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons001b.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 06346240 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons001d.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 06237696 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons000c.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 06224896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0027.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 06014976 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons001a.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 05791232 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0026.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 05654528 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons000f.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 05499904 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0022.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 05090816 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0416.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 05031936 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0816.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 04981248 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0013.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 04616192 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0414.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0010.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 04164096 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0002.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 04093440 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons004c.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 04045824 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons003e.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons004a.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 03331072 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0018.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 02628608 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 02466816 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0011.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 02136064 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0021.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01972736 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons004e.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01808896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0046.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01793536 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0045.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01782272 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0039.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01722368 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons000d.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01702912 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons004b.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01558016 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0049.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01452544 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0003.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01411072 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0047.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 01236992 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0020.dll
2009-07-14 01:13 - 2009-07-14 02:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons002a.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\nlhtml.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\scripto.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\odbcbcp.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\odbcji32.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\odtext32.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\odpdx32.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\odfox32.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\odexl32.dll
2009-07-14 01:12 - 2009-07-14 02:16 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\oddbse32.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\dbnetlib.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\cliconfg.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\HelpPaneProxy.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\hhsetup.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\dbnmpntw.dll
2009-07-14 01:12 - 2009-07-14 02:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2009-07-14 01:12 - 2009-07-14 02:14 - 01739776 _____ (Microsoft Corporation) C:\Windows\system32\apds.dll
2009-07-14 01:12 - 2009-07-14 02:14 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2009-07-14 01:12 - 2009-07-14 02:14 - 00497152 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2009-07-14 01:12 - 2009-07-14 02:14 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\apircl.dll
2009-07-14 01:12 - 2009-07-14 02:14 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\apss.dll
2009-07-14 01:12 - 2009-07-14 02:14 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\cliconfg.exe
2009-07-14 01:12 - 2009-07-14 02:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.exe
2009-07-14 01:12 - 2009-07-14 02:14 - 00015360 _____ (Microsoft Corporation) C:\Windows\hh.exe
2009-07-14 01:12 - 2009-07-14 02:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe
2009-07-14 01:12 - 2009-07-14 02:14 - 00009728 _____ (Microsoft Corporation) C:\Windows\winhlp32.exe
2009-07-14 01:12 - 2009-07-14 01:12 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.rll
2009-07-14 01:12 - 2009-07-14 01:12 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\cliconfg.rll
2009-07-14 01:11 - 2009-07-14 02:16 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\thawbrkr.dll
2009-07-14 01:11 - 2009-07-14 02:16 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\offfilt.dll
2009-07-14 01:11 - 2009-07-14 02:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\odbc32gt.dll
2009-07-14 01:11 - 2009-07-14 02:15 - 06103040 _____ (Microsoft Corporation) C:\Windows\system32\chtbrkr.dll
2009-07-14 01:11 - 2009-07-14 02:15 - 01672192 _____ (Microsoft Corporation) C:\Windows\system32\chsbrkr.dll
2009-07-14 01:11 - 2009-07-14 02:15 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msdadiag.dll
2009-07-14 01:11 - 2009-07-14 02:15 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2009-07-14 01:11 - 2009-07-14 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\msdart.dll
2009-07-14 01:11 - 2009-07-14 02:15 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\mscpxl32.dLL
2009-07-14 01:11 - 2009-07-14 02:15 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\ds32gt.dll
2009-07-14 01:11 - 2009-07-14 02:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbcad32.exe
2009-07-14 01:11 - 2009-07-14 02:09 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\odbcint.dll
2009-07-14 01:11 - 2009-07-14 02:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\msorc32r.dll
2009-07-14 01:11 - 2009-07-14 02:06 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\mscpx32r.dLL
2009-07-14 01:11 - 2009-07-14 01:11 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\simpdata.tlb
2009-07-14 01:11 - 2009-07-14 01:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\msdatsrc.tlb
2009-07-14 01:10 - 2009-07-14 02:16 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2009-07-14 01:10 - 2009-07-14 02:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\sysprepMCE.dll
2009-07-14 01:10 - 2009-07-14 02:14 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\SoundRecorder.exe
2009-07-14 01:09 - 2009-07-14 02:16 - 01568768 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2009-07-14 01:09 - 2009-07-14 02:15 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\McxDriv.dll
2009-07-14 01:09 - 2009-07-14 02:15 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\mcsrchPH.dll
2009-07-14 01:09 - 2009-07-14 02:14 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\unregmp2.exe
2009-07-14 01:09 - 2009-07-14 02:14 - 00220672 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codecp.acm
2009-07-14 01:08 - 2009-07-14 02:16 - 01325056 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL
2009-07-14 01:08 - 2009-07-14 02:16 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2009-07-14 01:08 - 2009-07-14 02:16 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL
2009-07-14 01:08 - 2009-07-14 02:16 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL
2009-07-14 01:08 - 2009-07-14 02:16 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\wmidx.dll
2009-07-14 01:08 - 2009-07-14 02:16 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wmvdspa.dll
2009-07-14 01:08 - 2009-07-14 02:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\wmpcm.dll
2009-07-14 01:08 - 2009-07-14 02:15 - 00415744 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2009-07-14 01:08 - 2009-07-14 02:15 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll
2009-07-14 01:08 - 2009-07-14 02:15 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\LAPRXY.DLL
2009-07-14 01:08 - 2009-07-14 02:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\wmerror.dll
2009-07-14 01:08 - 2009-07-14 02:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\asferror.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL
2009-07-14 01:07 - 2009-07-14 02:16 - 00605184 _____ (Microsoft Corporation) C:\Windows\system32\sqlceqp30.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\SyncInfrastructure.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\WinSync.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL
2009-07-14 01:07 - 2009-07-14 02:16 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\WinSyncMetastore.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL
2009-07-14 01:07 - 2009-07-14 02:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\sqlceoledb30.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWiaCompat.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\WinSyncProviders.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\WABSyncProvider.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\Syncreg.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\wmcodecdspps.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\SyncInfrastructureps.dll
2009-07-14 01:07 - 2009-07-14 02:16 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\SyncHostps.dll
2009-07-14 01:07 - 2009-07-14 02:15 - 00609280 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL
2009-07-14 01:07 - 2009-07-14 02:15 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL
2009-07-14 01:07 - 2009-07-14 02:15 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL
2009-07-14 01:07 - 2009-07-14 02:15 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL
2009-07-14 01:07 - 2009-07-14 02:15 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL
2009-07-14 01:07 - 2009-07-14 02:15 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\mmcss.dll
2009-07-14 01:07 - 2009-07-14 02:14 - 00064000 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codeca.acm
2009-07-14 01:07 - 2009-07-14 02:14 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\SyncHost.exe
2009-07-14 01:07 - 2009-07-14 02:14 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe
2009-07-14 01:07 - 2009-07-14 02:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\avrt.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtp.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\sbeio.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtpUS.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wmdmps.dll
2009-07-14 01:06 - 2009-07-14 02:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wmdmlog.dll
2009-07-14 01:06 - 2009-07-14 02:15 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\mswmdm.dll
2009-07-14 01:06 - 2009-07-14 02:15 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2009-07-14 01:06 - 2009-07-14 02:15 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\dxpps.dll
2009-07-14 01:06 - 2009-07-14 02:14 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\Dxpserver.exe
2009-07-14 01:06 - 2009-07-14 02:14 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\bdaplgin.ax
2009-07-14 01:06 - 2009-07-14 02:09 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\sberes.dll
2009-07-14 01:06 - 2009-07-14 02:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\SampleRes.dll
2009-07-14 01:05 - 2009-07-14 02:16 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\tvratings.dll
2009-07-14 01:05 - 2009-07-14 02:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\XInput9_1_0.dll
2009-07-14 01:05 - 2009-07-14 02:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2009-07-14 01:05 - 2009-07-14 02:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MsPbdaCoInst.dll
2009-07-14 01:05 - 2009-07-14 02:15 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dpmodemx.dll
2009-07-14 01:05 - 2009-07-14 02:15 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2009-07-14 01:05 - 2009-07-14 02:15 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2009-07-14 01:05 - 2009-07-14 02:14 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2009-07-14 01:05 - 2009-07-14 02:14 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\dplaysvr.exe
2009-07-14 01:05 - 2009-07-14 02:04 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnlobby.dll
2009-07-14 01:04 - 2009-07-14 02:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\pid.dll
2009-07-14 01:04 - 2009-07-14 02:15 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\dplayx.dll
2009-07-14 01:04 - 2009-07-14 02:15 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\dinput8.dll
2009-07-14 01:04 - 2009-07-14 02:15 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\dinput.dll
2009-07-14 01:04 - 2009-07-14 02:15 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\gcdef.dll
2009-07-14 01:04 - 2009-07-14 02:15 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dpwsockx.dll
2009-07-14 01:04 - 2009-07-14 02:14 - 00138240 _____ (Microsoft Corporation) C:\Windows\system32\joy.cpl
2009-07-14 01:04 - 2009-07-14 02:06 - 09053696 _____ (Microsoft Corporation) C:\Windows\system32\mmres.dll
2009-07-14 01:03 - 2009-07-14 02:19 - 00022096 _____ (Microsoft Corporation) C:\Windows\system32\streamci.dll
2009-07-14 01:03 - 2009-07-14 02:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\PlaySndSrv.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\mfh264enc.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\dmime.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\dsdmo.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\mfdvdec.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\dmstyle.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\dmsynth.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\dmusic.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\mfAACEnc.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\dmscript.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\mmci.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\dmcompos.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\mcicda.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\dmloader.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\dmband.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mciwave.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\encapi.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\dswave.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\midimap.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mmcico.dll
2009-07-14 01:03 - 2009-07-14 02:15 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll
2009-07-14 01:03 - 2009-07-14 02:14 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\avicap32.dll
2009-07-14 01:03 - 2009-07-14 02:14 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\msgsm32.acm
2009-07-14 01:03 - 2009-07-14 02:14 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\dvdupgrd.exe
2009-07-14 01:03 - 2009-07-14 02:14 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.drv
2009-07-14 01:03 - 2009-07-14 02:14 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\msadp32.acm
2009-07-14 01:03 - 2009-07-14 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\imaadp32.acm
2009-07-14 01:03 - 2009-07-14 02:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\msg711.acm
2009-07-14 01:03 - 2009-07-14 02:14 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\dvdplay.exe
2009-07-14 01:03 - 2009-07-14 02:09 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\qedwipes.dll
2009-07-14 01:02 - 2009-07-14 02:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\TSErrRedir.dll
2009-07-14 01:02 - 2009-07-14 02:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\TsPnPRdrCoInstaller.dll
2009-07-14 01:02 - 2009-07-14 02:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\cfgbkend.dll
2009-07-14 01:02 - 2009-07-14 02:15 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2009-07-14 01:02 - 2009-07-14 02:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\drprov.dll
2009-07-14 01:02 - 2009-07-14 02:14 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\TSTheme.exe
2009-07-14 01:02 - 2009-07-14 01:02 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpbus.sys
2009-07-14 01:01 - 2009-07-14 02:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2009-07-14 01:01 - 2009-07-14 01:01 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\tsddd.dll
2009-07-14 01:01 - 2009-07-14 01:01 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPREFMP.sys
2009-07-14 01:01 - 2009-07-14 01:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPENCDD.sys
2009-07-14 00:59 - 2009-07-14 02:14 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\verifier.exe
2009-07-14 00:58 - 2009-07-14 02:14 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\regini.exe
2009-07-14 00:58 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\regsvr32.exe
2009-07-14 00:57 - 2009-07-14 02:14 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\tasklist.exe
2009-07-14 00:57 - 2009-07-14 02:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\taskkill.exe
2009-07-14 00:57 - 2009-07-14 02:14 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\systeminfo.exe
2009-07-14 00:56 - 2009-07-14 02:16 - 01114624 _____ (Microsoft Corporation) C:\Windows\system32\NetProjW.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistSvc.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00674304 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistSh.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\netprof.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\p2pcollab.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\netprofm.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WWanAPI.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\P2P.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\nlmgp.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\PeerDist.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistWSDDiscoProv.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\WWanHC.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistHttpTrans.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\wwancfg.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Wwanpref.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\wwapi.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\pnrpauto.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wwaninst.dll
2009-07-14 00:56 - 2009-07-14 02:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\nlmsprep.dll
2009-07-14 00:56 - 2009-07-14 02:15 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\drt.dll
2009-07-14 00:56 - 2009-07-14 02:15 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2009-07-14 00:56 - 2009-07-14 02:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\eapsvc.dll
2009-07-14 00:56 - 2009-07-14 02:15 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\EAPQEC.DLL
2009-07-14 00:56 - 2009-07-14 02:15 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\eappprxy.dll
2009-07-14 00:56 - 2009-07-14 02:15 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\CRPPresentation.dll
2009-07-14 00:56 - 2009-07-14 02:15 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\dnsext.dll
2009-07-14 00:56 - 2009-07-14 02:14 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\p2phost.exe
2009-07-14 00:56 - 2009-07-14 02:14 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\NetProj.exe
2009-07-14 00:56 - 2009-07-14 02:14 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Eap3Host.exe
2009-07-14 00:55 - 2009-07-14 02:16 - 00845824 _____ (Microsoft Corporation) C:\Windows\system32\RASMM.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00772608 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\WlanMM.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00669696 _____ (Microsoft Corporation) C:\Windows\system32\WLanConn.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\upnphost.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00162816 _____ (Microsoft Corporation) C:\Windows\system32\ssdpsrv.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\p2pnetsh.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\winsockhc.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pnrpnsp.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Pnrphc.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\wscmisetup.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\udhisapi.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\ssdpapi.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\uicom.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\snmpapi.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\serwvdrv.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\umdmxfrm.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\WINSRPC.DLL
2009-07-14 00:55 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\uniplat.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wsock32.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\wshelper.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\serialui.dll
2009-07-14 00:55 - 2009-07-14 02:16 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\whhelper.dll
2009-07-14 00:55 - 2009-07-14 02:15 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\modemui.dll
2009-07-14 00:55 - 2009-07-14 02:15 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\mdminst.dll
2009-07-14 00:55 - 2009-07-14 02:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll
2009-07-14 00:55 - 2009-07-14 02:15 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\drtprov.dll
2009-07-14 00:55 - 2009-07-14 02:15 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Groupinghc.dll
2009-07-14 00:55 - 2009-07-14 02:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\drttransport.dll
2009-07-14 00:55 - 2009-07-14 02:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\mgmtapi.dll
2009-07-14 00:55 - 2009-07-14 02:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\collab.cpl
2009-07-14 00:55 - 2009-07-14 02:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\ndptsp.tsp
2009-07-14 00:55 - 2009-07-14 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\cmmon32.exe
2009-07-14 00:55 - 2009-07-14 02:14 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\kmddsp.tsp
2009-07-14 00:55 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\NETSTAT.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\ipconfig.exe
2009-07-14 00:55 - 2009-07-14 02:14 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\upnpcont.exe
2009-07-14 00:55 - 2009-07-14 02:14 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\ARP.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\ROUTE.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\PING.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\PATHPING.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\snmptrap.exe
2009-07-14 00:55 - 2009-07-14 02:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TRACERT.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\MRINFO.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2009-07-14 00:55 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\TCPSVCS.EXE
2009-07-14 00:55 - 2009-07-14 02:14 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\HOSTNAME.EXE
2009-07-14 00:55 - 2009-07-14 02:05 - 00003072 _____ (Microsoft Corporation) C:\Windows\system32\icmp.dll
2009-07-14 00:55 - 2009-07-14 00:55 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\agilevpn.sys
2009-07-14 00:55 - 2009-07-14 00:55 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\modem.sys
2009-07-14 00:55 - 2009-07-14 00:55 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ws2ifsl.sys
2009-07-14 00:55 - 2009-07-14 00:55 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rootmdm.sys
2009-07-14 00:55 - 2009-07-13 23:58 - 00043131 _____ () C:\Windows\mib.bin
2009-07-14 00:54 - 2009-07-14 02:16 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00385024 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\qwave.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\rasmontr.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\rtm.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\rasauto.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\sstpsvc.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\NapiNSP.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\rasmbmgr.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\traffic.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\rasmxs.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\rasser.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\rasctrs.dll
2009-07-14 00:54 - 2009-07-14 02:16 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\rasadhlp.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00484352 _____ (Microsoft Corporation) C:\Windows\system32\cmdial32.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\ipnathlp.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\mprmsg.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\mprdim.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\eqossnap.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\cmutil.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cmcfg32.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\cmlua.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\cmpbk32.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\ifmon.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\cmstplua.dll
2009-07-14 00:54 - 2009-07-14 02:15 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\iprtprio.dll
2009-07-14 00:54 - 2009-07-14 02:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\netsh.exe
2009-07-14 00:54 - 2009-07-14 02:14 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\rasdial.exe
         

