![]() |
TR/Matsnu.EB.137 lässt sich mit AVIRA EU Cleaner nicht entfernen Hallo ihr gelben Engel von Trojaner-Board, in März 2013 bekam ich ein Junkmail "my dirty hobby" o.ä. mit einer Rechnung als Zip-Datei, die ich nicht geöffnet habe. Seit dem bekomme ich immer die Meldung einer gefundenen "Schadsoftware-Datei" mit der Bezeichnung Ort: "Outlook.pst"; Datei: "TR/Matsnu.EB.137", wenn ich den AVIRA EU Cleaner laufen lasse. Die Datei wird jedesmal wieder angezeigt, obwohl ich die Datei auswähle und "Datei entfernen" gedrückt habe. Einen Report von diesem EU Cleaner kann ich leider nicht abspeichern. Allerdings, wenn ich den AVIRA System Scaner (s.Log im Anhang) drüber laufen lasse bekomme ich ein ok. Auch sonst läuft mein Laptop einwandfrein. Des Weiteren habe ich sämtliche Dateien in Outlook von diesem Absender gelöscht, auch im Archiv. Im Anhang die gewünschten Infos, damit ihr mir evtl. helfen könnt. Vielen Dank für Eure Unterstützung und Mühe im Voraus. Viele Grüße Carbella |
Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. ![]() Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: ![]() (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
Zitat:
defogger: Code: defogger_disable by jpshortstuff (23.02.10.1) Code: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-03-2014 Code: GMER 2.1.19355 - hxxp://www.gmer.net Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-03-2014 |
FRST 2 Code: R2 {1E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}; C:\Program Files (x86)\CyberLink\PowerDVD DX\000.fcl [146928 2009-05-11] (CyberLink Corp.) |
FRST 3 Code: 2014-02-10 17:17 - 2010-11-05 03:20 - 00347904 _____ () C:\Windows\system32\systemsf.ebd |
FRST 4 Code: 2014-02-10 17:16 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll Code: 2014-02-09 17:02 - 2014-02-09 17:02 - 00023725 _____ () C:\09B4Ed01 |
FRST 6 Code: 2014-02-07 17:16 - 2014-03-03 16:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job Code: 2014-02-05 23:07 - 2014-02-05 23:09 - 129598176 _____ () C:\avira_free344_antivirus_de.exe |
FRST 8 Code: 2014-02-04 22:15 - 2014-02-04 22:15 - 00003306 _____ () C:\ReportingToSend-622.xml Code: 2014-02-04 17:25 - 2014-02-04 17:25 - 00004377 _____ () C:\5803Fm01 |
FRST 10 Code: 2014-02-04 12:41 - 2014-02-04 19:56 - 00571852 _____ () C:\L20140204-124149-5876-Diagnostics.txt |
FRST 11 Code: 2014-02-04 08:06 - 2014-02-04 08:06 - 00003849 _____ () C:\2B659m01 |
FRST 12 Code: 2014-02-03 18:40 - 2014-02-03 18:40 - 00005962 _____ () C:\O-F636EF3414FB4B72C3255501A7C81CCA.txt |
FRST 13 Code: ==================== One Month Modified Files and Folders ======= |
FRST 14 Code: 2014-02-07 16:20 - 2014-02-07 15:55 - 00234496 _____ () C:\{E6E41727-9007-11E3-BB75-0026B90841E9}.dat |
FRST 15 Code: 2014-02-04 19:09 - 2014-02-10 20:24 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe |
FRST 16 Code: 2014-02-04 12:48 - 2014-02-04 12:48 - 00035749 _____ () C:\B035Cd01 |
FRST 17 Code: 2014-02-04 08:33 - 2014-02-04 08:33 - 00009189 _____ () C:\16D07d01 |
FRST 18 Code: 2014-02-03 18:39 - 2012-04-11 18:05 - 00032912 _____ () C:\Environment.txt Code:
|
Wo ist das Logfile mit dem Fund von Avira? |
Avira EU-Cleaner Code: ************************************************** |
hi, Scan mit Combofix
|
Combofix Code: ComboFix 14-03-05.01 - Frank Mustermann 06.03.2014 13:15:02.1.2 - x64 |
Downloade Dir bitte ![]()
Downloade Dir bitte ![]()
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte. |
Malewarebytes Anti-Maleware Code: Malwarebytes Anti-Malware (Test) 1.75.0.1300 Code: # AdwCleaner v3.020 - Bericht erstellt am 07/03/2014 um 16:40:59 Code: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-03-2014 |
FRST3 Code: 2014-02-10 17:16 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceStatus.dll |
FRST2 Code: 2014-02-10 20:50 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll |
FRST4 2014-02-09 17:44 - 2014-02-09 17:12 - 00000016 _____ () C:\test-malware-simple.pset 2014-02-09 17:21 - 2014-02-09 17:21 - 00035816 _____ () C:\D1CFBd01 2014-02-09 17:21 - 2014-02-09 17:21 - 00017487 _____ () C:\AB2BBd01 2014-02-09 17:20 - 2014-02-09 17:20 - 00210055 _____ () C:\0E2EFd01 2014-02-09 17:20 - 2014-02-09 17:20 - 00085260 _____ () C:\DA722d01 2014-02-09 17:20 - 2014-02-09 17:20 - 00038704 _____ () C:\789BEd01 2014-02-09 17:20 - 2014-02-09 17:20 - 00026820 _____ () C:\CDC55d01 2014-02-09 17:18 - 2014-02-09 17:18 - 01985237 _____ () C:\patterns.ini 2014-02-09 17:18 - 2014-02-09 17:18 - 00027469 _____ () C:\4BF74d01 2014-02-09 17:18 - 2014-02-09 17:18 - 00026050 _____ () C:\34C30d01 2014-02-09 17:16 - 2014-02-09 17:16 - 00017273 _____ () C:\02896d01 2014-02-09 17:14 - 2014-02-09 17:14 - 00088694 _____ () C:\EAA74d01 2014-02-09 17:14 - 2014-02-09 17:14 - 00043834 _____ () C:\F5105d01 2014-02-09 17:14 - 2014-02-09 17:14 - 00026358 _____ () C:\F0E7Ed01 2014-02-09 17:14 - 2014-02-09 17:14 - 00021552 _____ () C:\1CC41d01 2014-02-09 17:14 - 2014-02-09 17:14 - 00018058 _____ () C:\41750d01 2014-02-09 17:13 - 2014-02-09 17:13 - 00161123 _____ () C:\CD69Dd01 2014-02-09 17:13 - 2014-02-09 17:13 - 00070188 _____ () C:\FC879d01 2014-02-09 17:13 - 2014-02-09 17:13 - 00069900 _____ () C:\3C710d01 2014-02-09 17:13 - 2014-02-09 17:13 - 00067524 _____ () C:\50CC7d01 2014-02-09 17:13 - 2014-02-09 17:13 - 00066125 _____ () C:\14FAFd01 2014-02-09 17:13 - 2014-02-09 17:13 - 00060941 _____ () C:\2C259d01 2014-02-09 17:13 - 2014-02-09 17:13 - 00032628 _____ () C:\FBD6Dd01 2014-02-09 17:13 - 2014-02-09 17:13 - 00031527 _____ () C:\B5356d01 2014-02-09 17:13 - 2014-02-09 17:13 - 00028355 _____ () C:\21184d01 2014-02-09 17:13 - 2014-02-09 17:13 - 00021580 _____ () C:\255C9d01 2014-02-09 17:12 - 2014-02-09 17:12 - 02940855 _____ () C:\elemhide.css 2014-02-09 17:12 - 2014-02-09 17:12 - 00087265 _____ () C:\sessionstore.bak 2014-02-09 17:12 - 2014-02-09 17:12 - 00030516 _____ () C:\56C30d01 2014-02-09 17:12 - 2014-02-09 17:12 - 00029775 _____ () C:\3DFC7d01 2014-02-09 17:12 - 2014-02-09 17:12 - 00027117 _____ () C:\25DD4d01 2014-02-09 17:12 - 2014-02-09 17:12 - 00022532 _____ () C:\41D48d01 2014-02-09 17:12 - 2014-02-09 17:12 - 00000002 _____ () C:\webapps.json 2014-02-09 17:11 - 2014-02-09 17:11 - 00191417 _____ () C:\2BD24d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00053848 _____ () C:\CAF8Cd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00047429 _____ () C:\9D415d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00040802 _____ () C:\8313Bd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00039930 _____ () C:\348F7d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00039711 _____ () C:\B2651d02 2014-02-09 17:11 - 2014-02-09 17:11 - 00035475 _____ () C:\82865d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00031125 _____ () C:\11E43d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00030878 _____ () C:\4265Cd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00030662 _____ () C:\BBF70d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00028401 _____ () C:\E824Cd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00027733 _____ () C:\0C33Bd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00025350 _____ () C:\7BAA8d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00025315 _____ () C:\337B3d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00024721 _____ () C:\79DC3d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00024229 _____ () C:\DF777d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00024050 _____ () C:\31A6Bd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00022555 _____ () C:\1DA6Dd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00021432 _____ () C:\C10C3d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00019728 _____ () C:\B2F92d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00018424 _____ () C:\7CD80d01 2014-02-09 17:11 - 2014-02-09 17:11 - 00017660 _____ () C:\5D9AFd01 2014-02-09 17:11 - 2014-02-09 17:11 - 00016553 _____ () C:\AB0AFd01 2014-02-09 17:08 - 2014-02-09 17:08 - 00030516 _____ () C:\82451d01 2014-02-09 17:07 - 2014-02-09 17:07 - 00024825 _____ () C:\F1BA4d01 2014-02-09 17:07 - 2014-02-09 17:07 - 00024412 _____ () C:\DFE08d01 2014-02-09 17:03 - 2014-02-09 17:03 - 00030516 _____ () C:\0FC37d01 2014-02-09 17:03 - 2014-02-09 17:03 - 00022996 _____ () C:\05490d01 2014-02-09 17:03 - 2014-02-09 17:03 - 00017760 _____ () C:\DC0FFd01 2014-02-09 17:03 - 2014-02-09 17:03 - 00017667 _____ () C:\763A5d01 2014-02-09 17:02 - 2014-02-09 17:11 - 00017351 _____ () C:\B5749d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00280355 _____ () C:\3E637d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00110168 _____ () C:\3E826d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00089441 _____ () C:\601ACd01 2014-02-09 17:02 - 2014-02-09 17:02 - 00085786 _____ () C:\B6193d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00080442 _____ () C:\6D355d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00077652 _____ () C:\AC156d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00076941 _____ () C:\67AB0d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00071249 _____ () C:\7B2CDd01 2014-02-09 17:02 - 2014-02-09 17:02 - 00057696 _____ () C:\C1176d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00057254 _____ () C:\0E410d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00056340 _____ () C:\80ADCd01 2014-02-09 17:02 - 2014-02-09 17:02 - 00054240 _____ () C:\7CCC9d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00051419 _____ () C:\70BC1d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00038161 _____ () C:\67A6Cd01 2014-02-09 17:02 - 2014-02-09 17:02 - 00032334 _____ () C:\6E114d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00028014 _____ () C:\AC213d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00023725 _____ () C:\09B4Ed01 2014-02-09 17:02 - 2014-02-09 17:02 - 00021060 _____ () C:\D140Bd01 2014-02-09 17:02 - 2014-02-09 17:02 - 00020825 _____ () C:\918C9d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00019563 _____ () C:\4BF48d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00019436 _____ () C:\370C7d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00018307 _____ () C:\7349Cd01 2014-02-09 17:02 - 2014-02-09 17:02 - 00018143 _____ () C:\CF38Ad01 2014-02-09 17:02 - 2014-02-09 17:02 - 00016724 _____ () C:\C8AA5d01 2014-02-09 17:02 - 2014-02-09 17:02 - 00016546 _____ () C:\F8D04d01 2014-02-09 16:58 - 2014-02-09 16:58 - 00030516 _____ () C:\7F743d01 2014-02-09 16:53 - 2014-02-09 16:53 - 00030516 _____ () C:\5A8BEd01 2014-02-09 16:48 - 2014-02-09 16:48 - 00030516 _____ () C:\B1230d01 2014-02-09 16:43 - 2014-02-09 16:43 - 00030516 _____ () C:\239F4d01 2014-02-09 16:38 - 2014-02-09 16:38 - 00030516 _____ () C:\8FA0Ed01 2014-02-09 16:33 - 2014-02-09 16:33 - 00030516 _____ () C:\B16A3d01 2014-02-09 16:28 - 2014-02-09 16:28 - 00030516 _____ () C:\F5D01d01 2014-02-09 16:23 - 2014-02-09 16:23 - 00030516 _____ () C:\4C974d01 2014-02-09 16:18 - 2014-02-09 16:18 - 00030516 _____ () C:\10780d01 2014-02-09 16:14 - 2014-02-09 16:14 - 00071418 _____ () C:\394E9d01 2014-02-09 16:13 - 2014-02-09 16:13 - 00030516 _____ () C:\F52FAd01 2014-02-09 16:11 - 2014-02-09 16:11 - 01450505 _____ () C:\EBB8Ed01 2014-02-09 16:11 - 2014-02-09 16:11 - 00395375 _____ () C:\99D46d01 2014-02-09 16:10 - 2014-02-09 16:11 - 08037136 _____ () C:\9556Dd01 2014-02-09 16:10 - 2014-02-09 16:10 - 02421502 _____ () C:\92AC9d01 2014-02-09 16:10 - 2014-02-09 16:10 - 01442447 _____ () C:\A9277d01 2014-02-09 16:10 - 2014-02-09 16:10 - 01328885 _____ () C:\80C16d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00033630 _____ () C:\021B7d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00032662 _____ () C:\D3027d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00031913 _____ () C:\6F193d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00031636 _____ () C:\E46D8d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00031026 _____ () C:\A0DCCd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00030578 _____ () C:\646EBd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00029889 _____ () C:\38F2Ed01 2014-02-09 16:10 - 2014-02-09 16:10 - 00029470 _____ () C:\15CA6d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00029311 _____ () C:\AB6CDd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00029177 _____ () C:\18690d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00029169 _____ () C:\E3CAEd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00029149 _____ () C:\9A7DCd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00028694 _____ () C:\D0BFFd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00028545 _____ () C:\BBAE7d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00028368 _____ () C:\E8225d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00028084 _____ () C:\DBB9Cd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00028033 _____ () C:\74532d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00027900 _____ () C:\81995d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00027322 _____ () C:\62143d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00027187 _____ () C:\D8131d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00026322 _____ () C:\84070d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00026150 _____ () C:\FDCA8d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00026053 _____ () C:\3F421d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00025691 _____ () C:\F698Fd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00025049 _____ () C:\BF872d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00024649 _____ () C:\2C4B6d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00024168 _____ () C:\129CCd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00024066 _____ () C:\4A81Fd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00023455 _____ () C:\5EB37d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00023392 _____ () C:\5B0BFd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00023274 _____ () C:\CDC9Ad01 2014-02-09 16:10 - 2014-02-09 16:10 - 00022881 _____ () C:\98364d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00022806 _____ () C:\18ECCd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00022186 _____ () C:\E1A4Dd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00022140 _____ () C:\D6C33d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00021809 _____ () C:\52A01d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00021162 _____ () C:\82EB1d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00021160 _____ () C:\34593d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00021056 _____ () C:\191B8d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00021055 _____ () C:\804FBd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00020987 _____ () C:\E00F1d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00020711 _____ () C:\928FEd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00020626 _____ () C:\65F60d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00019738 _____ () C:\D9AF2d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00019617 _____ () C:\6D3C0d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00019615 _____ () C:\9A33Cd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00019230 _____ () C:\D3159d01 2014-02-09 16:10 - 2014-02-09 16:10 - 00018630 _____ () C:\1B8EEd01 2014-02-09 16:10 - 2014-02-09 16:10 - 00018093 _____ () C:\FDF88d01 2014-02-09 16:09 - 2014-02-09 16:09 - 02351478 _____ () C:\FA089d01 2014-02-09 16:08 - 2014-02-09 16:08 - 00030516 _____ () C:\02BA0d01 2014-02-09 16:05 - 2014-02-09 16:09 - 23451117 _____ () C:\0C691d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00068016 _____ () C:\D2698d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00065047 _____ () C:\CD2DDd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00038324 _____ () C:\94A43d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00033630 _____ () C:\31374d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00033294 _____ () C:\1CFADd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00032662 _____ () C:\78E17d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00032126 _____ () C:\B111Cd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00031913 _____ () C:\AE583d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00031636 _____ () C:\75A12d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00031026 _____ () C:\1B7C0d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00030578 _____ () C:\3ED23d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00030104 _____ () C:\69A4Cd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029998 _____ () C:\7C30Cd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029889 _____ () C:\6C8CEd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029470 _____ () C:\71974d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029435 _____ () C:\8F386d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029311 _____ () C:\E94CAd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029177 _____ () C:\3A422d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029169 _____ () C:\137B8d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00029149 _____ () C:\B6EE5d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00028874 _____ () C:\401A5d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00028694 _____ () C:\3921Bd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00028545 _____ () C:\6C0C7d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00028368 _____ () C:\70253d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00028327 _____ () C:\F32C6d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00028084 _____ () C:\86C31d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00028033 _____ () C:\5B9D6d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00027900 _____ () C:\A17BEd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00027423 _____ () C:\0CCF0d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00027322 _____ () C:\5E50Cd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00027187 _____ () C:\6AED0d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00027071 _____ () C:\BFF58d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00026937 _____ () C:\1DBB8d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00026322 _____ () C:\1F1ACd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00026154 _____ () C:\8B5E6d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00026150 _____ () C:\52488d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00026053 _____ () C:\9995Fd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00025691 _____ () C:\2D167d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00025093 _____ () C:\1B926d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00025049 _____ () C:\4B414d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00024649 _____ () C:\8781Bd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00024395 _____ () C:\5EB77d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00024168 _____ () C:\A37ADd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00024066 _____ () C:\DD24Cd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00023392 _____ () C:\AFC9Ed01 2014-02-09 16:05 - 2014-02-09 16:05 - 00023274 _____ () C:\4FEDEd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00022881 _____ () C:\B025Bd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00022806 _____ () C:\57BDAd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00022755 _____ () C:\2D906d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00022186 _____ () C:\6537Fd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00022140 _____ () C:\34474d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00022080 _____ () C:\EC812d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00021809 _____ () C:\303ACd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00021784 _____ () C:\D8C50d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00021693 _____ () C:\DC0C9d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00021162 _____ () C:\08A09d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00021160 _____ () C:\4F0DEd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00021056 _____ () C:\3C1E5d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00021055 _____ () C:\7521Bd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00020987 _____ () C:\2DDF5d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00020711 _____ () C:\F5343d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00020626 _____ () C:\3B3F6d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00020009 _____ () C:\447E7d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00019738 _____ () C:\BE4CEd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00019617 _____ () C:\3D895d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00019615 _____ () C:\F6FCAd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00019230 _____ () C:\CF9D0d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00019038 _____ () C:\AB5F1d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00018630 _____ () C:\91E10d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00018093 _____ () C:\9AD53d01 2014-02-09 16:05 - 2014-02-09 16:05 - 00017196 _____ () C:\A102Dd01 2014-02-09 16:05 - 2014-02-09 16:05 - 00016975 _____ () C:\C05BAd01 2014-02-09 16:03 - 2014-02-09 16:03 - 00030516 _____ () C:\959A2d01 2014-02-09 16:03 - 2014-02-09 16:03 - 00029775 _____ () C:\35CB9d01 2014-02-09 16:01 - 2014-02-09 16:01 - 00030516 _____ () C:\2504Dd01 2014-02-09 15:56 - 2014-02-09 15:56 - 00030516 _____ () C:\3189Ad01 2014-02-09 15:51 - 2014-02-09 15:51 - 00030516 _____ () C:\189D7d01 2014-02-09 15:46 - 2014-02-09 15:46 - 00030516 _____ () C:\DF687d01 2014-02-09 15:45 - 2014-02-09 15:45 - 00136774 _____ () C:\F7808d01 2014-02-09 15:45 - 2014-02-09 15:45 - 00121953 _____ () C:\DF93Ed01 2014-02-09 15:44 - 2014-02-09 15:44 - 00127886 _____ () C:\E540Cd01 2014-02-09 15:44 - 2014-02-09 15:44 - 00123186 _____ () C:\6874Ad01 2014-02-09 15:44 - 2014-02-09 15:44 - 00093088 _____ () C:\EA319d01 2014-02-09 15:44 - 2014-02-09 15:44 - 00077668 _____ () C:\258A4d01 2014-02-09 15:44 - 2014-02-09 15:44 - 00040103 _____ () C:\EA644d01 2014-02-09 15:43 - 2014-02-09 15:43 - 00154263 _____ () C:\A270Ad01 2014-02-09 15:43 - 2014-02-09 15:43 - 00085747 _____ () C:\CFC46d01 2014-02-09 15:43 - 2014-02-09 15:43 - 00085598 _____ () C:\26099d01 2014-02-09 15:43 - 2014-02-09 15:43 - 00082407 _____ () C:\26243d01 2014-02-09 15:43 - 2014-02-09 15:43 - 00023020 _____ () C:\9B4C2d01 2014-02-09 15:41 - 2014-02-09 15:41 - 00030518 _____ () C:\A9C81d01 2014-02-09 15:36 - 2014-02-09 15:36 - 00030518 _____ () C:\7E63Dd01 2014-02-09 15:35 - 2014-02-09 15:35 - 00020572 _____ () C:\199B4d01 2014-02-09 15:32 - 2014-02-09 15:32 - 00033506 _____ () C:\CBD6Ed01 2014-02-09 15:32 - 2014-02-09 15:32 - 00020616 _____ () C:\794E5d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00281422 _____ () C:\4CA52d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00130264 _____ () C:\FB8EDd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00100375 _____ () C:\44A55d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00087038 _____ () C:\31F62d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00087003 _____ () C:\30DD4d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00063913 _____ () C:\24BBAd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00061331 _____ () C:\06F42d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00053803 _____ () C:\B0B1Fd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00049719 _____ () C:\9BD94d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00049330 _____ () C:\94AD9d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00049330 _____ () C:\716E1d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00049330 _____ () C:\30742d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00043746 _____ () C:\2BF89d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00040452 _____ () C:\D3E9Cd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00039501 _____ () C:\16B2Fd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00038297 _____ () C:\2C087d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00036510 _____ () C:\BB42Cd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00030518 _____ () C:\0A6F4d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00029866 _____ () C:\B49B1d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00028146 _____ () C:\E554Dd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00027870 _____ () C:\3339Dd01 2014-02-09 15:31 - 2014-02-09 15:31 - 00025548 _____ () C:\C727Ed01 2014-02-09 15:31 - 2014-02-09 15:31 - 00023852 _____ () C:\96A90d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00021507 _____ () C:\B0636d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00020326 _____ () C:\843C8d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00019871 _____ () C:\17F27d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00019214 _____ () C:\4E1E6d01 2014-02-09 15:31 - 2014-02-09 15:31 - 00017911 _____ () C:\6889Cd01 2014-02-09 15:30 - 2014-02-09 15:30 - 00121434 _____ () C:\6AFF0d01 2014-02-09 15:30 - 2014-02-09 15:30 - 