2009-07-14 00:54 - 2009-07-14 02:14 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\cmdl32.exe
2009-07-14 00:54 - 2009-07-14 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rasphone.exe
2009-07-14 00:54 - 2009-07-14 02:14 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\rasautou.exe
2009-07-14 00:54 - 2009-07-14 02:11 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\ws2help.dll
2009-07-14 00:54 - 2009-07-14 02:09 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\rnr20.dll
2009-07-14 00:54 - 2009-07-14 02:06 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msafd.dll
2009-07-14 00:54 - 2009-07-14 00:54 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipnat.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasl2tp.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspppoe.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rassstp.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspptp.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ipfltdrv.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\qwavedrv.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndistapi.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\asyncmac.sys
2009-07-14 00:54 - 2009-07-14 00:54 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rasacd.sys
2009-07-14 00:53 - 2009-07-14 02:16 - 00994816 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00485376 _____ (Microsoft Corporation) C:\Windows\system32\IasMigPlugin.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\wzcdlg.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\networkitemfactory.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\netbios.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\wshqos.dll
2009-07-14 00:53 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wshnetbs.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00462848 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00322560 _____ (Microsoft Corporation) C:\Windows\system32\iassdo.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\hnetcfg.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\lltdsvc.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\iashlpr.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\iassvcs.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iaspolcy.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\dtsh.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\lltdapi.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\irmon.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\ias.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\lmhsvc.dll
2009-07-14 00:53 - 2009-07-14 02:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\irclass.dll
2009-07-14 00:53 - 2009-07-14 02:14 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\irprops.cpl
2009-07-14 00:53 - 2009-07-14 02:14 - 00166912 _____ (Microsoft Corporation) C:\Windows\system32\irftp.exe
2009-07-14 00:53 - 2009-07-14 02:14 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\alg.exe
2009-07-14 00:53 - 2009-07-14 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\setupSNK.exe
2009-07-14 00:53 - 2009-07-14 02:14 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\bridgeunattend.exe
2009-07-14 00:53 - 2009-07-14 02:14 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\nbtstat.exe
2009-07-14 00:53 - 2009-07-14 02:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\icsunattend.exe
2009-07-14 00:53 - 2009-07-14 02:06 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\lltdres.dll
2009-07-14 00:53 - 2009-07-14 00:53 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2009-07-14 00:53 - 2009-07-14 00:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\irda.sys
2009-07-14 00:53 - 2009-07-14 00:53 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\smb.sys
2009-07-14 00:53 - 2009-07-14 00:53 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rspndr.sys
2009-07-14 00:53 - 2009-07-14 00:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\lltdio.sys
2009-07-14 00:53 - 2009-07-14 00:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbios.sys
2009-07-14 00:53 - 2009-07-14 00:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\irenum.sys
2009-07-14 00:53 - 2009-07-14 00:53 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwf.sys
2009-07-14 00:52 - 2009-07-14 02:16 - 00829440 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\nettrace.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\wlandlg.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\netman.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\ndfapi.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\NAPMONTR.DLL
2009-07-14 00:52 - 2009-07-14 02:16 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\nlahc.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\ndfhcdiscovery.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\winethc.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\ndishc.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\WfHC.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\ucmhc.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\ndiscapCfg.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\napipsec.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\ndfetw.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapPeerProxy.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\WcnEapAuthProxy.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wfapigp.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\xmlprovi.dll
2009-07-14 00:52 - 2009-07-14 02:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\ndproxystub.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 01344512 _____ (Microsoft Corporation) C:\Windows\system32\connect.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00757760 _____ (Microsoft Corporation) C:\Windows\system32\ipsecsnp.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00265728 _____ (Microsoft Corporation) C:\Windows\system32\dot3gpui.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\mssha.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\icsigd.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\icfupgd.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\DHCPQEC.DLL
2009-07-14 00:52 - 2009-07-14 02:15 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\dnshc.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\dhcpsapi.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\dot3gpclnt.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\cmifw.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\igdDiag.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\btpanui.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\correngine.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\fwcfg.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dot3hc.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\dot3dlg.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\brdgcfg.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\hnetmon.dll
2009-07-14 00:52 - 2009-07-14 02:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcmonitor.dll
2009-07-14 00:52 - 2009-07-14 02:14 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\authfwcfg.dll
2009-07-14 00:52 - 2009-07-14 02:14 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWGP.dll
2009-07-14 00:52 - 2009-07-14 02:14 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\NAPSTAT.EXE
2009-07-14 00:52 - 2009-07-14 02:14 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\ncpa.cpl
2009-07-14 00:52 - 2009-07-14 02:14 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\Firewall.cpl
2009-07-14 00:52 - 2009-07-14 02:07 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\msshavmsg.dll
2009-07-14 00:52 - 2009-07-14 02:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\bridgeres.dll
2009-07-14 00:52 - 2009-07-14 00:52 - 00267264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2009-07-14 00:52 - 2009-07-14 00:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys
2009-07-14 00:52 - 2009-07-14 00:52 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwififlt.sys
2009-07-14 00:52 - 2009-07-14 00:52 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiscap.sys
2009-07-14 00:52 - 2009-07-14 00:52 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifibus.sys
2009-07-14 00:52 - 2009-07-14 00:52 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vwifimp.sys
2009-07-14 00:51 - 2009-07-14 02:16 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\xwizards.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\wlancfg.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\xwtpdui.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\WLanHC.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\wlgpclnt.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\xwtpw32.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\xwreg.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\usbceip.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wlaninst.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\usbperf.dll
2009-07-14 00:51 - 2009-07-14 02:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\wlanutil.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\L2SecHC.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fdBth.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00073728 _____ () C:\Windows\system32\BthpanContextHandler.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\l2gpstore.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\l2nacp.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\hidserv.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\bthci.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\bthpanapi.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\hid.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\fdBthProxy.dll
2009-07-14 00:51 - 2009-07-14 02:15 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\CIRCoInst.dll
2009-07-14 00:51 - 2009-07-14 02:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\wlanext.exe
2009-07-14 00:51 - 2009-07-14 02:14 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\xwizard.exe
2009-07-14 00:51 - 2009-07-14 02:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\bthudtask.exe
2009-07-14 00:51 - 2009-07-14 02:14 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\vidcap.ax
2009-07-14 00:51 - 2009-07-14 00:51 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbth.sys
2009-07-14 00:51 - 2009-07-14 00:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ohci1394.sys
2009-07-14 00:51 - 2009-07-14 00:51 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthmodem.sys
2009-07-14 00:51 - 2009-07-14 00:51 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394bus.sys
2009-07-14 00:51 - 2009-07-14 00:51 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidir.sys
2009-07-14 00:51 - 2009-07-14 00:51 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\circlass.sys
2009-07-14 00:51 - 2009-07-14 00:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umpass.sys
2009-07-14 00:51 - 2009-07-14 00:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mshidkmdf.sys
2009-07-14 00:50 - 2009-07-14 00:50 - 00053632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2009-07-14 00:50 - 2009-07-14 00:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys
2009-07-14 00:48 - 2009-07-14 02:14 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\SnippingTool.exe
2009-07-14 00:47 - 2009-07-14 02:15 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2009-07-14 00:47 - 2009-07-14 02:14 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\hwrreg.exe
2009-07-14 00:47 - 2009-07-14 02:14 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\hwrcomp.exe
2009-07-14 00:46 - 2009-07-14 02:20 - 00022096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crcdisk.sys
2009-07-14 00:46 - 2009-07-14 02:19 - 00032832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vdrvroot.sys
2009-07-14 00:46 - 2009-07-14 02:16 - 02969600 _____ (Microsoft Corporation) C:\Windows\system32\UIHub.dll
2009-07-14 00:46 - 2009-07-14 02:16 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\Tabbtn.dll
2009-07-14 00:46 - 2009-07-14 02:16 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\TabbtnEx.dll
2009-07-14 00:46 - 2009-07-14 02:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\iscsicpl.dll
2009-07-14 00:46 - 2009-07-14 02:15 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2009-07-14 00:46 - 2009-07-14 02:15 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\iscsiexe.dll
2009-07-14 00:46 - 2009-07-14 02:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2009-07-14 00:46 - 2009-07-14 02:15 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\iscsidsc.dll
2009-07-14 00:46 - 2009-07-14 02:15 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\iscsied.dll
2009-07-14 00:46 - 2009-07-14 02:14 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAuthn.exe
2009-07-14 00:46 - 2009-07-14 02:14 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\iscsicpl.exe
2009-07-14 00:46 - 2009-07-14 02:06 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll
2009-07-14 00:46 - 2009-07-14 00:46 - 00021632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wacompen.sys
2009-07-14 00:46 - 2009-07-14 00:46 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\MTConfig.sys
2009-07-14 00:45 - 2009-07-14 02:20 - 00035408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2009-07-14 00:45 - 2009-07-14 02:19 - 00012240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\swenum.sys
2009-07-14 00:45 - 2009-07-14 02:16 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2009-07-14 00:45 - 2009-07-14 02:16 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\SensorsClassExtension.dll
2009-07-14 00:45 - 2009-07-14 02:16 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\Storprop.dll
2009-07-14 00:45 - 2009-07-14 02:16 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\sensrsvc.dll
2009-07-14 00:45 - 2009-07-14 02:15 - 01242112 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2009-07-14 00:45 - 2009-07-14 02:15 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll
2009-07-14 00:45 - 2009-07-14 02:15 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\EhStorShell.dll
2009-07-14 00:45 - 2009-07-14 02:15 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\imapi.dll
2009-07-14 00:45 - 2009-07-14 02:15 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\EhStorPwdMgr.dll
2009-07-14 00:45 - 2009-07-14 02:14 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-07-14 00:45 - 2009-07-14 02:14 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayClassInstaller.dll
2009-07-14 00:45 - 2009-07-14 02:14 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayApi.dll
2009-07-14 00:45 - 2009-07-14 02:14 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\LocationNotifications.exe
2009-07-14 00:45 - 2009-07-14 00:45 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serial.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\parport.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouhid.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fdc.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tape.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sermouse.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\flpydisk.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mcd.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\serenum.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\smclib.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sfloppy.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_mmc.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffdisk.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\parvdm.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00008320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mskssrv.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mstee.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\beep.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00005888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mspclock.sys
2009-07-14 00:45 - 2009-07-14 00:45 - 00005504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mspqm.sys
2009-07-14 00:44 - 2009-07-14 02:16 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\txflog.dll
2009-07-14 00:44 - 2009-07-14 02:16 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\olecli32.dll
2009-07-14 00:44 - 2009-07-14 02:16 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\trkwks.dll
2009-07-14 00:44 - 2009-07-14 02:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\stclient.dll
2009-07-14 00:44 - 2009-07-14 02:16 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\system32\clbcatq.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\catsrv.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\msdtckrm.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\es.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\msdtcuiu.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\comsnap.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\msdtclog.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\comrepl.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\colbact.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\mtxlegih.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\mfcsubs.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\catsrvps.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\mtxdm.dll
2009-07-14 00:44 - 2009-07-14 02:15 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\mtxex.dll
2009-07-14 00:44 - 2009-07-14 02:14 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe
2009-07-14 00:44 - 2009-07-14 02:14 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\mtstocom.exe
2009-07-14 00:44 - 2009-07-14 02:14 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\dcomcnfg.exe
2009-07-14 00:44 - 2009-07-14 02:06 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\msdtcVSp1res.dll
2009-07-14 00:44 - 2009-07-14 02:04 - 01297408 _____ (Microsoft Corporation) C:\Windows\system32\comres.dll
2009-07-14 00:43 - 2009-07-14 02:16 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\oledlg.dll
2009-07-14 00:43 - 2009-07-14 02:16 - 00044544 _____ (Microsoft) C:\Windows\system32\RPCNDFP.dll
2009-07-14 00:43 - 2009-07-14 02:16 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\olesvr32.dll
2009-07-14 00:43 - 2009-07-14 02:16 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\rpcnsh.dll
2009-07-14 00:43 - 2009-07-14 02:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\RpcDiag.dll
2009-07-14 00:43 - 2009-07-14 02:16 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\RpcNs4.dll
2009-07-14 00:43 - 2009-07-14 02:15 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\msidcrl30.dll
2009-07-14 00:43 - 2009-07-14 02:15 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2009-07-14 00:43 - 2009-07-14 02:15 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2009-07-14 00:43 - 2009-07-14 02:14 - 06376960 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2009-07-14 00:43 - 2009-07-14 02:14 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\RpcPing.exe
2009-07-14 00:43 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\Locator.exe
2009-07-14 00:43 - 2009-07-14 02:14 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\dllhst3g.exe
2009-07-14 00:43 - 2009-07-14 02:14 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\dllhost.exe
2009-07-14 00:43 - 2009-07-14 02:09 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2009-07-14 00:43 - 2009-07-14 02:06 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\iprop.dll
2009-07-14 00:43 - 2009-07-14 00:43 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\stdole2.tlb
2009-07-14 00:42 - 2009-07-14 02:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\SNTSearch.dll
2009-07-14 00:42 - 2009-07-14 02:16 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2009-07-14 00:42 - 2009-07-14 02:16 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll
2009-07-14 00:42 - 2009-07-14 02:16 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\StorageContextHandler.dll
2009-07-14 00:42 - 2009-07-14 02:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\msoeacct.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\msoert2.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00064000 _____ () C:\Windows\system32\BWContextHandler.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingProxy.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\dispex.dll
2009-07-14 00:42 - 2009-07-14 02:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\BWUnpairElevated.dll
2009-07-14 00:42 - 2009-07-14 02:14 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll
2009-07-14 00:42 - 2009-07-14 02:14 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\msscript.ocx
2009-07-14 00:42 - 2009-07-14 02:14 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingWizard.exe
2009-07-14 00:42 - 2009-07-14 02:06 - 20268032 _____ (Microsoft Corporation) C:\Windows\system32\imageres.dll
2009-07-14 00:42 - 2009-07-14 02:06 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2009-07-14 00:42 - 2009-07-14 02:05 - 04240384 _____ (Microsoft) C:\Windows\system32\GameUXLegacyGDFs.dll
2009-07-14 00:42 - 2009-07-14 02:03 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\ACCTRES.dll
2009-07-14 00:41 - 2009-07-14 02:16 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\zgmprxy.dll
2009-07-14 00:41 - 2009-07-14 02:16 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\usbui.dll
2009-07-14 00:41 - 2009-07-14 02:16 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\rshx32.dll
2009-07-14 00:41 - 2009-07-14 02:16 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\RegCtrl.dll
2009-07-14 00:41 - 2009-07-14 02:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\version.dll
2009-07-14 00:41 - 2009-07-14 02:16 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\ntlanui2.dll
2009-07-14 00:41 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\panmap.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 01092096 _____ (Microsoft Corporation) C:\Windows\system32\cmncliM.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\dskquota.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\efsadu.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\console.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\msports.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dssec.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\LangCleanupSysprepAction.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\MUILanguageCleanup.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\DeviceUxRes.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\getuname.dll
2009-07-14 00:41 - 2009-07-14 02:15 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\lpksetupproxyserv.dll
2009-07-14 00:41 - 2009-07-14 02:14 - 00354304 _____ (Microsoft Corporation) C:\Windows\system32\StikyNot.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\cttune.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\notepad.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00179712 _____ (Microsoft Corporation) C:\Windows\notepad.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00125440 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2009-07-14 00:41 - 2009-07-14 02:14 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\fontview.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\batt.dll
2009-07-14 00:41 - 2009-07-14 02:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\winver.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\RunLegacyCPLElevated.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\verclsid.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\scrnsave.scr
2009-07-14 00:41 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\write.exe
2009-07-14 00:41 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\write.exe
2009-07-14 00:41 - 2009-07-14 02:06 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\imagesp1.dll
2009-07-14 00:41 - 2009-07-14 02:06 - 00184832 _____ (Microsoft Corporation) C:\Windows\system32\moricons.dll
2009-07-14 00:41 - 2009-07-14 02:04 - 06214144 _____ (Microsoft Corporation) C:\Windows\system32\CardGames.dll
2009-07-14 00:41 - 2009-06-10 22:30 - 00093702 _____ () C:\Windows\system32\SubRange.uce
2009-07-14 00:41 - 2009-06-10 22:30 - 00060458 _____ () C:\Windows\system32\ideograf.uce
2009-07-14 00:41 - 2009-06-10 22:30 - 00024006 _____ () C:\Windows\system32\gb2312.uce
2009-07-14 00:41 - 2009-06-10 22:30 - 00016740 _____ () C:\Windows\system32\ShiftJIS.uce
2009-07-14 00:41 - 2009-06-10 22:30 - 00012876 _____ () C:\Windows\system32\korean.uce
2009-07-14 00:41 - 2009-06-10 22:30 - 00008484 _____ () C:\Windows\system32\kanji_2.uce
2009-07-14 00:41 - 2009-06-10 22:30 - 00006948 _____ () C:\Windows\system32\kanji_1.uce
2009-07-14 00:40 - 2009-07-14 02:16 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2009-07-14 00:40 - 2009-07-14 02:16 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\wpcmig.dll
2009-07-14 00:40 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wpcsvc.dll
2009-07-14 00:40 - 2009-07-14 02:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\shfolder.dll
2009-07-14 00:40 - 2009-07-14 02:15 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\dsquery.dll
2009-07-14 00:40 - 2009-07-14 02:15 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\mlang.dll
2009-07-14 00:40 - 2009-07-14 02:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\deskadp.dll
2009-07-14 00:40 - 2009-07-14 02:15 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\deskmon.dll
2009-07-14 00:40 - 2009-07-14 02:15 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\deskperf.dll
2009-07-14 00:40 - 2009-07-14 02:15 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\hcproviders.dll
2009-07-14 00:40 - 2009-07-14 02:15 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2009-07-14 00:40 - 2009-07-14 02:14 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\cleanmgr.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\control.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\OptionalFeatures.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\DeviceProperties.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\SystemPropertiesRemote.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\SystemPropertiesProtection.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\SystemPropertiesPerformance.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\SystemPropertiesHardware.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\SystemPropertiesDataExecutionPrevention.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\SystemPropertiesComputerName.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\SystemPropertiesAdvanced.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\DpiScaling.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\AdapterTroubleshooter.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cttunesvr.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\ComputerDefaults.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\grpconv.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\sbunattend.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\GettingStarted.exe
2009-07-14 00:40 - 2009-07-14 02:14 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\systray.exe
2009-07-14 00:40 - 2009-07-14 00:40 - 00004096 _____ (Microsoft) C:\Windows\system32\WEB.rs
2009-07-14 00:39 - 2009-07-14 02:16 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wpcumi.dll
2009-07-14 00:39 - 2009-07-14 02:16 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\wpcao.dll
2009-07-14 00:39 - 2009-07-14 02:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2009-07-14 00:39 - 2009-07-14 02:16 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll
2009-07-14 00:39 - 2009-07-14 02:16 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\shpafact.dll
2009-07-14 00:39 - 2009-07-14 02:15 - 01502720 _____ (Microsoft Corporation) C:\Windows\system32\diskcopy.dll
2009-07-14 00:39 - 2009-07-14 02:15 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\msident.dll
2009-07-14 00:39 - 2009-07-14 02:15 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\docprop.dll
2009-07-14 00:39 - 2009-07-14 02:15 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\linkinfo.dll
2009-07-14 00:39 - 2009-07-14 02:15 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\msidle.dll
2009-07-14 00:39 - 2009-07-14 02:14 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\DisplaySwitch.exe
2009-07-14 00:39 - 2009-07-14 02:14 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\mctadmin.exe
2009-07-14 00:39 - 2009-07-14 02:14 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\AltTab.dll
2009-07-14 00:39 - 2009-07-14 02:14 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Netplwiz.exe
2009-07-14 00:39 - 2009-07-14 02:14 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\gpupdate.exe
2009-07-14 00:39 - 2009-07-14 02:07 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\msidntld.dll
2009-07-14 00:38 - 2009-07-14 02:16 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\ntdsapi.dll
2009-07-14 00:38 - 2009-07-14 02:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2009-07-14 00:38 - 2009-07-14 02:15 - 00951808 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2009-07-14 00:38 - 2009-07-14 02:15 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2009-07-14 00:38 - 2009-07-14 02:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.dll
2009-07-14 00:38 - 2009-07-14 02:14 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\adsnt.dll
2009-07-14 00:38 - 2009-07-14 02:14 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\adsldpc.dll
2009-07-14 00:38 - 2009-07-14 02:14 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\appmgmts.dll
2009-07-14 00:38 - 2009-07-14 02:14 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe
2009-07-14 00:38 - 2009-07-14 02:14 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2009-07-14 00:38 - 2009-07-14 02:14 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\gpscript.exe
2009-07-14 00:38 - 2009-07-14 02:06 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mctres.dll
2009-07-14 00:38 - 2009-07-14 02:04 - 00514048 _____ (Microsoft Corporation) C:\Windows\system32\shellstyle.dll
2009-07-14 00:37 - 2009-07-14 02:17 - 00242936 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2009-07-14 00:37 - 2009-07-14 02:17 - 00156728 _____ (Microsoft Corporation) C:\Windows\system32\dssenh.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\SrpUxNativeSnapIn.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\VaultCredProvider.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\winbio.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\pautoenr.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\vaultcli.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\w32topl.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2009-07-14 00:37 - 2009-07-14 02:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\winrnr.dll
2009-07-14 00:37 - 2009-07-14 02:15 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\IdListen.dll
2009-07-14 00:37 - 2009-07-14 02:15 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\dfscli.dll
2009-07-14 00:37 - 2009-07-14 02:15 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\feclient.dll
2009-07-14 00:37 - 2009-07-14 02:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\dimsjob.dll
2009-07-14 00:37 - 2009-07-14 02:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2009-07-14 00:37 - 2009-07-14 02:14 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\AppIdPolicyEngineApi.dll
2009-07-14 00:37 - 2009-07-14 02:14 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\BioCredProv.dll
2009-07-14 00:37 - 2009-07-14 02:14 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\net.exe
2009-07-14 00:37 - 2009-07-14 02:14 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\VaultSysUi.exe
2009-07-14 00:37 - 2009-07-14 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\at.exe
2009-07-14 00:37 - 2009-07-14 02:14 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\VaultCmd.exe
2009-07-14 00:37 - 2009-07-14 02:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\netmsg.dll
2009-07-14 00:37 - 2009-07-14 02:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\neth.dll
2009-07-14 00:37 - 2009-07-14 00:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\activeds.tlb
2009-07-14 00:36 - 2009-07-14 02:16 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\sppcext.dll
2009-07-14 00:36 - 2009-07-14 02:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sppcc.dll
2009-07-14 00:36 - 2009-07-14 02:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\sppcommdlg.dll
2009-07-14 00:36 - 2009-07-14 02:16 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\sppwmi.dll
2009-07-14 00:36 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\sysntfy.dll
2009-07-14 00:36 - 2009-07-14 02:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wmsgapi.dll
2009-07-14 00:36 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\WlS0WndH.dll
2009-07-14 00:36 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\sas.dll
2009-07-14 00:36 - 2009-07-14 02:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\IDStore.dll
2009-07-14 00:36 - 2009-07-14 02:14 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe
2009-07-14 00:36 - 2009-07-14 02:14 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wlrmdr.exe
2009-07-14 00:36 - 2009-07-14 02:14 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
2009-07-14 00:36 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mpnotify.exe
2009-07-14 00:35 - 2009-07-14 02:16 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\slc.dll
2009-07-14 00:35 - 2009-07-14 02:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\slcext.dll
2009-07-14 00:34 - 2009-07-14 02:16 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\ntmarta.dll
2009-07-14 00:34 - 2009-07-14 02:16 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\negoexts.dll
2009-07-14 00:34 - 2009-07-14 02:15 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\keymgr.dll
2009-07-14 00:34 - 2009-07-14 02:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\gptext.dll
2009-07-14 00:34 - 2009-07-14 02:15 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\DDACLSys.dll
2009-07-14 00:34 - 2009-07-14 02:14 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\AuditNativeSnapIn.dll
2009-07-14 00:34 - 2009-07-14 02:14 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\auditcse.dll
2009-07-14 00:34 - 2009-07-14 02:14 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2009-07-14 00:34 - 2009-07-14 02:14 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\rekeywiz.exe
2009-07-14 00:34 - 2009-07-14 02:14 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\AuditPolicyGPInterop.dll
2009-07-14 00:34 - 2009-07-14 02:14 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\ksetup.exe
2009-07-14 00:34 - 2009-07-14 02:14 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\klist.exe
2009-07-14 00:34 - 2009-07-14 02:14 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\setspn.exe
2009-07-14 00:34 - 2009-07-14 02:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\shutdown.exe
2009-07-14 00:34 - 2009-07-14 02:14 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\syskey.exe
2009-07-14 00:34 - 2009-07-14 02:14 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\credwiz.exe
2009-07-14 00:34 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\cmdkey.exe
2009-07-14 00:34 - 2009-07-14 02:03 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\auditpolmsg.dll
2009-07-14 00:33 - 2009-07-14 02:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2009-07-14 00:33 - 2009-07-14 02:16 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2009-07-14 00:33 - 2009-07-14 02:16 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2009-07-14 00:33 - 2009-07-14 02:16 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll
2009-07-14 00:33 - 2009-07-14 02:16 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\SCardDlg.dll
2009-07-14 00:33 - 2009-07-14 02:16 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\sccls.dll
2009-07-14 00:33 - 2009-07-14 02:15 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollUI.dll
2009-07-14 00:33 - 2009-07-14 02:15 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\efslsaext.dll
2009-07-14 00:33 - 2009-07-14 02:15 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\efssvc.dll
2009-07-14 00:33 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\efsutil.dll
2009-07-14 00:33 - 2009-07-14 02:15 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\dsrole.dll
2009-07-14 00:33 - 2009-07-14 02:14 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\certreq.exe
2009-07-14 00:33 - 2009-07-14 02:14 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollCtrl.exe
2009-07-14 00:33 - 2009-07-14 02:14 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\AxInstUI.exe
2009-07-14 00:33 - 2009-07-14 02:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\SecEdit.exe
2009-07-14 00:33 - 2009-07-14 02:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\efsui.exe
2009-07-14 00:33 - 2009-07-14 02:09 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\security.dll
2009-07-14 00:33 - 2009-07-14 02:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msprivs.dll
2009-07-14 00:32 - 2009-07-14 02:16 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\psbase.dll
2009-07-14 00:32 - 2009-07-14 02:16 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\pstorec.dll
2009-07-14 00:32 - 2009-07-14 02:16 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\pstorsvc.dll
2009-07-14 00:32 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\softpub.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\certCredProvider.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\cryptxml.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\cryptdll.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\cryptext.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\pwrshplugin.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\mssign32.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\esentprf.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\capisp.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\keyiso.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\cngaudit.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\mscat32.dll
2009-07-14 00:32 - 2009-07-14 02:15 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\mssip32.dll
2009-07-14 00:32 - 2009-07-14 02:14 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2009-07-14 00:32 - 2009-07-14 02:14 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\CompMgmtLauncher.exe
2009-07-14 00:32 - 2009-07-14 02:14 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\esentutl.exe
2009-07-14 00:32 - 2009-07-14 02:14 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2009-07-14 00:32 - 2009-07-14 02:14 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\dpapimig.exe
2009-07-14 00:31 - 2009-07-14 02:16 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\winrscmd.dll
2009-07-14 00:31 - 2009-07-14 02:16 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wscinterop.dll
2009-07-14 00:31 - 2009-07-14 02:16 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2009-07-14 00:31 - 2009-07-14 02:16 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wscisvif.dll
2009-07-14 00:31 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2009-07-14 00:31 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\winrssrv.dll
2009-07-14 00:31 - 2009-07-14 02:16 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\wscproxystub.dll
2009-07-14 00:31 - 2009-07-14 02:15 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\miguiresource.dll
2009-07-14 00:31 - 2009-07-14 02:15 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\msisip.dll
2009-07-14 00:31 - 2009-07-14 02:15 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\msiltcfg.dll
2009-07-14 00:31 - 2009-07-14 02:14 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2009-07-14 00:31 - 2009-07-14 02:14 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\shrpubw.exe
2009-07-14 00:31 - 2009-07-14 02:14 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\bootcfg.exe
2009-07-14 00:31 - 2009-07-14 02:14 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\getmac.exe
2009-07-14 00:31 - 2009-07-14 02:14 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\winrs.exe
2009-07-14 00:31 - 2009-07-14 02:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\eventcreate.exe
2009-07-14 00:31 - 2009-07-14 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\winrshost.exe
2009-07-14 00:31 - 2009-07-14 02:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2009-07-14 00:31 - 2009-07-14 02:14 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\acledit.dll
2009-07-14 00:31 - 2009-07-14 02:11 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2009-07-14 00:31 - 2009-07-14 02:11 - 00001536 _____ (Microsoft Corporation) C:\Windows\system32\winrsmgr.dll
2009-07-14 00:31 - 2009-07-14 02:07 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2009-07-14 00:30 - 2009-07-14 02:16 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2009-07-14 00:30 - 2009-07-14 02:16 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\provthrd.dll
2009-07-14 00:30 - 2009-07-14 02:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\wecsvc.dll
2009-07-14 00:30 - 2009-07-14 02:16 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\ncobjapi.dll
2009-07-14 00:30 - 2009-07-14 02:14 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe
2009-07-14 00:30 - 2009-07-14 02:14 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\wecutil.exe
2009-07-14 00:29 - 2009-07-14 02:16 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2009-07-14 00:29 - 2009-07-14 02:16 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\mycomput.dll
2009-07-14 00:29 - 2009-07-14 02:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\wevtfwd.dll
2009-07-14 00:29 - 2009-07-14 02:16 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\wecapi.dll
2009-07-14 00:29 - 2009-07-14 02:16 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\TaskSchdPS.dll
2009-07-14 00:29 - 2009-07-14 02:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qmgrprxy.dll
2009-07-14 00:29 - 2009-07-14 02:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TSChannel.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\filemgmt.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\dsprop.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\loghours.dll
2009-07-14 00:29 - 2009-07-14 02:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\DfsShlEx.dll
2009-07-14 00:29 - 2009-07-14 02:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\eventvwr.exe
2009-07-14 00:29 - 2009-07-14 02:14 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\bitsigd.dll
2009-07-14 00:29 - 2009-07-14 02:14 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\bitsprx5.dll
2009-07-14 00:29 - 2009-07-14 02:14 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\bitsprx2.dll
2009-07-14 00:29 - 2009-07-14 02:14 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\bitsprx6.dll
2009-07-14 00:29 - 2009-07-14 02:14 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\bitsprx3.dll
2009-07-14 00:29 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\bitsprx4.dll
2009-07-14 00:28 - 2009-07-14 02:16 - 01106944 _____ (Microsoft Corporation) C:\Windows\system32\ogldrv.dll
2009-07-14 00:28 - 2009-07-14 02:16 - 00791552 _____ (Microsoft Corporation) C:\Windows\system32\opengl32.dll
2009-07-14 00:28 - 2009-07-14 02:15 - 01036800 _____ (Microsoft Corporation) C:\Windows\system32\d3d8.dll
2009-07-14 00:28 - 2009-07-14 02:15 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\d3dim700.dll
2009-07-14 00:28 - 2009-07-14 02:15 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll
2009-07-14 00:28 - 2009-07-14 02:15 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\glmf32.dll
2009-07-14 00:28 - 2009-07-14 02:15 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\glu32.dll
2009-07-14 00:28 - 2009-07-14 02:15 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\dxva2.dll
2009-07-14 00:28 - 2009-07-14 02:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\ddrawex.dll
2009-07-14 00:28 - 2009-07-14 02:14 - 00264704 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe
2009-07-14 00:27 - 2009-07-14 02:16 - 00561664 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2009-07-14 00:27 - 2009-07-14 02:16 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2009-07-14 00:27 - 2009-07-14 02:16 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\rgb9rast.dll
2009-07-14 00:27 - 2009-07-14 02:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2009-07-14 00:27 - 2009-07-14 02:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2009-07-14 00:27 - 2009-07-14 02:16 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll
2009-07-14 00:27 - 2009-07-14 02:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\NativeHooks.dll
2009-07-14 00:27 - 2009-07-14 02:15 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\d3dramp.dll
2009-07-14 00:27 - 2009-07-14 02:15 - 00531968 _____ (Microsoft Corporation) C:\Windows\system32\ddraw.dll
2009-07-14 00:27 - 2009-07-14 02:15 - 00386048 _____ (Microsoft Corporation) C:\Windows\system32\d3dim.dll
2009-07-14 00:27 - 2009-07-14 02:15 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\d3dxof.dll
2009-07-14 00:27 - 2009-07-14 02:15 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\Magnification.dll
2009-07-14 00:27 - 2009-07-14 02:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\d3d8thk.dll
2009-07-14 00:27 - 2009-07-14 02:14 - 00360448 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2009-07-14 00:27 - 2009-07-14 02:14 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2009-07-14 00:27 - 2009-07-14 02:14 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2009-07-14 00:26 - 2009-07-14 02:16 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\WmpDui.dll
2009-07-14 00:26 - 2009-07-14 02:16 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\softkbd.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\duser.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\msaatext.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\msimtf.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\MsCtfMonitor.dll
2009-07-14 00:26 - 2009-07-14 02:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\CHxReadingStringIME.dll
2009-07-14 00:26 - 2009-07-14 02:14 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\ctfmon.exe
2009-07-14 00:26 - 2009-07-14 02:06 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
2009-07-14 00:26 - 2009-07-14 02:06 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
2009-07-14 00:26 - 2009-07-14 02:06 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
2009-07-14 00:26 - 2009-07-14 02:06 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
2009-07-14 00:26 - 2009-07-14 02:06 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
2009-07-14 00:26 - 2009-07-14 02:06 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
2009-07-14 00:26 - 2009-07-14 02:06 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
2009-07-14 00:26 - 2009-07-14 00:26 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\vga256.dll
2009-07-14 00:26 - 2009-07-14 00:26 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\msctfime.ime
2009-07-14 00:25 - 2009-07-14 02:26 - 00053312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AMDAGP.SYS
2009-07-14 00:25 - 2009-07-14 02:26 - 00053312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\AGP440.sys
2009-07-14 00:25 - 2009-07-14 02:20 - 00105024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NV_AGP.SYS
2009-07-14 00:25 - 2009-07-14 02:20 - 00057936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\GAGP30KX.SYS
2009-07-14 00:25 - 2009-07-14 02:19 - 00057424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ULIAGPKX.SYS
2009-07-14 00:25 - 2009-07-14 02:19 - 00055888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UAGP35.SYS
2009-07-14 00:25 - 2009-07-14 02:19 - 00053328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VIAAGP.SYS
2009-07-14 00:25 - 2009-07-14 02:19 - 00052304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\SISAGP.SYS
2009-07-14 00:25 - 2009-07-14 02:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2009-07-14 00:25 - 2009-07-14 02:16 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\oleacchooks.dll
2009-07-14 00:25 - 2009-07-14 02:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\nddeapi.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\colorui.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\dispci.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\htui.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\icmui.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\montr_ci.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\KBDJPN.DLL
2009-07-14 00:25 - 2009-07-14 02:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\KBDKOR.DLL
2009-07-14 00:25 - 2009-07-14 02:15 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\IconCodecService.dll
2009-07-14 00:25 - 2009-07-14 02:15 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2009-07-14 00:25 - 2009-07-14 02:14 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\dccw.exe
2009-07-14 00:25 - 2009-07-14 02:14 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\dispdiag.exe
2009-07-14 00:25 - 2009-07-14 02:14 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\colorcpl.exe
2009-07-14 00:25 - 2009-07-14 02:09 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\oleaccrc.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\kbdnecat.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDYCL.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\kbdnecnt.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDUKX.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdnec95.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdnec.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdibm02.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDUSX.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTIPRC.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\kbdax2.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\kbd106n.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\kbd106.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\kbd101.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYCC.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYBA.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDWOL.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDVNTC.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUZB.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUSR.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUSL.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUSA.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUR1.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUK.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTH3.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbd103.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbd101c.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbd101b.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbd101a.dll
2009-07-14 00:25 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDURDU.DLL
2009-07-14 00:25 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDUR.DLL
2009-07-14 00:25 - 2009-07-14 00:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2009-07-14 00:25 - 2009-07-14 00:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxg.sys
2009-07-14 00:25 - 2009-07-14 00:25 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vgapnp.sys
2009-07-14 00:25 - 2009-07-14 00:25 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vga.sys
2009-07-14 00:25 - 2009-07-14 00:25 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\monitor.sys
2009-07-14 00:25 - 2009-07-14 00:25 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\vga64k.dll
2009-07-14 00:25 - 2009-07-14 00:25 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxapi.sys
2009-07-14 00:25 - 2009-07-14 00:25 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\framebuf.dll
2009-07-14 00:25 - 2009-07-14 00:25 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\vga.dll
2009-07-14 00:25 - 2009-07-14 00:25 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2009-07-14 00:24 - 2009-07-14 02:16 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2009-07-14 00:24 - 2009-07-14 02:16 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\uxsms.dll
2009-07-14 00:24 - 2009-07-14 02:15 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2009-07-14 00:24 - 2009-07-14 02:14 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2009-07-14 00:24 - 2009-07-14 02:14 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDisplayObjectProvider.exe
2009-07-14 00:24 - 2009-07-14 02:14 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\ddodiag.exe
2009-07-14 00:24 - 2009-07-14 02:06 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\KBDHEPT.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDSMSNO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDSMSFI.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDROST.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDROPR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDCAN.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSORST.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSOREX.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSL1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRO.DLL
         