00074272 _____ () C:\57010d01 2014-02-09 15:30 - 2014-02-09 15:30 - 00029203 _____ () C:\8EE61d01 2014-02-09 15:30 - 2014-02-09 15:30 - 00023906 _____ () C:\D6B79d01 2014-02-09 15:29 - 2014-02-09 15:29 - 00385119 _____ () C:\37B5Dd01 2014-02-09 15:29 - 2014-02-09 15:29 - 00270519 _____ () C:\4CACFd01 2014-02-09 15:29 - 2014-02-09 15:29 - 00140935 _____ () C:\F6078d01 2014-02-09 15:29 - 2014-02-09 15:29 - 00030563 _____ () C:\87272d01 2014-02-09 15:29 - 2014-02-09 15:29 - 00029196 _____ () C:\164FFd01 2014-02-09 15:29 - 2014-02-09 15:29 - 00026183 _____ () C:\A7F38d01 2014-02-09 15:29 - 2014-02-09 15:29 - 00023236 _____ () C:\75513d01 2014-02-09 15:29 - 2014-02-09 15:29 - 00019569 _____ () C:\A95FEd01 2014-02-09 15:28 - 2014-02-09 15:28 - 00179679 _____ () C:\34F61d01 2014-02-09 15:28 - 2014-02-09 15:28 - 00150673 _____ () C:\C99D3d01 2014-02-09 15:28 - 2014-02-09 15:28 - 00045174 _____ () C:\D27DBd01 2014-02-09 15:27 - 2014-02-09 15:29 - 00210617 _____ () C:\6C6F7d01 2014-02-09 15:27 - 2014-02-09 15:29 - 00041478 _____ () C:\4FCC4d01 2014-02-09 15:27 - 2014-02-09 15:29 - 00032328 _____ () C:\7EAFAd01 2014-02-09 15:27 - 2014-02-09 15:29 - 00029911 _____ () C:\32FC1d01 2014-02-09 15:27 - 2014-02-09 15:29 - 00019158 _____ () C:\7DCBBd01 2014-02-09 15:27 - 2014-02-09 15:29 - 00018374 _____ () C:\F6D15d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00708717 _____ () C:\97056d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00448181 _____ () C:\12AC6d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00410483 _____ () C:\F29CAd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00401989 _____ () C:\91D42d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00334824 _____ () C:\42D41d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00250457 _____ () C:\8521Fd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00242077 _____ () C:\E9D4Bd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00184767 _____ () C:\EBC0Bd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00170828 _____ () C:\640F4d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00142096 _____ () C:\3B414d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00141665 _____ () C:\06490d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00115092 _____ () C:\5CA89d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00101910 _____ () C:\DDBC6d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00090398 _____ () C:\C6D8Ad01 2014-02-09 15:27 - 2014-02-09 15:27 - 00065454 _____ () C:\873CFd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00056963 _____ () C:\36EEBd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00055655 _____ () C:\94E17d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00049957 _____ () C:\A42C7d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00045986 _____ () C:\1E4D9d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00040080 _____ () C:\DA81Fd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00032186 _____ () C:\D6EAAd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00031316 _____ () C:\DC26Ad01 2014-02-09 15:27 - 2014-02-09 15:27 - 00023130 _____ () C:\0AFDAd01 2014-02-09 15:27 - 2014-02-09 15:27 - 00019886 _____ () C:\0FB74d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00016754 _____ () C:\65416d01 2014-02-09 15:27 - 2014-02-09 15:27 - 00016618 _____ () C:\63EBCd01 2014-02-09 15:26 - 2014-02-09 15:29 - 00090640 _____ () C:\4EAFAd01 2014-02-09 15:26 - 2014-02-09 15:29 - 00066246 _____ () C:\E3CBFd01 2014-02-09 15:26 - 2014-02-09 15:29 - 00059059 _____ () C:\E5E2Cd01 2014-02-09 15:26 - 2014-02-09 15:29 - 00055765 _____ () C:\846BAd01 2014-02-09 15:26 - 2014-02-09 15:29 - 00036944 _____ () C:\1C2C9d01 2014-02-09 15:26 - 2014-02-09 15:29 - 00035667 _____ () C:\9965Ad01 2014-02-09 15:26 - 2014-02-09 15:29 - 00033552 _____ () C:\597DAd01 2014-02-09 15:26 - 2014-02-09 15:29 - 00032273 _____ () C:\51C47d01 2014-02-09 15:26 - 2014-02-09 15:29 - 00026273 _____ () C:\046AEd01 2014-02-09 15:26 - 2014-02-09 15:29 - 00019077 _____ () C:\6CD14d01 2014-02-09 15:26 - 2014-02-09 15:29 - 00018892 _____ () C:\CDD63d01 2014-02-09 15:26 - 2014-02-09 15:27 - 00082425 _____ () C:\CCC86d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00292308 _____ () C:\D51D4d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00206675 _____ () C:\2D812d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00085598 _____ () C:\859BEd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00085571 _____ () C:\3F8A1d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00060781 _____ () C:\BEAE1d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00055242 _____ () C:\F6DA6d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00047711 _____ () C:\481C0d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00041984 _____ () C:\B63E5d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00041923 _____ () C:\B0A06d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00041580 _____ () C:\7924Cd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00041478 _____ () C:\505DAd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00038721 _____ () C:\8736Bd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00036604 _____ () C:\5C49Dd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00034262 _____ () C:\87CF5d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00034192 _____ () C:\40851d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00030989 _____ () C:\9F90Ed01 2014-02-09 15:26 - 2014-02-09 15:26 - 00030518 _____ () C:\50F21d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00026977 _____ () C:\238AAd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00024688 _____ () C:\51ABFd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00023168 _____ () C:\D6E93d01 2014-02-09 15:26 - 2014-02-09 15:26 - 00022946 _____ () C:\BE08Fd01 2014-02-09 15:26 - 2014-02-09 15:26 - 00018150 _____ () C:\8B80Ad01 2014-02-09 15:25 - 2014-02-09 15:25 - 00292308 _____ () C:\ED9EEd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00190380 _____ () C:\3DD2Ed01 2014-02-09 15:25 - 2014-02-09 15:25 - 00123431 _____ () C:\2A0A7d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00095347 _____ () C:\1538Dd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00085747 _____ () C:\9C1BCd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00085571 _____ () C:\C9747d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00082407 _____ () C:\B22E4d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00061634 _____ () C:\47F46d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00054729 _____ () C:\B31AFd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00038710 _____ () C:\1A21Dd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00035697 _____ () C:\907A7d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00034192 _____ () C:\2D683d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00033674 _____ () C:\BD014d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00031469 _____ () C:\9D00Bd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00030998 _____ () C:\BE171d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00028601 _____ () C:\EF97Cd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00026836 _____ () C:\51970d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00026265 _____ () C:\6043Bd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00024688 _____ () C:\7CAB2d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00023961 _____ () C:\A938Fd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00023020 _____ () C:\A3ECFd01 2014-02-09 15:25 - 2014-02-09 15:25 - 00017686 _____ () C:\85466d01 2014-02-09 15:25 - 2014-02-09 15:25 - 00016684 _____ () C:\7CB62d01 2014-02-09 15:24 - 2014-02-09 16:15 - 00049136 _____ () C:\B1EA7d01 2014-02-09 15:24 - 2014-02-09 16:15 - 00016946 _____ () C:\625EBd01 2014-02-09 15:24 - 2014-02-09 15:24 - 00212791 _____ () C:\5A331d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00174266 _____ () C:\241EEd01 2014-02-09 15:24 - 2014-02-09 15:24 - 00131218 _____ () C:\3DFF5d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00126048 _____ () C:\491D3d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00101457 _____ () C:\968B6d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00066280 _____ () C:\B75A5d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00057252 _____ () C:\0A0E7d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00050522 _____ () C:\0EA95d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00044251 _____ () C:\25012d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00043948 _____ () C:\21CFEd01 2014-02-09 15:24 - 2014-02-09 15:24 - 00043040 _____ () C:\799D3d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00043014 _____ () C:\69703d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00036934 _____ () C:\4F8B6d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00031891 _____ () C:\B2E5Ed01 2014-02-09 15:24 - 2014-02-09 15:24 - 00024744 _____ () C:\200C2d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00022508 _____ () C:\0B16Bd01 2014-02-09 15:24 - 2014-02-09 15:24 - 00021794 _____ () C:\6AEE0d01 2014-02-09 15:24 - 2014-02-09 15:24 - 00021013 _____ () C:\BF3B0d01 2014-02-09 15:21 - 2014-02-09 15:21 - 00030518 _____ () C:\0E4DAd01 2014-02-09 15:16 - 2014-02-09 15:16 - 00214916 _____ () C:\34C09d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00152826 _____ () C:\7BDC3d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00082590 _____ () C:\E7677d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00063703 _____ () C:\63BAAd01 2014-02-09 15:16 - 2014-02-09 15:16 - 00052140 _____ () C:\6EE81d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00033673 _____ () C:\9B844d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00030518 _____ () C:\BB37Dd01 2014-02-09 15:16 - 2014-02-09 15:16 - 00029775 _____ () C:\4A097d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00021757 _____ () C:\EF2DBd01 2014-02-09 15:16 - 2014-02-09 15:16 - 00020760 _____ () C:\DFBE7d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00019940 _____ () C:\BC640d01 2014-02-09 15:16 - 2014-02-09 15:16 - 00019692 _____ () C:\EEBABd01 2014-02-09 15:16 - 2014-02-09 15:16 - 00019375 _____ () C:\861CFd01 2014-02-09 14:54 - 2014-02-09 14:58 - 40660757 _____ () C:\88C21d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00902119 _____ () C:\256C4d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00732782 _____ () C:\0EC7Cd01 2014-02-09 14:54 - 2014-02-09 14:54 - 00174303 _____ () C:\36A9Fd01 2014-02-09 14:54 - 2014-02-09 14:54 - 00132924 _____ () C:\EC8D7d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00127243 _____ () C:\5B5A5d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00078430 _____ () C:\B44A4d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00075805 _____ () C:\DCF45d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00070666 _____ () C:\70CC7d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00059180 _____ () C:\C9BF6d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00051825 _____ () C:\65D5Fd01 2014-02-09 14:54 - 2014-02-09 14:54 - 00042761 _____ () C:\C3120d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00034780 _____ () C:\C88EEd01 2014-02-09 14:54 - 2014-02-09 14:54 - 00024041 _____ () C:\9DEE7d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00020805 _____ () C:\89FC7d01 2014-02-09 14:54 - 2014-02-09 14:54 - 00018204 _____ () C:\D17F8d01 2014-02-09 14:53 - 2014-02-09 17:56 - 25165824 _____ () C:\_CACHE_003_ 2014-02-09 14:53 - 2014-02-09 17:56 - 04194304 _____ () C:\_CACHE_002_ 2014-02-09 14:53 - 2014-02-09 17:56 - 04194304 _____ () C:\_CACHE_001_ 2014-02-09 14:53 - 2014-02-09 17:56 - 00131348 _____ () C:\_CACHE_MAP_ 2014-02-09 14:53 - 2014-02-09 14:53 - 00036825 _____ () C:\091B0d01 2014-02-09 14:53 - 2014-02-09 14:53 - 00034037 _____ () C:\49C0Bd01 2014-02-09 14:53 - 2014-02-09 14:53 - 00019790 _____ () C:\AE412d01 2014-02-09 14:53 - 2014-02-09 14:53 - 00017187 _____ () C:\2232Fd01 2014-02-09 14:52 - 2014-02-09 14:52 - 00524288 _____ () C:\WebCacheV01.tmp 2014-02-09 14:52 - 2014-02-09 14:52 - 00004638 _____ () C:\asl.145237_09Feb14.log 2014-02-09 14:20 - 2014-02-09 14:20 - 00004710 _____ () C:\addons.json 2014-02-09 14:18 - 2014-02-09 14:18 - 00000123 _____ () C:\state.json 2014-02-09 11:41 - 2014-02-09 11:41 - 00000105 _____ () C:\UserData.sol 2014-02-09 08:36 - 2014-02-09 08:36 - 00150311 _____ () C:\bookmarks-2014-02-09_325.json 2014-02-09 08:20 - 2014-02-09 08:20 - 00000000 _____ () C:\1dc3115f-d7db-4f2c-b67e-0112e04ea23c.dmp 2014-02-09 07:36 - 2014-02-09 07:36 - 00004628 _____ () C:\asl.073603_09Feb14.log 2014-02-08 21:11 - 2014-02-08 21:11 - 00000000 _____ () C:\0bac4f78-fc89-4c6e-afc0-9a804736126e.dmp 2014-02-08 18:10 - 2014-02-08 18:10 - 00001199 _____ () C:\08. Feb.xlsx.LNK 2014-02-08 14:52 - 2014-02-08 14:52 - 00004639 _____ () C:\asl.145204_08Feb14.log 2014-02-08 14:47 - 2014-02-08 14:47 - 00104880 _____ () C:\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000aff.db 2014-02-08 14:47 - 2014-02-08 14:47 - 00000000 _____ () C:\49b2fe03-e107-4adf-a6d7-59be95ec5b77.dmp 2014-02-08 13:48 - 2014-02-08 13:48 - 00004628 _____ () C:\asl.134822_08Feb14.log 2014-02-08 10:56 - 2014-02-08 10:56 - 00415496 _____ () C:\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000afe.db 2014-02-08 08:47 - 2014-02-08 08:47 - 00150311 _____ () C:\bookmarks-2014-02-08_325.json 2014-02-08 08:13 - 2014-02-08 08:14 - 00068708 _____ () C:\NetworkDiagnostics.1.debugreport.xml 2014-02-08 08:13 - 2014-02-08 08:14 - 00038693 _____ () C:\ResultReport.xml 2014-02-08 08:13 - 2014-02-08 08:14 - 00000250 _____ () C:\results.xml 2014-02-08 08:13 - 2014-02-08 08:13 - 00074699 _____ () C:\NetworkDiagnostics.0.debugreport.xml 2014-02-08 08:13 - 2014-02-08 08:13 - 00049032 _____ () C:\results.xsl 2014-02-08 08:13 - 2014-02-08 08:12 - 00196608 _____ () C:\A740E3D9-9AF1-4E62-8628-F9ED2DE8DF8C.Diagnose.0.etl 2014-02-08 00:15 - 2014-03-03 17:10 - 00699136 _____ () C:\Windows\system32\perfh007.dat 2014-02-08 00:15 - 2014-03-03 17:10 - 00149244 _____ () C:\Windows\system32\perfc007.dat 2014-02-08 00:15 - 2014-02-08 00:13 - 00295922 _____ () C:\Windows\system32\perfi007.dat 2014-02-08 00:15 - 2014-02-08 00:13 - 00038104 _____ () C:\Windows\system32\perfd007.dat 2014-02-08 00:15 - 2014-02-07 15:24 - 00000000 ____D () C:\Windows\Panther 2014-02-08 00:15 - 2009-08-15 11:13 - 00000013 ____R () C:\Windows\csup.txt 2014-02-08 00:15 - 2009-08-12 08:09 - 00000024 ___RH () C:\Windows\DELL_version 2014-02-08 00:13 - 2014-02-08 00:13 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-02-08 00:13 - 2014-02-08 00:13 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-02-08 00:13 - 2014-02-08 00:13 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-02-08 00:13 - 2014-02-08 00:13 - 00000000 ____D () C:\Windows\system32\de 2014-02-08 00:13 - 2014-02-08 00:13 - 00000000 ____D () C:\Windows\system32\0407 2014-02-07 22:37 - 2014-02-07 22:37 - 00000000 _____ () C:\6cc4482a-668a-429f-8624-6d4d5cae2f04.dmp 2014-02-07 21:59 - 2014-02-07 22:00 - 01111760 _____ () C:\IT.one (Am 07.02.2014).one 2014-02-07 21:59 - 2014-02-07 21:59 - 00213720 _____ () C:\Wetten.one (Am 07.02.2014).one 2014-02-07 19:53 - 2014-02-07 19:53 - 00004639 _____ () C:\asl.195310_07Feb14.log 2014-02-07 19:47 - 2014-02-07 19:47 - 00000000 _____ () C:\6a2bfb18-f47f-4823-b634-0156c3f71a97.dmp 2014-02-07 18:49 - 2014-02-07 18:50 - 00000392 ____S () C:\05EC48341C277FE5110E7DFAA91377DC_8B8B185076EF4E7580202CFD5A0EFE0D 2014-02-07 18:49 - 2014-02-07 18:50 - 00000390 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_18C84848E2A5986D9F95DC5A664CE931 2014-02-07 18:49 - 2014-02-07 18:50 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_B0760A824CC2E32153DA7AD2ACB74688 2014-02-07 18:49 - 2014-02-07 18:50 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_9349CA9C5EFC1EDF8DF04C537401734A 2014-02-07 18:36 - 2014-02-07 18:37 - 00000416 ____S () C:\7B8944BA8AD0EFDF0E01A43EF62BECD0_EC67AAACB3282C9D6DB76DC85DD253FC 2014-02-07 18:33 - 2014-02-07 18:36 - 287058568 _____ (Acronis) C:\Users\Frank Mustermann\Downloads\ATIH2014_trial_de-DE.exe 2014-02-07 18:33 - 2014-02-07 18:36 - 287058568 _____ (Acronis) C:\ATIH2014_trial_de-DE.exe 2014-02-07 18:22 - 2014-02-07 18:22 - 00000000 _____ () C:\bfc2dfba-f426-451d-853a-cc077768eed9.dmp 2014-02-07 18:19 - 2014-02-07 18:19 - 00000083 _____ () C:\settings.sol 2014-02-07 18:10 - 2014-02-07 18:10 - 00007974 _____ () C:\pluginreg.dat 2014-02-07 17:55 - 2014-02-07 17:55 - 00102408 _____ () C:\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000002.db 2014-02-07 17:55 - 2014-02-07 17:55 - 00023040 _____ () C:\{AE05E316-9018-11E3-8371-0026B90841E9}.dat 2014-02-07 17:44 - 2014-02-07 17:44 - 00000470 ____S () C:\83CADB116CE71022FFE662D2E6BEDFF2_A0832158541F32BDF2C979683E7EF80C 2014-02-07 17:44 - 2014-02-07 17:44 - 00000456 ____S () C:\C3B4324B100AA32F7BE995E7E34E0AA5_15C23806E36E1233F1A79C3B11377E1C 2014-02-07 17:44 - 2014-02-07 17:44 - 00000412 ____S () C:\CA7B2D59B4E9BC2D316D1AECDFC12F63_A4DB68B1EFB1FBE629C2D787F4EFDE20 2014-02-07 17:44 - 2014-02-07 17:44 - 00000404 ____S () C:\B4378BD2E36B69DECED3E341BD654801_5E52234B67160424AF05906F04851E15 2014-02-07 17:44 - 2014-02-07 17:44 - 00000013 _____ () C:\www.betfair[1].xml 2014-02-07 17:28 - 2014-02-07 17:28 - 00000013 _____ () C:\sports.ladbrokes[1].xml 2014-02-07 17:21 - 2014-02-07 17:21 - 00000466 ____S () C:\03C2624375988154FBF20373B7D495E8_CEC5205DF5C4FFD102BB44D30A0B7909 2014-02-07 17:20 - 2014-02-07 17:20 - 00010752 _____ () C:\{D3D83120-9013-11E3-8371-0026B90841E9}.dat 2014-02-07 17:20 - 2014-02-07 17:20 - 00000013 _____ () C:\support.google[1].xml 2014-02-07 17:17 - 2014-02-12 07:49 - 00000000 ____D () C:\Users\Frank Mustermann\AppData\Roaming\Adobe 2014-02-07 17:17 - 2014-02-10 09:15 - 00000000 ____D () C:\Program Files\Google 2014-02-07 17:17 - 2014-02-07 17:17 - 00000462 ____S () C:\3773D02993BAEB44529BFC1603100F09_575833F8108AEF7F99BB530BE65F42A4 2014-02-07 17:17 - 2014-02-07 17:17 - 00000458 ____S () C:\EB2C4AB8B68FFA4B7733A9139239A396_D76DB901EE986B889F30D8CC06229E2D 2014-02-07 17:17 - 2014-02-07 17:17 - 00000450 ____S () C:\223DE96EE265046957A660ED7C9DD9E7_EFF9B9BA98DEAA773F261FA85A0B1771 2014-02-07 17:17 - 2014-02-07 17:17 - 00000000 ____D () C:\Users\Frank Mustermann\AppData\Roaming\Macromedia 2014-02-07 17:16 - 2014-03-07 17:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-07 17:16 - 2014-02-21 20:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-07 17:16 - 2014-02-21 20:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-07 17:16 - 2014-02-21 20:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-07 17:16 - 2014-02-12 07:49 - 00000000 ____D () C:\Users\Frank Mustermann\AppData\Local\Adobe 2014-02-07 17:16 - 2014-02-07 17:20 - 00000000 ____D () C:\Users\Frank Mustermann\AppData\Local\Google 2014-02-07 17:16 - 2014-02-07 17:20 - 00000000 ____D () C:\ProgramData\Google 2014-02-07 17:16 - 2014-02-07 17:16 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-02-07 17:16 - 2014-02-07 17:16 - 00000000 ____D () C:\Windows\system32\Macromed 2014-02-07 17:15 - 2014-02-07 17:17 - 00000119 _____ () C:\get3.adobe[1].xml 2014-02-07 17:15 - 2014-02-07 17:17 - 00000119 _____ () C:\get.adobe[1].xml 2014-02-07 17:12 - 2014-02-07 17:12 - 00000434 ____S () C:\7C44AA84A5CFEC3289884F54A088297E_B42AF5BDBDC7FDEEFD13DDF4ECAD7280 2014-02-07 17:12 - 2014-02-07 17:12 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_ABBF66B63C0C0050022256310AC1A590 2014-02-07 17:12 - 2014-02-07 17:12 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_043F9FDEF0308E6C7B4D2C06EE77DCC9 2014-02-07 17:12 - 2014-02-07 17:12 - 00000292 ____S () C:\ED7CF8F6DA57321AAC9580C26058483A 2014-02-07 17:08 - 2014-02-07 17:08 - 00000466 ____S () C:\944E5B697BC46FE14AB888AE8A1EBB99_1C87F4C00972FC33F846C9DD0B58DE16 2014-02-07 17:07 - 2014-02-07 17:07 - 00000394 ____S () C:\2E980CF7BB84455884A2F90C0668C729_8A430D3F43D05BF758F3077D18FEB7C1 2014-02-07 17:07 - 2014-02-07 17:07 - 00000013 _____ () C:\ads.admized[1].xml 2014-02-07 17:03 - 2014-02-07 17:03 - 00002107 _____ () C:\Wie ist meine IP-Adresse - Das IP-Security-Portal.url 2014-02-07 17:03 - 2014-02-07 17:03 - 00000893 _____ () C:\Tomorrow's Racecards & Runners 08 February 2014 Racing Post.url 2014-02-07 17:03 - 2014-02-07 17:03 - 00000013 _____ () C:\s7.addthis[1].xml 2014-02-07 17:03 - 2014-02-07 17:03 - 00000013 _____ () C:\meineipadresse[1].xml 2014-02-07 17:01 - 2014-02-07 17:01 - 00001027 _____ () C:\www.computerbild[1].xml 2014-02-07 16:59 - 2014-02-07 17:08 - 00001250 _____ () C:\www.racingpost[1].xml 2014-02-07 16:59 - 2014-02-07 16:59 - 00046099 _____ () C:\c.betrad[1].xml 2014-02-07 16:59 - 2014-02-07 16:59 - 00000470 ____S () C:\59E12307C210EDDD06EEB7BC7C909C5B_68A1FE703A25AA487D936554E6946484 2014-02-07 16:59 - 2014-02-07 16:59 - 00000466 ____S () C:\15C9B775FA7F2C683FD76888C21180E6_E27DFEC191FB94181AFA36FA5A594D4D 2014-02-07 16:59 - 2014-02-07 16:59 - 00000444 ____S () C:\6C05FF55E66434DC351985A3C60541B2_305471F92FEBDAC55C5F5411833A3468 2014-02-07 16:59 - 2014-02-07 16:59 - 00000434 ____S () C:\6BDC4BD492765EED974809D29642BE4C_D494156DA37C2FEABFB2C80879C32F7E 2014-02-07 16:59 - 2014-02-07 16:59 - 00000412 ____S () C:\30F7B429BB1DACA9B591B41E016BED66_F6024CD0767F1B4C9F060C7479C6DC83 2014-02-07 16:59 - 2014-02-07 16:59 - 00000400 ____S () C:\783DF2F5A7C9BC04C36663632D14B993_169DE3439FD2D9FE0AE07883B5A27A1B 2014-02-07 16:59 - 2014-02-07 16:59 - 00000394 ____S () C:\2E980CF7BB84455884A2F90C0668C729_B3731E3EEF29AB2EC769284AAC586B37 2014-02-07 16:59 - 2014-02-07 16:59 - 00000394 ____S () C:\2E980CF7BB84455884A2F90C0668C729_34A1114515A8FBCDCD66E3A10DD33C6F 2014-02-07 16:59 - 2014-02-07 16:59 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_071D4C72D7D54D1A6FCDA463620CDEF5 2014-02-07 16:59 - 2014-02-07 16:59 - 00000218 ____S () C:\FCEA474F228C13CD0DAD678431D0ACFC 2014-02-07 16:59 - 2014-02-07 16:59 - 00000204 ____S () C:\8EBFACB3A66359F9514D044C86BA4794 2014-02-07 16:59 - 2014-02-07 16:59 - 00000013 _____ () C:\ad.doubleclick[1].xml 2014-02-07 16:58 - 2014-02-07 16:58 - 00000434 ____S () C:\A3C4F17BF8CB09C3DF2A086B36306B5C_94935F84B400F483EA9B7AF90643DFF9 2014-02-07 16:58 - 2014-02-07 16:58 - 00000408 ____S () C:\6F0788892ECB795F56E658EDB1CA93AA_72B0992C5B7BCE707348E71AF60DD251 2014-02-07 16:45 - 2014-02-07 16:45 - 00103920 _____ () C:\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000001.db 2014-02-07 16:33 - 2014-02-07 16:33 - 00000000 ____D () C:\archive_db 2014-02-07 16:32 - 2014-02-07 16:32 - 00000000 ____D () C:\ProgramData\restore 2014-02-07 16:32 - 2014-02-07 16:32 - 00000000 ____D () C:\ProgramData\launcher 2014-02-07 16:32 - 2014-02-07 16:32 - 00000000 ____D () C:\ProgramData\explauncher 2014-02-07 16:31 - 2014-03-07 17:56 - 00685822 _____ () C:\Windows\PFRO.log 2014-02-07 16:30 - 2014-02-07 16:30 - 00004096 _____ () C:\{C12E4933-900C-11E3-BB75-0026B90841E9}.dat 2014-02-07 16:30 - 2014-02-07 16:30 - 00004096 _____ () C:\{C12E4931-900C-11E3-BB75-0026B90841E9}.dat 2014-02-07 16:29 - 2014-02-07 16:29 - 00000000 ____D () C:\Program Files (x86)\Paragon Software 2014-02-07 16:29 - 2013-03-15 16:00 - 00039248 _____ (Paragon Software Group) C:\Windows\system32\Drivers\hotcore3.sys 2014-02-07 16:24 - 2014-02-07 16:24 - 00000466 ____S () C:\944E5B697BC46FE14AB888AE8A1EBB99_F5AF2537D1326ADDEF00682F78B01600 2014-02-07 16:24 - 2014-02-07 16:24 - 00000466 ____S () C:\74ED51A3D229FC7D437854B8EB97E847_3A88D3CC6A54C32191B054A2498A5470 2014-02-07 16:24 - 2014-02-07 16:24 - 00000404 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_666F1D3A3D713572DDE776889297E3BF 2014-02-07 16:24 - 2014-02-07 16:24 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_E03BB7A8110C69C6F42A3740E1EA5FE8 2014-02-07 16:24 - 2014-02-07 16:24 - 00000013 _____ () C:\secure.adnxs[1].xml 2014-02-07 16:24 - 2014-02-07 16:24 - 00000013 _____ () C:\adclient.uimserv[1].xml 2014-02-07 16:23 - 2014-02-07 16:29 - 00151040 _____ () C:\{BE604350-900B-11E3-BB75-0026B90841E9}.dat 2014-02-07 16:23 - 2014-02-07 16:23 - 00000396 ____S () C:\6F0788892ECB795F56E658EDB1CA93AA_BA57F856E48C7D00068518186A742CA6 2014-02-07 16:23 - 2014-02-07 16:23 - 00000396 ____S () C:\6F0788892ECB795F56E658EDB1CA93AA_1D23F016DF8B3DFDE5FF869783CD3F8D 2014-02-07 16:22 - 2014-02-07 16:23 - 00007680 _____ () C:\{B66AA965-900B-11E3-BB75-0026B90841E9}.dat 2014-02-07 16:22 - 2014-02-07 16:22 - 120291328 _____ () C:\Users\Frank Mustermann\Downloads\br_free_g_2013_chip.msi 2014-02-07 16:22 - 2014-02-07 16:22 - 120291328 _____ () C:\br_free_g_2013_chip.msi 2014-02-07 16:20 - 2014-02-07 16:24 - 00000013 _____ () C:\googleads.g.doubleclick[1].xml 2014-02-07 16:20 - 2014-02-07 16:20 - 00001338 _____ () C:\www.chip[1].xml 2014-02-07 16:20 - 2014-02-07 16:20 - 00000394 ____S () C:\2E980CF7BB84455884A2F90C0668C729_BF0908F6A21C5409F5BA5DAF60B7A7A0 2014-02-07 16:01 - 2014-02-07 16:01 - 00000000 ____D () C:\Users\Frank Mustermann\AppData\Roaming\Acronis 2014-02-07 15:57 - 2014-02-07 15:57 - 00000410 ____S () C:\FCD2CC3451EF5F3DB8D4B7DD511B2F77_15830152B5AC9D41315595DF755D816F 2014-02-07 15:57 - 2014-02-07 15:57 - 00000404 ____S () C:\955CAB6FF6A24D5820D50B5BA1CF79C7_1A9CEF0D6BDBEE31E5C2CF9955E61B89 2014-02-07 15:57 - 2014-02-07 15:57 - 00000400 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_7E74EAD2DD98F53F9B8CA808808A3779 2014-02-07 15:57 - 2014-02-07 15:57 - 00000400 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_1599A1BD89E4FD9E6C0432D7F1FE2E3E 2014-02-07 15:57 - 2014-02-07 15:57 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_4BF9E091F7E646918992616FB44457D6 2014-02-07 15:57 - 2014-02-07 15:57 - 00000396 ____S () C:\4302E4BD4246B8416A3626782DD3C8B9_04AEE1FF2592B193E7A7B55BE2343529 2014-02-07 15:57 - 2014-02-07 15:57 - 00000368 ____S () C:\49514950C94E8026A2B06312597DFF49_F4692EBD578D04048E176E82BB8369BB 2014-02-07 15:56 - 2014-02-07 17:20 - 00003584 _____ () C:\RecoveryStore.