2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDNSO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDNO1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINUK2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDGRLND.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDFI1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSW09.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSORS1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSL.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPL.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDLV1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDLA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDIULAT.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAL.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDIBO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDHU.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDHELA3.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDHELA2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDHE220.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDFC.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDES.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDCA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDBENE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDAL.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTH2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTH1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTH0.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDSYR2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDSYR1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDSW.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDSP.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDPL1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDPASH.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDNO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDNE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMONMO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMLT48.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMLT47.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMACST.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAC.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLV.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLAO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDKHMR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDKAZ.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDIT142.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINPUN.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINGUJ.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINDEV.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBE2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBE1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINASA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDIC.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDHU1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDHE319.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoer.dll
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDFR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDFO.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDFI.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDEST.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDDIV2.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDDIV1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDDA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBU.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBHC.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBGPH1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBGPH.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDA3.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDA1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDSN1.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDKYR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDIT.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDIR.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDHEB.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDHE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDHAU.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGAE.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDFA.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDDV.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDARMW.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDARME.DLL
2009-07-14 00:24 - 2009-07-14 02:06 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDA2.DLL
2009-07-14 00:24 - 2009-07-14 00:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2009-07-14 00:24 - 2009-07-14 00:24 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\discache.sys
2009-07-14 00:23 - 2009-07-14 02:16 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\sdshext.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\srhelper.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\vsstrace.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\vdsvd.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\sdautoplay.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vds_ps.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\sxproxy.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\srwmi.dll
2009-07-14 00:23 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sxshared.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 06278656 _____ (Microsoft Corporation) C:\Windows\system32\DDORes.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\dmdlgs.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\dmdskmgr.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\dmvdsitf.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\DeviceMetadataParsers.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\blb_ps.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dmintf.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\dmutil.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\DeviceDisplayStatusManager.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\eventcls.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\defragproxy.dll
2009-07-14 00:23 - 2009-07-14 02:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\DDOIProxy.dll
2009-07-14 00:23 - 2009-07-14 02:14 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\wbadmin.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00176128 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\vssadmin.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\dmview.ocx
2009-07-14 00:23 - 2009-07-14 02:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\vdsldr.exe
2009-07-14 00:23 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\srdelayed.exe
2009-07-14 00:23 - 2009-07-14 02:04 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\dmdskres.dll
2009-07-14 00:23 - 2009-07-14 02:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\dmdskres2.dll
2009-07-14 00:23 - 2009-07-14 02:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\blbres.dll
2009-07-14 00:23 - 2009-07-14 00:23 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\blbdrive.sys
2009-07-14 00:22 - 2009-07-14 02:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\verifier.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\sperror.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\RstrtMgr.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\SSShim.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssoc.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssocPrx.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\NcdProp.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\osbaseln.dll
2009-07-14 00:22 - 2009-07-14 02:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\spcmsg.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\fundisc.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingHandler.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\IPBusEnum.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\fdPnp.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\FDResPub.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\fdWNet.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\fdPHost.dll
2009-07-14 00:22 - 2009-07-14 02:15 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\IPBusEnumProxy.dll
2009-07-14 00:22 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\secinit.exe
2009-07-14 00:22 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\RmClient.exe
2009-07-14 00:22 - 2009-07-14 02:06 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2009-07-14 00:22 - 2009-07-14 02:06 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-kernel-processor-power-events.dll
2009-07-14 00:22 - 2009-07-14 02:06 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-hal-events.dll
2009-07-14 00:21 - 2009-07-14 02:20 - 00058448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fileinfo.sys
2009-07-14 00:21 - 2009-07-14 02:16 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Sens.dll
2009-07-14 00:21 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\SensApi.dll
2009-07-14 00:21 - 2009-07-14 02:14 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm.exe
2009-07-14 00:21 - 2009-07-14 02:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\csrstub.exe
2009-07-14 00:20 - 2009-07-14 02:16 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\wow32.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\racpldlg.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\radardt.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\radarrs.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\whealogr.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\pots.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\vdmredir.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\vdmdbg.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\ntvdmd.dll
2009-07-14 00:20 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\pnpts.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\fthsvc.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\msrahc.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\dfdts.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\MsiCofire.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\cofiredm.dll
2009-07-14 00:20 - 2009-07-14 02:15 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\memdiag.dll
2009-07-14 00:20 - 2009-07-14 02:14 - 00983040 _____ (Microsoft Corporation) C:\Windows\system32\msdt.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\psr.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00536576 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\raserver.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MdRes.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\DFDWiz.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\sdchange.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\rdrleakdiag.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll
2009-07-14 00:20 - 2009-07-14 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\amxread.dll
2009-07-14 00:20 - 2009-07-14 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\cofire.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.exe
2009-07-14 00:20 - 2009-07-14 02:14 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\apilogen.dll
2009-07-14 00:20 - 2009-07-14 02:03 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\aeevts.dll
2009-07-14 00:20 - 2009-07-14 00:20 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\graftabl.com
2009-07-14 00:20 - 2009-07-14 00:20 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\win.com
2009-07-14 00:19 - 2009-07-14 02:26 - 00025168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\battc.sys
2009-07-14 00:19 - 2009-07-14 02:26 - 00019024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\compbatt.sys
2009-07-14 00:19 - 2009-07-14 02:20 - 00046656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\isapnp.sys
2009-07-14 00:19 - 2009-07-14 02:20 - 00028240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mssmbios.sys
2009-07-14 00:19 - 2009-07-14 02:19 - 00180288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pcmcia.sys
2009-07-14 00:19 - 2009-07-14 02:16 - 00240128 _____ (Microsoft Corporation) C:\Windows\system32\sdiagprv.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\sdiageng.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\scext.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\sdiagschd.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\signdrv.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\perfctrs.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\perfproc.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\sdhcinst.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\perfos.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\perfnet.dll
2009-07-14 00:19 - 2009-07-14 02:16 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\regidle.dll
2009-07-14 00:19 - 2009-07-14 02:15 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\loadperf.dll
2009-07-14 00:19 - 2009-07-14 02:15 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\pcwutl.dll
2009-07-14 00:19 - 2009-07-14 02:14 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\resmon.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\lodctr.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\sc.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\sdiagnhost.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\svchost.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\pcwrun.exe
2009-07-14 00:19 - 2009-07-14 02:14 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\plasrv.exe
2009-07-14 00:19 - 2009-07-14 02:10 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\setupetw.dll
2009-07-14 00:19 - 2009-07-14 00:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidbatt.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00014080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CmBatt.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wmiacpi.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\MsraLegacy.tlb
2009-07-14 00:19 - 2009-07-14 00:19 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\errdev.sys
2009-07-14 00:19 - 2009-07-14 00:19 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\rendezvousSession.tlb
2009-07-14 00:18 - 2009-07-14 02:16 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\winbrand.dll
2009-07-14 00:18 - 2009-07-14 02:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\osuninst.dll
2009-07-14 00:18 - 2009-07-14 02:14 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\Dism.exe
2009-07-14 00:17 - 2009-07-14 02:20 - 00091728 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2009-07-14 00:17 - 2009-07-14 02:19 - 00019008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wimmount.sys
2009-07-14 00:17 - 2009-07-14 02:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\spwinsat.dll
2009-07-14 00:17 - 2009-07-14 02:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spnet.dll
2009-07-14 00:17 - 2009-07-14 02:14 - 00398336 _____ (Microsoft Corporation) C:\Windows\regedit.exe
2009-07-14 00:17 - 2009-07-14 02:10 - 08338432 _____ (Microsoft Corporation) C:\Windows\system32\spwizimg.dll
2009-07-14 00:17 - 2009-07-14 02:10 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\uxlibres.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00379904 _____ (Microsoft Corporation) C:\Windows\system32\pnpui.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\spfileq.dll
2009-07-14 00:16 - 2009-07-14 02:16 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\SPInf.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\devmgr.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\difxapi.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\cmipnpinstall.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\energy.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\dmrc.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\devobj.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\cmicryptinstall.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\hotplug.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\gacinstall.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\devrtl.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\dmocx.dll
2009-07-14 00:16 - 2009-07-14 02:15 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\chkwudrv.dll
2009-07-14 00:16 - 2009-07-14 02:14 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.cpl
2009-07-14 00:16 - 2009-07-14 02:14 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\newdev.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\ndadmin.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\sigverif.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\PnPutil.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\sxstrace.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEject.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\InfDefaultInstall.exe
2009-07-14 00:16 - 2009-07-14 02:14 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\dinotify.exe
2009-07-14 00:16 - 2009-07-14 02:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\pnpsetup.dll
2009-07-14 00:15 - 2009-07-14 02:20 - 00046160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fsdepends.sys
2009-07-14 00:15 - 2009-07-14 02:16 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\SortWindows6Compat.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\sfc_os.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\SortServer2003Compat.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Nlsdl.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sxssrv.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\sxsstore.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\virtdisk.dll
2009-07-14 00:15 - 2009-07-14 02:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\psapi.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\elslad.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\C_G18030.DLL
2009-07-14 00:15 - 2009-07-14 02:15 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\ELSCore.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\idndl.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\kernelceip.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\clb.dll
2009-07-14 00:15 - 2009-07-14 02:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\C_IS2022.DLL
2009-07-14 00:15 - 2009-07-14 02:14 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\driverquery.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\setx.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\whoami.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\forfiles.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\xcopy.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\where.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\sfc.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\waitfor.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\choice.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\timeout.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\icacls.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\clip.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\cacls.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\comp.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\sort.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fc.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\compact.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\runas.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\convert.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\replace.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\chkntfs.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\chkdsk.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\attrib.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\doskey.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\ktmutil.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\label.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\subst.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\print.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\find.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mountvol.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\recover.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\regedt32.exe
2009-07-14 00:15 - 2009-07-14 02:14 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\acproxy.dll
2009-07-14 00:15 - 2009-07-14 02:14 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\help.exe
2009-07-14 00:15 - 2009-07-14 02:10 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\sfc.dll
2009-07-14 00:15 - 2009-07-14 02:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\normaliz.dll
2009-07-14 00:15 - 2009-07-14 00:15 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2009-07-14 00:15 - 2009-07-14 00:15 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\format.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\filetrace.sys
2009-07-14 00:15 - 2009-07-14 00:15 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\mode.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\more.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\tree.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\diskcomp.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\chcp.com
2009-07-14 00:15 - 2009-07-14 00:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\diskcopy.com
2009-07-14 00:14 - 2009-07-14 02:20 - 00049728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2009-07-14 00:14 - 2009-07-14 02:16 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\uudf.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\ufat.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00084992 _____ (Microsoft) C:\Windows\system32\SMBHelperClass.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\uexfat.dll
2009-07-14 00:14 - 2009-07-14 02:16 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\ureg.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\msrdc.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\cnvfat.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\fmifs.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\davhlpr.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\fltLib.dll
2009-07-14 00:14 - 2009-07-14 02:15 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\ifsutilx.dll
2009-07-14 00:14 - 2009-07-14 02:14 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\fltMC.exe
2009-07-14 00:14 - 2009-07-14 00:14 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2009-07-14 00:14 - 2009-07-14 00:14 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2009-07-14 00:13 - 2009-07-14 02:20 - 00031824 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_AuthenticAMD.dll
2009-07-14 00:13 - 2009-07-14 02:20 - 00017488 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2009-07-14 00:13 - 2009-07-14 02:16 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\wmiprop.dll
2009-07-14 00:13 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\procinst.dll
2009-07-14 00:13 - 2009-07-14 02:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\TimeDateMUICallback.dll
2009-07-14 00:13 - 2009-07-14 02:15 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\fvewiz.dll
2009-07-14 00:13 - 2009-07-14 02:14 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerWizardElev.exe
2009-07-14 00:13 - 2009-07-14 02:14 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\BitLockerWizard.exe
2009-07-14 00:13 - 2009-07-14 02:14 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\bcdprov.dll
2009-07-14 00:13 - 2009-07-14 02:14 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\ucsvc.exe
2009-07-14 00:13 - 2009-07-14 02:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\BdeUISrv.exe
2009-07-14 00:13 - 2009-07-14 02:04 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\bootstr.dll
2009-07-14 00:12 - 2009-07-14 02:20 - 00162896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2009-07-14 00:12 - 2009-07-14 02:17 - 00055584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpfve.sys
2009-07-14 00:12 - 2009-07-14 02:16 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\tbssvc.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\RpcEpMap.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\tpmcompc.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\profapi.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\wship6.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\WSHTCPIP.DLL
2009-07-14 00:12 - 2009-07-14 02:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2009-07-14 00:12 - 2009-07-14 02:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\msdelta.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\fveRecover.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\fveui.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\mspatcha.dll
2009-07-14 00:12 - 2009-07-14 02:15 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\fvecerts.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\fvenotify.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\baaupdate.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\fveprompt.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\makecab.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\BdeUnlockWizard.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\TpmInit.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\diantz.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfgLib.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\bderepair.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\extrac32.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\expand.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\bdeui.dll
2009-07-14 00:12 - 2009-07-14 02:14 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00013824 _____ (Microsoft Corporation) C:\Windows\fveupdate.exe
2009-07-14 00:12 - 2009-07-14 02:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\aecache.dll
2009-07-14 00:12 - 2009-07-14 02:06 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\lz32.dll
2009-07-14 00:12 - 2009-07-14 00:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00140864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00021584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\atapi.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00021584 _____ (Microsoft Corporation) C:\Windows\system32\BOOTVID.DLL
2009-07-14 00:11 - 2009-07-14 02:26 - 00015952 _____ (CMD Technology, Inc.) C:\Windows\system32\Drivers\cmdide.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00014912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdide.sys
2009-07-14 00:11 - 2009-07-14 02:26 - 00014400 _____ (Acer Laboratories Inc.) C:\Windows\system32\Drivers\aliide.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00198208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00057424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00042576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdclass.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00041552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mouclass.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00026704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpata.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00016960 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2009-07-14 00:11 - 2009-07-14 02:20 - 00015952 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2009-07-14 00:11 - 2009-07-14 02:20 - 00015424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelide.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00013888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msisadrv.sys
2009-07-14 00:11 - 2009-07-14 02:20 - 00012368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciide.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00297040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00052816 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL
2009-07-14 00:11 - 2009-07-14 02:19 - 00043088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pcw.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00042560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciidex.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00019024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wd.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00016976 _____ (VIA Technologies, Inc.) C:\Windows\system32\Drivers\viaide.sys
2009-07-14 00:11 - 2009-07-14 02:19 - 00014912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wmilib.sys
2009-07-14 00:11 - 2009-07-14 02:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2009-07-14 00:11 - 2009-07-14 02:16 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\pcwum.dll
2009-07-14 00:11 - 2009-07-14 02:16 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\txfw32.dll
2009-07-14 00:11 - 2009-07-14 02:15 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll
2009-07-14 00:11 - 2009-07-14 02:15 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\msvcirt.dll
2009-07-14 00:11 - 2009-07-14 02:15 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\ktmw32.dll
2009-07-14 00:11 - 2009-07-14 02:14 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2009-07-14 00:11 - 2009-07-14 02:14 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\csrss.exe
2009-07-14 00:11 - 2009-07-14 00:11 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\i8042prt.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\viac7.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msfs.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\null.sys
2009-07-14 00:11 - 2009-07-14 00:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-lsalookup-l1-1-0.dll
2009-07-14 00:11 - 2009-07-14 00:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-sddl-l1-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:09 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\prflbmsg.dll
2009-07-14 00:10 - 2009-07-14 02:07 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt40.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-winsvc-l1-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-management-l2-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-management-l1-1-0.dll
2009-07-14 00:10 - 2009-07-14 02:03 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-service-core-l1-1-0.dll
2009-07-14 00:08 - 2009-06-10 22:39 - 00003577 _____ () C:\Windows\system32\sysprtj.sep
2009-07-14 00:08 - 2009-06-10 22:39 - 00000114 _____ () C:\Windows\system32\pcl.sep
2009-07-14 00:08 - 2009-06-10 22:39 - 00000051 _____ () C:\Windows\system32\pscript.sep
2009-07-14 00:06 - 2009-07-14 00:06 - 00004453 _____ () C:\Windows\system32\odbcconf.rsp
2009-07-14 00:00 - 2009-06-10 22:21 - 00109456 _____ (Microsoft Corporation) C:\Windows\system32\avifile.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00109456 _____ (Microsoft Corporation) C:\Windows\system\avifile.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00073376 _____ (Microsoft Corporation) C:\Windows\system32\mciavi.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00073376 _____ (Microsoft Corporation) C:\Windows\system\mciavi.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00069584 _____ (Microsoft Corporation) C:\Windows\system32\avicap.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00069584 _____ (Microsoft Corporation) C:\Windows\system\avicap.dll
2009-07-14 00:00 - 2009-06-10 22:21 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\mciwave.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00028160 _____ (Microsoft Corporation) C:\Windows\system\mciwave.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00025264 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.drv
2009-07-14 00:00 - 2009-06-10 22:21 - 00025264 _____ (Microsoft Corporation) C:\Windows\system\mciseq.drv
2009-07-13 23:54 - 2009-07-13 23:54 - 00026624 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw85cir.sys
2009-07-13 23:53 - 2009-06-10 22:40 - 00146389 _____ () C:\Windows\system32\printmanagement.msc
2009-07-13 23:47 - 2009-06-10 22:41 - 00049680 _____ (Twain Working Group) C:\Windows\twunk_16.exe
2009-07-13 23:41 - 2009-06-10 22:17 - 00026224 _____ (Microsoft Corporation) C:\Windows\system32\odbc16gt.dll
2009-07-13 23:41 - 2009-06-10 22:16 - 00002233 _____ () C:\Windows\system32\12520850.cpx
2009-07-13 23:25 - 2009-07-14 02:15 - 00746496 _____ (Intel Corporation) C:\Windows\system32\ir50_32.dll
2009-07-13 23:25 - 2009-07-14 02:15 - 00200192 _____ (Intel Corporation.) C:\Windows\system32\ir50_qcx.dll
2009-07-13 23:25 - 2009-07-14 02:15 - 00200192 _____ (Intel Corporation.) C:\Windows\system32\ir50_qc.dll
2009-07-13 23:25 - 2009-07-14 02:15 - 00197632 _____ (Intel(R) Corporation) C:\Windows\system32\ir32_32.dll
2009-07-13 23:25 - 2009-07-14 02:14 - 00839680 _____ (Intel Corporation) C:\Windows\system32\ir41_32.ax
2009-07-13 23:25 - 2009-07-14 02:14 - 00197632 _____ (Intel Corporation) C:\Windows\system32\iac25_32.ax
2009-07-13 23:25 - 2009-07-14 02:14 - 00146944 _____ (Intel Corporation) C:\Windows\system32\ivfsrc.ax
2009-07-13 23:24 - 2009-06-10 22:14 - 00000646 _____ () C:\Windows\system32\Drivers\gmreadme.txt
2009-07-13 23:12 - 2009-06-10 22:25 - 00063411 _____ () C:\Windows\system32\NAPCLCFG.MSC
2009-07-13 23:11 - 2009-07-14 02:20 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWWizFwk.dll
2009-07-13 23:11 - 2009-06-10 22:27 - 00115091 _____ () C:\Windows\system32\WF.msc
2009-07-13 23:10 - 2009-06-10 22:19 - 00021812 _____ () C:\Windows\system32\NetTrace.PLA.Diagnostics.xml
2009-07-13 23:09 - 2009-07-14 02:26 - 00297552 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\adpahci.sys
2009-07-13 23:09 - 2009-07-14 02:26 - 00146512 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\adpu320.sys
2009-07-13 23:09 - 2009-07-14 02:26 - 00086608 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\arcsas.sys
2009-07-13 23:09 - 2009-07-14 02:26 - 00076368 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\arc.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00235584 _____ (LSI Corporation, Inc.) C:\Windows\system32\Drivers\MegaSR.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00096848 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_scsi.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00095824 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_fc.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00089168 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_sas.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00067152 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00054864 _____ (LSI Corporation) C:\Windows\system32\Drivers\lsi_sas2.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00044624 _____ (IBM Corporation) C:\Windows\system32\Drivers\nfrd960.sys
2009-07-13 23:09 - 2009-07-14 02:20 - 00041040 _____ (Intel Corp./ICP vortex GmbH) C:\Windows\system32\Drivers\iirsp.sys
2009-07-13 23:09 - 2009-07-14 02:19 - 00106064 _____ (QLogic Corporation) C:\Windows\system32\Drivers\ql40xx.sys
2009-07-13 23:09 - 2009-07-14 02:19 - 00077888 _____ (Silicon Integrated Systems) C:\Windows\system32\Drivers\sisraid4.sys
2009-07-13 23:09 - 2009-07-14 02:19 - 00021072 _____ (Promise Technology) C:\Windows\system32\Drivers\stexstor.sys
2009-07-13 23:06 - 2009-06-10 22:40 - 00201034 _____ () C:\Windows\system32\winrm.vbs
2009-07-13 23:06 - 2009-06-10 22:40 - 00004675 _____ () C:\Windows\system32\wsmanconfig_schema.xml
2009-07-13 23:06 - 2009-06-10 22:40 - 00002426 _____ () C:\Windows\system32\WsmTxt.xsl
2009-07-13 23:06 - 2009-06-10 22:40 - 00001559 _____ () C:\Windows\system32\WsmPty.xsl
2009-07-13 23:02 - 2009-07-13 23:02 - 00229888 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\b57nd60x.sys
2009-07-13 23:02 - 2009-07-13 23:02 - 00118784 _____ (Intel Corporation) C:\Windows\system32\Drivers\E1G60I32.sys
2009-07-13 23:01 - 2009-06-10 22:17 - 00124118 _____ () C:\Windows\system32\comexp.msc
2009-07-13 23:00 - 2009-06-10 22:25 - 00169520 _____ (Microsoft Corporation) C:\Windows\system32\ole2disp.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00153008 _____ (Microsoft Corporation) C:\Windows\system32\ole2nls.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00042592 _____ (Microsoft Corporation) C:\Windows\system32\ole2.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00027792 _____ (Microsoft Corporation) C:\Windows\system32\compobj.dll
2009-07-13 23:00 - 2009-06-10 22:25 - 00005532 _____ (Microsoft Corporation) C:\Windows\system\stdole.tlb
2009-07-13 23:00 - 2009-06-10 22:25 - 00004208 _____ (Microsoft Corporation) C:\Windows\system32\storage.dll
2009-07-13 22:55 - 2009-06-10 22:26 - 00144998 _____ () C:\Windows\system32\lusrmgr.msc
2009-07-13 22:53 - 2009-06-10 22:28 - 00147439 _____ () C:\Windows\system32\gpedit.msc
2009-07-13 22:53 - 2009-06-10 22:28 - 00043566 _____ () C:\Windows\system32\rsop.msc
2009-07-13 22:47 - 2009-06-10 22:36 - 00063070 _____ () C:\Windows\system32\certmgr.msc
2009-07-13 22:46 - 2009-06-10 22:39 - 00144673 _____ () C:\Windows\system32\WmiMgmt.msc
2009-07-13 22:46 - 2009-06-10 22:38 - 00145127 _____ () C:\Windows\system32\eventvwr.msc
2009-07-13 22:46 - 2009-06-10 22:38 - 00145059 _____ () C:\Windows\system32\taskschd.msc
2009-07-13 22:46 - 2009-06-10 22:38 - 00017935 _____ () C:\Windows\system32\EventViewer_EventDetails.xsl
2009-07-13 22:44 - 2009-06-10 22:35 - 00120458 _____ () C:\Windows\system32\secpol.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00144909 _____ () C:\Windows\system32\fsmgmt.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00113256 _____ () C:\Windows\system32\compmgmt.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00092745 _____ () C:\Windows\system32\services.msc
2009-07-13 22:44 - 2009-06-10 22:21 - 00041587 _____ () C:\Windows\system32\azman.msc
2009-07-13 22:41 - 2009-07-13 22:41 - 00092320 _____ (Microsoft Corporation) C:\Windows\system32\krnl386.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00068992 _____ (Microsoft Corporation) C:\Windows\system32\MMSYSTEM.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00068992 _____ (Microsoft Corporation) C:\Windows\system\MMSYSTEM.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00047840 _____ (Microsoft Corporation) C:\Windows\system32\USER.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\DDEML.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00032816 _____ (Microsoft Corporation) C:\Windows\system32\COMMDLG.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00032816 _____ (Microsoft Corporation) C:\Windows\system\COMMDLG.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00028112 _____ (Microsoft Corporation) C:\Windows\system32\DRWATSON.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\GDI.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\OLESVR.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00024064 _____ (Microsoft Corporation) C:\Windows\system\OLESVR.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00019694 _____ () C:\Windows\system32\GRAPHICS.COM
2009-07-13 22:41 - 2009-07-13 22:41 - 00013888 _____ (Microsoft Corporation) C:\Windows\system32\TOOLHELP.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00012704 _____ (Microsoft Corporation) C:\Windows\system32\WFWNET.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00012704 _____ (Microsoft Corporation) C:\Windows\system\WFWNET.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00010544 _____ (Microsoft Corporation) C:\Windows\system32\COMM.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\WIFEMAN.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00008960 _____ (Microsoft Corporation) C:\Windows\system32\WOWEXEC.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\WINNLS.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\SHELL.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\system\SHELL.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00004048 _____ (Microsoft Corporation) C:\Windows\system32\TIMER.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00004048 _____ (Microsoft Corporation) C:\Windows\system\TIMER.DRV
2009-07-13 22:41 - 2009-07-13 22:41 - 00003360 _____ (Microsoft Corporation) C:\Windows\system32\system.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00003360 _____ (Microsoft Corporation) C:\Windows\system\system.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002864 _____ (Microsoft Corporation) C:\Windows\system32\WOWDEB.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00002864 _____ (Microsoft Corporation) C:\Windows\system32\WINSOCK.DLL
2009-07-13 22:41 - 2009-07-13 22:41 - 00002842 _____ () C:\Windows\system32\redir.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00002176 _____ (Microsoft Corporation) C:\Windows\system32\vga.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002176 _____ (Microsoft Corporation) C:\Windows\system\vga.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002112 _____ (Microsoft Corporation) C:\Windows\system32\WINSPOOL.EXE
2009-07-13 22:41 - 2009-07-13 22:41 - 00002080 _____ (Microsoft Corporation) C:\Windows\system32\WINOLDAP.MOD
2009-07-13 22:41 - 2009-07-13 22:41 - 00002032 _____ (Microsoft Corporation) C:\Windows\system32\mouse.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002032 _____ (Microsoft Corporation) C:\Windows\system\mouse.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002000 _____ (Microsoft Corporation) C:\Windows\system32\keyboard.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00002000 _____ (Microsoft Corporation) C:\Windows\system\keyboard.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00001744 _____ (Microsoft Corporation) C:\Windows\system32\sound.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00001744 _____ (Microsoft Corporation) C:\Windows\system\sound.drv
2009-07-13 22:41 - 2009-07-13 22:41 - 00001152 _____ (Microsoft Corporation) C:\Windows\system32\mmtask.tsk
2009-07-13 22:41 - 2009-07-13 22:41 - 00001152 _____ (Microsoft Corporation) C:\Windows\system\mmtask.tsk
2009-07-13 22:41 - 2009-07-13 22:41 - 00000882 _____ () C:\Windows\system32\share.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00000882 _____ () C:\Windows\system32\fastopen.exe
2009-07-13 22:41 - 2009-07-13 22:41 - 00000718 _____ () C:\Windows\system32\mscdexnt.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00050648 _____ () C:\Windows\system32\COMMAND.COM
2009-07-13 22:40 - 2009-07-13 22:40 - 00042809 _____ () C:\Windows\system32\KEY01.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00042537 _____ () C:\Windows\system32\KEYBOARD.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00039274 _____ () C:\Windows\system32\mem.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00035776 _____ () C:\Windows\system32\NTIO411.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00035536 _____ () C:\Windows\system32\NTIO412.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00034672 _____ () C:\Windows\system32\NTIO804.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00034672 _____ () C:\Windows\system32\NTIO404.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00033952 _____ () C:\Windows\system32\NTIO.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029370 _____ () C:\Windows\system32\NTDOS411.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029274 _____ () C:\Windows\system32\NTDOS412.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029146 _____ () C:\Windows\system32\NTDOS804.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00029146 _____ () C:\Windows\system32\NTDOS404.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00027866 _____ () C:\Windows\system32\NTDOS.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00027097 _____ () C:\Windows\system32\country.sys
2009-07-13 22:40 - 2009-07-13 22:40 - 00020634 _____ () C:\Windows\system32\debug.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00014710 _____ () C:\Windows\system32\KB16.COM
2009-07-13 22:40 - 2009-07-13 22:40 - 00012642 _____ () C:\Windows\system32\edlin.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00012498 _____ () C:\Windows\system32\append.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00011753 _____ () C:\Windows\system32\setver.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00009029 _____ () C:\Windows\system32\ANSI.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00008424 _____ () C:\Windows\system32\exe2bin.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00007052 _____ () C:\Windows\system32\nlsfunc.exe
2009-07-13 22:40 - 2009-07-13 22:40 - 00004768 _____ () C:\Windows\system32\HIMEM.SYS
2009-07-13 22:40 - 2009-07-13 22:40 - 00001131 _____ () C:\Windows\system32\LOADFIX.COM
2009-07-13 22:38 - 2009-07-13 22:38 - 00000610 _____ () C:\Windows\system32\WdsUnattendTemplate.xml
2009-07-13 22:38 - 2009-06-10 22:41 - 00024114 _____ () C:\Windows\system32\lcptr.tbl
2009-07-13 22:34 - 2009-06-10 22:47 - 00047679 _____ () C:\Windows\system32\diskmgmt.msc
2009-07-13 22:33 - 2009-07-13 21:29 - 00000714 _____ () C:\Windows\system32\RestartManager.mof
2009-07-13 22:33 - 2009-07-13 21:29 - 00000176 _____ () C:\Windows\system32\RestartManagerUninstall.mof
2009-07-13 22:30 - 2009-06-10 22:42 - 00018832 _____ () C:\Windows\system32\v7vga.rom
2009-07-13 22:30 - 2009-06-10 22:42 - 00008191 _____ () C:\Windows\system32\bios4.rom
2009-07-13 22:30 - 2009-06-10 22:42 - 00000707 _____ () C:\Windows\_default.pif
2009-07-13 22:28 - 2009-06-10 22:31 - 00145519 _____ () C:\Windows\system32\perfmon.msc
2009-07-13 22:23 - 2009-06-10 22:48 - 00067808 _____ () C:\Windows\system32\normnfkc.nls
2009-07-13 22:23 - 2009-06-10 22:48 - 00061718 _____ () C:\Windows\system32\normnfkd.nls
2009-07-13 22:23 - 2009-06-10 22:48 - 00047076 _____ () C:\Windows\system32\normnfc.nls
2009-07-13 22:23 - 2009-06-10 22:48 - 00040566 _____ () C:\Windows\system32\normnfd.nls
2009-07-13 22:23 - 2009-06-10 22:46 - 00145640 _____ () C:\Windows\system32\devmgmt.msc
2009-07-13 22:20 - 2009-06-10 22:43 - 00144862 _____ () C:\Windows\system32\tpm.msc
2009-07-13 22:07 - 2009-07-14 02:15 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt20.dll
2009-07-13 22:07 - 2009-07-14 02:15 - 00149019 _____ (Microsoft Corporation) C:\Windows\system32\crtdll.dll
2009-07-13 22:07 - 2009-07-14 02:15 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\ctl3d32.dll
2009-07-13 22:04 - 2009-07-14 02:16 - 00030749 _____ (Microsoft Corporation) C:\Windows\system32\vbajet32.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00380957 _____ (Microsoft Corporation) C:\Windows\system32\expsrv.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
2009-07-13 22:04 - 2009-07-14 02:15 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
2009-07-13 22:04 - 2009-07-13 22:04 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.tlb
2009-07-13 22:04 - 2009-07-13 22:04 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\amcompat.tlb
2009-07-13 22:03 - 2009-07-14 02:16 - 00024603 _____ (Microsoft Corporation) C:\Windows\system32\sqlwid.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 01589248 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\system32\msjetoledb40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
2009-07-13 22:03 - 2009-07-14 02:15 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2009-07-13 22:03 - 2009-07-13 22:03 - 00049179 _____ (Microsoft Corporation) C:\Windows\system32\sqlwoa.dll
2009-07-13 21:34 - 2009-07-14 02:19 - 00017472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spldr.sys
2009-07-13 21:31 - 2009-06-10 22:26 - 00127213 _____ () C:\Windows\system32\ega.cpi
2009-07-13 21:30 - 2009-06-10 22:42 - 00000843 _____ () C:\Windows\system32\onlinesetup.cmd
2009-07-13 21:29 - 2009-06-10 22:42 - 00256192 _____ (Microsoft Corporation) C:\Windows\winhelp.exe
2009-07-13 21:29 - 2009-06-10 22:42 - 00221600 _____ (Microsoft Corporation) C:\Windows\system32\lanman.drv
2009-07-13 21:29 - 2009-06-10 22:42 - 00108464 _____ (Microsoft Corporation) C:\Windows\system32\netapi.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\olecli.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00082944 _____ (Microsoft Corporation) C:\Windows\system\olecli.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pmspl.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00027200 _____ (Microsoft Corporation) C:\Windows\system32\ctl3dv2.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00018896 _____ (Microsoft Corporation) C:\Windows\system32\sysedit.exe
2009-07-13 21:29 - 2009-06-10 22:42 - 00013312 _____ () C:\Windows\system32\win87em.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009936 _____ (Microsoft Corporation) C:\Windows\system32\lzexpand.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009936 _____ (Microsoft Corporation) C:\Windows\system\lzexpand.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009008 _____ (Microsoft Corporation) C:\Windows\system32\ver.dll
2009-07-13 21:29 - 2009-06-10 22:42 - 00009008 _____ (Microsoft Corporation) C:\Windows\system\ver.dll
2009-07-13 21:22 - 2009-06-10 22:48 - 00196642 _____ () C:\Windows\system32\C_950.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00196642 _____ () C:\Windows\system32\C_949.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00196642 _____ () C:\Windows\system32\C_936.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00195618 _____ () C:\Windows\system32\C_10002.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00189986 _____ () C:\Windows\system32\C_1361.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00187938 _____ () C:\Windows\system32\C_20005.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00186402 _____ () C:\Windows\system32\C_20001.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00185378 _____ () C:\Windows\system32\C_20003.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00180770 _____ () C:\Windows\system32\C_20932.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00180258 _____ () C:\Windows\system32\C_20004.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00180258 _____ () C:\Windows\system32\C_20000.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00177698 _____ () C:\Windows\system32\C_20949.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00177698 _____ () C:\Windows\system32\C_10003.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00173602 _____ () C:\Windows\system32\C_20936.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00173602 _____ () C:\Windows\system32\C_20002.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00173602 _____ () C:\Windows\system32\C_10008.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00162850 _____ () C:\Windows\system32\C_932.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00162850 _____ () C:\Windows\system32\C_10001.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00139810 _____ () C:\Windows\system32\C_20261.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_874.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_869.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_866.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_865.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_864.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_863.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_862.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_861.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_860.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_858.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_857.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_855.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_852.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_850.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_775.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_737.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_720.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066594 _____ () C:\Windows\system32\C_437.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_875.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_870.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_708.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_500.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28605.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\c_28603.nls
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28599.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28598.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28597.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28596.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28595.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28594.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28593.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28592.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_28591.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_21866.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_21027.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_21025.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20924.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20905.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20880.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20871.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20866.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20838.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20833.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20424.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20423.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20420.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20297.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20290.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20285.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20284.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20280.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20278.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20277.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20273.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20269.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20127.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20108.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20107.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20106.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_20105.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1258.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1257.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1256.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1255.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1254.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1253.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1252.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1251.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1149.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1148.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1147.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1146.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1145.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1144.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1143.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1142.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1141.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1140.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1047.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1026.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10082.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10081.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10079.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10029.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10021.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10017.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10010.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10007.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10006.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10005.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10004.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_10000.NLS
2009-07-13 21:22 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_037.NLS
2009-07-13 21:22 - 2009-06-10 22:43 - 00000874 _____ () C:\Windows\system32\manage-bde.wsf
2009-06-10 22:48 - 2009-06-10 22:48 - 00066082 _____ () C:\Windows\system32\C_1250.NLS
2009-06-10 22:48 - 2009-06-10 22:48 - 00059342 _____ () C:\Windows\system32\normidna.nls
2009-06-10 22:48 - 2009-06-10 22:48 - 00009958 _____ () C:\Windows\system32\l_intl.nls
2009-06-10 22:46 - 2009-06-10 22:46 - 00008280 _____ () C:\Windows\system32\spcinstrumentation.man
2009-06-10 22:44 - 2009-06-10 22:44 - 03170304 _____ () C:\Windows\system32\boot.sdi
2009-06-10 22:42 - 2009-06-10 22:42 - 00069886 _____ () C:\Windows\system32\edit.com
2009-06-10 22:42 - 2009-06-10 22:42 - 00028420 _____ () C:\Windows\system32\bios1.rom
2009-06-10 22:42 - 2009-06-10 22:42 - 00021232 _____ () C:\Windows\system32\graphics.pro
2009-06-10 22:42 - 2009-06-10 22:42 - 00010790 _____ () C:\Windows\system32\EDIT.HLP
2009-06-10 22:42 - 2009-06-10 22:42 - 00004041 _____ () C:\Windows\system32\xwizard.dtd
2009-06-10 22:41 - 2009-07-14 02:15 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll
2009-06-10 22:41 - 2009-06-10 22:41 - 00211938 _____ () C:\Windows\system32\lcphrase.tbl
2009-06-10 22:41 - 2009-06-10 22:41 - 00094784 _____ (Twain Working Group) C:\Windows\twain.dll
2009-06-10 22:41 - 2009-06-10 22:41 - 00019216 _____ (Microsoft Corporation) C:\Windows\system32\tapi.dll
2009-06-10 22:40 - 2009-06-10 22:40 - 00000035 _____ () C:\Windows\system32\winrm.cmd
2009-06-10 22:39 - 2009-06-10 22:39 - 00060124 _____ () C:\Windows\system32\tcpmon.ini
2009-06-10 22:39 - 2009-06-10 22:39 - 00003214 _____ () C:\Windows\system32\sysprint.sep
2009-06-10 22:39 - 2009-06-10 22:39 - 00001820 _____ () C:\Windows\system32\rasctrnm.h
2009-06-10 22:39 - 2009-06-10 22:39 - 00001041 _____ () C:\Windows\system32\tcpbidi.xml
2009-06-10 22:38 - 2009-07-14 02:15 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\msvbvm60.dll
2009-06-10 22:38 - 2009-06-10 22:38 - 00113629 _____ () C:\Windows\system32\slmgr.vbs
2009-06-10 22:34 - 2009-06-10 22:34 - 00316640 _____ () C:\Windows\WMSysPr9.prx
2009-06-10 22:32 - 2009-06-10 22:32 - 00002060 _____ () C:\Windows\system32\noise.jpn
2009-06-10 22:30 - 2009-07-13 21:34 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spsys.sys
2009-06-10 22:30 - 2009-06-10 22:30 - 00022984 _____ () C:\Windows\system32\bopomofo.uce
2009-06-10 22:29 - 2009-06-10 22:29 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\stdole32.tlb
2009-06-10 22:26 - 2009-06-10 22:26 - 00673088 _____ () C:\Windows\system32\mlang.dat
2009-06-10 22:25 - 2009-06-10 22:25 - 00177856 _____ (Microsoft Corporation) C:\Windows\system32\typelib.dll
2009-06-10 22:22 - 2009-06-10 22:22 - 00061168 _____ (Microsoft Corporation) C:\Windows\system32\msacm.dll
2009-06-10 22:21 - 2009-06-10 22:21 - 00126912 _____ (Microsoft Corporation) C:\Windows\system32\msvideo.dll
2009-06-10 22:21 - 2009-06-10 22:21 - 00126912 _____ (Microsoft Corporation) C:\Windows\system\msvideo.dll
2009-06-10 22:20 - 2009-07-14 02:26 - 00159312 _____ (AMD Technologies Inc.) C:\Windows\system32\Drivers\amdsbs.sys
2009-06-10 22:20 - 2009-07-14 02:20 - 00070720 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\djsvs.sys
2009-06-10 22:20 - 2009-07-14 02:19 - 01383488 _____ (QLogic Corporation) C:\Windows\system32\Drivers\ql2300.sys
2009-06-10 22:20 - 2009-07-14 02:19 - 00141904 _____ (VIA Technologies Inc.,Ltd) C:\Windows\system32\Drivers\vsmraid.sys
2009-06-10 22:20 - 2009-07-14 02:19 - 00040016 _____ (Silicon Integrated Systems Corp.) C:\Windows\system32\Drivers\sisraid2.sys
2009-06-10 22:19 - 2013-02-19 20:32 - 15413704 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2009-06-10 22:19 - 2009-07-14 02:26 - 00422976 _____ (Adaptec, Inc.) C:\Windows\system32\Drivers\adp94xx.sys
2009-06-10 22:19 - 2009-07-14 02:20 - 00453712 _____ (Emulex) C:\Windows\system32\Drivers\elxstor.sys
2009-06-10 22:19 - 2009-07-14 02:20 - 00030800 _____ (LSI Corporation) C:\Windows\system32\Drivers\megasas.sys
2009-06-10 22:19 - 2009-06-10 22:19 - 00040552 _____ () C:\Windows\system32\gatherNetworkInfo.vbs
2009-06-10 22:18 - 2009-07-14 02:15 - 00120320 _____ (Intel Corporation.) C:\Windows\system32\ir41_qcx.dll
2009-06-10 22:18 - 2009-07-14 02:15 - 00120320 _____ (Intel Corporation.) C:\Windows\system32\ir41_qc.dll
2009-06-10 22:18 - 2009-06-10 22:18 - 00000565 _____ () C:\Windows\system32\NdfEventView.xml
2009-06-10 22:17 - 2009-07-13 23:02 - 03100160 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\evbdx.sys
2009-06-10 22:17 - 2009-07-13 23:02 - 00430080 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\bxvbdx.sys
2009-06-10 22:17 - 2009-06-10 22:17 - 00004656 _____ (Microsoft Corporation) C:\Windows\system32\ds16gt.dLL
2009-06-10 22:16 - 2009-07-14 02:16 - 00180800 _____ (Microsoft Corporation) C:\Windows\system32\sqlunirl.dll
2009-06-10 22:16 - 2009-06-10 22:16 - 00002727 _____ () C:\Windows\system32\locationnotificationsview.xml
2009-06-10 22:16 - 2009-06-10 22:16 - 00002151 _____ () C:\Windows\system32\12520437.cpx
2009-06-10 22:15 - 2009-06-10 22:15 - 00076060 _____ () C:\Windows\system32\xpsrchvw.xml
2009-06-10 22:14 - 2009-06-10 22:14 - 03440660 _____ () C:\Windows\system32\Drivers\gm.dls
2005-04-06 16:28 - 2005-04-06 16:28 - 00061440 _____ () C:\Windows\system32\xvid.ax
2005-04-06 16:27 - 2005-04-06 16:27 - 00237568 _____ () C:\Windows\system32\xvidvfw.dll
2005-04-06 16:24 - 2005-04-06 16:24 - 01216512 _____ () C:\Windows\system32\xvidcore.dll
2005-01-31 09:18 - 2005-01-31 09:18 - 00372736 _____ (Logitech Inc.) C:\Windows\system32\LVUI2RC.dll
2005-01-31 09:13 - 2005-01-31 09:13 - 00163328 _____ () C:\Windows\system32\Drivers\LV532AV.SYS
2005-01-31 09:12 - 2005-01-31 09:12 - 00022016 _____ (Logitech Inc.) C:\Windows\system32\Drivers\LVUSBSta.sys
2005-01-31 09:10 - 2005-01-31 09:10 - 00204800 _____ (Logitech Inc.) C:\Windows\system32\LVUI2.dll
2005-01-31 09:08 - 2005-01-31 09:08 - 00204800 _____ (Logitech Inc.) C:\Windows\system32\lvcodec2.dll
2005-01-31 09:00 - 2005-01-31 09:00 - 00106496 _____ (Logitech Inc.) C:\Windows\system32\lvcoinst.dll
2005-01-31 07:37 - 2005-01-31 07:37 - 00009255 _____ () C:\Windows\system32\lvcoinst.ini
2003-04-18 15:29 - 2003-04-18 15:29 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\msxml4r.dll
2002-03-04 09:16 - 2002-03-04 09:16 - 00110592 ____R () C:\Windows\system32\Jpeg32.dll
2002-02-13 14:35 - 2002-02-13 14:35 - 00000000 _____ () C:\Windows\system32\Biport
2002-01-02 03:46 - 2002-01-02 03:50 - 00000000 ____D () C:\Users\Mex\Desktop\Immobilieninfos
2002-01-01 20:54 - 2002-01-01 20:54 - 00011412 _____ () C:\Users\Mex\Desktop\FRST.txt.txt
2002-01-01 20:53 - 2002-01-01 20:53 - 00000000 ____D () C:\Users\Mex\Desktop\FRST-OlderVersion
2002-01-01 20:45 - 2002-01-01 20:46 - 02721175 _____ (Thisisu) C:\Users\Mex\Desktop\JRT(1).exe
2002-01-01 20:28 - 2002-01-01 20:54 - 00000000 ____D () C:\FRST
2002-01-01 20:27 - 2002-01-01 20:53 - 01144832 _____ (Farbar) C:\Users\Mex\Desktop\FRST.exe
2002-01-01 20:12 - 2002-01-01 20:13 - 02209792 _____ () C:\Users\Mex\Desktop\AdwCleaner_4.204.exe
2002-01-01 20:08 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2002-01-01 20:08 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2002-01-01 20:08 - 2002-01-01 20:08 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2002-01-01 20:06 - 2002-01-01 20:08 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Mex\Desktop\mbam-setup-2.1.6.1022(1).exe
2002-01-01 04:08 - 2002-01-01 04:08 - 02347384 _____ (ESET) C:\Users\Mex\Downloads\esetsmartinstaller_deu.exe
2002-01-01 04:08 - 2002-01-01 04:08 - 00000000 ____D () C:\Program Files\ESET
2002-01-01 01:42 - 2002-01-01 01:42 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Mex\Desktop\tdsskiller.exe
2002-01-01 01:41 - 2002-01-01 20:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2002-01-01 01:41 - 2002-01-01 03:30 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2002-01-01 01:40 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2002-01-01 01:40 - 2002-01-01 03:29 - 00000000 ____D () C:\Users\Mex\Desktop\mbar
2002-01-01 01:40 - 2002-01-01 01:40 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Mex\Downloads\mbar-1.09.1.1004.exe
2002-01-01 01:39 - 2002-01-01 01:39 - 00561248 _____ (Oracle Corporation) C:\Users\Mex\Downloads\jxpiinstall.exe
2001-12-31 23:53 - 2001-12-31 23:53 - 00000000 ____D () C:\Users\Mex\AppData\Roaming\Avira
2001-12-31 23:52 - 2001-12-31 23:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2001-12-31 23:51 - 2015-03-17 13:02 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2001-12-31 23:51 - 2015-03-17 13:01 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2001-12-31 23:51 - 2015-03-17 13:01 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2001-12-31 23:51 - 2015-03-17 13:01 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2001-12-31 23:51 - 2001-12-31 23:51 - 00000000 ____D () C:\ProgramData\Avira
2001-12-31 23:51 - 2001-12-31 23:51 - 00000000 ____D () C:\Program Files\Avira
2001-12-31 23:48 - 2001-12-31 23:50 - 165283560 _____ () C:\Users\Mex\Downloads\avira_free_antivirus_de_15.0.9.504.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)