{F8A8DD96-9007-11E3-BB75-0026B90841E9}.dat 2014-02-07 15:56 - 2014-02-07 15:56 - 00005120 _____ () C:\{F8A8DD95-9007-11E3-BB75-0026B90841E9}.dat 2014-02-07 15:56 - 2014-02-07 15:56 - 00000438 ____S () C:\40FD9B63B9878C0428E679298CD161C2_E82E46C988B75F550318397D2EB0BA59 2014-02-07 15:56 - 2014-02-07 15:56 - 00000434 ____S () C:\A3C4F17BF8CB09C3DF2A086B36306B5C_3F04050B0D44FEA7254855FD3A1BA08C 2014-02-07 15:56 - 2014-02-07 15:56 - 00000434 ____S () C:\114B3C4A819B7B5D518A2BCD1CE5F8BE_9278F5FA236A4D0D6D268CE39A51370D 2014-02-07 15:56 - 2014-02-07 15:56 - 00000412 ____S () C:\CA7B2D59B4E9BC2D316D1AECDFC12F63_C9F4301E316CD0C2B7F9A26D63138071 2014-02-07 15:56 - 2014-02-07 15:56 - 00000406 ____S () C:\ACF244F1A10D4DBED0D88EBA0C43A9B5_A0F2FA3B1B8E5E34F01206F272E4231C 2014-02-07 15:56 - 2014-02-07 15:56 - 00000404 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_D3CCDF4F438495152E37FEA555367787 2014-02-07 15:56 - 2014-02-07 15:56 - 00000404 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_116E0776FABEE27563E59B5DCFE5B787 2014-02-07 15:56 - 2014-02-07 15:56 - 00000400 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_395F63BC8DA7E9FBCF58FE699EBEA1BE 2014-02-07 15:56 - 2014-02-07 15:56 - 00000400 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_261C378998B02C6A99C862A2117C030C 2014-02-07 15:56 - 2014-02-07 15:56 - 00000400 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_253E1732B66E69658C9AF428CCF142F6 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_F5A4B8569533AF1966E00CE72E280F97 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_C0D88B28399946FBCB25D42F5E6E2F26 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_9B09407528C5ED844B5648C3FFDE72E3 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_9A59249460F848B0F5FB847D51EF2AFF 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_61EE7B099D634BCBFC4718CB4FB1B519 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_4EC1F0FC6B31BB2FEEF629D38276D326 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_43D57A0C46BA0BBD6DBA2992ADA84983 2014-02-07 15:56 - 2014-02-07 15:56 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_40396895EB8BA96E7E34200BD2EFB24C 2014-02-07 15:56 - 2014-02-07 15:56 - 00000374 ____S () C:\F4B372709D6C2AD766C34D274501DC76_C08D897FBCD7D5D638FCD154D1404CBE 2014-02-07 15:56 - 2014-02-07 15:56 - 00000298 ____S () C:\04AFA8793E5CDC4A81C6CD4554A30707 2014-02-07 15:56 - 2014-02-07 15:56 - 00000200 ____S () C:\D88A43F72E2F70CB75791302DD65CDE7 2014-02-07 15:56 - 2014-02-07 15:56 - 00000013 _____ () C:\servedby.flashtalking[1].xml 2014-02-07 15:55 - 2014-02-07 16:30 - 00004608 _____ () C:\RecoveryStore.{E0DFFCCB-9007-11E3-BB75-0026B90841E9}.dat 2014-02-07 15:55 - 2014-02-07 16:20 - 00234496 _____ () C:\{E6E41727-9007-11E3-BB75-0026B90841E9}.dat 2014-02-07 15:55 - 2014-02-07 15:55 - 00007680 _____ () C:\{E0DFFCCC-9007-11E3-BB75-0026B90841E9}.dat 2014-02-07 15:55 - 2014-02-07 15:55 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_7FF770CC81B9CC0ACDD5FA756BC966E7 2014-02-07 15:55 - 2014-02-07 15:55 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_3CEBB82C93279C1F0700FA4C02F9B9ED 2014-02-07 15:53 - 2013-12-18 06:13 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-02-07 15:47 - 2014-02-07 15:47 - 00000470 ____S () C:\B03A867CCE8C94003ED3DCC89C3DD995_E5B095EA32E1745091797A46CD38DF26 2014-02-07 15:47 - 2014-02-07 15:47 - 00000470 ____S () C:\6EB433AA47CF8B7403EA74059883F834_15DE7FD95F2C6AA431C60D832D8A2AB3 2014-02-07 15:47 - 2014-02-07 15:47 - 00000470 ____S () C:\4C32697E3BE67D14A2229BCF4CF68BDD_4234151EAEA38BC1D96A3081D3A6B0A6 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\B03A867CCE8C94003ED3DCC89C3DD995_7C2E8AFB6597AC9B76E01CD6B1E03FD3 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\6EB433AA47CF8B7403EA74059883F834_A65ADB8641554FA3949AEDD8D8440DC0 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\6EB433AA47CF8B7403EA74059883F834_4B4D2C7D78504DFB1EE48D6DEDF34D6D 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\5EEE7FA98C56E24F9F53871567AE5AA6_C7E3FE552216EA8DD8828025EA7D4B94 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\4C32697E3BE67D14A2229BCF4CF68BDD_E15A0FE6C9438A3F104D5043295B54F1 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\4C32697E3BE67D14A2229BCF4CF68BDD_B24F7B13594926ADAA2C2B2727B91D28 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\4C32697E3BE67D14A2229BCF4CF68BDD_3885AFE247ECC8A71D558D8CEBDB23FE 2014-02-07 15:47 - 2014-02-07 15:47 - 00000466 ____S () C:\4C32697E3BE67D14A2229BCF4CF68BDD_12E39CFD35A9DD75166E4B0E34A6FB5D 2014-02-07 15:47 - 2014-02-07 15:47 - 00000366 ____S () C:\5BF987767EE121EB773E3E93D13C2F30_EF26754C41825C23E00A83FE50225A1A 2014-02-07 15:47 - 2014-02-07 15:47 - 00000362 ____S () C:\D0197CD123129A6D466C5F0FC1584EA2_441F1A19270FA0CA6444E20EB4A3517E 2014-02-07 15:45 - 2014-02-07 15:45 - 00000392 ____S () C:\05EC48341C277FE5110E7DFAA91377DC_2F8ADFC352EA8B6E5129B200DFEFE3CA 2014-02-07 15:45 - 2014-02-07 15:45 - 00000390 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_40B9F12111697D8B965BA632E1E12FD3 2014-02-07 15:44 - 2014-02-07 15:44 - 00000408 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_CBCA69097376DA9DA7430ABB06FF62C7 2014-02-07 15:44 - 2014-02-07 15:44 - 00000392 ____S () C:\05EC48341C277FE5110E7DFAA91377DC_3BED92D65A011D909754B6A74C1CCD45 2014-02-07 15:44 - 2014-02-07 15:44 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_4A943BDEF5EB1977779FD817C7CC5A2D 2014-02-07 15:44 - 2014-02-07 15:44 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_43A8148664F89DEE10AFB2B4ECFA28D4 2014-02-07 15:43 - 2014-02-07 15:43 - 00000392 ____S () C:\05EC48341C277FE5110E7DFAA91377DC_E9D6559E4CD7D4F8BEF7C9EF431C0257 2014-02-07 15:42 - 2014-02-07 15:42 - 00000386 ____S () C:\8059E9A0D314877E40FE93D8CCFB3C69_6B70447A236C02D301D26CFC6ACFF105 2014-02-07 15:42 - 2014-02-07 15:42 - 00000201 _____ () C:\www.pcwelt[1].xml 2014-02-07 15:42 - 2014-02-07 15:42 - 00000108 _____ () C:\farm.plista[1].xml 2014-02-07 15:41 - 2014-02-07 17:55 - 00004608 _____ () C:\RecoveryStore.{F1E22C7C-9005-11E3-BB75-0026B90841E9}.dat 2014-02-07 15:40 - 2014-02-07 15:40 - 00000404 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_D1F53B06CCF579B0A1AB12FA1893A1D8 2014-02-07 15:37 - 2014-02-07 15:37 - 00000410 ____S () C:\E63A640A06A2B005AB42F3250BC98D9E_6020995806BF99A1FBC324A7B889F612 2014-02-07 15:37 - 2014-02-07 15:37 - 00000402 ____S () C:\783DF2F5A7C9BC04C36663632D14B993_09A85C5418FB163D61A6CDA83D9C0B2C 2014-02-07 15:37 - 2014-02-07 15:37 - 00000402 ____S () C:\5457A8CE4B2A7499F8299A013B6E1C7C_4BDA944235F1446F185236D493959297 2014-02-07 15:36 - 2014-02-07 15:36 - 00000402 ____S () C:\B8523592DD7AF79E0045B5E66CBFA791_EA799513E7E0F735D84A8DFAD2B63B60 2014-02-07 15:36 - 2014-02-07 15:36 - 00000396 ____S () C:\91ECFED5143F7F4F4576655D8EFAB51C_1F847B9F56D0487C4E3C0F43B0A50367 2014-02-07 15:36 - 2014-02-07 15:36 - 00000220 ____S () C:\135BD6A358680A7BF1CCEC7C0172393D 2014-02-07 15:33 - 2014-02-07 15:33 - 00000434 ____S () C:\D473E9C373099A94D5057303FDF0EE65_39B17C5C97CD64B7EE78FBDFB2D76D63 2014-02-07 15:33 - 2014-02-07 15:33 - 00000426 ____S () C:\8890A77645B73478F5B1DED18ACBF795_1E5D470765E0BE1964814B1F5A3581DC 2014-02-07 15:33 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-02-07 15:33 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-02-07 15:33 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-02-07 15:32 - 2014-02-07 15:32 - 00000426 ____S () C:\BD8A14C7C024625432CC03FE72E47EF0_6FD1BEFD298F4FD3EE4B4EE2E6631CC7 2014-02-07 15:32 - 2014-02-07 15:32 - 00000422 ____S () C:\6AA3321A15A787985201D7A6820782F0_0AB46376AFB6F40B0426680E3025D384 2014-02-07 15:32 - 2014-02-07 15:32 - 00000404 ____S () C:\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF 2014-02-07 15:32 - 2014-02-07 15:32 - 00000392 ____S () C:\05EC48341C277FE5110E7DFAA91377DC_5D61D58FDB98DCAEC2C02E047B02CFF0 2014-02-07 15:32 - 2014-02-07 15:32 - 00000171 _____ () C:\de.msn[1].xml 2014-02-07 15:32 - 2014-02-07 15:32 - 00000013 _____ () C:\a.ligatus[1].xml 2014-02-07 15:30 - 2014-02-18 09:29 - 00114368 _____ () C:\Users\Frank Mustermann\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-07 15:30 - 2014-02-07 15:30 - 00000000 ____D () C:\Users\Frank Mustermann\AppData\Local\MigWiz 2014-02-07 15:28 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-02-07 15:28 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-02-07 15:28 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-02-07 15:28 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-02-07 15:28 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-02-07 15:28 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-02-07 15:28 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-02-07 15:28 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-02-07 15:28 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-02-07 15:25 - 2014-03-06 13:30 - 00000000 ___RD () C:\Users\Frank Mustermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-07 15:25 - 2014-02-11 08:36 - 00000000 ____D () C:\Users\Frank Mustermann\AppData\Local\VirtualStore 2014-02-07 15:25 - 2014-02-10 22:21 - 00000000 ___RD () C:\Users\Frank Mustermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\Windows Live Spaces.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\Windows Live Mail.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\Windows Live Ideas.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\Windows Live Gallery.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\MSN Sport.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\MSN Nachrichten.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\MSN Money.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\MSN Fernsehen.url 2014-02-07 15:25 - 2014-02-07 15:32 - 00000133 _____ () C:\MSN Auto.url 2014-02-07 15:25 - 2014-02-07 15:25 - 00028672 _____ () C:\MSN Nachrichten~.feed-ms 2014-02-07 15:25 - 2014-02-07 15:25 - 00001736 _____ () C:\account{921C6275-05F7-4EAA-8559-C8674B16478D}.oeaccount 2014-02-07 15:25 - 2014-02-07 15:25 - 00001506 _____ () C:\account{68CA62AA-6AED-4254-9FFF-94EDA64FF98C}.oeaccount 2014-02-07 15:25 - 2014-02-07 15:25 - 00001405 _____ () C:\Internet Explorer (64-bit).lnk 2014-02-07 15:25 - 2014-02-07 15:25 - 00000672 _____ () C:\account{88DB1301-C4BF-4D13-A9B5-F20BA4CBA66B}.oeaccount 2014-02-07 15:25 - 2014-02-07 15:25 - 00000468 ___SH () C:\e316821e-bb26-4557-a251-99e09dde04e8 2014-02-07 15:24 - 2014-03-03 11:00 - 00000000 ____D () C:\Users\Frank Mustermann 2014-02-07 15:24 - 2014-02-11 08:36 - 00000000 ___RD () C:\Users\Frank Mustermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-07 15:24 - 2014-02-11 08:36 - 00000000 ___RD () C:\Users\Frank Mustermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-07 15:24 - 2014-02-10 09:40 - 00000000 ____D () C:\Recovery 2014-02-07 15:24 - 2014-02-07 15:24 - 00000020 ___SH () C:\Users\Frank Mustermann\ntuser.ini 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Vorlagen 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Startmenü 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Netzwerkumgebung 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Lokale Einstellungen 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Eigene Dateien 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Druckumgebung 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Documents\Eigene Musik 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Documents\Eigene Bilder 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\AppData\Local\Verlauf 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\AppData\Local\Anwendungsdaten 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Frank Mustermann\Anwendungsdaten 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Programme 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-07 15:24 - 2014-02-07 15:24 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-07 15:20 - 2014-02-07 15:20 - 00001313 _____ () C:\Windows\TSSysprep.log 2014-02-07 15:19 - 2014-03-07 18:02 - 02003677 _____ () C:\Windows\WindowsUpdate.log 2014-02-07 15:19 - 2014-02-07 15:19 - 00000000 _____ () C:\Windows\ativpsrm.bin 2014-02-07 11:49 - 2014-02-07 11:50 - 00000008 _____ () C:\used.dat 2014-02-07 11:49 - 2014-02-07 11:50 - 00000008 _____ () C:\quota.dat 2014-02-07 11:49 - 2014-02-07 11:49 - 00000086 _____ () C:\id.dat 2014-02-07 11:49 - 2014-02-07 11:49 - 00000038 _____ () C:\PlayerId.txt 2014-02-07 10:56 - 2014-02-07 10:56 - 00196608 _____ () C:\ECAD47C7-1E9F-4279-BE7B-37A88BEC8021.Diagnose.0.etl 2014-02-07 09:09 - 2014-02-07 09:10 - 00150311 _____ () C:\bookmarks-2014-02-07_325.json 2014-02-06 22:44 - 2014-02-06 22:44 - 00004575 _____ () C:\asl.224402_06Feb14.log 2014-02-06 22:40 - 2014-02-06 22:40 - 00003997 _____ () C:\asl.224026_06Feb14.log 2014-02-06 22:08 - 2014-02-06 22:08 - 00138560 _____ () C:\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000afa.db 2014-02-06 21:59 - 2014-02-06 21:59 - 01048360 _____ () C:\IT.one (Am 06.02.2014).one 2014-02-06 21:59 - 2014-02-06 21:59 - 00330344 _____ () C:\Verschiedenes.one (Am 06.02.2014).one 2014-02-06 18:58 - 2014-02-06 18:58 - 00004586 _____ () C:\asl.185837_06Feb14.log 2014-02-06 18:54 - 2014-02-06 18:54 - 00189440 _____ () C:\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000af9.db 2014-02-06 18:32 - 2014-02-06 18:32 - 00004586 _____ () C:\asl.183231_06Feb14.log 2014-02-06 16:49 - 2014-02-06 16:49 - 00000057 _____ () C:\updates.xml 2014-02-06 16:49 - 2014-02-06 16:49 - 00000057 _____ () C:\active-update.xml 2014-02-06 06:27 - 2014-02-06 06:28 - 00150311 _____ () C:\bookmarks-2014-02-06_325.json 2014-02-06 06:26 - 2014-02-06 06:26 - 02209056 _____ () C:\Users\Frank Mustermann\Downloads\avira-eu-cleaner_de.exe 2014-02-06 06:26 - 2014-02-06 06:26 - 02209056 _____ () C:\avira-eu-cleaner_de.exe 2014-02-06 06:26 - 2014-02-06 06:26 - 00053255 _____ () C:\68616d01 2014-02-06 06:26 - 2014-02-06 06:26 - 00006894 _____ () C:\834F5d01 2014-02-06 06:26 - 2014-02-06 06:26 - 00004380 _____ () C:\7A8ADd01 2014-02-06 06:26 - 2014-02-06 06:26 - 00002056 _____ () C:\Entfernen des Avira EU-Cleaners.lnk 2014-02-06 06:26 - 2014-02-06 06:26 - 00002000 _____ () C:\Avira EU-Cleaner.lnk 2014-02-06 06:25 - 2014-02-06 06:26 - 00003800 _____ () C:\6B3F0m01 2014-02-06 06:25 - 2014-02-06 06:25 - 00055555 _____ () C:\34D12d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00053255 _____ () C:\8C014d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00053255 _____ () C:\66A52d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00037479 _____ () C:\2FADBd01 2014-02-06 06:25 - 2014-02-06 06:25 - 00029477 _____ () C:\52DE3d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00026183 _____ () C:\EB457d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00016625 _____ () C:\4C634d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00009983 _____ () C:\6B3F0d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00009983 _____ () C:\5A8F4d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00008578 _____ () C:\8A9A4d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00006964 _____ () C:\5F842d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00005167 _____ () C:\8A9A4m01 2014-02-06 06:25 - 2014-02-06 06:25 - 00005005 _____ () C:\8A586d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00004976 _____ () C:\34EFAd01 2014-02-06 06:25 - 2014-02-06 06:25 - 00004704 _____ () C:\8B0A0d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00004659 _____ () C:\7BFCBm01 2014-02-06 06:25 - 2014-02-06 06:25 - 00004520 _____ () C:\6091Ed01 2014-02-06 06:25 - 2014-02-06 06:25 - 00004370 _____ () C:\3424Ad01 2014-02-06 06:25 - 2014-02-06 06:25 - 00003863 _____ () C:\17F0Dd01 2014-02-06 06:25 - 2014-02-06 06:25 - 00003852 _____ () C:\A243Ed01 2014-02-06 06:25 - 2014-02-06 06:25 - 00003798 _____ () C:\4CDC9d01 2014-02-06 06:25 - 2014-02-06 06:25 - 00003341 _____ () C:\FEF93d01 2014-02-05 23:58 - 2014-02-05 23:58 - 00054723 _____ () C:\C8F12d01 2014-02-05 23:57 - 2014-02-05 23:57 - 00005981 _____ () C:\1DBBDd01 2014-02-05 23:57 - 2014-02-05 23:57 - 00004459 _____ () C:\4AEC3m01 2014-02-05 23:57 - 2014-02-05 23:57 - 00003999 _____ () C:\93F9Bm01 2014-02-05 23:57 - 2014-02-05 23:57 - 00003970 _____ () C:\C5D6Ad01 2014-02-05 23:55 - 2014-02-05 23:57 - 00004638 _____ () C:\EF197m01 2014-02-05 23:55 - 2014-02-05 23:57 - 00003957 _____ () C:\E0DAEm01 2014-02-05 23:55 - 2014-02-05 23:55 - 00161439 _____ () C:\0374Ed01 2014-02-05 23:55 - 2014-02-05 23:55 - 00055856 _____ () C:\3D42Dd01 2014-02-05 23:55 - 2014-02-05 23:55 - 00054723 _____ () C:\F1D66d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00051748 _____ () C:\970D1d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00019740 _____ () C:\25307d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00014891 _____ () C:\BCDE7d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00011624 _____ () C:\77375d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00011594 _____ () C:\C0BCFd01 2014-02-05 23:55 - 2014-02-05 23:55 - 00011214 _____ () C:\412C4d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00010442 _____ () C:\FA91Ad01 2014-02-05 23:55 - 2014-02-05 23:55 - 00009544 _____ () C:\0E42Bd01 2014-02-05 23:55 - 2014-02-05 23:55 - 00009427 _____ () C:\C6A6Fd01 2014-02-05 23:55 - 2014-02-05 23:55 - 00007704 _____ () C:\CD8D5d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00006740 _____ () C:\5AA64d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00004876 _____ () C:\CE063d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00004646 _____ () C:\24B82m01 2014-02-05 23:55 - 2014-02-05 23:55 - 00004574 _____ () C:\747F4d01 2014-02-05 23:55 - 2014-02-05 23:55 - 00003964 _____ () C:\AA30Ad01 2014-02-05 23:55 - 2014-02-05 23:55 - 00003801 _____ () C:\CD4D9m01 2014-02-05 23:55 - 2014-02-05 23:55 - 00003794 _____ () C:\41465m01 2014-02-05 23:53 - 2014-02-05 23:55 - 00003928 _____ () C:\BEE2Am01 2014-02-05 23:53 - 2014-02-05 23:53 - 00099653 _____ () C:\62923d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00069712 _____ () C:\20258d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00061565 _____ () C:\BEE2Ad01 2014-02-05 23:53 - 2014-02-05 23:53 - 00034420 _____ () C:\6D752d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00023125 _____ () C:\06523d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00011086 _____ () C:\C112Ed01 2014-02-05 23:53 - 2014-02-05 23:53 - 00006174 _____ () C:\6AAC3d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00005288 _____ () C:\0C1ACm01 2014-02-05 23:53 - 2014-02-05 23:53 - 00005117 _____ () C:\1DD00d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004846 _____ () C:\98349d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004639 _____ () C:\31F72m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004530 _____ () C:\C5B2Dm01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004517 _____ () C:\4E099m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004490 _____ () C:\C112Em01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004373 _____ () C:\62923m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004356 _____ () C:\38BF3m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004354 _____ () C:\F7C9Em01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004352 _____ () C:\1DD00m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004343 _____ () C:\7ACE2m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004341 _____ () C:\98349m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004338 _____ () C:\6AAC3m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004337 _____ () C:\E7774m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004333 _____ () C:\13034m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004330 _____ () C:\1AAB5m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004329 _____ () C:\C4075m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004326 _____ () C:\EBDA2m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004320 _____ () C:\06523m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004315 _____ () C:\20258m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004310 _____ () C:\6D752m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004296 _____ () C:\5DDB4m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004293 _____ () C:\5434Am01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004276 _____ () C:\9FD61m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004276 _____ () C:\94809m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004269 _____ () C:\C5176m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004166 _____ () C:\0BE28m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00004092 _____ () C:\57FD9m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00003990 _____ () C:\FF355m01 2014-02-05 23:53 - 2014-02-05 23:53 - 00003801 _____ () C:\3D85Bm01 2014-02-05 23:53 - 2014-02-05 23:53 - 00003615 _____ () C:\94809d01 2014-02-05 23:53 - 2014-02-05 23:53 - 00000535 _____ () C:\www.avira[1].xml 2014-02-05 23:53 - 2014-02-05 23:53 - 00000412 ____S () C:\CA7B2D59B4E9BC2D316D1AECDFC12F63_A8669DD8C0BDC4165C59D2D713EE6FC3 2014-02-05 23:51 - 2014-02-05 23:51 - 00151486 _____ () C:\A7CBCd01 |
FRST5 Code: 2014-02-05 23:51 - 2014-02-05 23:51 - 00151486 _____ () C:\A7CBCd01 Code: ==================== One Month Modified Files and Folders ======= |
FRST7 Code: 2014-02-09 17:12 - 2010-08-16 06:29 - 07818240 _____ () C:\webappsstore.sqlite |
FRST8 Code: 2014-02-06 06:26 - 2014-02-06 06:26 - 00002000 _____ () C:\Avira EU-Cleaner.lnk |
ESET Online Scanner
Downloade Dir bitte ![]()
Noch Probleme? :) |
ESET Logfile Code: ESETSmartInstaller@High as downloader log: Code: Results of screen317's Security Check version 0.99.80 Zitat:
Ich habe den Avira EU-Cleaner zum Abschluss einen Scanlauf machen lassen. Der EU-Cleaner stellt immer noch den Trojaner fest. Hier die Logfile vom Avira EU-Cleaner: Code: ************************************************** |
Frisches FRST log fehlt noch. Kann dieser Avira Dreck nit einfach anzeigen wo es was findet anstatt so ein dummes nichtssagendes Log auszuspucken? |
Hi, als Fundort gibt der AVIRA Cleaner "Outlook.pst" und dann den Namen "TR/Matsnu...", wie ich in meiner Anfrage kurz geschildert habe. AVIRA fragt dann nur noch ob man den Bericht senden will. Aber, diese Option wird einem nur zur Verfügung gestellt, wenn man mit dem Rechner online ist. Ansonsten bekommt gar kein Bericht. In Outlook habe ich kein Suchergebnis gehabt, wenn ich alle Ordner nach "dirty" abgefragt habe. Könntest Du meine Namen aus der "defogger" löschen, bitte? Dank! Hier die FRST Logfile: FRST1 Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02 Code: ==================== One Month Created Files and Folders ======== |