Some content of TEMP:
====================
C:\Users\Mex\AppData\Local\Temp\AskSLib.dll
C:\Users\Mex\AppData\Local\Temp\avgnt.exe
C:\Users\Mex\AppData\Local\Temp\iv_uninstall.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Mex\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Mex\AppData\Local\Temp\ose00000.exe
C:\Users\Mex\AppData\Local\Temp\proxy_vole2583229197283602247.dll
C:\Users\Mex\AppData\Local\Temp\Quarantine.exe
C:\Users\Mex\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Mex\AppData\Local\Temp\SpotifyUninstall.exe
C:\Users\Mex\AppData\Local\Temp\sqlite3.dll
C:\Users\Mex\AppData\Local\Temp\tmd_34011736.exe
C:\Users\Mex\AppData\Local\Temp\tmd_34015858.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-04 10:01

==================== End Of Log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-05-2015 01
Ran by Mex at 2002-01-01 20:56:47
Running from C:\Users\Mex\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3692795522-2443571778-2170560698-500 - Administrator - Disabled)
Gast (S-1-5-21-3692795522-2443571778-2170560698-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3692795522-2443571778-2170560698-1003 - Limited - Enabled)
Mex (S-1-5-21-3692795522-2443571778-2170560698-1000 - Administrator - Enabled) => C:\Users\Mex
UpdatusUser (S-1-5-21-3692795522-2443571778-2170560698-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Out of date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Out of date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 15.0.8.656 - Avira)
Brother MFL-Pro Suite MFC-215C (HKLM\...\{BB9AC6BF-71B6-42A4-9689-C17D9F44E79A}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Source (HKLM\...\Steam App 240) (Version:  - Valve)
CyberLink PowerDVD 13 (HKLM\...\InstallShield_{3CFDF154-7E60-4E98-A8DF-C693A4F8E6B6}) (Version: 13.0.2720.57 - CyberLink Corp.)
dm-Fotowelt (HKLM\...\dm-Fotowelt) (Version: 6.0.3 - CEWE Stiftung u Co. KGaA)
Dropbox (HKU\S-1-5-21-3692795522-2443571778-2170560698-1000\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyDriveConnect 3.3.0.1502 (HKLM\...\MyDriveConnect) (Version: 3.3.0.1502 - TomTom)
MyFreeCodec (HKU\S-1-5-21-3692795522-2443571778-2170560698-1000\...\MyFreeCodec) (Version:  - )
Nero 12 (HKLM\...\{622B6CB8-70B1-4D65-B672-093D19759BA1}) (Version: 12.5.01200 - Nero AG)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
PaperPort (HKLM\...\{A17EABB6-D0C6-44E5-820C-72DC7F495064}) (Version: 9.02.0823 - ScanSoft, Inc.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.210.0 - Tracker Software Products Ltd)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0199 - REALTEK Semiconductor Corp.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14072.12 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14072.12 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.21 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3692795522-2443571778-2170560698-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
TeamSpeak 2 RC2 (HKLM\...\Teamspeak 2 RC2_is1) (Version: 2.0.32.60 - Dominating Bytes Design)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
TV-Browser 3.3a (HKLM\...\tvbrowser) (Version: 3.3a - TV-Browser Team)
Visual Studio C++ 10.0 Runtime (HKLM\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 2.0.6 (HKLM\...\VLC media player) (Version: 2.0.6 - VideoLAN)
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden
Winamp (HKLM\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinZip 18.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240E2}) (Version: 18.5.11111 - WinZip Computing, S.L. )
XviD MPEG-4 Codec (HKLM\...\XviD) (Version:  - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3692795522-2443571778-2170560698-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Mex\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3692795522-2443571778-2170560698-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mex\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3692795522-2443571778-2170560698-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mex\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3692795522-2443571778-2170560698-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mex\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3692795522-2443571778-2170560698-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Mex\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Restore Points  =========================

01-01-2002 02:30:16 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2014-03-19 16:07 - 00000705 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0A4ADDFB-65FA-4B6B-A2D8-B75127D4C840} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-16] (Adobe Systems Incorporated)
Task: {0FEEE56E-6F3F-4A6D-B523-21EA00B88C49} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {6C8C2E79-A481-4E0E-B9A7-68EA113DBB7A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {924F3232-19F6-4DFA-B36A-C848733AFDEB} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {B38815CB-8621-46BB-A851-8E478270F06D} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {D9ADA822-0375-4F9C-8EEA-C879088C56B8} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2010-01-30 01:41 - 2010-01-30 01:41 - 04254560 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3692795522-2443571778-2170560698-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mex\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{2DDD7759-3AAE-49E2-94BC-E23A34C2D568}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{A6DC19CE-7B99-438C-AC56-58D438995A75}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{F1FA45E1-D3CF-44F0-83DC-7CF0131C133C}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{2328E596-D946-4976-AA81-B324E2135135}] => (Allow) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{3C3775DD-5732-4D2E-B3F6-BC1E2D31362A}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{A3A9C762-3AFB-4224-9F97-E55AB2C73B4F}] => (Allow) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{00E9C3C1-42F9-4625-ACCF-EF4B83DE2675}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{9AD8C2C7-AC52-45E9-A306-58D562A1AAC4}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{C94E01BA-1745-421B-998D-ED2FAB91737E}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{A1E8F85E-292B-4528-BBE8-4BEADF26176E}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{5346F680-6A8D-4707-A459-44450451D316}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{FA34DC92-A42D-42C6-A490-2CB1D9295CD0}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{A1CE8995-D104-459B-AC1C-D6D5EF8AB38D}] => (Allow) C:\Program Files\TV-Browser\tvbrowser.exe
FirewallRules: [{4EC0F63A-6A2B-4E72-97AE-22CECDDCB858}] => (Allow) C:\Program Files\TV-Browser\tvbrowser.exe
FirewallRules: [{0C87DA86-8310-4DD8-95FB-696912FA8450}] => (Allow) C:\Program Files\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{C5CFA392-D4C0-4B3E-9990-8D64FE3F55BA}] => (Allow) C:\Program Files\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{BBF68CE8-A564-4F98-8418-7E83A78956B4}] => (Allow) C:\Program Files\Java\jre7\bin\java.exe
FirewallRules: [{D510B024-13EB-4481-A5DA-D413C8133D4D}] => (Allow) C:\Program Files\Java\jre7\bin\java.exe
FirewallRules: [{2531268E-AFD0-41B2-AA18-B76B51364D48}] => (Allow) C:\Program Files\Java\jre7\bin\javaw.exe
FirewallRules: [{B303BAF2-36E5-4C42-A438-E74F7EC4C892}] => (Allow) C:\Program Files\Java\jre7\bin\javaw.exe
FirewallRules: [{2CCDCDED-BDFB-4092-A4F5-C1C92F9287D8}] => (Allow) C:\Program Files\CyberLink\PowerDVD13\PowerDVD13.exe
FirewallRules: [{D3D1ADB0-8EB5-4D13-8CDE-60C510C8D8F0}] => (Allow) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMR\PowerDVD13DMREngine.exe
FirewallRules: [{99CE0E91-32D7-45D1-930F-3412CC58D1E2}] => (Allow) C:\Program Files\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
FirewallRules: [{36F4B308-7FA8-44E2-BD56-AFF9114420FB}] => (Allow) C:\Program Files\CyberLink\PowerDVD13\PowerDVD13Agent.exe
FirewallRules: [{FBDC7B0B-4A74-40DE-9C8D-37E269B36518}] => (Allow) C:\Program Files\CyberLink\PowerDVD13\PowerDVD13ML.exe
FirewallRules: [{05C027D4-8F27-417A-BE70-5C499D4D6957}] => (Allow) C:\Program Files\CyberLink\PowerDVD13\Movie\PowerDVD.exe
FirewallRules: [{A8440E83-B93D-407D-B4B2-34B19022FC7D}] => (Allow) C:\Program Files\CyberLink\PowerDVD13\Movie\PowerDVD Cinema\PowerDVDCinema13.exe
FirewallRules: [{43A0378D-01CD-4CA7-88DD-CB9CB1744734}] => (Allow) C:\spiele\Steam\Steam.exe
FirewallRules: [{2C794484-D57C-4252-978F-FABBB9D5832E}] => (Allow) C:\spiele\Steam\Steam.exe
FirewallRules: [{CECC8443-20C6-48B7-B0EA-A507B5509C9E}] => (Allow) C:\spiele\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{C6894834-8561-4EA9-85AB-43A7DE42C552}] => (Allow) C:\spiele\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{27B99DD7-8D98-40DE-9A64-F6F507CEC962}] => (Allow) C:\Users\Mex\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{1310FF5D-BCEE-43F4-B694-59A8F716CF79}] => (Allow) C:\Users\Mex\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{9EF818E4-EEC2-44AC-A140-10273DCC996F}] => (Allow) C:\spiele\Steam\Steam.exe
FirewallRules: [{DAF1D31E-647E-41BE-94C2-2A004668EB36}] => (Allow) C:\spiele\Steam\Steam.exe
FirewallRules: [{1594C075-888F-474E-8D42-77A70469702C}] => (Allow) C:\spiele\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{275C8120-E2B9-44C4-A489-6BC811AF4E47}] => (Allow) C:\spiele\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{418971B9-EBA8-43D3-8D2A-58FC1B78573D}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8349652F-717D-40A2-89B5-A7E71035626C}] => (Allow) C:\Program Files\REALTEK\USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{790624CF-AA21-4550-96E8-361205777BE7}] => (Allow) C:\Program Files\REALTEK\USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{FD4741A9-40FC-48CA-934C-77303A331FFB}] => (Allow) LPort=1542
FirewallRules: [{75061347-7034-49DB-B8F5-BDE94A3F7631}] => (Allow) LPort=1542
FirewallRules: [{3BDD6EED-5ACB-4DF9-8679-3E2CBCA440F0}] => (Allow) LPort=53
FirewallRules: [{6E2E623C-CF6D-4E63-9EF9-DE15C633E537}] => (Allow) LPort=67
FirewallRules: [{0348903A-78C1-4F6F-B063-96DDB0BA3B1F}] => (Allow) LPort=68
FirewallRules: [{2F6553CD-EBE1-44DC-A2DC-6CD6BDDE27CE}] => (Allow) LPort=53
FirewallRules: [{B86C5784-BD8A-4855-8183-93454C43F134}] => (Allow) LPort=53
FirewallRules: [{460F4A9B-8C70-4075-A347-6F3B3A47FEE8}] => (Allow) C:\Program Files\REALTEK\USB Wireless LAN Utility\Rtldhcp.exe
FirewallRules: [{BF433B65-BA7D-45C6-A2CA-E1783088EE4E}] => (Allow) C:\spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{42300121-B6CB-402E-889D-FFA3976F5BCD}] => (Allow) C:\spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{24B517DF-81F4-4989-ADD4-043B546C2B04}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{170B8B4E-5610-4F23-B49C-240F819EFD04}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{43407712-9A2F-4727-ACF6-C1395B755A1B}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{FA1BF088-B7E0-4A3A-8519-FE60820BFBC7}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{C803DEAE-D099-4382-8AC6-D2631749A237}] => (Allow) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{E1796B78-BC20-4911-9941-FE66F053791A}] => (Allow) C:\Users\Mex\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{C6D8E9FA-42E2-4CC8-9333-CD73BF27FB50}] => (Allow) C:\Users\Mex\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{F50D7004-495A-4EA0-88EF-434766F87C3B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CD82BF35-5F39-406F-A25C-096475D41F85}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F75CBB57-0147-4A9D-BE85-1BFE1A0C7B1C}C:\program files\winamp\winamp.exe] => (Block) C:\program files\winamp\winamp.exe
FirewallRules: [UDP Query User{0EA6B99B-E824-4F8F-83A2-8402EA1D30DD}C:\program files\winamp\winamp.exe] => (Block) C:\program files\winamp\winamp.exe

==================== Faulty Device Manager Devices =============

Name: Videocontroller für Multimedia
Description: Videocontroller für Multimedia
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Multimediacontroller
Description: Multimediacontroller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/10/2015 00:33:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe_aepdu.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: generaltel.dll, Version: 10.0.10037.0, Zeitstempel: 0x550d5182
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c98e
ID des fehlerhaften Prozesses: 0x12e0
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe_aepdu.dll0
Pfad der fehlerhaften Anwendung: rundll32.exe_aepdu.dll1
Pfad des fehlerhaften Moduls: rundll32.exe_aepdu.dll2
Berichtskennung: rundll32.exe_aepdu.dll3

Error: (05/08/2015 07:04:32 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"2" in Zeile  Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Definition: Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (05/08/2015 07:04:00 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/08/2015 07:03:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/08/2015 07:03:36 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/08/2015 07:02:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe_aepdu.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: generaltel.dll, Version: 10.0.10037.0, Zeitstempel: 0x550d5182
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c98e
ID des fehlerhaften Prozesses: 0xe0
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe_aepdu.dll0
Pfad der fehlerhaften Anwendung: rundll32.exe_aepdu.dll1
Pfad des fehlerhaften Moduls: rundll32.exe_aepdu.dll2
Berichtskennung: rundll32.exe_aepdu.dll3

Error: (05/08/2015 03:26:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe_aepdu.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: generaltel.dll, Version: 10.0.10037.0, Zeitstempel: 0x550d5182
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c98e
ID des fehlerhaften Prozesses: 0x14e8
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe_aepdu.dll0
Pfad der fehlerhaften Anwendung: rundll32.exe_aepdu.dll1
Pfad des fehlerhaften Moduls: rundll32.exe_aepdu.dll2
Berichtskennung: rundll32.exe_aepdu.dll3

Error: (05/07/2015 07:13:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe_aepdu.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: generaltel.dll, Version: 10.0.10037.0, Zeitstempel: 0x550d5182
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002c98e
ID des fehlerhaften Prozesses: 0x1590
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe_aepdu.dll0
Pfad der fehlerhaften Anwendung: rundll32.exe_aepdu.dll1
Pfad des fehlerhaften Moduls: rundll32.exe_aepdu.dll2
Berichtskennung: rundll32.exe_aepdu.dll3

Error: (05/06/2015 11:17:12 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1". Fehler in Manifest- oder Richtliniendatei "Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"2" in Zeile  Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Definition: Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (05/06/2015 11:16:41 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (01/01/2002 08:48:57 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Software Protection" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (01/01/2002 08:46:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/01/2002 08:46:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/01/2002 08:46:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/01/2002 08:46:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/01/2002 08:46:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "RealtekCU" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/01/2002 08:46:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/01/2002 08:46:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/01/2002 08:46:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BrSplService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (01/01/2002 08:46:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (05/10/2015 00:33:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_aepdu.dll6.1.7600.163854a5bc637generaltel.dll10.0.10037.0550d5182c00000050002c98e12e001d08b11c778407dC:\Windows\system32\rundll32.exeC:\Windows\system32\generaltel.dll4f74d000-f708-11e4-918a-0019214d054e

Error: (05/08/2015 07:04:32 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"c:\program files\Samsung\Kies\External\firmwareupdate\GT-I9195\DeviceController64.exec:\program files\Samsung\Kies\External\firmwareupdate\GT-I9195\Microsoft.VC90.CRT.MANIFEST11

Error: (05/08/2015 07:04:00 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"c:\program files\cyberlink\powerdvd13\Movie\powerdvd cinema\mcepacifier\x64\MCEPacifier.exe

Error: (05/08/2015 07:03:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe

Error: (05/08/2015 07:03:36 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest

Error: (05/08/2015 07:02:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_aepdu.dll6.1.7600.163854a5bc637generaltel.dll10.0.10037.0550d5182c00000050002c98ee001d089b8d45dd8f7C:\Windows\system32\rundll32.exeC:\Windows\system32\generaltel.dll67c4d2f3-f5ac-11e4-b05d-0019214d054e

Error: (05/08/2015 03:26:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_aepdu.dll6.1.7600.163854a5bc637generaltel.dll10.0.10037.0550d5182c00000050002c98e14e801d08997a2ed05d2C:\Windows\system32\rundll32.exeC:\Windows\system32\generaltel.dll3655a533-f58e-11e4-b05d-0019214d054e

Error: (05/07/2015 07:13:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_aepdu.dll6.1.7600.163854a5bc637generaltel.dll10.0.10037.0550d5182c00000050002c98e159001d0888c5a38da7eC:\Windows\system32\rundll32.exeC:\Windows\system32\generaltel.dll20e099b6-f480-11e4-88f3-0019214d054e

Error: (05/06/2015 11:17:12 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"c:\program files\Samsung\Kies\External\firmwareupdate\GT-I9195\DeviceController64.exec:\program files\Samsung\Kies\External\firmwareupdate\GT-I9195\Microsoft.VC90.CRT.MANIFEST11

Error: (05/06/2015 11:16:41 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"c:\program files\cyberlink\powerdvd13\Movie\powerdvd cinema\mcepacifier\x64\MCEPacifier.exe


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Percentage of memory in use: 47%
Total physical RAM: 2047.3 MB
Available physical RAM: 1075.95 MB
Total Pagefile: 4094.61 MB
Available Pagefile: 2764.89 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:78.03 GB) (Free:8.71 GB) NTFS
Drive j: (Volume) (Fixed) (Total:257.22 GB) (Free:241.47 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 335.4 GB) (Disk ID: 76BE9572)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=78 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=257.2 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

die internetseiten werden von firefox und internet explorer immer noch als risiko eingestuft und blockiert. wie soll ich bei dem laptop weiter vorgehen ?
vielen dank mal so zwischendurch für deine hilfe

hey schrauber,

also der desktop pc scheint nach dem batteriewechsel wieder ohne probleme zu laufen. erstaunlich aber das aufgrunddessen die internetseiten als risiko eingestuft werden.
naja hauptsache er läuft wieder ohne probleme.
wie soll ich aber bei meinem eigentlichem "facebook problem" auf dem laptop weiter vorgehen?

Moment, von welchem Rechner waren die logs jetzt? Vom Desktop?


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ja also von mailware adwcleaner und junkware waren die logs vom desktop pc

Dann ESET und Co auch auf dem Desktop machen, und von dem andern Rechner ne genaue Fehlerbeschreibung und FRST logs bitte.

jetzt bin ich verwirrt also ich schick jetzt einfach nochmal die ganzen logs von dem laptop. das problem hier ist das jemand es immer wieder schafft sich bei facebook einzuloggen obwohl passwörter schon x mal geändert wurden. (auch email passwort wurde geändert)


FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-05-2015 01 (ATTENTION: ====> FRST version is 16 days old and could be outdated)
Ran by Ivonne (administrator) on IVONNE-PC on 22-05-2015 23:04:13
Running from C:\Users\Ivonne\Desktop
Loaded Profiles: Ivonne (Available profiles: Ivonne)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\avastui.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
(Spotify Ltd) C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Avast Software) C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\avastui.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-27] (Intel Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-14] (Realtek Semiconductor)
HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1797008 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5511352 2015-03-18] (Avast Software s.r.o.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\Run: [Spotify Web Helper] => C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-08] (Spotify Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll [2015-03-03] (Avast Software s.r.o.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1060347449-277864741-3371473675-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1060347449-277864741-3371473675-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
SearchScopes: HKLM -> {EFE522B3-7ABD-49CB-A5C3-A2AFBBA83B9D} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = 
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {EFE522B3-7ABD-49CB-A5C3-A2AFBBA83B9D} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {FA66D5A9-3B7F-42C1-9395-2868E0C57CC2} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-08-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-03-03] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-08-20] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default
FF DefaultSearchUrl: https://de.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF Homepage: google.de
FF Keyword.URL: https://de.search.yahoo.com/yhs/search
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-12-19] (Nero AG)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\searchplugins\google-images.xml [2014-11-19]
FF SearchPlugin: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\searchplugins\google-maps.xml [2014-11-19]
FF SearchPlugin: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\searchplugins\yahoo-avast.xml [2014-11-20]
FF Extension: Noia 2.0 (eXtreme) - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\Extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e} [2010-11-01]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-11-20]
FF Extension: Adblock Plus - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-08]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-26]
FF HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-11-20]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-03-03]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - No Path Or update_url value
CHR HKU\S-1-5-21-1060347449-277864741-3371473675-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Ivonne\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-17]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [343336 2015-03-03] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [3205216 2015-03-03] (Avast Software)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [851456 2015-04-27] (Microsoft Corporation)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [143872 2007-12-17] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [113664 2007-01-11] (SEIKO EPSON CORPORATION)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2012-11-05] (Flexera Software, Inc.)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2010-11-01] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1051976 2010-06-14] (TuneUp Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-03-03] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-03-03] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-03-03] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-03-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-03-03] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427480 2015-03-03] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-03-03] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206976 2015-03-03] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10.sys [52096 2010-10-01] (Generic USB smartcard reader)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl.sys [18432 2012-03-26] (Apple Inc.) [File not signed]
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2010-02-24] (TuneUp Software)
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2013-03-18] (Apple, Inc.) [File not signed]
R2 VBoxAswDrv; C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [220240 2015-03-03] (Avast Software)
S3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] () [File not signed]
S3 catchme; \??\C:\Users\Ivonne\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 19:19 - 2015-05-18 19:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-18 18:45 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-17 22:16 - 2015-05-17 22:16 - 00000961 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-05-17 22:16 - 2015-05-17 22:16 - 00000949 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-05-17 22:16 - 2015-05-17 22:16 - 00000000 ____D () C:\Program Files\TeamViewer
2015-05-17 22:14 - 2015-05-17 22:15 - 07970528 _____ (TeamViewer GmbH) C:\Users\Ivonne\Downloads\TeamViewer_Setup_de.exe
2015-05-17 21:41 - 2015-05-17 21:41 - 00001020 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-17 21:41 - 2015-05-17 21:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-17 21:41 - 2015-05-17 21:41 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2015-05-17 21:41 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-17 21:41 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-17 21:39 - 2015-05-17 21:40 - 02719698 _____ (Thisisu) C:\Users\Ivonne\Desktop\JRT.exe
2015-05-17 21:39 - 2015-05-17 21:39 - 02209792 _____ () C:\Users\Ivonne\Desktop\AdwCleaner_4.204.exe
2015-05-17 21:37 - 2015-05-17 21:39 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Ivonne\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-14 08:58 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-14 08:58 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-14 08:58 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-14 08:58 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-14 08:58 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-14 08:58 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-14 08:58 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-14 08:58 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-14 08:58 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-14 08:58 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-14 08:58 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-14 08:58 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-14 08:58 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-14 08:57 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-14 08:57 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-14 08:57 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-14 08:57 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-14 08:57 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-14 08:57 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-14 08:57 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-14 08:57 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-14 08:57 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-14 08:57 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-14 08:57 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-14 08:57 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-14 08:57 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-14 08:57 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-14 08:57 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-14 08:57 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-14 08:57 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-14 08:57 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-14 08:57 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-14 08:57 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-14 08:57 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-14 08:57 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-14 08:57 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-14 08:57 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-14 08:57 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-14 08:57 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-14 08:57 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-14 08:57 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-14 08:57 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-14 08:57 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-14 08:57 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-14 08:57 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-14 08:57 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-14 08:57 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-14 08:57 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-14 08:57 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-14 08:57 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-14 08:57 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-14 08:56 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-14 08:56 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-14 08:56 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-14 08:56 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-14 08:56 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-14 08:56 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-14 08:56 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 23:50 - 2015-05-18 18:10 - 00049270 _____ () C:\Windows\PFRO.log
2015-05-13 23:50 - 2015-05-13 23:50 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-13 23:46 - 2015-05-13 23:46 - 00019988 _____ () C:\ComboFix.txt
2015-05-13 23:26 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-13 23:26 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-13 23:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-13 23:25 - 2015-05-13 23:46 - 00000000 ____D () C:\Qoobox
2015-05-13 23:25 - 2015-05-13 23:44 - 00000000 ____D () C:\Windows\erdnt
2015-05-09 22:22 - 2015-05-10 08:45 - 00000000 ____D () C:\Users\Ivonne\Desktop\Wohnung
2015-05-08 18:41 - 2015-05-08 18:41 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Ivonne\Desktop\tdsskiller.exe
2015-05-08 18:06 - 2015-05-22 23:02 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-08 18:06 - 2015-05-17 21:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-08 18:06 - 2015-05-08 18:38 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-08 18:05 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-08 18:04 - 2015-05-08 18:38 - 00000000 ____D () C:\Users\Ivonne\Desktop\mbar
2015-05-07 19:04 - 2015-05-22 23:04 - 00015396 _____ () C:\Users\Ivonne\Desktop\FRST.txt
2015-05-07 18:58 - 2015-05-22 23:04 - 00000000 ____D () C:\FRST
2015-05-07 18:57 - 2015-05-07 18:57 - 01141248 _____ (Farbar) C:\Users\Ivonne\Desktop\FRST.exe
2015-05-03 15:06 - 2015-05-03 15:06 - 00000000 ____D () C:\Windows\system32\appraiser
2015-05-03 10:13 - 2015-05-03 10:13 - 00000000 ___RD () C:\Program Files\Skype
2015-05-03 10:13 - 2015-05-03 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-05-03 10:13 - 2015-05-03 10:13 - 00000000 ____D () C:\Program Files\Common Files\Skype
2015-05-03 00:20 - 2015-05-22 20:31 - 00000672 _____ () C:\Windows\setupact.log
2015-05-03 00:20 - 2015-05-03 00:20 - 00000000 _____ () C:\Windows\setuperr.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-22 22:59 - 2014-11-19 13:23 - 01104124 _____ () C:\Windows\WindowsUpdate.log
2015-05-22 22:59 - 2014-02-27 13:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-22 20:40 - 2009-07-14 06:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-22 20:40 - 2009-07-14 06:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-22 20:31 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-21 23:32 - 2015-04-08 06:48 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-21 22:48 - 2010-11-01 19:23 - 00000000 ____D () C:\Users\Ivonne\AppData\Local\Adobe
2015-05-21 22:47 - 2012-10-11 10:52 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-20 23:10 - 2014-09-03 23:39 - 00000000 ____D () C:\Users\Ivonne\Desktop\Hochzeit
2015-05-18 23:23 - 2009-07-14 10:56 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-18 21:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-05-18 20:33 - 2010-11-01 01:40 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-18 19:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-18 19:04 - 2009-07-14 06:33 - 00362096 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-18 19:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-05-18 19:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-18 18:44 - 2014-02-27 13:37 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-18 18:27 - 2010-11-01 03:24 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-18 18:11 - 2010-11-01 02:47 - 00089440 _____ () C:\Users\Ivonne\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-14 08:32 - 2013-05-16 17:50 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-13 23:46 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2015-05-13 23:43 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2015-05-04 11:55 - 2012-03-14 22:30 - 00000000 ____D () C:\Program Files\FOTOParadies
2015-05-04 11:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-05-03 15:06 - 2014-05-11 14:10 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-05-03 10:13 - 2010-11-01 19:41 - 00000000 ____D () C:\ProgramData\Skype
2015-04-26 13:56 - 2015-04-21 18:56 - 00000000 ____D () C:\Users\Ivonne\Desktop\Herr Bahms april 15

==================== Files in the root of some directories =======

2012-12-04 21:56 - 2012-12-04 21:56 - 0040023 _____ () C:\Users\Ivonne\AppData\Roaming\UserTile.png
2012-02-09 00:19 - 2014-01-22 17:09 - 0004096 ____H () C:\Users\Ivonne\AppData\Local\keyfile3.drm
2014-11-19 16:00 - 2014-11-19 16:00 - 0005015 _____ () C:\ProgramData\wmzddnmb.cix

Files to move or delete:
====================
C:\Users\Public\dcmsvcsetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-18 20:53

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 06-05-2015 01
Ran by Ivonne at 2015-05-22 23:05:25
Running from C:\Users\Ivonne\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1060347449-277864741-3371473675-500 - Administrator - Disabled)
Gast (S-1-5-21-1060347449-277864741-3371473675-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1060347449-277864741-3371473675-1002 - Limited - Enabled)
Ivonne (S-1-5-21-1060347449-277864741-3371473675-1000 - Administrator - Enabled) => C:\Users\Ivonne

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Avast Free Antivirus (HKLM\...\avast) (Version: 10.2.2214 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 3.00 - Piriform)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ Inselgeschichten (HKLM\...\{64EEA791-0271-4B53-00AC-2BF05F5FBEF6}) (Version:  - Electronic Arts)
Die*Sims™*3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
EPSON BX300F Series Printer Uninstall (HKLM\...\EPSON BX300F Series) (Version:  - SEIKO EPSON Corporation)
EPSON BX305 Series Printer Uninstall (HKLM\...\EPSON BX305 Series) (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (HKLM\...\{DEDB47A3-C988-4A43-A645-E2CEA571E680}) (Version: 2.0.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - )
EPSON Stylus Office BX300F_TX300F Handbuch (HKLM\...\EPSON Stylus Office BX300F_TX300F Benutzerhandbuch) (Version:  - )
Fotogalerie (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FOTOParadies (HKLM\...\{F8C69611-5AFE-4F7F-ACB3-05B1ED552530}}_is1) (Version: 3.1.10.103 - Foto Online Service GmbH)
Free YouTube Download version 3.2.49.1111 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.49.1111 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.50.1111 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1111 - DVDVideoSoft Ltd.)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.3.1001 - Intel Corporation)
Java 7 Update 9 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217009FF}) (Version: 7.0.90 - Oracle)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Codec Pack 5.2.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 5.2.0 - )
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft IntelliPoint 8.0 (HKLM\...\{00F93853-D9D3-4795-A89E-84CCBA0205C9}) (Version: 8.0.225.0 - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 38.0.1 (x86 de) (HKLM\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 12 (HKLM\...\{622B6CB8-70B1-4D65-B672-093D19759BA1}) (Version: 12.5.01200 - Nero AG)
Nero 7 Premium (HKLM\...\{22FB6750-ADDF-4726-B67F-6901E1991031}) (Version: 7.03.0993 - Nero AG)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.3 - NVIDIA Corporation)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6003 - Realtek Semiconductor Corp.)
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities (HKLM\...\TuneUp Utilities) (Version: 9.0.4300.9 - TuneUp Software)
TuneUp Utilities (Version: 9.0.4300.9 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.4300.9 - TuneUp Software) Hidden
VLC media player 1.1.4 (HKLM\...\VLC media player) (Version: 1.1.4 - VideoLAN)
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden
Windows Driver Package - Broadcom Bluetooth  (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (09/11/2009 6.2.0.9407) (HKLM\...\755087041320E005CB1E8A67C5C55A260EB81B90) (Version: 09/11/2009 6.2.0.9407 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Winrar 3.93 (HKLM\...\Winrar 3.93) (Version:  - )
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}) (Version: 17.0.10381 - WinZip Computing, S.L. )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points  =========================

ATTENTION: System Restore is disabled.