FRST3 2014-02-10 22:24 - 2014-02-10 22:30 - 00010277 _____ () C:\Windows\IE11_main.log 2014-02-10 22:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-02-10 22:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-02-10 22:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-02-10 22:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-02-10 21:32 - 2014-02-10 21:32 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-02-10 21:29 - 2014-02-10 21:39 - 00011786 _____ () C:\Windows\IE10_main.log 2014-02-10 21:22 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-02-10 21:22 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2014-02-10 21:22 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-02-10 21:22 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll 2014-02-10 21:22 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2014-02-10 21:22 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-02-10 20:51 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-02-10 20:51 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-02-10 20:51 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-02-10 20:51 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-02-10 20:51 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-02-10 20:51 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-02-10 20:51 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-02-10 20:51 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-02-10 20:51 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2014-02-10 20:51 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2014-02-10 20:51 - 2012-10-09 19:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2014-02-10 20:51 - 2012-10-09 19:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2014-02-10 20:51 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2014-02-10 20:51 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll 2014-02-10 20:51 - 2012-05-04 12:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-02-10 20:51 - 2012-05-04 10:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-02-10 20:50 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-02-10 20:50 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-02-10 20:50 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-02-10 20:50 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-02-10 20:50 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2014-02-10 20:50 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-02-10 20:50 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-02-10 20:50 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2014-02-10 20:50 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2014-02-10 20:50 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-02-10 20:50 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2014-02-10 20:50 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2014-02-10 20:50 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2014-02-10 20:50 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-02-10 20:50 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2014-02-10 20:50 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2014-02-10 20:50 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2014-02-10 20:50 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2014-02-10 20:50 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2014-02-10 20:50 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2014-02-10 20:50 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2014-02-10 20:50 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-02-10 20:50 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2014-02-10 20:50 - 2012-10-03 18:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2014-02-10 20:50 - 2012-10-03 18:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2014-02-10 20:50 - 2012-10-03 18:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2014-02-10 20:50 - 2012-10-03 18:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2014-02-10 20:50 - 2012-10-03 18:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2014-02-10 20:50 - 2012-10-03 18:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2014-02-10 20:50 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll 2014-02-10 20:50 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll 2014-02-10 20:50 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll 2014-02-10 20:50 - 2012-10-03 17:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2014-02-10 20:50 - 2012-01-13 08:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll 2014-02-10 20:49 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-02-10 20:49 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-02-10 20:49 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-02-10 20:49 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-02-10 20:49 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-02-10 20:49 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-02-10 20:49 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2014-02-10 20:49 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2014-02-10 20:49 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-02-10 20:49 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-02-10 20:49 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2014-02-10 20:49 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-02-10 20:49 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2014-02-10 20:49 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-02-10 20:49 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-02-10 20:49 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-02-10 20:49 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-02-10 20:49 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-02-10 20:49 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-02-10 20:49 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-02-10 20:49 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-02-10 20:49 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-02-10 20:49 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-02-10 20:49 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-02-10 20:49 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-02-10 20:49 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-02-10 20:49 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-02-10 20:49 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-02-10 20:49 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-02-10 20:49 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-02-10 20:49 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-02-10 20:49 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2014-02-10 20:49 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-02-10 20:49 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2014-02-10 20:49 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-02-10 20:49 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-02-10 20:49 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-02-10 20:49 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2014-02-10 20:49 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-02-10 20:49 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2014-02-10 20:49 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-02-10 20:49 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-02-10 20:49 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-02-10 20:49 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-02-10 20:49 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2014-02-10 20:49 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-02-10 20:49 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-02-10 20:49 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-02-10 20:49 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-02-10 20:49 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-02-10 20:49 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-02-10 20:49 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-02-10 20:49 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-02-10 20:49 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-02-10 20:49 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2014-02-10 20:49 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys 2014-02-10 20:49 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-02-10 20:49 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-02-10 20:49 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-02-10 20:49 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-02-10 20:49 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-02-10 20:49 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2014-02-10 20:49 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2014-02-10 20:49 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-02-10 20:49 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-02-10 20:49 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-02-10 20:49 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2014-02-10 20:49 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2014-02-10 20:49 - 2012-08-21 22:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2014-02-10 20:48 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-02-10 20:48 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-02-10 20:48 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-02-10 20:48 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-02-10 20:48 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-02-10 20:48 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-02-10 20:48 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-02-10 20:48 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-02-10 20:48 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-02-10 20:48 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2014-02-10 20:48 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-02-10 20:48 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-02-10 20:48 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-02-10 20:48 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2014-02-10 20:48 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-02-10 20:48 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-02-10 20:48 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-02-10 20:48 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-02-10 20:48 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-02-10 20:48 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-02-10 20:48 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-02-10 20:48 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-02-10 20:48 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-02-10 20:48 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2014-02-10 20:48 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2014-02-10 20:48 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2014-02-10 20:48 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-02-10 20:48 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2014-02-10 20:48 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2014-02-10 20:48 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2014-02-10 20:48 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-02-10 20:48 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-02-10 20:48 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-02-10 20:48 - 2013-04-10 07:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2014-02-10 20:48 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-02-10 20:48 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2014-02-10 20:48 - 2011-02-03 12:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2014-02-10 20:39 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-02-10 20:39 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-02-10 20:39 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-02-10 20:39 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-02-10 20:39 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-02-10 20:39 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2014-02-10 20:25 - 2014-02-16 14:54 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-10 20:24 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-10 17:21 - 2014-02-10 17:21 - 00000000 ____D () C:\Windows\system32\SPReview 2014-02-10 17:20 - 2014-02-10 17:20 - 00000000 ____D () C:\Windows\system32\EventProviders 2014-02-10 17:17 - 2010-11-20 14:39 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll 2014-02-10 17:17 - 2010-11-20 14:34 - 00295808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2014-02-10 17:17 - 2010-11-20 14:34 - 00215936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2014-02-10 17:17 - 2010-11-20 14:33 - 00366976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys 2014-02-10 17:17 - 2010-11-20 14:33 - 00299392 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2014-02-10 17:17 - 2010-11-20 14:33 - 00273792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-02-10 17:17 - 2010-11-20 14:29 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 03860992 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 03650560 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 03027968 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2014-02-10 17:17 - 2010-11-20 14:27 - 03008000 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 02652160 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 02543616 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 02086912 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 02018304 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01900544 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01808384 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01753088 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01743360 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01646080 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01556992 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01509888 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01441280 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01326080 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01281024 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01243136 