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-05-13 23:43 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0F357B88-361E-43EE-91DE-476ED65897AD} - System32\Tasks\{64B2E84F-DEBE-4CDB-979D-DB29A9091AA7} => C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)
Task: {20773140-9B1D-4FD8-9FCF-8DFEFC863D5B} - System32\Tasks\{DE1BF331-B391-431E-A491-4AF87B3A854A} => pcalua.exe -a C:\Users\Ivonne\Downloads\windows-live-movie-maker_18116.exe -d C:\Users\Ivonne\Downloads
Task: {2D5B340A-5DBA-44F0-AD2F-911B20D0E1E2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {30A89842-71F2-46BE-8358-501FBB60C80A} - System32\Tasks\{6E2558FC-E6A7-4429-9465-4650EDD38CC8} => C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)
Task: {37C2F4F6-D1A1-431A-A7FC-09005AFACFC1} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {66853692-7638-4A2A-AA06-964E5503CA59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {672831F3-30A4-4A28-988E-2CBFB192AAE4} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)
Task: {6C1A2C0E-FCD7-4BED-B058-990FD7CE5639} - System32\Tasks\{A3B08739-3B18-45C0-8787-B8465F8A61B8} => C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe [2014-11-11] (DVDVideoSoft Ltd.)
Task: {83072DE4-9C6B-4456-9B97-ABAED99F17AA} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {8FC3F161-E833-4E88-A95E-BB5297E7060C} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {9A9B2842-4FDC-4F7F-84A2-2991C4ECE884} - System32\Tasks\{1FB31CD4-8BCE-4CE4-A178-4629D492085D} => pcalua.exe -a D:\eauninstall.exe -d D:\
Task: {A3974055-F884-44BC-B103-516C386EFA69} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2015-03-03] (Avast Software s.r.o.)
Task: {AB49AB62-C5C9-423F-AA8F-BFC15319C6C1} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {C48A5C40-97CC-44E3-B819-FF45AE0844FC} - System32\Tasks\{7DE3D4A3-CF8C-4C2B-9D0F-E7F16A3E870B} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {C9852B23-A43B-4A66-BE25-3434DFE8EAEB} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files\TuneUp Utilities 2010\OneClick.exe [2010-06-14] (TuneUp Software)
Task: {F1B70B5B-0665-4D13-90CF-E15D3E307843} - System32\Tasks\{38D20179-26CC-4C1D-AB47-10F91592C7CE} => pcalua.exe -a C:\Users\Ivonne\Downloads\wlsetup-web.exe -d C:\Users\Ivonne\Downloads

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2015-03-03 18:50 - 2015-03-03 18:50 - 00104400 _____ () C:\Program Files\Alwil Software\Avast5\log.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 00081728 _____ () C:\Program Files\Alwil Software\Avast5\JsonRpcServer.dll
2015-05-21 21:16 - 2015-05-21 21:16 - 02931200 _____ () C:\Program Files\Alwil Software\Avast5\defs\15052101\algo.dll
2015-05-22 20:32 - 2015-05-22 20:32 - 02931200 _____ () C:\Program Files\Alwil Software\Avast5\defs\15052201\algo.dll
2003-07-11 03:09 - 2003-07-11 03:09 - 00048192 _____ () C:\Program Files\Common Files\Microsoft Shared\Web Folders\1031\nsextint.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 40540672 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 01359872 _____ () C:\Program Files\Alwil Software\Avast5\libglesv2.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 00212992 _____ () C:\Program Files\Alwil Software\Avast5\libegl.dll
2014-11-10 19:30 - 2014-11-10 19:30 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\fea6745cde495eb59adf7808e8475ebc\IsdiInterop.ni.dll
2010-11-01 02:45 - 2010-04-27 18:05 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:C64BF02A

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1060347449-277864741-3371473675-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ivonne\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s

==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [{72AC3F50-FE6E-48AE-B546-5D1039C95A4E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{566ACBDB-2FC1-49D4-BBA3-2A291EC3BBFA}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{921F2799-7D41-46BD-A5A2-557790696899}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{BFCC23F0-373F-40AA-B70A-03569735ADE9}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{644BAFB6-0ABC-46F6-A026-2CC20D1B08AE}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F4DC3987-C062-4B6A-AD55-E10296481AD2}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{AA2132E2-010B-4B01-950E-5271397519B9}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{C2837112-3C49-4B57-ACED-BCE6A257FD9D}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{A1EFC834-166B-4E57-933F-9877283652C3}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{1865F469-4DFB-4E0D-B2C0-1D3755975C84}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{46B6B70D-D1A9-4A1C-A6C8-25687CFB6F34}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{32716270-CA17-4BA1-9E46-3666D3F9335A}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{65B6CEAA-A076-438F-9287-04C5EEFEE86E}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{AFC38DB1-994D-4D47-BF91-96BE0A5D16B6}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{E6B3E450-CCA0-4DDD-A790-78D3E14E56D1}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{A177FA75-B075-4196-AA50-03B26AB44F15}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{A3BCC8C9-C9A6-4D14-B3B2-A89BB9A1F18F}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{CB11582B-79EC-4335-9179-74DFE04BFDE7}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{FE91C23B-3B38-4231-9E01-44FBBB226C20}] => (Allow) LPort=2869
FirewallRules: [{7BD2BADD-CF0B-4DC5-9AF7-E2F8C526EA76}] => (Allow) LPort=1900
FirewallRules: [{3E282C79-A3E7-4CC3-A45D-38EB4EC7EE3C}] => (Allow) C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{1425DF02-FE6B-4107-9139-93BA93357CBB}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C59B9D6E-5024-418E-9981-6C1AA6B80BA6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8BFF56EC-3E1F-47A6-97B8-5D1EE48DC76D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{ED68E311-BE73-45D0-814C-84CC15D0D62E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{5D0EDBEE-4A04-4BF7-A5D3-C8200CAD7BFB}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{624797A2-9B00-4C68-9A69-15F0F204B380}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{92AA4F5E-1BD1-4E82-A3EC-CE868AD3F9F0}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{EF08543B-D08B-47EB-B2CF-0D967D06B56C}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{C911B755-D5F8-45E9-9BB0-7C81D7F1963F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{D799E27A-83C6-4CA0-AF09-F9CF79EAAB51}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{DE30257C-BF2E-4EC4-B128-373796F2B318}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe

==================== Faulty Device Manager Devices =============

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/20/2015 08:02:52 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/20/2015 08:02:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/18/2015 08:54:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/18/2015 08:54:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/14/2015 00:51:59 AM) (Source: MsiInstaller) (EventID: 1024) (User: Ivonne-PC)
Description: Produkt: Adobe Reader XI (11.0.10) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011011}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/13/2015 11:38:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: handle.3XE, Version: 3.42.0.0, Zeitstempel: 0x492312a9
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b3c6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00072a3c
ID des fehlerhaften Prozesses: 0x36c
Startzeit der fehlerhaften Anwendung: 0xhandle.3XE0
Pfad der fehlerhaften Anwendung: handle.3XE1
Pfad des fehlerhaften Moduls: handle.3XE2
Berichtskennung: handle.3XE3

Error: (05/13/2015 11:25:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/13/2015 11:23:12 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/04/2015 11:27:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/04/2015 11:24:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (05/22/2015 08:35:49 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {ED1D0FDF-4414-470A-A56D-CFB68623FC58}

Error: (05/22/2015 08:31:41 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/22/2015 08:31:35 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/22/2015 08:31:35 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/21/2015 11:32:46 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Diagnostics Tracking Service konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (05/21/2015 10:47:17 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/21/2015 10:47:22 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎21.‎05.‎2015 um 22:46:18 unerwartet heruntergefahren.

Error: (05/21/2015 10:47:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/21/2015 10:47:12 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/19/2015 07:31:38 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.


Microsoft Office Sessions:
=========================
Error: (05/20/2015 08:02:52 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe

Error: (05/20/2015 08:02:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest

Error: (05/18/2015 08:54:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe

Error: (05/18/2015 08:54:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest

Error: (05/14/2015 00:51:59 AM) (Source: MsiInstaller) (EventID: 1024) (User: Ivonne-PC)
Description: Adobe Reader XI (11.0.10) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011011}1625(NULL)(NULL)(NULL)

Error: (05/13/2015 11:38:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: handle.3XE3.42.0.0492312a9ntdll.dll6.1.7601.187985507b3c6c000000500072a3c36c01d08dc5324051a6C:\ComboFix\handle.3XEC:\Windows\SYSTEM32\ntdll.dll71035d86-f9b8-11e4-b648-faacc4223d17

Error: (05/13/2015 11:25:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Nero\Nero 12\Nero BackItUp\NBVSSTool_x64.exe

Error: (05/13/2015 11:23:12 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"C:\Program Files\Nero\Nero 12\Nero Recode\NeroBRServer.exe.Manifest

Error: (05/04/2015 11:27:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Nero\Nero 12\Nero BackItUp\NBVSSTool_x64.exe

Error: (05/04/2015 11:24:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"C:\Program Files\Nero\Nero 12\Nero Recode\NeroBRServer.exe.Manifest


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage of memory in use: 40%
Total physical RAM: 3565.61 MB
Available physical RAM: 2104.85 MB
Total Pagefile: 7129.54 MB
Available Pagefile: 5536.25 MB
Total Virtual: 2047.88 MB
Available Virtual: 1916.05 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:65.81 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: B0FD1CB0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.05.22.06
  rootkit: v2015.05.16.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.17801
Ivonne :: IVONNE-PC [administrator]

22.05.2015 23:44:46
mbar-log-2015-05-22 (23-44-46).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 389630
Time elapsed: 30 minute(s), 30 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         

00:18:20.0715 0x158c  TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04
00:18:24.0724 0x158c  ============================================================
00:18:24.0724 0x158c  Current date / time: 2015/05/23 00:18:24.0724
00:18:24.0724 0x158c  SystemInfo:
00:18:24.0724 0x158c  
00:18:24.0724 0x158c  OS Version: 6.1.7601 ServicePack: 1.0
00:18:24.0724 0x158c  Product type: Workstation
00:18:24.0724 0x158c  ComputerName: IVONNE-PC
00:18:24.0724 0x158c  UserName: Ivonne
00:18:24.0724 0x158c  Windows directory: C:\Windows
00:18:24.0724 0x158c  System windows directory: C:\Windows
00:18:24.0724 0x158c  Processor architecture: Intel x86
00:18:24.0724 0x158c  Number of processors: 4
00:18:24.0724 0x158c  Page size: 0x1000
00:18:24.0724 0x158c  Boot type: Normal boot
00:18:24.0724 0x158c  ============================================================
00:18:24.0958 0x158c  KLMD registered as C:\Windows\system32\drivers\85365473.sys
00:18:25.0442 0x158c  System UUID: {67DEF174-5431-8EF5-8CE5-9D5367B6705B}
00:18:26.0456 0x158c  Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 ( 298.09 Gb ), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
00:18:26.0456 0x158c  ============================================================
00:18:26.0456 0x158c  \Device\Harddisk0\DR0:
00:18:26.0456 0x158c  MBR partitions:
00:18:26.0456 0x158c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
00:18:26.0456 0x158c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x253FB800
00:18:26.0456 0x158c  ============================================================
00:18:26.0487 0x158c  C: <-> \Device\Harddisk0\DR0\Partition2
00:18:26.0487 0x158c  ============================================================
00:18:26.0487 0x158c  Initialize success
00:18:26.0487 0x158c  ============================================================
00:19:21.0185 0x0b3c  ============================================================
00:19:21.0185 0x0b3c  Scan started
00:19:21.0185 0x0b3c  Mode: Manual; SigCheck; TDLFS; 
00:19:21.0185 0x0b3c  ============================================================
00:19:21.0185 0x0b3c  KSN ping started
00:19:34.0741 0x0b3c  KSN ping finished: true
00:19:35.0599 0x0b3c  ================ Scan system memory ========================
00:19:35.0599 0x0b3c  System memory - ok
00:19:35.0599 0x0b3c  ================ Scan services =============================
00:19:35.0865 0x0b3c  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
00:19:36.0099 0x0b3c  1394ohci - ok
00:19:36.0177 0x0b3c  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
00:19:36.0223 0x0b3c  ACPI - ok
00:19:36.0301 0x0b3c  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
00:19:36.0411 0x0b3c  AcpiPmi - ok
00:19:36.0582 0x0b3c  [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
00:19:36.0613 0x0b3c  AdobeARMservice - ok
00:19:36.0707 0x0b3c  [ B04A4810C6CC205F9DC72DC22E4AB236, 547321F5C28C80D4818372D65E2A33D4BAC593015DD6613B24586FE4B4A95D5D ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
00:19:36.0754 0x0b3c  AdobeFlashPlayerUpdateSvc - ok
00:19:36.0847 0x0b3c  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys
00:19:36.0941 0x0b3c  adp94xx - ok
00:19:36.0988 0x0b3c  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys
00:19:37.0081 0x0b3c  adpahci - ok
00:19:37.0128 0x0b3c  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys
00:19:37.0159 0x0b3c  adpu320 - ok
00:19:37.0237 0x0b3c  [ 12E6A172D72AFC626727B8635DD17E39, 33B3D109C39DF6EA86AFC3C89A93657906E981D3D22FF854401BC7326990CC08 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
00:19:37.0378 0x0b3c  AeLookupSvc - ok
00:19:37.0456 0x0b3c  [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD             C:\Windows\system32\drivers\afd.sys
00:19:37.0612 0x0b3c  AFD - ok
00:19:37.0674 0x0b3c  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys
00:19:37.0705 0x0b3c  agp440 - ok
00:19:37.0768 0x0b3c  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys
00:19:37.0799 0x0b3c  aic78xx - ok
00:19:37.0846 0x0b3c  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG             C:\Windows\System32\alg.exe
00:19:37.0939 0x0b3c  ALG - ok
00:19:38.0002 0x0b3c  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
00:19:38.0017 0x0b3c  aliide - ok
00:19:38.0049 0x0b3c  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
00:19:38.0080 0x0b3c  amdagp - ok
00:19:38.0127 0x0b3c  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
00:19:38.0158 0x0b3c  amdide - ok
00:19:38.0189 0x0b3c  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys
00:19:38.0283 0x0b3c  AmdK8 - ok
00:19:38.0298 0x0b3c  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
00:19:38.0345 0x0b3c  AmdPPM - ok
00:19:38.0392 0x0b3c  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
00:19:38.0423 0x0b3c  amdsata - ok
00:19:38.0485 0x0b3c  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
00:19:38.0532 0x0b3c  amdsbs - ok
00:19:38.0563 0x0b3c  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
00:19:38.0579 0x0b3c  amdxata - ok
00:19:38.0641 0x0b3c  [ 81F97D8F8B3FB94A451CC6F7CF8B2965, 8DEBA4E47E1016D69740C0BB7CDD23852D86E0D42C1C1EA5A847ECB115C38CB1 ] AppID           C:\Windows\system32\drivers\appid.sys
00:19:38.0719 0x0b3c  AppID - ok
00:19:38.0751 0x0b3c  [ F5090F8FA6757C58E17BAEAA86093636, 5E14CF3032DF5801240F45C59AA93962EA41AA5648A0C6458D16D9B9D95A131F ] AppIDSvc        C:\Windows\System32\appidsvc.dll
00:19:38.0829 0x0b3c  AppIDSvc - ok
00:19:38.0875 0x0b3c  [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo         C:\Windows\System32\appinfo.dll
00:19:38.0985 0x0b3c  Appinfo - ok
00:19:39.0047 0x0b3c  [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt         C:\Windows\System32\appmgmts.dll
00:19:39.0141 0x0b3c  AppMgmt - ok
00:19:39.0187 0x0b3c  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc             C:\Windows\system32\DRIVERS\arc.sys
00:19:39.0203 0x0b3c  arc - ok
00:19:39.0234 0x0b3c  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
00:19:39.0265 0x0b3c  arcsas - ok
00:19:39.0437 0x0b3c  [ 9D768C43FEF254DD50B1DBF8AD5C4C0B, A50854EA5C08605133B8BB4DFDC6090357C5665314AA72E0BFA1E07D4E451F09 ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
00:19:39.0468 0x0b3c  aspnet_state - ok
00:19:39.0546 0x0b3c  [ AA69ED00EE72BFEE003C864DCFBC5038, 95B949C4AC7F1962FE84EE8FBA4C7CBE959B963ABEEAE0EF092EBB028D1435E2 ] aswHwid         C:\Windows\system32\drivers\aswHwid.sys
00:19:39.0577 0x0b3c  aswHwid - ok
00:19:39.0640 0x0b3c  [ 6FDAE6458E0FAC369005EEFE55E1190A, 518FEFEBE50CAC7F54AF839F8A2423307789989FC5D92535866C38A1FBDBDDE3 ] aswMonFlt       C:\Windows\system32\drivers\aswMonFlt.sys
00:19:39.0671 0x0b3c  aswMonFlt - ok
00:19:39.0733 0x0b3c  [ 0BD1C9E546CA7D801E25FED0E9CA58B8, 487C36B0A008EDD3E907B7537E69F085976B97BDD2D2E05D2BEC22DDD07923CA ] aswRdr          C:\Windows\system32\drivers\aswRdr2.sys
00:19:39.0765 0x0b3c  aswRdr - ok
00:19:39.0811 0x0b3c  [ 6FB92505DAA300DA62A1C374B949B574, CBF54038F1267A8B3420C5B58F4AAB77A71590B1C82B9144AD4FAB07E9B9B685 ] aswRvrt         C:\Windows\system32\drivers\aswRvrt.sys
00:19:39.0843 0x0b3c  aswRvrt - ok
00:19:39.0983 0x0b3c  [ C3A047ABB97AEB805E07A30EFDACD0B9, D62BD6FF27C42134FE3A22B87ED5D16EDEA1994E90C1EEC5E2680047B76DC4DC ] aswSnx          C:\Windows\system32\drivers\aswSnx.sys
00:19:40.0108 0x0b3c  aswSnx - ok
00:19:40.0186 0x0b3c  [ E5F230B70F1A9764EB7AC4A76445F79F, 22D938B96D6E1BCAF2E5DD109A880BDB640AC048970876EB75DA5BB7DD858DDA ] aswSP           C:\Windows\system32\drivers\aswSP.sys
00:19:40.0279 0x0b3c  aswSP - ok
00:19:40.0326 0x0b3c  [ F761D13D43D0F4FB2986308CFFD7F589, 035EEABBAB6D3DC71C659DE91C860B7D2F6BC581E6B5D5F506169FC7FD7A4F88 ] aswStm          C:\Windows\system32\drivers\aswStm.sys
00:19:40.0357 0x0b3c  aswStm - ok
00:19:40.0404 0x0b3c  [ 2EBD0ACCAFC67088D4B9EBDF7428F6AD, F2872CB350CE46BED8FCD3790921612B808292D32A58BC6F646BBD2EEEA4ADE0 ] aswVmm          C:\Windows\system32\drivers\aswVmm.sys
00:19:40.0467 0x0b3c  aswVmm - ok
00:19:40.0513 0x0b3c  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
00:19:40.0669 0x0b3c  AsyncMac - ok
00:19:40.0732 0x0b3c  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi           C:\Windows\system32\drivers\atapi.sys
00:19:40.0763 0x0b3c  atapi - ok
00:19:40.0888 0x0b3c  [ 7D0A662D7B116169854B4EC941A7822D, 6B36A52F0E727A02205F9287BC0A48A56A53507C563DE27CFC07C6D175611AF5 ] athr            C:\Windows\system32\DRIVERS\athr.sys
00:19:41.0075 0x0b3c  athr - ok
00:19:41.0153 0x0b3c  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
00:19:41.0293 0x0b3c  AudioEndpointBuilder - ok
00:19:41.0340 0x0b3c  [ C1619A13B10CAC5038BF7129F57D8DE3, 9F71EA6C844650658938E68CCC1383F92D37C68E46E08461A8351491185BA791 ] Audiosrv        C:\Windows\System32\Audiosrv.dll
00:19:41.0403 0x0b3c  Audiosrv - ok
00:19:41.0512 0x0b3c  [ 35714DC1ADD995681D890D4382C75721, C1D10F2D47D348DCEA363B676E35A363FE8FA0E24295C4AD90F7EA37826A822D ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
00:19:41.0559 0x0b3c  avast! Antivirus - ok
00:19:41.0917 0x0b3c  [ 5019A83BE87FD8B60F7333901BFD35E5, 674DF51CAA1B6C0BC9CA9755B3BC5A9A71C583BD7C7A2826BD280E107B855092 ] AvastVBoxSvc    C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
00:19:42.0183 0x0b3c  AvastVBoxSvc - ok
00:19:42.0276 0x0b3c  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
00:19:42.0385 0x0b3c  AxInstSV - ok
00:19:42.0463 0x0b3c  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys
00:19:42.0619 0x0b3c  b06bdrv - ok
00:19:42.0666 0x0b3c  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
00:19:42.0760 0x0b3c  b57nd60x - ok
00:19:42.0838 0x0b3c  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
00:19:42.0916 0x0b3c  BDESVC - ok
00:19:42.0931 0x0b3c  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
00:19:43.0009 0x0b3c  Beep - ok
00:19:43.0087 0x0b3c  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE             C:\Windows\System32\bfe.dll
00:19:43.0212 0x0b3c  BFE - ok
00:19:43.0321 0x0b3c  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\system32\qmgr.dll
00:19:43.0524 0x0b3c  BITS - ok
00:19:43.0555 0x0b3c  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
00:19:43.0633 0x0b3c  blbdrive - ok
00:19:43.0680 0x0b3c  [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
00:19:43.0789 0x0b3c  bowser - ok
00:19:43.0821 0x0b3c  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
00:19:43.0899 0x0b3c  BrFiltLo - ok
00:19:43.0914 0x0b3c  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
00:19:43.0977 0x0b3c  BrFiltUp - ok
00:19:44.0039 0x0b3c  [ 77361D72A04F18809D0EFB6CCEB74D4B, 55E7DB65BB29FF421F138CDFF05E5ECFFC7C8862FAA68F6179A3BA9D6B69AE64 ] BridgeMP        C:\Windows\system32\DRIVERS\bridge.sys
00:19:44.0148 0x0b3c  BridgeMP - ok
00:19:44.0226 0x0b3c  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser         C:\Windows\System32\browser.dll
00:19:44.0335 0x0b3c  Browser - ok
00:19:44.0382 0x0b3c  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
00:19:44.0476 0x0b3c  Brserid - ok
00:19:44.0507 0x0b3c  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
00:19:44.0569 0x0b3c  BrSerWdm - ok
00:19:44.0601 0x0b3c  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
00:19:44.0647 0x0b3c  BrUsbMdm - ok
00:19:44.0679 0x0b3c  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
00:19:44.0757 0x0b3c  BrUsbSer - ok
00:19:44.0772 0x0b3c  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
00:19:44.0835 0x0b3c  BTHMODEM - ok
00:19:44.0897 0x0b3c  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv         C:\Windows\system32\bthserv.dll
00:19:44.0975 0x0b3c  bthserv - ok
00:19:45.0037 0x0b3c  catchme - ok
00:19:45.0069 0x0b3c  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
00:19:45.0162 0x0b3c  cdfs - ok
00:19:45.0225 0x0b3c  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom           C:\Windows\system32\drivers\cdrom.sys
00:19:45.0287 0x0b3c  cdrom - ok
00:19:45.0349 0x0b3c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc     C:\Windows\System32\certprop.dll
00:19:45.0427 0x0b3c  CertPropSvc - ok
00:19:45.0459 0x0b3c  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
00:19:45.0537 0x0b3c  circlass - ok
00:19:45.0599 0x0b3c  [ 33A60554882FDF59CDA3E1806370BBA1, 3DE5451E1CB84AAEBD03F54BEFC670C401447B4881A8B022748B6ECF0F500F01 ] CLFS            C:\Windows\system32\CLFS.sys
00:19:45.0646 0x0b3c  CLFS - ok
00:19:45.0724 0x0b3c  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
00:19:45.0755 0x0b3c  clr_optimization_v2.0.50727_32 - ok
00:19:45.0817 0x0b3c  [ E87213F37A13E2B54391E40934F071D0, 7EB221127EFB5BF158FB03D18EFDA2C55FB6CE3D1A1FE69C01D70DBED02C87E5 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
00:19:45.0864 0x0b3c  clr_optimization_v4.0.30319_32 - ok
00:19:45.0880 0x0b3c  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
00:19:45.0958 0x0b3c  CmBatt - ok
00:19:46.0005 0x0b3c  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
00:19:46.0036 0x0b3c  cmdide - ok
00:19:46.0114 0x0b3c  [ 3051724F223EA48968B19567DE2A81F4, DCC27DE1B2B35866FC6DBDE95A368E7D0D346B6C3F31D0BACA63DD39B0A8874E ] CNG             C:\Windows\system32\Drivers\cng.sys
00:19:46.0239 0x0b3c  CNG - ok
00:19:46.0270 0x0b3c  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
00:19:46.0301 0x0b3c  Compbatt - ok
00:19:46.0363 0x0b3c  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
00:19:46.0426 0x0b3c  CompositeBus - ok
00:19:46.0457 0x0b3c  COMSysApp - ok
00:19:46.0488 0x0b3c  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys
00:19:46.0519 0x0b3c  crcdisk - ok
00:19:46.0566 0x0b3c  [ 49474B3E37969AF4B5C076F42B623AFF, BDA6B57E9B60EF1B67C74099263D33A367AAA035667239F76AB8B268FD3E8F23 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
00:19:46.0660 0x0b3c  CryptSvc - ok
00:19:46.0722 0x0b3c  [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC             C:\Windows\system32\drivers\csc.sys
00:19:46.0847 0x0b3c  CSC - ok
00:19:46.0956 0x0b3c  [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService      C:\Windows\System32\cscsvc.dll
00:19:47.0050 0x0b3c  CscService - ok
00:19:47.0097 0x0b3c  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch      C:\Windows\system32\rpcss.dll
00:19:47.0221 0x0b3c  DcomLaunch - ok
00:19:47.0253 0x0b3c  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc       C:\Windows\System32\defragsvc.dll
00:19:47.0362 0x0b3c  defragsvc - ok
00:19:47.0409 0x0b3c  [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
00:19:47.0502 0x0b3c  DfsC - ok
00:19:47.0565 0x0b3c  [ 560B0DCE52DFED6623B27C9BAFA6F236, BB4156BB1CCA64CCDE065870DAE56CD58BF05CEBF7C3B17C7A821FDF02A8B157 ] dg_ssudbus      C:\Windows\system32\DRIVERS\ssudbus.sys
00:19:47.0596 0x0b3c  dg_ssudbus - ok
00:19:47.0689 0x0b3c  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
00:19:47.0783 0x0b3c  Dhcp - ok
00:19:47.0923 0x0b3c  [ E95DE5B790B2D16706DAC8472E51F31A, 9D7A72742D369B9F0E4ACEC9C1850D0D60E975AEBEFF5BA06B954EA3AB3E9FF6 ] DiagTrack       C:\Windows\system32\diagtrack.dll
00:19:48.0111 0x0b3c  DiagTrack - ok
00:19:48.0173 0x0b3c  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
00:19:48.0267 0x0b3c  discache - ok
00:19:48.0298 0x0b3c  [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk            C:\Windows\system32\DRIVERS\disk.sys
00:19:48.0329 0x0b3c  Disk - ok
00:19:48.0376 0x0b3c  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
00:19:48.0469 0x0b3c  Dnscache - ok
00:19:48.0516 0x0b3c  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc         C:\Windows\System32\dot3svc.dll
00:19:48.0625 0x0b3c  dot3svc - ok
00:19:48.0688 0x0b3c  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS             C:\Windows\system32\dps.dll
00:19:48.0797 0x0b3c  DPS - ok
00:19:48.0859 0x0b3c  [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
00:19:48.0953 0x0b3c  drmkaud - ok
00:19:49.0031 0x0b3c  [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
00:19:49.0140 0x0b3c  DXGKrnl - ok
00:19:49.0187 0x0b3c  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost         C:\Windows\System32\eapsvc.dll
00:19:49.0312 0x0b3c  EapHost - ok
00:19:49.0546 0x0b3c  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys
00:19:49.0951 0x0b3c  ebdrv - ok
00:19:50.0014 0x0b3c  [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] EFS             C:\Windows\System32\lsass.exe
00:19:50.0123 0x0b3c  EFS - ok
00:19:50.0217 0x0b3c  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
00:19:50.0373 0x0b3c  ehRecvr - ok
00:19:50.0419 0x0b3c  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched         C:\Windows\ehome\ehsched.exe
00:19:50.0513 0x0b3c  ehSched - ok
00:19:50.0591 0x0b3c  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys
00:19:50.0685 0x0b3c  elxstor - ok
00:19:50.0794 0x0b3c  [ EC6A73CD8413F68655E5E0B99C415A21, 5F56B211E854B316A0512091D9EE5A10199EEF619712B8645A2034165253F2A0 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
00:19:50.0887 0x0b3c  EPSON_EB_RPCV4_01 - ok
00:19:50.0950 0x0b3c  [ 8FE6AB59CAB8F2C038FEA9522A5EEBA7, 539C4257DE460F881DAFAD4FD83C216363B558FDD06AE6779FBBCC2B84BCCF56 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
00:19:50.0997 0x0b3c  EPSON_PM_RPCV4_01 - ok
00:19:51.0043 0x0b3c  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
00:19:51.0090 0x0b3c  ErrDev - ok
00:19:51.0153 0x0b3c  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem     C:\Windows\system32\es.dll
00:19:51.0309 0x0b3c  EventSystem - ok
00:19:51.0371 0x0b3c  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat           C:\Windows\system32\drivers\exfat.sys
00:19:51.0480 0x0b3c  exfat - ok
00:19:51.0511 0x0b3c  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
00:19:51.0636 0x0b3c  fastfat - ok
00:19:51.0714 0x0b3c  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax             C:\Windows\system32\fxssvc.exe
00:19:51.0839 0x0b3c  Fax - ok
00:19:51.0870 0x0b3c  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys
00:19:51.0948 0x0b3c  fdc - ok
00:19:51.0979 0x0b3c  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost         C:\Windows\system32\fdPHost.dll
00:19:52.0089 0x0b3c  fdPHost - ok
00:19:52.0104 0x0b3c  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
00:19:52.0213 0x0b3c  FDResPub - ok
00:19:52.0229 0x0b3c  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
00:19:52.0260 0x0b3c  FileInfo - ok
00:19:52.0276 0x0b3c  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
00:19:52.0354 0x0b3c  Filetrace - ok
00:19:52.0479 0x0b3c  [ 73081CF28F0AE20A52CA4F67CEE6E6B0, 806C769F3638D25FF1892C7223E7250AA3B9F627DF3AD83BC5AE1FEF7016F86A ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
00:19:52.0588 0x0b3c  FLEXnet Licensing Service - ok
00:19:52.0635 0x0b3c  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
00:19:52.0666 0x0b3c  flpydisk - ok
00:19:52.0697 0x0b3c  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
00:19:52.0759 0x0b3c  FltMgr - ok
00:19:52.0884 0x0b3c  [ 6EC244F102C7F129678E5F7309D1366D, C30DA201AC623DA440B0A0716534557C578218C2A591FA8893CCCBD96B4518F9 ] FontCache       C:\Windows\system32\FntCache.dll
00:19:53.0071 0x0b3c  FontCache - ok
00:19:53.0134 0x0b3c  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
00:19:53.0165 0x0b3c  FontCache3.0.0.0 - ok
00:19:53.0212 0x0b3c  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
00:19:53.0243 0x0b3c  FsDepends - ok
00:19:53.0305 0x0b3c  [ 2262614848962DDB38FFB7C883E6FB55, 13A0FD679B96A1475FDAD5F64B0A9B07A3B132734888004276481E1060048A59 ] fssfltr         C:\Windows\system32\DRIVERS\fssfltr.sys
00:19:53.0337 0x0b3c  fssfltr - ok
00:19:53.0555 0x0b3c  [ 7B4C82899A967A7EB22DAB502770AE8E, 209FB59669070FCAAACB24B0CE81C375362BF1C519B15FDB5AA3EC2C87E2069B ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
00:19:53.0742 0x0b3c  fsssvc - ok
00:19:53.0836 0x0b3c  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
00:19:53.0867 0x0b3c  Fs_Rec - ok
00:19:53.0929 0x0b3c  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
00:19:53.0992 0x0b3c  fvevol - ok
00:19:54.0023 0x0b3c  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
00:19:54.0054 0x0b3c  gagp30kx - ok
00:19:54.0148 0x0b3c  [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc           C:\Windows\System32\gpsvc.dll
00:19:54.0288 0x0b3c  gpsvc - ok
00:19:54.0335 0x0b3c  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
00:19:54.0397 0x0b3c  hcw85cir - ok
00:19:54.0475 0x0b3c  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
00:19:54.0553 0x0b3c  HdAudAddService - ok
00:19:54.0600 0x0b3c  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
00:19:54.0647 0x0b3c  HDAudBus - ok
00:19:54.0694 0x0b3c  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys
00:19:54.0741 0x0b3c  HidBatt - ok
00:19:54.0772 0x0b3c  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
00:19:54.0819 0x0b3c  HidBth - ok
00:19:54.0850 0x0b3c  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys
00:19:54.0881 0x0b3c  HidIr - ok
00:19:54.0928 0x0b3c  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv         C:\Windows\System32\hidserv.dll
00:19:55.0037 0x0b3c  hidserv - ok
00:19:55.0099 0x0b3c  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
00:19:55.0193 0x0b3c  HidUsb - ok
00:19:55.0240 0x0b3c  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
00:19:55.0333 0x0b3c  hkmsvc - ok
00:19:55.0396 0x0b3c  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
00:19:55.0521 0x0b3c  HomeGroupListener - ok
00:19:55.0567 0x0b3c  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
00:19:55.0661 0x0b3c  HomeGroupProvider - ok
00:19:55.0739 0x0b3c  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
00:19:55.0770 0x0b3c  HpSAMD - ok
00:19:55.0864 0x0b3c  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\Windows\system32\drivers\HTTP.sys
00:19:56.0020 0x0b3c  HTTP - ok
00:19:56.0067 0x0b3c  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
00:19:56.0082 0x0b3c  hwpolicy - ok
00:19:56.0145 0x0b3c  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
00:19:56.0191 0x0b3c  i8042prt - ok
00:19:56.0254 0x0b3c  [ EB3A2C773E202CED30595BBFAD24FEBF, C7C45C5EC2D4A35740D81CCC0229EBC093863B851B18BF473E0FED4A97495C71 ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
00:19:56.0316 0x0b3c  iaStor - ok
00:19:56.0363 0x0b3c  [ 1E7999FE262B0A5FB84485C3A9AD06F1, EF42B436B35AD0A1FCCE4DD23DF1D6934A79E49FCD8AF90787A643B2290932F8 ] IAStorDataMgrSvc C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
00:19:56.0394 0x0b3c  IAStorDataMgrSvc - ok
00:19:56.0488 0x0b3c  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
00:19:56.0581 0x0b3c  iaStorV - ok
00:19:56.0706 0x0b3c  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
00:19:56.0831 0x0b3c  idsvc - ok
00:19:56.0862 0x0b3c  IEEtwCollectorService - ok
00:19:56.0909 0x0b3c  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys
00:19:56.0940 0x0b3c  iirsp - ok
00:19:57.0018 0x0b3c  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
00:19:57.0143 0x0b3c  IKEEXT - ok
00:19:57.0393 0x0b3c  [ 96282FBCE4534C9BF147CFFE9E1FA8DB, 91801002545FFF336A46A6D8B365491D2A21DD561DC8C7FA1EF6A1D9CFE1893C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
00:19:57.0751 0x0b3c  IntcAzAudAddService - ok
00:19:57.0783 0x0b3c  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
00:19:57.0814 0x0b3c  intelide - ok
00:19:57.0876 0x0b3c  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
00:19:57.0907 0x0b3c  intelppm - ok
00:19:57.0939 0x0b3c  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
00:19:58.0032 0x0b3c  IPBusEnum - ok
00:19:58.0048 0x0b3c  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
00:19:58.0126 0x0b3c  IpFilterDriver - ok
00:19:58.0235 0x0b3c  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
00:19:58.0375 0x0b3c  iphlpsvc - ok
00:19:58.0438 0x0b3c  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
00:19:58.0531 0x0b3c  IPMIDRV - ok
00:19:58.0563 0x0b3c  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
00:19:58.0656 0x0b3c  IPNAT - ok
00:19:58.0687 0x0b3c  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
00:19:58.0750 0x0b3c  IRENUM - ok
00:19:58.0812 0x0b3c  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
00:19:58.0843 0x0b3c  isapnp - ok
00:19:58.0890 0x0b3c  [ CB7A9ABB12B8415BCE5D74994C7BA3AE, 464BFF3F5EEE985BE075E23E1813F5CB82A9A0771A92C6D889B13B867BCDF647 ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
00:19:58.0937 0x0b3c  iScsiPrt - ok
00:19:58.0968 0x0b3c  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\drivers\kbdclass.sys
00:19:58.0999 0x0b3c  kbdclass - ok
00:19:59.0062 0x0b3c  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
00:19:59.0109 0x0b3c  kbdhid - ok
00:19:59.0124 0x0b3c  [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] KeyIso          C:\Windows\system32\lsass.exe
00:19:59.0171 0x0b3c  KeyIso - ok
00:19:59.0202 0x0b3c  [ 6DD2A1064DD8AFBED22E71176E2AF59B, 915F36860DAA72DA89E906A7F6F255A854A2A91EEA536A7C2EDB4A63250F66CC ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
00:19:59.0233 0x0b3c  KSecDD - ok
00:19:59.0296 0x0b3c  [ 76C0D35167B1369C68388FEDB56A3048, 2788962AB21DBB0A4D130AE5F822E9FDB96D7FF6320E2798714BF18BCB9CAE4F ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
00:19:59.0327 0x0b3c  KSecPkg - ok
00:19:59.0389 0x0b3c  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm           C:\Windows\system32\msdtckrm.dll
00:19:59.0514 0x0b3c  KtmRm - ok
00:19:59.0561 0x0b3c  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\System32\srvsvc.dll
00:19:59.0670 0x0b3c  LanmanServer - ok
00:19:59.0733 0x0b3c  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
00:19:59.0811 0x0b3c  LanmanWorkstation - ok
00:19:59.0842 0x0b3c  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
00:19:59.0920 0x0b3c  lltdio - ok
00:19:59.0967 0x0b3c  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
00:20:00.0060 0x0b3c  lltdsvc - ok
00:20:00.0076 0x0b3c  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts         C:\Windows\System32\lmhsvc.dll
00:20:00.0185 0x0b3c  lmhosts - ok
00:20:00.0232 0x0b3c  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
00:20:00.0263 0x0b3c  LSI_FC - ok
00:20:00.0294 0x0b3c  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys
00:20:00.0325 0x0b3c  LSI_SAS - ok
00:20:00.0357 0x0b3c  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
00:20:00.0388 0x0b3c  LSI_SAS2 - ok
00:20:00.0403 0x0b3c  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
00:20:00.0435 0x0b3c  LSI_SCSI - ok
00:20:00.0497 0x0b3c  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv           C:\Windows\system32\drivers\luafv.sys
00:20:00.0575 0x0b3c  luafv - ok
00:20:00.0637 0x0b3c  [ 3C21F7E95FFCA33EF1A83AA33D9663CF, C843116969E1CDBA45AEF98B33BEDBA9200C62CDB52CD7056CE6768A1EF3A637 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
00:20:00.0669 0x0b3c  MBAMProtector - ok
00:20:00.0825 0x0b3c  [ 2B983F067AEE3F9EB4DF5E97F45D21D1, 0B9ED0E91FF01A5445927650113E320C3C0EA16F1401AA55A509DDBF704DF22F ] MBAMService     C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
00:20:00.0965 0x0b3c  MBAMService - ok
00:20:01.0012 0x0b3c  [ 167BCE00050B19DA25065335645A3C7A, 5CD3EA3E09B4ED318AB6151F56A17B0E4C8CE32DBB77342A39DEF53908F7D2F0 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
00:20:01.0043 0x0b3c  MBAMWebAccessControl - ok
00:20:01.0090 0x0b3c  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
00:20:01.0168 0x0b3c  Mcx2Svc - ok
00:20:01.0199 0x0b3c  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys
00:20:01.0230 0x0b3c  megasas - ok
00:20:01.0293 0x0b3c  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
00:20:01.0339 0x0b3c  MegaSR - ok
00:20:01.0371 0x0b3c  [ C1BF5FE1BD4D726685891BF9EAA9FDD5, 3C664F106A0E8F67B14908E0C0C2AA4E9AF7E4204991EC7B429278A7E76E54D9 ] MHIKEY10        C:\Windows\system32\Drivers\MHIKEY10.sys
00:20:01.0417 0x0b3c  MHIKEY10 - ok
00:20:01.0449 0x0b3c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS           C:\Windows\system32\mmcss.dll
00:20:01.0527 0x0b3c  MMCSS - ok
00:20:01.0558 0x0b3c  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem           C:\Windows\system32\drivers\modem.sys
00:20:01.0636 0x0b3c  Modem - ok
00:20:01.0667 0x0b3c  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
00:20:01.0714 0x0b3c  monitor - ok
00:20:01.0776 0x0b3c  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
00:20:01.0792 0x0b3c  mouclass - ok
00:20:01.0854 0x0b3c  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
00:20:01.0885 0x0b3c  mouhid - ok
00:20:01.0932 0x0b3c  [ 644905A19D0F37F2233DFCE53BC4BC19, F52CB40AA0FD1EBF8CBF0F3BFB20C47142C637719840877FB93F10D085EB8C2B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
00:20:01.0963 0x0b3c  mountmgr - ok
00:20:02.0041 0x0b3c  [ DD370A8148862150BA81A3F5C56A1E40, F56B84297BDC32266CB69D10FB2D66B8B332D60CAB7E64E4E3AC2BB749BBD31B ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
00:20:02.0088 0x0b3c  MozillaMaintenance - ok
00:20:02.0119 0x0b3c  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
00:20:02.0151 0x0b3c  mpio - ok
00:20:02.0182 0x0b3c  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
00:20:02.0291 0x0b3c  mpsdrv - ok
00:20:02.0385 0x0b3c  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
00:20:02.0525 0x0b3c  MpsSvc - ok
00:20:02.0572 0x0b3c  [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
00:20:02.0650 0x0b3c  MRxDAV - ok
00:20:02.0728 0x0b3c  [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
00:20:02.0806 0x0b3c  mrxsmb - ok
00:20:02.0868 0x0b3c  [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
00:20:02.0931 0x0b3c  mrxsmb10 - ok
00:20:02.0977 0x0b3c  [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
00:20:03.0024 0x0b3c  mrxsmb20 - ok
00:20:03.0071 0x0b3c  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
00:20:03.0102 0x0b3c  msahci - ok
00:20:03.0165 0x0b3c  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
00:20:03.0196 0x0b3c  msdsm - ok
00:20:03.0243 0x0b3c  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC           C:\Windows\System32\msdtc.exe
00:20:03.0336 0x0b3c  MSDTC - ok
00:20:03.0383 0x0b3c  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
00:20:03.0477 0x0b3c  Msfs - ok
00:20:03.0508 0x0b3c  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
00:20:03.0586 0x0b3c  mshidkmdf - ok
00:20:03.0633 0x0b3c  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
00:20:03.0664 0x0b3c  msisadrv - ok
00:20:03.0711 0x0b3c  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
00:20:03.0804 0x0b3c  MSiSCSI - ok
00:20:03.0804 0x0b3c  msiserver - ok
00:20:03.0851 0x0b3c  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
00:20:03.0960 0x0b3c  MSKSSRV - ok
00:20:03.0991 0x0b3c  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
00:20:04.0069 0x0b3c  MSPCLOCK - ok
00:20:04.0085 0x0b3c  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
00:20:04.0179 0x0b3c  MSPQM - ok
00:20:04.0210 0x0b3c  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
00:20:04.0257 0x0b3c  MsRPC - ok
00:20:04.0319 0x0b3c  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
00:20:04.0350 0x0b3c  mssmbios - ok
00:20:04.0381 0x0b3c  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
00:20:04.0459 0x0b3c  MSTEE - ok
00:20:04.0506 0x0b3c  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
00:20:04.0569 0x0b3c  MTConfig - ok
00:20:04.0615 0x0b3c  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup             C:\Windows\system32\Drivers\mup.sys
00:20:04.0647 0x0b3c  Mup - ok
00:20:04.0709 0x0b3c  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
00:20:04.0834 0x0b3c  napagent - ok
00:20:04.0896 0x0b3c  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
00:20:04.0959 0x0b3c  NativeWifiP - ok
00:20:05.0130 0x0b3c  [ E0E4A1F81A7D69C595A8A9DDAD084C19, 8F55F3637AE8BFFB0ACE37AFC5122026525137E0B2923899B779C1BD08DF0E22 ] NAUpdate        C:\Program Files\Nero\Update\NASvc.exe
00:20:05.0224 0x0b3c  NAUpdate - ok
00:20:05.0380 0x0b3c  [ 5E8EDD6A52E897C19EC6E149FE6C7A8E, 0ACF2237F5AFA72505FFE2C9639FFDBBB991EDF804376610B0719F0131F63E43 ] NBService       C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
00:20:05.0489 0x0b3c  NBService - ok
00:20:05.0567 0x0b3c  [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS            C:\Windows\system32\drivers\ndis.sys
00:20:05.0661 0x0b3c  NDIS - ok
00:20:05.0723 0x0b3c  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
00:20:05.0832 0x0b3c  NdisCap - ok
00:20:05.0863 0x0b3c  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
00:20:05.0926 0x0b3c  NdisTapi - ok
00:20:05.0988 0x0b3c  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
00:20:06.0097 0x0b3c  Ndisuio - ok
00:20:06.0160 0x0b3c  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
00:20:06.0238 0x0b3c  NdisWan - ok
00:20:06.0285 0x0b3c  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
00:20:06.0378 0x0b3c  NDProxy - ok
00:20:06.0425 0x0b3c  [ 1352E1648213551923A0A822E441553C, F9BCA299249D8E1ADF88F54554F72428E267E39911143F4C99DFF562F0EE4E70 ] Netaapl         C:\Windows\system32\DRIVERS\netaapl.sys
00:20:06.0441 0x0b3c  Netaapl - detected UnsignedFile.Multi.Generic ( 1 )
00:20:08.0874 0x0b3c  Detect skipped due to KSN trusted
00:20:08.0874 0x0b3c  Netaapl - ok
00:20:08.0937 0x0b3c  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
00:20:09.0046 0x0b3c  NetBIOS - ok
00:20:09.0108 0x0b3c  [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
00:20:09.0202 0x0b3c  NetBT - ok
00:20:09.0233 0x0b3c  [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] Netlogon        C:\Windows\system32\lsass.exe
00:20:09.0264 0x0b3c  Netlogon - ok
00:20:09.0311 0x0b3c  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
00:20:09.0436 0x0b3c  Netman - ok
00:20:09.0498 0x0b3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0545 0x0b3c  NetMsmqActivator - ok
00:20:09.0592 0x0b3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0623 0x0b3c  NetPipeActivator - ok
00:20:09.0685 0x0b3c  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
00:20:09.0795 0x0b3c  netprofm - ok
00:20:09.0826 0x0b3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0873 0x0b3c  NetTcpActivator - ok
00:20:09.0888 0x0b3c  [ 21318671BCAD3ACF16638F98D4D00973, CEA6E3B6BCB4B74A9ACACBEEA12EEA967BBC2240398E2EBC04D7910109CACA11 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
00:20:09.0919 0x0b3c  NetTcpPortSharing - ok
00:20:09.0966 0x0b3c  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys
00:20:09.0997 0x0b3c  nfrd960 - ok
00:20:10.0075 0x0b3c  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll
00:20:10.0185 0x0b3c  NlaSvc - ok
00:20:10.0294 0x0b3c  [ 193FA51DDDD0BFFDED1C340F0434999A, C05CA0A8568E9CBDA15633ED420C29F52082114B2B9F24EB61369E42C480C080 ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
00:20:10.0372 0x0b3c  NMIndexingService - ok
00:20:10.0387 0x0b3c  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
00:20:10.0497 0x0b3c  Npfs - ok
00:20:10.0543 0x0b3c  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi             C:\Windows\system32\nsisvc.dll
00:20:10.0637 0x0b3c  nsi - ok
00:20:10.0668 0x0b3c  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
00:20:10.0746 0x0b3c  nsiproxy - ok
00:20:10.0871 0x0b3c  [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
00:20:11.0011 0x0b3c  Ntfs - ok
00:20:11.0027 0x0b3c  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
00:20:11.0105 0x0b3c  Null - ok
00:20:11.0152 0x0b3c  [ D2F4C4B22969236382CA853B8DAA2D4E, 83950153451140AC54CF95F0ED03C165DD5E8B7E8F3869B1746CDDDF9DFE1F11 ] NVHDA           C:\Windows\system32\drivers\nvhda32v.sys
00:20:11.0167 0x0b3c  NVHDA - ok
00:20:11.0869 0x0b3c  [ F0280A7B9C6483BA7AAA42C0866F1C4A, B7C9592BA2BA2895BFF27B2DDCEB514DA7EE13F8698A888CAD5B81A3846DE639 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
00:20:12.0727 0x0b3c  nvlddmkm - ok
00:20:12.0790 0x0b3c  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
00:20:12.0821 0x0b3c  nvraid - ok
00:20:12.0899 0x0b3c  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
00:20:12.0930 0x0b3c  nvstor - ok
00:20:12.0993 0x0b3c  [ 805D826A6F2521A020F65F87103D8A32, 6E1B665F8EE227799DD44FB464BF3096170F16BD59D7ABB93331E359547FA4AD ] nvsvc           C:\Windows\system32\nvvsvc.exe
00:20:13.0024 0x0b3c  nvsvc - ok
00:20:13.0086 0x0b3c  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
00:20:13.0117 0x0b3c  nv_agp - ok
00:20:13.0164 0x0b3c  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
00:20:13.0227 0x0b3c  ohci1394 - ok
00:20:13.0273 0x0b3c  [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
00:20:13.0305 0x0b3c  ose - ok
00:20:13.0367 0x0b3c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
00:20:13.0476 0x0b3c  p2pimsvc - ok
00:20:13.0539 0x0b3c  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
00:20:13.0648 0x0b3c  p2psvc - ok
00:20:13.0679 0x0b3c  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport         C:\Windows\system32\DRIVERS\parport.sys
00:20:13.0726 0x0b3c  Parport - ok
00:20:13.0788 0x0b3c  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr         C:\Windows\system32\drivers\partmgr.sys
00:20:13.0819 0x0b3c  partmgr - ok
00:20:13.0851 0x0b3c  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
00:20:13.0882 0x0b3c  Parvdm - ok
00:20:13.0929 0x0b3c  [ 52954BE460EC6C54C0ACB2B3B126FFC6, 9F9878EC5ABC74C5A8EE8E1D940F0934F081895B07D844F42F80A638FE713F7B ] PcaSvc          C:\Windows\System32\pcasvc.dll
00:20:14.0053 0x0b3c  PcaSvc - ok
00:20:14.0131 0x0b3c  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci             C:\Windows\system32\drivers\pci.sys
00:20:14.0209 0x0b3c  pci - ok
00:20:14.0241 0x0b3c  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
00:20:14.0272 0x0b3c  pciide - ok
00:20:14.0319 0x0b3c  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
00:20:14.0381 0x0b3c  pcmcia - ok
00:20:14.0412 0x0b3c  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw             C:\Windows\system32\drivers\pcw.sys
00:20:14.0443 0x0b3c  pcw - ok
00:20:14.0537 0x0b3c  [ AEBC369F7DC72AB3F5B9BDF34FA0D43F, 2A819154AC6C23E97C583D90B4D0C112188B7AE9D8D9B3F88811BFCED124E551 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
00:20:14.0677 0x0b3c  PEAUTH - ok
00:20:14.0802 0x0b3c  [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll
00:20:14.0974 0x0b3c  PeerDistSvc - ok
00:20:15.0145 0x0b3c  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla             C:\Windows\system32\pla.dll
00:20:15.0364 0x0b3c  pla - ok
00:20:15.0442 0x0b3c  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
00:20:15.0551 0x0b3c  PlugPlay - ok
00:20:15.0567 0x0b3c  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
00:20:15.0613 0x0b3c  PNRPAutoReg - ok
00:20:15.0645 0x0b3c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
00:20:15.0707 0x0b3c  PNRPsvc - ok
00:20:15.0754 0x0b3c  [ 60A044879C4FA76314494F5FDDC43B93, BA0823D17F6A1A60AC24A6BDB9A4357FDB5880E886B6ABC3E66C6760C409830E ] Point32         C:\Windows\system32\DRIVERS\point32.sys
00:20:15.0785 0x0b3c  Point32 - ok
00:20:15.0879 0x0b3c  [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
00:20:16.0035 0x0b3c  PolicyAgent - ok
00:20:16.0097 0x0b3c  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power           C:\Windows\system32\umpo.dll
00:20:16.0222 0x0b3c  Power - ok
00:20:16.0269 0x0b3c  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
00:20:16.0393 0x0b3c  PptpMiniport - ok
00:20:16.0425 0x0b3c  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor       C:\Windows\system32\DRIVERS\processr.sys
00:20:16.0456 0x0b3c  Processor - ok
00:20:16.0534 0x0b3c  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc         C:\Windows\system32\profsvc.dll
00:20:16.0659 0x0b3c  ProfSvc - ok
00:20:16.0690 0x0b3c  [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] ProtectedStorage C:\Windows\system32\lsass.exe
00:20:16.0721 0x0b3c  ProtectedStorage - ok
00:20:16.0768 0x0b3c  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
00:20:16.0861 0x0b3c  Psched - ok
00:20:16.0986 0x0b3c  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
00:20:17.0142 0x0b3c  ql2300 - ok
00:20:17.0189 0x0b3c  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
00:20:17.0220 0x0b3c  ql40xx - ok
00:20:17.0267 0x0b3c  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE           C:\Windows\system32\qwave.dll
00:20:17.0376 0x0b3c  QWAVE - ok
00:20:17.0407 0x0b3c  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
00:20:17.0454 0x0b3c  QWAVEdrv - ok
00:20:17.0485 0x0b3c  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
00:20:17.0548 0x0b3c  RasAcd - ok
00:20:17.0610 0x0b3c  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
00:20:17.0719 0x0b3c  RasAgileVpn - ok
00:20:17.0766 0x0b3c  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto         C:\Windows\System32\rasauto.dll
00:20:17.0844 0x0b3c  RasAuto - ok
00:20:17.0875 0x0b3c  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
00:20:17.0969 0x0b3c  Rasl2tp - ok
00:20:18.0031 0x0b3c  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
00:20:18.0141 0x0b3c  RasMan - ok
00:20:18.0156 0x0b3c  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
00:20:18.0219 0x0b3c  RasPppoe - ok
00:20:18.0265 0x0b3c  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
00:20:18.0343 0x0b3c  RasSstp - ok
00:20:18.0406 0x0b3c  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
00:20:18.0531 0x0b3c  rdbss - ok
00:20:18.0562 0x0b3c  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
00:20:18.0655 0x0b3c  rdpbus - ok
00:20:18.0702 0x0b3c  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
00:20:18.0765 0x0b3c  RDPCDD - ok
00:20:18.0827 0x0b3c  [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys
00:20:18.0889 0x0b3c  RDPDR - ok
00:20:18.0936 0x0b3c  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
00:20:19.0014 0x0b3c  RDPENCDD - ok
00:20:19.0045 0x0b3c  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
00:20:19.0108 0x0b3c  RDPREFMP - ok
00:20:19.0155 0x0b3c  [ 83EE20D7160484C9172FDF0ACBDC8929, 520C0C685C43B2D39D5B6FA3DE61C2A91A3E0B40E912BABD38AF20972C91A895 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
00:20:19.0201 0x0b3c  RdpVideoMiniport - ok
00:20:19.0264 0x0b3c  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
00:20:19.0357 0x0b3c  RDPWD - ok
00:20:19.0404 0x0b3c  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
00:20:19.0451 0x0b3c  rdyboost - ok
00:20:19.0498 0x0b3c  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
00:20:19.0576 0x0b3c  RemoteAccess - ok
00:20:19.0623 0x0b3c  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
00:20:19.0747 0x0b3c  RemoteRegistry - ok
00:20:19.0763 0x0b3c  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
00:20:19.0857 0x0b3c  RpcEptMapper - ok
00:20:19.0903 0x0b3c  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
00:20:19.0966 0x0b3c  RpcLocator - ok
00:20:20.0013 0x0b3c  [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs           C:\Windows\system32\rpcss.dll
00:20:20.0106 0x0b3c  RpcSs - ok
00:20:20.0153 0x0b3c  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
00:20:20.0231 0x0b3c  rspndr - ok
00:20:20.0262 0x0b3c  [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap           C:\Windows\system32\drivers\vms3cap.sys
00:20:20.0309 0x0b3c  s3cap - ok
00:20:20.0356 0x0b3c  [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] SamSs           C:\Windows\system32\lsass.exe
00:20:20.0387 0x0b3c  SamSs - ok
00:20:20.0465 0x0b3c  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
00:20:20.0496 0x0b3c  sbp2port - ok
00:20:20.0559 0x0b3c  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
00:20:20.0668 0x0b3c  SCardSvr - ok
00:20:20.0683 0x0b3c  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
00:20:20.0777 0x0b3c  scfilter - ok
00:20:20.0886 0x0b3c  [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule        C:\Windows\system32\schedsvc.dll
00:20:21.0042 0x0b3c  Schedule - ok
00:20:21.0105 0x0b3c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc     C:\Windows\System32\certprop.dll
00:20:21.0167 0x0b3c  SCPolicySvc - ok
00:20:21.0230 0x0b3c  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
00:20:21.0308 0x0b3c  SDRSVC - ok
00:20:21.0370 0x0b3c  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
00:20:21.0464 0x0b3c  secdrv - ok
00:20:21.0495 0x0b3c  [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon        C:\Windows\system32\seclogon.dll
00:20:21.0604 0x0b3c  seclogon - ok
00:20:21.0635 0x0b3c  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\system32\sens.dll
00:20:21.0713 0x0b3c  SENS - ok
00:20:21.0760 0x0b3c  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
00:20:21.0838 0x0b3c  SensrSvc - ok
00:20:21.0885 0x0b3c  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys
00:20:21.0947 0x0b3c  Serenum - ok
00:20:22.0010 0x0b3c  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
00:20:22.0056 0x0b3c  Serial - ok
00:20:22.0072 0x0b3c  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
00:20:22.0134 0x0b3c  sermouse - ok
00:20:22.0197 0x0b3c  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
00:20:22.0290 0x0b3c  SessionEnv - ok
00:20:22.0353 0x0b3c  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
00:20:22.0384 0x0b3c  sffdisk - ok
00:20:22.0415 0x0b3c  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
00:20:22.0446 0x0b3c  sffp_mmc - ok
00:20:22.0462 0x0b3c  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
00:20:22.0540 0x0b3c  sffp_sd - ok
00:20:22.0602 0x0b3c  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys
00:20:22.0649 0x0b3c  sfloppy - ok
00:20:22.0727 0x0b3c  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
00:20:22.0868 0x0b3c  SharedAccess - ok
00:20:22.0930 0x0b3c  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
00:20:23.0070 0x0b3c  ShellHWDetection - ok
00:20:23.0102 0x0b3c  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys
00:20:23.0133 0x0b3c  sisagp - ok
00:20:23.0180 0x0b3c  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
00:20:23.0211 0x0b3c  SiSRaid2 - ok
00:20:23.0258 0x0b3c  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
00:20:23.0289 0x0b3c  SiSRaid4 - ok
00:20:23.0382 0x0b3c  [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe
00:20:23.0460 0x0b3c  SkypeUpdate - ok
00:20:23.0492 0x0b3c  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
00:20:23.0585 0x0b3c  Smb - ok
00:20:23.0663 0x0b3c  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
00:20:23.0726 0x0b3c  SNMPTRAP - ok
00:20:23.0772 0x0b3c  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr           C:\Windows\system32\drivers\spldr.sys
00:20:23.0804 0x0b3c  spldr - ok
00:20:23.0882 0x0b3c  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler         C:\Windows\System32\spoolsv.exe
00:20:24.0022 0x0b3c  Spooler - ok
00:20:24.0287 0x0b3c  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
00:20:24.0646 0x0b3c  sppsvc - ok
00:20:24.0708 0x0b3c  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify     C:\Windows\system32\sppuinotify.dll
00:20:24.0802 0x0b3c  sppuinotify - ok
00:20:24.0880 0x0b3c  [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv             C:\Windows\system32\DRIVERS\srv.sys
00:20:24.0974 0x0b3c  srv - ok
00:20:25.0005 0x0b3c  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
00:20:25.0114 0x0b3c  srv2 - ok
00:20:25.0130 0x0b3c  [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
00:20:25.0176 0x0b3c  srvnet - ok
00:20:25.0223 0x0b3c  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
00:20:25.0364 0x0b3c  SSDPSRV - ok
00:20:25.0395 0x0b3c  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc         C:\Windows\system32\sstpsvc.dll
00:20:25.0488 0x0b3c  SstpSvc - ok
00:20:25.0535 0x0b3c  [ 585FDB94DB04AC1C56298D1FD1F1389E, 5CEBAAF3B649E580B3EF2B9B38426D6EE13B244BE1274BA0C0A468EC4CFB680C ] ssudmdm         C:\Windows\system32\DRIVERS\ssudmdm.sys
00:20:25.0582 0x0b3c  ssudmdm - ok
00:20:25.0613 0x0b3c  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
00:20:25.0644 0x0b3c  stexstor - ok
00:20:25.0722 0x0b3c  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
00:20:25.0863 0x0b3c  StiSvc - ok
00:20:25.0894 0x0b3c  [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt         C:\Windows\system32\drivers\vmstorfl.sys
00:20:25.0925 0x0b3c  storflt - ok
00:20:25.0972 0x0b3c  [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc         C:\Windows\system32\drivers\storvsc.sys
00:20:26.0003 0x0b3c  storvsc - ok
00:20:26.0066 0x0b3c  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\drivers\swenum.sys
00:20:26.0097 0x0b3c  swenum - ok
00:20:26.0144 0x0b3c  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv           C:\Windows\System32\swprv.dll
00:20:26.0284 0x0b3c  swprv - ok
00:20:26.0284 0x0b3c  Synth3dVsc - ok
00:20:26.0424 0x0b3c  [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain         C:\Windows\system32\sysmain.dll
00:20:26.0596 0x0b3c  SysMain - ok
00:20:26.0658 0x0b3c  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
00:20:26.0736 0x0b3c  TabletInputService - ok
00:20:26.0799 0x0b3c  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv         C:\Windows\System32\tapisrv.dll
00:20:26.0955 0x0b3c  TapiSrv - ok
00:20:26.0986 0x0b3c  [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS             C:\Windows\System32\tbssvc.dll
00:20:27.0064 0x0b3c  TBS - ok
00:20:27.0189 0x0b3c  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
00:20:27.0314 0x0b3c  Tcpip - ok
00:20:27.0423 0x0b3c  [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
00:20:27.0532 0x0b3c  TCPIP6 - ok
00:20:27.0579 0x0b3c  [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
00:20:27.0610 0x0b3c  tcpipreg - ok
00:20:27.0657 0x0b3c  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
00:20:27.0719 0x0b3c  TDPIPE - ok
00:20:27.0766 0x0b3c  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
00:20:27.0828 0x0b3c  TDTCP - ok
00:20:27.0891 0x0b3c  [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
00:20:27.0953 0x0b3c  tdx - ok
00:20:28.0577 0x0b3c  [ 6CA83C69643E7BF144A428B7BDC7D630, DB015BA4428509E1D5BE74FEFB446A29D316564617EB15A379424B3FCE3B74A9 ] TeamViewer      C:\Program Files\TeamViewer\TeamViewer_Service.exe
00:20:28.0936 0x0b3c  TeamViewer - ok
00:20:28.0998 0x0b3c  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\drivers\termdd.sys
00:20:29.0030 0x0b3c  TermDD - ok
00:20:29.0108 0x0b3c  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService     C:\Windows\System32\termsrv.dll
00:20:29.0186 0x0b3c  TermService - ok
00:20:29.0232 0x0b3c  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
00:20:29.0295 0x0b3c  Themes - ok
00:20:29.0342 0x0b3c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER     C:\Windows\system32\mmcss.dll
00:20:29.0435 0x0b3c  THREADORDER - ok
00:20:29.0544 0x0b3c  [ E4FAD21646088D79F8889B6531396ACF, D0C8F0E3293D423245FD2233F283A1FE2463E15F8B9F4ED6AC96C2164EC51F75 ] TomTomHOMEService C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
00:20:29.0560 0x0b3c  TomTomHOMEService - ok
00:20:29.0607 0x0b3c  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
00:20:29.0716 0x0b3c  TrkWks - ok
00:20:29.0778 0x0b3c  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
00:20:29.0888 0x0b3c  TrustedInstaller - ok
00:20:29.0919 0x0b3c  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
00:20:29.0966 0x0b3c  tssecsrv - ok
00:20:30.0028 0x0b3c  [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
00:20:30.0106 0x0b3c  TsUsbFlt - ok
00:20:30.0106 0x0b3c  tsusbhub - ok
00:20:30.0215 0x0b3c  [ 117BA5A965DC6A21855DF44B8B867BD6, 5CB392A9ADAF195E6D0D6B31BD4136F346A9B26EBA0BF32F09F0D29C0F63B041 ] TuneUp.Defrag   C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
00:20:30.0293 0x0b3c  TuneUp.Defrag - ok
00:20:30.0402 0x0b3c  [ E8F747EBE440D1D6CD5F506A9CE85692, 791E47AFA3E27BFAF080480CF980D56B00FCE15F27F26270FB255751A4A63BF6 ] TuneUp.UtilitiesSvc C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
00:20:30.0496 0x0b3c  TuneUp.UtilitiesSvc - ok
00:20:30.0574 0x0b3c  [ F2107C9D85EC0DF116939CCCE06AE697, 4608E3D0CA0B252130B4DF2505DB4D89635C327A343B470FCB81B8B02CD9FA44 ] TuneUpUtilitiesDrv C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
00:20:30.0590 0x0b3c  TuneUpUtilitiesDrv - ok
00:20:30.0668 0x0b3c  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
00:20:30.0761 0x0b3c  tunnel - ok
00:20:30.0792 0x0b3c  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
00:20:30.0824 0x0b3c  uagp35 - ok
00:20:30.0902 0x0b3c  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
00:20:31.0026 0x0b3c  udfs - ok
00:20:31.0073 0x0b3c  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect       C:\Windows\system32\UI0Detect.exe
00:20:31.0151 0x0b3c  UI0Detect - ok
00:20:31.0214 0x0b3c  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
00:20:31.0245 0x0b3c  uliagpkx - ok
00:20:31.0292 0x0b3c  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus           C:\Windows\system32\drivers\umbus.sys
00:20:31.0354 0x0b3c  umbus - ok
00:20:31.0385 0x0b3c  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
00:20:31.0448 0x0b3c  UmPass - ok
00:20:31.0526 0x0b3c  [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService    C:\Windows\System32\umrdp.dll
00:20:31.0635 0x0b3c  UmRdpService - ok
00:20:31.0682 0x0b3c  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
00:20:31.0822 0x0b3c  upnphost - ok
00:20:31.0869 0x0b3c  [ 6E421CCC57059B0186C6259CA3B6DFC9, E348BF23CCD6C14FD10C1689BBDC77E125245331F97BFE60D4C8FD9A8711CB59 ] USBAAPL         C:\Windows\system32\Drivers\usbaapl.sys
00:20:31.0916 0x0b3c  USBAAPL - detected UnsignedFile.Multi.Generic ( 1 )
00:20:34.0583 0x0b3c  Detect skipped due to KSN trusted
00:20:34.0583 0x0b3c  USBAAPL - ok
00:20:34.0630 0x0b3c  [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
00:20:34.0692 0x0b3c  usbccgp - ok
00:20:34.0755 0x0b3c  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
00:20:34.0817 0x0b3c  usbcir - ok
00:20:34.0880 0x0b3c  [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci         C:\Windows\system32\drivers\usbehci.sys
00:20:34.0926 0x0b3c  usbehci - ok
00:20:35.0004 0x0b3c  [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
00:20:35.0082 0x0b3c  usbhub - ok
00:20:35.0129 0x0b3c  [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
00:20:35.0160 0x0b3c  usbohci - ok
00:20:35.0223 0x0b3c  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
00:20:35.0301 0x0b3c  usbprint - ok
00:20:35.0363 0x0b3c  [ FC6B21DB4B5B398AB93DBE59CBF11036, A94094C208F376405C07822A6143001EF1B12AE93205CD8002E87F6EB45F6374 ] usbscan         C:\Windows\system32\drivers\usbscan.sys
00:20:35.0441 0x0b3c  usbscan - ok
00:20:35.0472 0x0b3c  [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
00:20:35.0566 0x0b3c  USBSTOR - ok
00:20:35.0597 0x0b3c  [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
00:20:35.0675 0x0b3c  usbuhci - ok
00:20:35.0769 0x0b3c  [ DE014425522610BEDCA3821BB8C0F1D5, D6FEA0DF07F89834AEEE8C02CC7FD41068D758B6CCECE2EEE5CF4B9DB646FA1E ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
00:20:35.0816 0x0b3c  usbvideo - ok
00:20:35.0862 0x0b3c  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms           C:\Windows\System32\uxsms.dll
00:20:35.0956 0x0b3c  UxSms - ok
00:20:35.0987 0x0b3c  [ 44E2A00A61177748061B961F12697664, 962124208C16E336DBA5395301E3C948FF170269C0804C295109E793FBEB25F9 ] UxTuneUp        C:\Windows\System32\uxtuneup.dll
00:20:36.0018 0x0b3c  UxTuneUp - ok
00:20:36.0034 0x0b3c  [ 1667D76FBF42B24B9DE3E8B0A7CF06BE, AB9FD4F7B007633FEC552D14932CDEB56DBCE56D152C0EDC91FAFD08E636AADC ] VaultSvc        C:\Windows\system32\lsass.exe
00:20:36.0065 0x0b3c  VaultSvc - ok
00:20:36.0252 0x0b3c  [ EA9ADB96A31020D4D3E5167FE31427DE, 5635513F58CF89AF87B7A5CE570B348A932C5C74D3FBAF575D708198B174D641 ] VBoxAswDrv      C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys
00:20:36.0315 0x0b3c  VBoxAswDrv - ok
00:20:36.0346 0x0b3c  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
00:20:36.0377 0x0b3c  vdrvroot - ok
00:20:36.0455 0x0b3c  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds             C:\Windows\System32\vds.exe
00:20:36.0611 0x0b3c  vds - ok
00:20:36.0642 0x0b3c  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
00:20:36.0689 0x0b3c  vga - ok
00:20:36.0720 0x0b3c  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave         C:\Windows\System32\drivers\vga.sys
00:20:36.0814 0x0b3c  VgaSave - ok
00:20:36.0830 0x0b3c  VGPU - ok
00:20:36.0892 0x0b3c  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
00:20:36.0939 0x0b3c  vhdmp - ok
00:20:36.0970 0x0b3c  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
00:20:37.0001 0x0b3c  viaagp - ok
00:20:37.0017 0x0b3c  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys
00:20:37.0095 0x0b3c  ViaC7 - ok
00:20:37.0173 0x0b3c  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
00:20:37.0188 0x0b3c  viaide - ok
00:20:37.0235 0x0b3c  [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus           C:\Windows\system32\drivers\vmbus.sys
00:20:37.0282 0x0b3c  vmbus - ok
00:20:37.0313 0x0b3c  [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys
00:20:37.0344 0x0b3c  VMBusHID - ok
00:20:37.0391 0x0b3c  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
00:20:37.0422 0x0b3c  volmgr - ok
00:20:37.0454 0x0b3c  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
00:20:37.0532 0x0b3c  volmgrx - ok
00:20:37.0563 0x0b3c  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
00:20:37.0625 0x0b3c  volsnap - ok
00:20:37.0656 0x0b3c  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys
00:20:37.0703 0x0b3c  vsmraid - ok
00:20:37.0812 0x0b3c  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS             C:\Windows\system32\vssvc.exe
00:20:37.0984 0x0b3c  VSS - ok
00:20:38.0015 0x0b3c  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
00:20:38.0046 0x0b3c  vwifibus - ok
00:20:38.0093 0x0b3c  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
00:20:38.0140 0x0b3c  vwififlt - ok
00:20:38.0171 0x0b3c  [ A3F04CBEA6C2A10E6CB01F8B47611882, 32AFE18B07FECA30BC95831A5DC94C784E543784DF16165334A777DC84E91EF3 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
00:20:38.0218 0x0b3c  vwifimp - ok
00:20:38.0280 0x0b3c  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time         C:\Windows\system32\w32time.dll
00:20:38.0390 0x0b3c  W32Time - ok
00:20:38.0421 0x0b3c  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
00:20:38.0452 0x0b3c  WacomPen - ok
00:20:38.0530 0x0b3c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
00:20:38.0624 0x0b3c  WANARP - ok
00:20:38.0639 0x0b3c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
00:20:38.0717 0x0b3c  Wanarpv6 - ok
00:20:38.0826 0x0b3c  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
00:20:38.0982 0x0b3c  wbengine - ok
00:20:39.0045 0x0b3c  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
00:20:39.0107 0x0b3c  WbioSrvc - ok
00:20:39.0185 0x0b3c  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc         C:\Windows\System32\wcncsvc.dll
00:20:39.0279 0x0b3c  wcncsvc - ok
00:20:39.0294 0x0b3c  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
00:20:39.0388 0x0b3c  WcsPlugInService - ok
00:20:39.0419 0x0b3c  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
00:20:39.0450 0x0b3c  Wd - ok
00:20:39.0544 0x0b3c  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
00:20:39.0653 0x0b3c  Wdf01000 - ok
00:20:39.0716 0x0b3c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll
00:20:39.0794 0x0b3c  WdiServiceHost - ok
00:20:39.0809 0x0b3c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost   C:\Windows\system32\wdi.dll
00:20:39.0856 0x0b3c  WdiSystemHost - ok
00:20:39.0918 0x0b3c  [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient       C:\Windows\System32\webclnt.dll
00:20:40.0074 0x0b3c  WebClient - ok
00:20:40.0106 0x0b3c  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
00:20:40.0230 0x0b3c  Wecsvc - ok
00:20:40.0262 0x0b3c  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
00:20:40.0355 0x0b3c  wercplsupport - ok
00:20:40.0386 0x0b3c  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
00:20:40.0480 0x0b3c  WerSvc - ok
00:20:40.0511 0x0b3c  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
00:20:40.0589 0x0b3c  WfpLwf - ok
00:20:40.0620 0x0b3c  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
00:20:40.0652 0x0b3c  WIMMount - ok
00:20:40.0776 0x0b3c  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll
00:20:40.0886 0x0b3c  WinDefend - ok
00:20:40.0917 0x0b3c  WinHttpAutoProxySvc - ok
00:20:40.0995 0x0b3c  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
00:20:41.0120 0x0b3c  Winmgmt - ok
00:20:41.0244 0x0b3c  [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM           C:\Windows\system32\WsmSvc.dll
00:20:41.0400 0x0b3c  WinRM - ok
00:20:41.0494 0x0b3c  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\drivers\WinUsb.sys
00:20:41.0556 0x0b3c  WinUsb - ok
00:20:41.0634 0x0b3c  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc         C:\Windows\System32\wlansvc.dll
00:20:41.0759 0x0b3c  Wlansvc - ok
00:20:41.0931 0x0b3c  [ 5E7C103F8475C4289847D15E129C20F7, C6325D3557545FA1DA26B0B1EA9A1C95AED1FA84A93BE29A771DAD9ECB00768B ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
00:20:42.0071 0x0b3c  wlidsvc - ok
00:20:42.0118 0x0b3c  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
00:20:42.0165 0x0b3c  WmiAcpi - ok
00:20:42.0212 0x0b3c  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
00:20:42.0274 0x0b3c  wmiApSrv - ok
00:20:42.0446 0x0b3c  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe
00:20:42.0617 0x0b3c  WMPNetworkSvc - ok
00:20:42.0648 0x0b3c  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
00:20:42.0742 0x0b3c  WPCSvc - ok
00:20:42.0789 0x0b3c  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
00:20:42.0867 0x0b3c  WPDBusEnum - ok
00:20:42.0898 0x0b3c  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
00:20:42.0960 0x0b3c  ws2ifsl - ok
00:20:42.0992 0x0b3c  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\system32\wscsvc.dll
00:20:43.0070 0x0b3c  wscsvc - ok
00:20:43.0070 0x0b3c  WSearch - ok
00:20:43.0241 0x0b3c  [ 7E5C454A3F986FEBAD075DB8D915917E, 9E9147DDACD075958689523130DB92FC4ED0E38433461D8AB8792BCFBD9376DA ] wuauserv        C:\Windows\system32\wuaueng.dll
00:20:43.0506 0x0b3c  wuauserv - ok
00:20:43.0553 0x0b3c  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
00:20:43.0647 0x0b3c  WudfPf - ok
00:20:43.0709 0x0b3c  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\drivers\WUDFRd.sys
00:20:43.0756 0x0b3c  WUDFRd - ok
00:20:43.0803 0x0b3c  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
00:20:43.0850 0x0b3c  wudfsvc - ok
00:20:43.0912 0x0b3c  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc         C:\Windows\System32\wwansvc.dll
00:20:44.0021 0x0b3c  WwanSvc - ok
00:20:44.0084 0x0b3c  [ 30B73EB97218A16CBC6DE535782A1B35, 5B034F39FA5B902BD6899717F7696871CDAFB8698B48BB0E95DAE51234715A28 ] yukonw7         C:\Windows\system32\DRIVERS\yk62x86.sys
00:20:44.0162 0x0b3c  yukonw7 - detected UnsignedFile.Multi.Generic ( 1 )
00:20:52.0149 0x0b3c  Detect skipped due to KSN trusted
00:20:52.0149 0x0b3c  yukonw7 - ok
00:20:52.0164 0x0b3c  ================ Scan global ===============================
00:20:52.0227 0x0b3c  [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll
00:20:52.0274 0x0b3c  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
00:20:52.0336 0x0b3c  [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll
00:20:52.0383 0x0b3c  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
00:20:52.0461 0x0b3c  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe
00:20:52.0539 0x0b3c  [ Global ] - ok
00:20:52.0539 0x0b3c  ================ Scan MBR ==================================
00:20:52.0554 0x0b3c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
00:20:53.0007 0x0b3c  \Device\Harddisk0\DR0 - ok
00:20:53.0007 0x0b3c  ================ Scan VBR ==================================
00:20:53.0007 0x0b3c  [ 130EA96D8FD3CAE9A90E4EC267859856 ] \Device\Harddisk0\DR0\Partition1
00:20:53.0007 0x0b3c  \Device\Harddisk0\DR0\Partition1 - ok
00:20:53.0007 0x0b3c  [ 267C3D3BD53BD7C42BC3ABBC6EA3B906 ] \Device\Harddisk0\DR0\Partition2
00:20:53.0022 0x0b3c  \Device\Harddisk0\DR0\Partition2 - ok
00:20:53.0022 0x0b3c  ================ Scan generic autorun ======================
00:20:53.0022 0x0b3c  NvCplDaemon - ok
00:20:53.0085 0x0b3c  [ BB390EAFEF93758463D7CA1E1B488A41, 9533A7AAFE427E896A9378AE8FF0DF1E9EC95673150E4BB458392BF829912FFB ] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
00:20:53.0132 0x0b3c  IAStorIcon - ok
00:20:53.0693 0x0b3c  [ 97101B7CCCFA2BDFEFC2E0B84205D144, 10C6EC4903DB85A1517F788049E726B22FF87C012A936CBF26EF0F2222C9251B ] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
00:20:54.0177 0x0b3c  RtHDVCpl - ok
00:20:54.0333 0x0b3c  [ 697E07302EC965393ABC85AD5C2C8D53, 6C1184209BB913C4671BBF696784B3F16ED1EFF0062C9B6E966085A7D3EC0BD1 ] c:\Program Files\Microsoft IntelliPoint\ipoint.exe
00:20:54.0442 0x0b3c  IntelliPoint - ok
00:20:54.0520 0x0b3c  [ 8DDA2B606279753601F9415DA503CA63, 2C9AD8218E150B6D50817991377ED3230A1672EFBD7AE29D0CD9E55E2418C800 ] C:\Program Files\QuickTime\QTTask.exe
00:20:54.0598 0x0b3c  QuickTime Task - detected UnsignedFile.Multi.Generic ( 1 )
00:20:57.0032 0x0b3c  Detect skipped due to KSN trusted
00:20:57.0032 0x0b3c  QuickTime Task - ok
00:20:57.0422 0x0b3c  [ 938FA6F63B210FB8EF5A7B2FC1229431, 545DDA9C32DF14B50688F8192A345FE66D2DB3F8763ECBF85B38AC829E49E1D9 ] C:\Program Files\Alwil Software\Avast5\AvastUI.exe
00:20:57.0780 0x0b3c  AvastUI.exe - ok
00:20:57.0843 0x0b3c  [ 61E4289E91E88C90478D7F4BEB10DCF7, 1D0F4034E0111CF5758F470C15A22A0A28EB8269CB5BF07222C9C0FB07A15C55 ] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
00:20:57.0858 0x0b3c  APSDaemon - ok
00:20:58.0046 0x0b3c  [ E265333FED70984757A2506DE17CF381, B31FE2E6505C182B65FD73127165F4FF84D63C8BF53D644117FE15191E690369 ] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
00:20:58.0155 0x0b3c  AdobeAAMUpdater-1.0 - ok
00:20:58.0358 0x0b3c  [ DD9EAE1C80561C509A8B8801E16BAA38, C688B626ADB0A7B72041DE08D0AA5930E9178C36F1FF9905124D397371B825D1 ] C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
00:20:58.0467 0x0b3c  Spotify Web Helper - ok
00:20:58.0467 0x0b3c  Waiting for KSN requests completion. In queue: 7
00:20:59.0481 0x0b3c  Waiting for KSN requests completion. In queue: 7
00:21:00.0495 0x0b3c  Waiting for KSN requests completion. In queue: 4
00:21:01.0587 0x0b3c  AV detected via SS2: avast! Antivirus, C:\Program Files\Alwil Software\Avast5\VisthAux.exe ( 10.2.2214.845 ), 0x41000 ( enabled : updated )
00:21:01.0634 0x0b3c  Win FW state via NFP2: enabled
00:21:04.0145 0x0b3c  ============================================================
00:21:04.0145 0x0b3c  Scan finished
00:21:04.0145 0x0b3c  ============================================================
00:21:04.0161 0x0584  Detected object count: 0
00:21:04.0161 0x0584  Actual detected object count: 0
         

ComboFix 15-05-19.01 - Ivonne 23.05.2015   0:31.2.4 - x86
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.3566.2422 [GMT 2:00]
ausgeführt von:: c:\users\Ivonne\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\roboot.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-04-22 bis 2015-05-22  ))))))))))))))))))))))))))))))
.
.
2015-05-22 22:44 . 2015-05-22 22:44	--------	d-----w-	c:\users\Ivonne\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44	--------	d-----w-	c:\users\HomeGroupUser$\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-05-22 22:44 . 2015-05-22 22:44	--------	d-----w-	c:\users\Administrator\AppData\Local\temp
2015-05-22 18:42 . 2015-05-03 03:42	9265072	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{FE5EA085-9273-44AB-9481-6DD5785AF6C6}\mpengine.dll
2015-05-18 16:45 . 2015-05-01 13:16	102608	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-17 20:16 . 2015-05-17 20:16	--------	d-----w-	c:\program files\TeamViewer
2015-05-17 19:41 . 2015-05-17 19:41	--------	d-----w-	c:\program files\ Malwarebytes Anti-Malware 
2015-05-17 19:41 . 2015-04-14 07:37	51928	----a-w-	c:\windows\system32\drivers\mwac.sys
2015-05-17 19:41 . 2015-04-14 07:37	23256	----a-w-	c:\windows\system32\drivers\mbam.sys
2015-05-14 06:57 . 2015-04-20 02:56	909312	----a-w-	c:\windows\system32\FntCache.dll
2015-05-14 06:56 . 2015-03-04 04:11	5120	----a-w-	c:\windows\system32\shimeng.dll
2015-05-13 21:50 . 2015-05-13 21:50	--------	d-----w-	c:\programdata\NVIDIA
2015-05-08 16:06 . 2015-05-17 19:41	--------	d-----w-	c:\programdata\Malwarebytes
2015-05-08 16:06 . 2015-05-22 22:16	--------	d-----w-	c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-05-08 16:06 . 2015-05-22 21:13	119512	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-05-08 16:05 . 2015-05-22 21:43	92888	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2015-05-07 16:58 . 2015-05-22 21:06	--------	d-----w-	C:\FRST
2015-05-03 13:06 . 2015-05-03 13:06	--------	d-----w-	c:\windows\system32\appraiser
2015-05-03 08:13 . 2015-05-03 08:13	--------	d-----w-	c:\program files\Common Files\Skype
2015-05-03 08:13 . 2015-05-03 08:13	--------	d-----r-	c:\program files\Skype
2015-05-01 18:10 . 2015-05-01 18:10	229608	----a-w-	c:\program files\Internet Explorer\Plugins\nppdf32.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-04-15 20:20 . 2013-05-16 15:53	778416	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2015-04-15 20:20 . 2012-02-13 14:21	142512	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2015-03-25 03:00 . 2015-04-15 20:03	92672	----a-w-	c:\windows\system32\wudriver.dll
2015-03-25 03:00 . 2015-04-15 20:03	35328	----a-w-	c:\windows\system32\wups2.dll
2015-03-25 03:00 . 2015-04-15 20:03	3088384	----a-w-	c:\windows\system32\wucltux.dll
2015-03-25 03:00 . 2015-04-15 20:03	29696	----a-w-	c:\windows\system32\wups.dll
2015-03-25 03:00 . 2015-04-15 20:03	173056	----a-w-	c:\windows\system32\wuwebv.dll
2015-03-25 03:00 . 2015-04-15 20:03	566784	----a-w-	c:\windows\system32\wuapi.dll
2015-03-25 03:00 . 2015-04-15 20:03	2020864	----a-w-	c:\windows\system32\wuaueng.dll
2015-03-25 03:00 . 2015-04-15 20:03	50176	----a-w-	c:\windows\system32\WinSetupUI.dll
2015-03-25 03:00 . 2015-04-15 20:03	11776	----a-w-	c:\windows\system32\wu.upgrade.ps.dll
2015-03-25 03:00 . 2015-04-15 20:03	33792	----a-w-	c:\windows\system32\wuapp.exe
2015-03-25 03:00 . 2015-04-15 20:03	131584	----a-w-	c:\windows\system32\wuauclt.exe
2015-03-23 03:06 . 2015-04-15 20:06	576000	----a-w-	c:\windows\system32\generaltel.dll
2015-03-23 03:06 . 2015-04-15 20:06	630784	----a-w-	c:\windows\system32\invagent.dll
2015-03-23 03:06 . 2015-04-15 20:06	331264	----a-w-	c:\windows\system32\devinv.dll
2015-03-23 03:06 . 2015-04-15 20:06	860160	----a-w-	c:\windows\system32\appraiser.dll
2015-03-23 03:06 . 2015-04-15 20:06	26112	----a-w-	c:\windows\system32\acmigration.dll
2015-03-23 03:06 . 2015-04-15 20:06	159744	----a-w-	c:\windows\system32\aepic.dll
2015-03-23 03:06 . 2015-04-15 20:06	202752	----a-w-	c:\windows\system32\aepdu.dll
2015-03-23 02:59 . 2015-04-15 20:06	896000	----a-w-	c:\windows\system32\aeinv.dll
2015-03-10 03:08 . 2015-04-15 20:02	1237504	----a-w-	c:\windows\system32\msxml3.dll
2015-03-10 03:05 . 2015-04-15 20:02	2048	----a-w-	c:\windows\system32\msxml3r.dll
2015-03-05 04:06 . 2015-04-15 20:05	305152	----a-w-	c:\windows\system32\gdi32.dll
2015-03-04 04:16 . 2015-04-15 20:05	249784	----a-w-	c:\windows\system32\clfs.sys
2015-03-04 04:10 . 2015-04-15 20:05	58880	----a-w-	c:\windows\system32\clfsw32.dll
2015-03-04 04:10 . 2015-05-14 06:56	470528	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2015-03-04 04:10 . 2015-05-14 06:56	2178560	----a-w-	c:\windows\apppatch\AcGenral.dll
2015-03-04 04:06 . 2015-05-14 06:56	2560	----a-w-	c:\windows\apppatch\AcRes.dll
2015-03-03 16:50 . 2014-04-18 17:21	24144	----a-w-	c:\windows\system32\drivers\aswHwid.sys
2015-03-03 16:50 . 2013-12-17 17:53	106912	----a-w-	c:\windows\system32\drivers\aswStm.sys
2015-03-03 16:50 . 2013-03-01 16:17	49904	----a-w-	c:\windows\system32\drivers\aswRvrt.sys
2015-03-03 16:50 . 2013-03-01 16:17	206976	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2015-03-03 16:50 . 2012-02-23 20:28	81728	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2015-03-03 16:50 . 2010-11-01 17:36	73440	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2015-03-03 16:50 . 2010-11-01 17:36	427480	----a-w-	c:\windows\system32\drivers\aswSP.sys
2015-03-03 16:50 . 2015-03-03 16:50	291312	----a-w-	c:\windows\system32\aswBoot.exe
2015-03-03 16:50 . 2015-03-03 16:50	43112	----a-w-	c:\windows\avastSS.scr
2015-03-03 16:49 . 2011-04-26 20:26	788272	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2015-02-25 03:03 . 2015-04-15 20:02	514560	----a-w-	c:\windows\system32\drivers\http.sys
2015-02-24 02:23 . 2010-11-01 00:59	246920	------w-	c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-11-19 10:23	223432	----a-w-	c:\users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-11-19 10:23	223432	----a-w-	c:\users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-11-19 10:23	223432	----a-w-	c:\users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-03-03 16:50	644608	----a-w-	c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-07 1104384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-02-10 13834856]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-27 284696]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-14 8120864]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 1797008]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-10-25 421888]
"AvastUI.exe"="c:\program files\Alwil Software\Avast5\AvastUI.exe" [2015-03-18 5511352]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2014-10-14 557768]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2013-07-07 22:09	1104384	----a-w-	c:\users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2013-08-27 14:57	248208	----a-w-	c:\program files\TomTom HOME 2\TomTomHOMERunner.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2015-03-03 106912]
R2 MBAMService;MBAMService;c:\program files\ Malwarebytes Anti-Malware \mbamservice.exe [2015-04-14 1080120]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2014-12-11 315496]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2014-01-22 88576]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-04-21 102912]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2015-04-14 51928]
R3 MHIKEY10;MHIKEY10;c:\windows\system32\Drivers\MHIKEY10.sys [2010-10-01 52096]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl.sys [2012-03-26 18432]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2015-01-31 15872]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 184192]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2015-03-03 788272]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2015-03-03 427480]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2015-03-03 24144]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2015-03-03 73440]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-27 13336]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-06-14 1051976]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [2015-03-03 220240]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [2015-03-03 3205216]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2015-04-14 23256]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-24 10064]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 96749046
*Deregistered* - 96749046
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
utcsvc	REG_MULTI_SZ   	DiagTrack
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Inhalt des "geplante Tasks" Ordners
.
2015-05-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-27 20:20]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
mStart Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
mSearch Bar = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
uSearchAssistant = www.google.com
IE: Free YouTube to Mp3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\
FF - prefs.js: browser.search.defaulturl - hxxps://de.search.yahoo.com/yhs/search
FF - prefs.js: browser.startup.homepage - google.de
FF - prefs.js: keyword.URL - hxxps://de.search.yahoo.com/yhs/search
FF - prefs.js: network.proxy.gopher - 
FF - prefs.js: network.proxy.gopher_port - 0
FF - prefs.js: network.proxy.type - 0
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-05-23  00:47:35
ComboFix-quarantined-files.txt  2015-05-22 22:47
ComboFix2.txt  2015-05-13 21:46
.
Vor Suchlauf: 18 Verzeichnis(se), 70.565.994.496 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 70.529.486.848 Bytes frei
.
- - End Of File - - 4449132F83ECF3F6683C1901D5AAC145
A36C5E4F47E84449FF07ED3517B43A31
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 22.05.2015
Suchlauf-Zeit: 23:13:44
Logdatei: 1.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.05.22.06
Rootkit Datenbank: v2015.05.16.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Ivonne

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 389337
Verstrichene Zeit: 23 Min, 4 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 1
PUP.Optional.CrossRider.A, C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\prefs.js, Gut: (), Schlecht: (user_pref("extensions.crossriderapp5060@crossrider.com.install-event-fired", true);), Ersetzt,[812d13831b6fbb7b72d2dd8b10f6b947]

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         

# AdwCleaner v4.205 - Bericht erstellt 23/05/2015 um 01:02:39
# Aktualisiert 21/05/2015 von Xplode
# Datenbank : 2015-05-21.2 [Server]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (x86)
# Benutzername : Ivonne - IVONNE-PC
# Gestarted von : C:\Users\Ivonne\Desktop\AdwCleaner_4.205.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\MinnimumiPricue
Ordner Gelöscht : C:\ProgramData\siave oN
Ordner Gelöscht : C:\ProgramData\926b86de55ac50ca
Ordner Gelöscht : C:\Program Files\MinnimumiPricue
Ordner Gelöscht : C:\Program Files\siave oN
Ordner Gelöscht : C:\Users\Ivonne\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Ivonne\AppData\LocalLow\Claro LTD
Ordner Gelöscht : C:\Users\Ivonne\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Ivonne\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Ivonne\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Ivonne\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Ivonne\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Ivonne\AppData\Roaming\RHEng
Datei Gelöscht : C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKCU\Software\855d98cb66def42
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3242337
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1E44819B-54E1-411B-9D9F-38D7B913BCF2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Myfree Codec
Schlüssel Gelöscht : HKLM\SOFTWARE\Uniblue
Schlüssel Gelöscht : HKLM\SOFTWARE\SPPDCOM
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17801


-\\ Mozilla Firefox v38.0.1 (x86 de)

[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "L+tncv4eqt6Qm5T3dzChdA==");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "poKjTfHs0NrVUIalKI8jyg==");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "QmycQXJXVyFVAzIiNllWhQ==");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "SuMy8xgBA7+FodOxmk9aiQ==");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.IsEngineShown", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://flixster.conduit-apps.com/flixster/FlixApp/popup.php", "176x122");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://flixster.conduit-apps.com/flixster/FlixApp/popup.php", "427x492");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_4817e48e", "356x317");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon Sep 24 2012 16:36:46 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Oct 10 2012 17:40:45 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.locale", "en");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Oct 10 2012 17:40:37 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.alert.userId", "397a2787-fddd-4253-8304-6b5b3d5a5980");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.globalUserId", "a14771c0-7188-4bb4-abea-27a948ee1b15");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Mon Aug 20 2012 15:36:54 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.BrowserCompStateIsOpen_2101844924", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.BrowserCompStateIsOpen_2118850536042987431", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.BrowserCompStateIsOpen_319764460718209437", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.BrowserCompStateIsOpen_3287235895595217780", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.BrowserCompStateIsOpen_3548259042", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.BrowserCompStateIsOpen_869876559", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.CTID", "ConduitEngine");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.CommunitiesChangesLastCheckTime", "0");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Thu Oct 11 2012 10:14:58 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.FirstServerDate", "03/30/2011 04");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.FirstTime", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.FirstTimeFF3", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.GroupingInvalidateCache", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.GroupingLastCheckTime", "0");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.GroupingLastServerUpdateTime", "0");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.HasUserGlobalKeys", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.Initialize", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.InitializeCommonPrefs", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.InstalledDate", "Wed Mar 30 2011 03:06:21 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.InvalidateCache", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.IsMulticommunity", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.IsOpenThankYouPage", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.IsOpenUninstallPage", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Wed Oct 10 2012 17:40:38 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Thu Oct 11 2012 10:14:58 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.RadioLastCheckTime", "0");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.RadioLastUpdateIPServer", "0");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.RadioLastUpdateServer", "0");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.SettingsLastCheckTime", "Thu Oct 11 2012 10:14:58 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.UserID", "UN16537426298271518");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.approveUntrustedApps", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.apps1715304611297600578", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.alertnotificationglobaltrigger", "62446179");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.appbuttondisablenull", "30");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_alert_time_counter_register_time", "32372D38");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_app_heartbit", "31333138383631363231373133");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_facebok_user_id", "313030303030383031343235393534");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_facebook_login_status", "31");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_facebook_user_token", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_firsttimealert", "6E6F");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_install", "796573");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_installdate", "332D37");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_installfromtoolbar", "796573");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_installtoga", "796573");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_onlyonedayafterinstall", "796573");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.bday_show_time", "31372D39");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.birthday reminder v3_user_first_login_date", "30382F32362F32303131");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.birthday reminder v3_user_survey_visit", "4E4F545F56495349544544");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.birthdayreminderv3_lang", "4445");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_app_heartbit", "31333133313535353332333232");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_close_popup_869876559", "313233");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_daysactivity", "31333439393433333134313335");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_daysopenactivity", "31333430373435313333343936");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_firsttimenotification_869876559", "6E6F");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_lang", "4445");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_login_from_settings", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.calendar_user_location", "7B22697041646472657373223A2237392E3232362E3134382E323136222C22636F756E74727953686F7274223A224445222C22636F756E7472794C6F6E67223A224745[...]
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.campidundefined", "35333336353534333738");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.countrycodeundefined", "54686973206669656C64206973206E6F7420737570706F7274656420696E2044422E20506C65617365207570677261646520796F7572204950324C6F636174696F6E2064[...]
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.dailydealsundefined", "7B2264617465223A22332F372F32303131222C2264617461223A7B226C696E6B223A22687474703A2F2F6465616C732E656261792E636F6D2F222C226974656D73223A5B7[...]
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.ebay_user_first_login_date", "30382F30342F32303131");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.ebay_user_survey_visit", "4E4F545F56495349544544");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.ebayclientalertundefined", "5B5D");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.ebayfirsttimetokenundefined", "31");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.ebayguidundefined", "62663762663062352D636331342D323166352D653338642D653333643330653839316334");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebbok_user_cuid_100000801425954", "30613232303030312D343033662D356166332D303030302D303030303030303030303030");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebbok_user_id", "6E6F6E65");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_conduit_social_sskey_100000801425954", "58314B57524F424949592E546E6A6E3877456F4F356D6C4F4455743969304156596B77574B397343");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_ctid_connect_send_n", "73656E646564");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_ctid_connect_send_new", "73656E646564");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_first_visit", "6E6F744669727374");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_last_message_choice", "656D707479");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_loggedin", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_login_refresh", "302E3035353535323133393431303937363831");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_login_status", "30");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_lust_recievegadet", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_mode", "32");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_permission_allow_100000801425954", "31");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_permission_lastshow_100000801425954", "31333132333833303432333439");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_toolbar_not_numer", "3131");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_user_locale", "6465");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_user_name", "6E6F6E65");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebook_user_token", "6E6F6E65");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.facebooknotifications", "30");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.fbconnectbtnfirsttime", "796573");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.fbconnectcompleted", "74727565");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_8.facebook_last_visit_tab", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.iamlogined", "74727565");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.backendstorage.wettercitycode", "444530303032303436303134");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.componentAlertEnabled", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.counterAppsAdded", 10);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.counterAppsRemoved", 2);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.engineLocale", "de");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Wed Oct 10 2012 17:37:58 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Thu Oct 11 2012 10:14:58 GMT+0200");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.initDone", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.isAppTrackingManagerOn", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("ConduitEngine.usagesFlag", 2);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("avg.install.userHPSettings", "^hxxp://www\\.claro-search\\.com/\\?affID=114508.*");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("avg.install.userSPSettings", "Claro Search");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.admin", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.aflt", "babsst");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.appId", "{C3110516-8EFC-49D6-8B72-69354F332062}");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.dfltLng", "en");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.excTlbr", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.id", "cc7e2a33000000000000d682feb66cfe");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.instlDay", "15649");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.instlRef", "sst");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.prdct", "claro");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.prtnrId", "claro");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.tlbrId", "claro");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.tlbrSrchUrl", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.vrsn", "1.8.3.10");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro.vrsni", "1.8.3.10");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro_i.smplGrp", "none");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.claro_i.vrsnTs", "1.8.3.1016:51:22");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.crossriderapp5060@crossrider.com.install-event-fired", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.enabledItems", "helperbar@helperbar.com:1.0,noia2_option@kk.noia:3.76,{AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778,{ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1,{d10d0bf8-f5b[...]
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.engine@conduit.com.install-event-fired", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.ffxtlbr@holasearch.com.install-event-fired", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.DockingPositionDown", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.LastHiddenTime", 22544020);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", true);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.admin", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.aflt", "babsst");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.autoRvrt", "false");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.dfltLng", "de");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.excTlbr", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.ffxUnstlRst", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.id", "cc7e2a33000000000000d682feb66cfe");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.instlDay", "15936");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.instlRef", "sst");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.newTab", false);
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.prdct", "holasearch");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.prtnrId", "holasearch");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.rvrt", "false");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.smplGrp", "none");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.tlbrId", "base");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.tlbrSrchUrl", "");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.vrsn", "1.8.16.16");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.vrsnTs", "1.8.16.1618:44:09");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.holasearch.vrsni", "1.8.16.16");
[2dapp5u5.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

*************************

AdwCleaner[R0].txt - [25190 Bytes] - [23/05/2015 00:59:43]
AdwCleaner[S0].txt - [26688 Bytes] - [23/05/2015 01:02:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [26748  Bytes] ##########
         

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.6 (05.21.2015:1)
OS: Windows 7 Ultimate x86
Ran by Ivonne on 23.05.2015 at  1:09:40,16
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Users\Ivonne\AppData\Roaming\mozilla\firefox\profiles\2dapp5u5.default\extensions\staged
Emptied folder: C:\Users\Ivonne\AppData\Roaming\mozilla\firefox\profiles\2dapp5u5.default\minidumps [158 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23.05.2015 at  1:13:17,15
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=85b4bdbbd316d84daee3536d1e78ec3a
# engine=23981
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-05-23 09:55:02
# local_time=2015-05-23 11:55:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 54762 184006093 0 0
# scanned=203156
# found=12
# cleaned=0
# scan_time=6336
sh=BE3A5951F9D566E9C0B10B41781E42A3A8562B12 ft=1 fh=bfe637157b287a9d vn="Variante von Win32/Toolbar.Babylon.W evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Ivonne\AppData\Roaming\BabSolution\Shared\enhancedNT.dll.vir"
sh=5E2F748B83DE027BD3745993DB64A350443FA7B6 ft=1 fh=7d056c67e65b458f vn="Win32/UniBlue.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Ivonne\AppData\Roaming\RHEng\BB2A8A7EB6A0465C9BE841FCB290BB9E\speedupmypc-DE-p2v3.exe.vir"
sh=EE2D8A0C16CB4F60E07AD30BC8F4AF2D25E4FF62 ft=1 fh=c2a60ef126908cf5 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSS.exe"
sh=24A108C48173FDD9962F7CC3D4DB4B852D864838 ft=1 fh=0501d0dc4c9a869f vn="Variante von Win32/Systweak.N evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSHelper.dll"
sh=915239C2678EFCE5C2E45012595BEA0C050864B4 ft=1 fh=9ca6c4d86ffea4d8 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSPrivacyProtector.exe"
sh=67A75BAA7A5BBB2EEEBB99D490F00F82D0BB1E09 ft=1 fh=5d5a0ac2ab2c0a85 vn="Variante von Win32/Systweak evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSRegClean.exe"
sh=2C09414F7BCF16F3C9A358B5CCD4492EF7EEF08E ft=1 fh=5545a1a02bc092d6 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSRegistryOptimizer.exe"
sh=322DCE4CCA5EB266FFEDD900C6D628769AD18300 ft=1 fh=b3d66e50f9e4f6b1 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\WinZip\Utils\WzSysScan\WINZIPSSSystemCleaner.exe"
sh=18CA82077ED59437F950B970AAF0F93940FC9823 ft=1 fh=03ec528918889643 vn="Variante von Win32/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Windows\System32\roboot.exe.vir"
sh=89D0338DA997AF65AC582A0478756604A8626B5F ft=1 fh=6cc545e6cae82e67 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll"
sh=0B232E06BC5E12D421289FDBAAC3E17EEC539271 ft=1 fh=e15e07abb92dc3fd vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"
sh=73E43334FE87FC9D3ADC66BFA5BD83F7E350BE0A ft=0 fh=0000000000000000 vn="Variante von Win32/Systweak.L evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\4867ad5.msi"
         

 Results of screen317's Security Check version 1.001  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 TuneUp Utilities    
 TuneUp Utilities Language Pack (de-DE) 
 TuneUp Utilities    
 CCleaner     
 Java 7 Update 9  
 Java version 32-bit out of Date! 
 Adobe Flash Player 	17.0.0.169  
 Adobe Reader XI  
 Mozilla Firefox (38.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Alwil Software Avast5 AvastSvc.exe  
 Alwil Software Avast5 avastui.exe  
 Alwil Software Avast5 ng vbox\AvastVBoxSVC.exe 
 Alwil Software Avast5 avastui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

 Results of screen317's Security Check version 1.001  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 TuneUp Utilities    
 TuneUp Utilities Language Pack (de-DE) 
 TuneUp Utilities    
 CCleaner     
 Java 7 Update 9  
 Java version 32-bit out of Date! 
 Adobe Flash Player 	17.0.0.169  
 Adobe Reader XI  
 Mozilla Firefox (38.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Alwil Software Avast5 AvastSvc.exe  
 Alwil Software Avast5 avastui.exe  
 Alwil Software Avast5 ng vbox\AvastVBoxSVC.exe 
 Alwil Software Avast5 avastui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-05-2015 01
Ran by Ivonne (administrator) on IVONNE-PC on 23-05-2015 12:24:45
Running from C:\Users\Ivonne\Desktop
Loaded Profiles: Ivonne (Available Profiles: Ivonne)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\avastui.exe
(Spotify Ltd) C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Avast Software) C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Avast Software s.r.o.) C:\Program Files\Alwil Software\Avast5\avastui.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-27] (Intel Corporation)
HKLM-x32\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-14] (Realtek Semiconductor)
HKLM-x32\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1797008 2010-07-21] (Microsoft Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5511352 2015-03-18] (Avast Software s.r.o.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2014-10-14] (Adobe Systems Incorporated)
HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\Run: [Spotify Web Helper] => C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-08] (Spotify Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll [2015-03-03] (Avast Software s.r.o.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKU\S-1-5-21-1060347449-277864741-3371473675-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1060347449-277864741-3371473675-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1060347449-277864741-3371473675-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {EFE522B3-7ABD-49CB-A5C3-A2AFBBA83B9D} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = 
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {EFE522B3-7ABD-49CB-A5C3-A2AFBBA83B9D} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1060347449-277864741-3371473675-1000 -> {FA66D5A9-3B7F-42C1-9395-2868E0C57CC2} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-08-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-03-03] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-08-20] (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default
FF DefaultSearchUrl: https://de.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF Homepage: google.de
FF Keyword.URL: https://de.search.yahoo.com/yhs/search
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-08-20] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @Nero.com/KM -> C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2012-12-19] (Nero AG)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\searchplugins\google-images.xml [2014-11-19]
FF SearchPlugin: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\searchplugins\google-maps.xml [2014-11-19]
FF SearchPlugin: C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\searchplugins\yahoo-avast.xml [2014-11-20]
FF Extension: Noia 2.0 (eXtreme) - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\Extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e} [2010-11-01]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-11-20]
FF Extension: Adblock Plus - C:\Users\Ivonne\AppData\Roaming\Mozilla\Firefox\Profiles\2dapp5u5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-08]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-26]
FF HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-11-20]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-03-03]
CHR HKLM\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - No Path Or update_url value
CHR HKU\S-1-5-21-1060347449-277864741-3371473675-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Ivonne\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx [2012-09-17]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [343336 2015-03-03] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [3205216 2015-03-03] (Avast Software)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [851456 2015-04-27] (Microsoft Corporation)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [143872 2007-12-17] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [113664 2007-01-11] (SEIKO EPSON CORPORATION)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2012-11-05] (Flexera Software, Inc.)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2010-11-01] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1051976 2010-06-14] (TuneUp Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-03-03] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-03-03] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-03-03] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-03-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-03-03] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427480 2015-03-03] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-03-03] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206976 2015-03-03] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10.sys [52096 2010-10-01] (Generic USB smartcard reader)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl.sys [18432 2012-03-26] (Apple Inc.) []
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2010-02-24] (TuneUp Software)
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2013-03-18] (Apple, Inc.) []
R2 VBoxAswDrv; C:\Program Files\Alwil Software\Avast5\ng\vbox\VBoxAswDrv.sys [220240 2015-03-03] (Avast Software)
S3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] () []
S3 catchme; \??\C:\Users\Ivonne\AppData\Local\Temp\catchme.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-23 12:24 - 2015-05-23 12:25 - 00014874 _____ () C:\Users\Ivonne\Desktop\FRST.txt
2015-05-23 12:24 - 2015-05-23 12:24 - 00000000 ____D () C:\Users\Ivonne\Desktop\FRST-OlderVersion
2015-05-23 12:08 - 2015-05-23 12:08 - 00852630 _____ () C:\Users\Ivonne\Downloads\SecurityCheck.exe
2015-05-23 12:08 - 2015-05-23 12:08 - 00852630 _____ () C:\Users\Ivonne\Desktop\SecurityCheck(1).exe
2015-05-23 01:16 - 2015-05-23 01:16 - 00000000 ____D () C:\Program Files\ESET
2015-05-23 01:15 - 2015-05-23 01:16 - 02347384 _____ (ESET) C:\Users\Ivonne\Downloads\esetsmartinstaller_deu.exe
2015-05-23 01:09 - 2015-05-23 01:09 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-IVONNE-PC-Windows-7-Ultimate-(32-bit).dat
2015-05-23 01:09 - 2015-05-23 01:09 - 00000000 ____D () C:\RegBackup
2015-05-23 01:08 - 2015-05-23 01:08 - 02720009 _____ (Thisisu) C:\Users\Ivonne\Desktop\JRT.exe
2015-05-23 00:59 - 2015-05-23 01:02 - 00000000 ____D () C:\AdwCleaner
2015-05-23 00:58 - 2015-05-23 00:58 - 02222592 _____ () C:\Users\Ivonne\Desktop\AdwCleaner_4.205.exe
2015-05-23 00:47 - 2015-05-23 00:47 - 00016621 _____ () C:\ComboFix.txt
2015-05-22 23:41 - 2015-05-22 23:42 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Ivonne\Downloads\mbar-1.09.1.1004.exe
2015-05-18 19:19 - 2015-05-18 19:19 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-18 18:45 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-17 22:16 - 2015-05-17 22:16 - 00000961 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-05-17 22:16 - 2015-05-17 22:16 - 00000949 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-05-17 22:16 - 2015-05-17 22:16 - 00000000 ____D () C:\Program Files\TeamViewer
2015-05-17 22:14 - 2015-05-17 22:15 - 07970528 _____ (TeamViewer GmbH) C:\Users\Ivonne\Downloads\TeamViewer_Setup_de.exe
2015-05-17 21:41 - 2015-05-17 21:41 - 00001020 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-17 21:41 - 2015-05-17 21:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-17 21:41 - 2015-05-17 21:41 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2015-05-17 21:41 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-17 21:41 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-17 21:39 - 2015-05-17 21:39 - 02209792 _____ () C:\Users\Ivonne\Desktop\AdwCleaner_4.204.exe
2015-05-17 21:37 - 2015-05-17 21:39 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Ivonne\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-14 08:58 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-14 08:58 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-14 08:58 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-14 08:58 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-14 08:58 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-14 08:58 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-14 08:58 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-14 08:58 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-14 08:58 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-14 08:58 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-14 08:58 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-14 08:58 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-14 08:58 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-14 08:58 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-14 08:58 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-14 08:58 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-14 08:57 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-14 08:57 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-14 08:57 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-14 08:57 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-14 08:57 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-14 08:57 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-14 08:57 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-14 08:57 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-14 08:57 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-14 08:57 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-14 08:57 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-14 08:57 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-14 08:57 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-14 08:57 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-14 08:57 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-14 08:57 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-14 08:57 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-14 08:57 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-14 08:57 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-14 08:57 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-14 08:57 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-14 08:57 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-14 08:57 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-14 08:57 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-14 08:57 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-14 08:57 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-14 08:57 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-14 08:57 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-14 08:57 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-14 08:57 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-14 08:57 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-14 08:57 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-14 08:57 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-14 08:57 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-14 08:57 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-14 08:57 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-14 08:57 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-14 08:57 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-14 08:56 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-14 08:56 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-14 08:56 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-14 08:56 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-14 08:56 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-14 08:56 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-14 08:56 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 23:50 - 2015-05-23 00:53 - 00049816 _____ () C:\Windows\PFRO.log
2015-05-13 23:50 - 2015-05-13 23:50 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-13 23:26 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2015-05-13 23:26 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2015-05-13 23:26 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2015-05-13 23:26 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2015-05-13 23:25 - 2015-05-23 00:47 - 00000000 ____D () C:\Qoobox
2015-05-13 23:25 - 2015-05-13 23:44 - 00000000 ____D () C:\Windows\erdnt
2015-05-13 23:21 - 2015-05-23 00:25 - 05627500 ____R (Swearware) C:\Users\Ivonne\Desktop\ComboFix.exe
2015-05-09 22:22 - 2015-05-10 08:45 - 00000000 ____D () C:\Users\Ivonne\Desktop\Wohnung
2015-05-08 18:41 - 2015-05-08 18:41 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Ivonne\Desktop\tdsskiller.exe
2015-05-08 18:06 - 2015-05-23 00:16 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-08 18:06 - 2015-05-22 23:13 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-08 18:06 - 2015-05-17 21:41 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-08 18:05 - 2015-05-22 23:43 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-08 18:04 - 2015-05-23 00:16 - 00000000 ____D () C:\Users\Ivonne\Desktop\mbar
2015-05-08 18:02 - 2015-05-08 18:03 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Ivonne\Desktop\mbar-1.09.1.1004.exe
2015-05-07 18:58 - 2015-05-23 12:24 - 00000000 ____D () C:\FRST
2015-05-07 18:57 - 2015-05-23 12:24 - 01147392 _____ (Farbar) C:\Users\Ivonne\Desktop\FRST.exe
2015-05-03 15:06 - 2015-05-03 15:06 - 00000000 ____D () C:\Windows\system32\appraiser
2015-05-03 10:13 - 2015-05-03 10:13 - 00000000 ___RD () C:\Program Files\Skype
2015-05-03 10:13 - 2015-05-03 10:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-05-03 10:13 - 2015-05-03 10:13 - 00000000 ____D () C:\Program Files\Common Files\Skype
2015-05-03 00:20 - 2015-05-23 10:05 - 00000840 _____ () C:\Windows\setupact.log
2015-05-03 00:20 - 2015-05-03 00:20 - 00000000 _____ () C:\Windows\setuperr.log

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-23 12:19 - 2014-02-27 13:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-23 11:40 - 2014-11-19 13:23 - 01152400 _____ () C:\Windows\WindowsUpdate.log
2015-05-23 10:14 - 2009-07-14 06:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-23 10:14 - 2009-07-14 06:34 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-23 10:05 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-23 00:54 - 2010-11-01 19:23 - 00000000 ____D () C:\Users\Ivonne\AppData\Local\Adobe
2015-05-23 00:44 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2015-05-21 23:32 - 2015-04-08 06:48 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-21 22:47 - 2012-10-11 10:52 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-20 23:10 - 2014-09-03 23:39 - 00000000 ____D () C:\Users\Ivonne\Desktop\Hochzeit
2015-05-18 23:23 - 2009-07-14 10:56 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-18 21:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-05-18 20:33 - 2010-11-01 01:40 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-18 19:42 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-18 19:04 - 2009-07-14 06:33 - 00362096 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-18 19:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-05-18 19:02 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-18 18:44 - 2014-02-27 13:37 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-18 18:27 - 2010-11-01 03:24 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-18 18:11 - 2010-11-01 02:47 - 00089440 _____ () C:\Users\Ivonne\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-14 08:32 - 2013-05-16 17:50 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-13 23:46 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2015-05-04 11:55 - 2012-03-14 22:30 - 00000000 ____D () C:\Program Files\FOTOParadies
2015-05-04 11:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-05-03 15:06 - 2014-05-11 14:10 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-05-03 10:13 - 2010-11-01 19:41 - 00000000 ____D () C:\ProgramData\Skype
2015-04-26 13:56 - 2015-04-21 18:56 - 00000000 ____D () C:\Users\Ivonne\Desktop\Herr Bahms april 15

==================== Files in the root of some directories =======

2012-12-04 21:56 - 2012-12-04 21:56 - 0040023 _____ () C:\Users\Ivonne\AppData\Roaming\UserTile.png
2012-02-09 00:19 - 2014-01-22 17:09 - 0004096 ____H () C:\Users\Ivonne\AppData\Local\keyfile3.drm
2014-11-19 16:00 - 2014-11-19 16:00 - 0005015 _____ () C:\ProgramData\wmzddnmb.cix

Files to move or delete:
====================
C:\Users\Public\dcmsvcsetup.exe


Some files in TEMP:
====================
C:\Users\Ivonne\AppData\Local\temp\Quarantine.exe
C:\Users\Ivonne\AppData\Local\temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-18 20:53

==================== End of log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-05-2015 01
Ran by Ivonne at 2015-05-23 12:26:00
Running from C:\Users\Ivonne\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1060347449-277864741-3371473675-500 - Administrator - Disabled)
Gast (S-1-5-21-1060347449-277864741-3371473675-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1060347449-277864741-3371473675-1002 - Limited - Enabled)
Ivonne (S-1-5-21-1060347449-277864741-3371473675-1000 - Administrator - Enabled) => C:\Users\Ivonne

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Avast Free Antivirus (HKLM\...\avast) (Version: 10.2.2214 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 3.00 - Piriform)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ Inselgeschichten (HKLM\...\{64EEA791-0271-4B53-00AC-2BF05F5FBEF6}) (Version:  - Electronic Arts)
Die*Sims™*3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
EPSON BX300F Series Printer Uninstall (HKLM\...\EPSON BX300F Series) (Version:  - SEIKO EPSON Corporation)
EPSON BX305 Series Printer Uninstall (HKLM\...\EPSON BX305 Series) (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (HKLM\...\{DEDB47A3-C988-4A43-A645-E2CEA571E680}) (Version: 2.0.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - )
EPSON Stylus Office BX300F_TX300F Handbuch (HKLM\...\EPSON Stylus Office BX300F_TX300F Benutzerhandbuch) (Version:  - )
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version:  - )
Fotogalerie (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FOTOParadies (HKLM\...\{F8C69611-5AFE-4F7F-ACB3-05B1ED552530}}_is1) (Version: 3.1.10.103 - Foto Online Service GmbH)
Free YouTube Download version 3.2.49.1111 (HKLM\...\Free YouTube Download_is1) (Version: 3.2.49.1111 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.50.1111 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1111 - DVDVideoSoft Ltd.)
Intel(R) Rapid Storage Technology (HKLM\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.3.1001 - Intel Corporation)
Java 7 Update 9 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217009FF}) (Version: 7.0.90 - Oracle)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Codec Pack 5.2.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 5.2.0 - )
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft IntelliPoint 8.0 (HKLM\...\{00F93853-D9D3-4795-A89E-84CCBA0205C9}) (Version: 8.0.225.0 - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 38.0.1 (x86 de) (HKLM\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 12 (HKLM\...\{622B6CB8-70B1-4D65-B672-093D19759BA1}) (Version: 12.5.01200 - Nero AG)
Nero 7 Premium (HKLM\...\{22FB6750-ADDF-4726-B67F-6901E1991031}) (Version: 7.03.0993 - Nero AG)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.3 - NVIDIA Corporation)
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6003 - Realtek Semiconductor Corp.)
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1060347449-277864741-3371473675-1000\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities (HKLM\...\TuneUp Utilities) (Version: 9.0.4300.9 - TuneUp Software)
TuneUp Utilities (Version: 9.0.4300.9 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 9.0.4300.9 - TuneUp Software) Hidden
VLC media player 1.1.4 (HKLM\...\VLC media player) (Version: 1.1.4 - VideoLAN)
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden
Windows Driver Package - Broadcom Bluetooth  (07/30/2009 6.2.0.9405) (HKLM\...\A6A8668C0A13640CA28FE2A7D9654BE4AE478B13) (Version: 07/30/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom Bluetooth  (09/11/2009 6.2.0.9407) (HKLM\...\755087041320E005CB1E8A67C5C55A260EB81B90) (Version: 09/11/2009 6.2.0.9407 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Winrar 3.93 (HKLM\...\Winrar 3.93) (Version:  - )
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}) (Version: 17.0.10381 - WinZip Computing, S.L. )

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\Windows\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1060347449-277864741-3371473675-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll (Microsoft Corporation)

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2015-05-23 00:44 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0F357B88-361E-43EE-91DE-476ED65897AD} - System32\Tasks\{64B2E84F-DEBE-4CDB-979D-DB29A9091AA7} => C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)
Task: {20773140-9B1D-4FD8-9FCF-8DFEFC863D5B} - System32\Tasks\{DE1BF331-B391-431E-A491-4AF87B3A854A} => pcalua.exe -a C:\Users\Ivonne\Downloads\windows-live-movie-maker_18116.exe -d C:\Users\Ivonne\Downloads
Task: {2D5B340A-5DBA-44F0-AD2F-911B20D0E1E2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)
Task: {30A89842-71F2-46BE-8358-501FBB60C80A} - System32\Tasks\{6E2558FC-E6A7-4429-9465-4650EDD38CC8} => C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe [2014-03-31] (Microsoft Corporation)
Task: {37C2F4F6-D1A1-431A-A7FC-09005AFACFC1} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {66853692-7638-4A2A-AA06-964E5503CA59} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {672831F3-30A4-4A28-988E-2CBFB192AAE4} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03] (Sun Microsystems, Inc.)
Task: {6C1A2C0E-FCD7-4BED-B058-990FD7CE5639} - System32\Tasks\{A3B08739-3B18-45C0-8787-B8465F8A61B8} => C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe [2014-11-11] (DVDVideoSoft Ltd.)
Task: {83072DE4-9C6B-4456-9B97-ABAED99F17AA} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {8FC3F161-E833-4E88-A95E-BB5297E7060C} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {9A9B2842-4FDC-4F7F-84A2-2991C4ECE884} - System32\Tasks\{1FB31CD4-8BCE-4CE4-A178-4629D492085D} => pcalua.exe -a D:\eauninstall.exe -d D:\
Task: {A3974055-F884-44BC-B103-516C386EFA69} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2015-03-03] (Avast Software s.r.o.)
Task: {AB49AB62-C5C9-423F-AA8F-BFC15319C6C1} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {C48A5C40-97CC-44E3-B819-FF45AE0844FC} - System32\Tasks\{7DE3D4A3-CF8C-4C2B-9D0F-E7F16A3E870B} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {C9852B23-A43B-4A66-BE25-3434DFE8EAEB} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance => C:\Program Files\TuneUp Utilities 2010\OneClick.exe [2010-06-14] (TuneUp Software)
Task: {F1B70B5B-0665-4D13-90CF-E15D3E307843} - System32\Tasks\{38D20179-26CC-4C1D-AB47-10F91592C7CE} => pcalua.exe -a C:\Users\Ivonne\Downloads\wlsetup-web.exe -d C:\Users\Ivonne\Downloads

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2015-03-03 18:50 - 2015-03-03 18:50 - 00104400 _____ () C:\Program Files\Alwil Software\Avast5\log.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 00081728 _____ () C:\Program Files\Alwil Software\Avast5\JsonRpcServer.dll
2015-05-22 20:32 - 2015-05-22 20:32 - 02931200 _____ () C:\Program Files\Alwil Software\Avast5\defs\15052201\algo.dll
2015-05-23 10:06 - 2015-05-23 10:06 - 02931200 _____ () C:\Program Files\Alwil Software\Avast5\defs\15052300\algo.dll
2003-07-11 03:09 - 2003-07-11 03:09 - 00048192 _____ () C:\Program Files\Common Files\Microsoft Shared\Web Folders\1031\nsextint.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 40540672 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 01359872 _____ () C:\Program Files\Alwil Software\Avast5\libglesv2.dll
2015-03-03 18:50 - 2015-03-03 18:50 - 00212992 _____ () C:\Program Files\Alwil Software\Avast5\libegl.dll
2014-11-10 19:30 - 2014-11-10 19:30 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\fea6745cde495eb59adf7808e8475ebc\IsdiInterop.ni.dll
2010-11-01 02:45 - 2010-04-27 18:05 - 00058880 _____ () C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:C64BF02A

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1060347449-277864741-3371473675-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ivonne\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER Error getting ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Ivonne\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" -s

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{72AC3F50-FE6E-48AE-B546-5D1039C95A4E}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{566ACBDB-2FC1-49D4-BBA3-2A291EC3BBFA}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{921F2799-7D41-46BD-A5A2-557790696899}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{BFCC23F0-373F-40AA-B70A-03569735ADE9}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{644BAFB6-0ABC-46F6-A026-2CC20D1B08AE}C:\users\ivonne\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\ivonne\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F4DC3987-C062-4B6A-AD55-E10296481AD2}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{AA2132E2-010B-4B01-950E-5271397519B9}] => (Allow) C:\Program Files\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{C2837112-3C49-4B57-ACED-BCE6A257FD9D}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{A1EFC834-166B-4E57-933F-9877283652C3}] => (Allow) C:\Program Files\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{1865F469-4DFB-4E0D-B2C0-1D3755975C84}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{46B6B70D-D1A9-4A1C-A6C8-25687CFB6F34}] => (Allow) C:\Program Files\Nero\KM\KwikMedia.exe
FirewallRules: [{32716270-CA17-4BA1-9E46-3666D3F9335A}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{65B6CEAA-A076-438F-9287-04C5EEFEE86E}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{AFC38DB1-994D-4D47-BF91-96BE0A5D16B6}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{E6B3E450-CCA0-4DDD-A790-78D3E14E56D1}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{A177FA75-B075-4196-AA50-03B26AB44F15}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{A3BCC8C9-C9A6-4D14-B3B2-A89BB9A1F18F}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{CB11582B-79EC-4335-9179-74DFE04BFDE7}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{FE91C23B-3B38-4231-9E01-44FBBB226C20}] => (Allow) LPort=2869
FirewallRules: [{7BD2BADD-CF0B-4DC5-9AF7-E2F8C526EA76}] => (Allow) LPort=1900
FirewallRules: [{3E282C79-A3E7-4CC3-A45D-38EB4EC7EE3C}] => (Allow) C:\Users\Ivonne\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{1425DF02-FE6B-4107-9139-93BA93357CBB}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C59B9D6E-5024-418E-9981-6C1AA6B80BA6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8BFF56EC-3E1F-47A6-97B8-5D1EE48DC76D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{ED68E311-BE73-45D0-814C-84CC15D0D62E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{5D0EDBEE-4A04-4BF7-A5D3-C8200CAD7BFB}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{624797A2-9B00-4C68-9A69-15F0F204B380}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{92AA4F5E-1BD1-4E82-A3EC-CE868AD3F9F0}] => (Allow) C:\Program Files\Alwil Software\Avast5\ng\vbox\aswFe.exe
FirewallRules: [{EF08543B-D08B-47EB-B2CF-0D967D06B56C}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{C911B755-D5F8-45E9-9BB0-7C81D7F1963F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{D799E27A-83C6-4CA0-AF09-F9CF79EAAB51}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{DE30257C-BF2E-4EC4-B128-373796F2B318}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe

==================== Faulty Device Manager Devices =============

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/20/2015 08:02:52 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/20/2015 08:02:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/18/2015 08:54:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/18/2015 08:54:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/14/2015 00:51:59 AM) (Source: MsiInstaller) (EventID: 1024) (User: Ivonne-PC)
Description: Produkt: Adobe Reader XI (11.0.10) - Deutsch - Update "{AC76BA86-7AD7-0000-2550-7A8C40011011}" konnte nicht installiert werden. Fehlercode 1625. Windows Installer kann Protokolle erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127

Error: (05/13/2015 11:38:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: handle.3XE, Version: 3.42.0.0, Zeitstempel: 0x492312a9
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b3c6
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00072a3c
ID des fehlerhaften Prozesses: 0x36c
Startzeit der fehlerhaften Anwendung: 0xhandle.3XE0
Pfad der fehlerhaften Anwendung: handle.3XE1
Pfad des fehlerhaften Moduls: handle.3XE2
Berichtskennung: handle.3XE3

Error: (05/13/2015 11:25:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/13/2015 11:23:12 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/04/2015 11:27:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/04/2015 11:24:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"1".
Die abhängige Assemblierung "ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (05/23/2015 10:05:05 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/23/2015 10:05:02 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/23/2015 10:05:02 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/23/2015 10:05:08 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎23.‎05.‎2015 um 02:38:56 unerwartet heruntergefahren.

Error: (05/23/2015 01:10:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/23/2015 01:10:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/23/2015 01:10:11 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/23/2015 01:10:11 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/23/2015 01:10:09 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TomTomHOMEService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/23/2015 01:10:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================
Error: (05/20/2015 08:02:52 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe

Error: (05/20/2015 08:02:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest

Error: (05/18/2015 08:54:47 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Nero\Nero 12\nero backitup\NBVSSTool_x64.exe

Error: (05/18/2015 08:54:43 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"c:\program files\Nero\Nero 12\nero recode\NeroBRServer.exe.Manifest

Error: (05/14/2015 00:51:59 AM) (Source: MsiInstaller) (EventID: 1024) (User: Ivonne-PC)
Description: Adobe Reader XI (11.0.10) - Deutsch{AC76BA86-7AD7-0000-2550-7A8C40011011}1625(NULL)(NULL)(NULL)

Error: (05/13/2015 11:38:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: handle.3XE3.42.0.0492312a9ntdll.dll6.1.7601.187985507b3c6c000000500072a3c36c01d08dc5324051a6C:\ComboFix\handle.3XEC:\Windows\SYSTEM32\ntdll.dll71035d86-f9b8-11e4-b648-faacc4223d17

Error: (05/13/2015 11:25:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Nero\Nero 12\Nero BackItUp\NBVSSTool_x64.exe

Error: (05/13/2015 11:23:12 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"C:\Program Files\Nero\Nero 12\Nero Recode\NeroBRServer.exe.Manifest

Error: (05/04/2015 11:27:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"C:\Program Files\Nero\Nero 12\Nero BackItUp\NBVSSTool_x64.exe

Error: (05/04/2015 11:24:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: ACME,processorArchitecture="x86",type="win32",version="12.0.0.0"C:\Program Files\Nero\Nero 12\Nero Recode\NeroBRServer.exe.Manifest


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage of memory in use: 41%
Total physical RAM: 3565.61 MB
Available physical RAM: 2093.23 MB
Total Pagefile: 7129.54 MB
Available Pagefile: 5649.38 MB
Total Virtual: 2047.88 MB
Available Virtual: 1916.05 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:297.99 GB) (Free:64.95 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: B0FD1CB0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End of log ============================
         

das dürfte so ziehmlich alles gewesen sein. was nun ?

Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Program Files\WinZip

C:\Qoobox\Quarantine\C\Windows\System32\roboot.exe.vir

C:\Windows\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll

C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll

C:\Windows\Installer\4867ad5.msi
Emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren

• Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  
• Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
• Klicke auf OK.
  Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
• Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.


Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:

Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.