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01212416 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01197056 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01158656 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01098240 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 01008128 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00933888 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00867840 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00849920 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00695808 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00582656 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00577536 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00481280 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2014-02-10 17:17 - 2010-11-20 14:27 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2014-02-10 17:17 - 2010-11-20 14:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00263168 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2014-02-10 17:17 - 2010-11-20 14:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 04120064 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 03391488 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 03205120 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 01866240 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 01340416 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 01244160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00828416 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00777728 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00630272 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00281600 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2014-02-10 17:17 - 2010-11-20 14:26 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 03957760 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2014-02-10 17:17 - 2010-11-20 14:25 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 01600512 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2014-02-10 17:17 - 2010-11-20 14:25 - 01504256 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2014-02-10 17:17 - 2010-11-20 14:25 - 00958464 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 00897536 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 00705024 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2014-02-10 17:17 - 2010-11-20 14:25 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2014-02-10 17:17 - 2010-11-20 14:25 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2014-02-10 17:17 - 2010-11-20 14:25 - 00390656 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-02-10 17:17 - 2010-11-20 14:25 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2014-02-10 17:17 - 2010-11-20 14:25 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2014-02-10 17:17 - 2010-11-20 14:25 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2014-02-10 17:17 - 2010-11-20 14:24 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2014-02-10 17:17 - 2010-11-20 14:24 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2014-02-10 17:17 - 2010-11-20 14:24 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe 2014-02-10 17:17 - 2010-11-20 14:24 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2014-02-10 17:17 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthFWSnapin.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsservices.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 01175040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vssapi.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RacEngn.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\taskschd.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsmf.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnp.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll 2014-02-10 17:17 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\userenv.dll 2014-02-10 17:17 - 2010-11-20 13:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2014-02-10 17:17 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbc32.dll 2014-02-10 17:17 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll 2014-02-10 17:17 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PortableDeviceApi.dll 2014-02-10 17:17 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 03207680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc40u.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imapi2fs.dll 2014-02-10 17:17 - 2010-11-20 13:19 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvstore.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\SysWOW64\DShowRdpFilter.dll 2014-02-10 17:17 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dot3api.dll 2014-02-10 17:17 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe 2014-02-10 17:17 - 2010-11-20 12:05 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll 2014-02-10 17:17 - 2010-11-20 11:44 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys 2014-02-10 17:17 - 2010-11-20 10:27 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2014-02-10 17:17 - 2010-11-20 10:25 - 00753664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2014-02-10 17:17 - 2010-11-20 10:23 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2014-02-10 17:17 - 2010-11-20 10:21 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-02-10 17:17 - 2010-11-05 03:20 - 00347904 _____ () C:\Windows\system32\systemsf.ebd 2014-02-10 17:17 - 2010-11-05 02:58 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-02-10 17:17 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll 2014-02-10 17:17 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll 2014-02-10 17:17 - 2010-11-05 02:57 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-02-10 17:17 - 2010-11-05 02:57 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2014-02-10 17:17 - 2010-11-05 02:57 - 00048976 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2014-02-10 17:17 - 2010-11-05 02:53 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2014-02-10 17:17 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe 2014-02-10 17:17 - 2010-11-05 02:53 - 00109928 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2014-02-10 17:17 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll 2014-02-10 17:17 - 2009-07-14 02:16 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tcpmonui.dll 2014-02-10 17:16 - 2010-11-20 14:44 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2014-02-10 17:16 - 2010-11-20 14:44 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2014-02-10 17:16 - 2010-11-20 14:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL 2014-02-10 17:16 - 2010-11-20 14:34 - 00363392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys 2014-02-10 17:16 - 2010-11-20 14:34 - 00071552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00289664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00263040 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2014-02-10 17:16 - 2010-11-20 14:33 - 00213888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00184704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00171392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00155008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00140672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00103808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00094592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00078720 _____ (Hewlett-Packard Company) C:\Windows\system32\Drivers\HpSAMD.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00063360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00031104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2014-02-10 17:16 - 2010-11-20 14:33 - 00014720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys 2014-02-10 17:16 - 2010-11-20 14:32 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2014-02-10 17:16 - 2010-11-20 14:32 - 00334208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2014-02-10 17:16 - 2010-11-20 14:32 - 00179072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2014-02-10 17:16 - 2010-11-20 14:28 - 00780008 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2014-02-10 17:16 - 2010-11-20 14:28 - 00298104 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll 2014-02-10 17:16 - 2010-11-20 14:28 - 00166784 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 02262528 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 02250752 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 02193920 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 02146816 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 02072576 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01911808 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01672704 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01363968 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2014-02-10 17:16 - 2010-11-20 14:27 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2014-02-10 17:16 - 2010-11-20 14:27 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01082880 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01050624 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 01024512 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2014-02-10 17:16 - 2010-11-20 14:27 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00898560 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00812032 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00799744 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00781312 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00691200 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2014-02-10 17:16 - 2010-11-20 14:27 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00633344 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00625664 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00611840 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00605696 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00594432 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00527872 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00483840 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00451072 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00435712 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00431104 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00414720 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00403968 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00366080 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00358400 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00344576 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00300032 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2014-02-10 17:16 - 2010-11-20 14:27 - 00264192 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00232960 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2014-02-10 17:16 - 2010-11-20 14:27 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2014-02-10 17:16 - 2010-11-20 14:27 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll |
FRST4 Code: 2014-02-10 17:16 - 2010-11-20 14:27 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll |
FRST5 Code: 2014-02-10 17:16 - 2010-11-20 11:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys Code: 2014-02-09 16:10 - 2014-02-09 16:10 - 00022140 _____ () C:\D6C33d01 |
FRST7 Code: 2014-02-11 16:14 - 2014-02-10 06:06 - 00000000 ____D () C:\Users\Frank Mustermann\Documents\Doris Code: 2014-02-09 15:29 - 2014-02-09 15:29 - 00029196 _____ () C:\164FFd01 |
Erledigt mit dem Namen. Outlook.pst bedeutet irgendeine mail in deinem Postfach enthält nen Link oder anhang, der böse is, genau kann man das nit sagen, du müsstest jede einzeln durchgehen, oder den Fund ignorieren solange du nicht wild in deinen alten mails auf Anhängen und Links rum klickst. Was mich noch intressiert: Zitat:
|
Hi, danke wg. namen. Anfang Februar habe ich eine neue Festplatte installiert und den Rechner neu aufsetzen müssen. Die meisten Dateien haben ein braunes Schloss links unten im Dateisymbol. Ich werde mal vorsichtig gucken, ob ich im entsprechenden Zeitraum im Archiv eine böse Mail finde. Hast Du noch andere Ideen, wie ich den TR weg kriege? Im Netz habe ich über diesen TR nichts gefunden. Hier der Inhalt von der Bsp.-Datei (s.Zitat). Gruß Code: /* |
Die ganzen Files unter C mit dem generischen Namen kannste löschen. Nee, da gibt es keinen weg ausser die Mails händisch durchsuchen, deswegen würde ich es einfach ignorieren :) |
Zitat:
Schade, dass wir das nicht hingekriegt haben. Vielen Dank für Deine Hilfe. Den Thread kannste löschen. Gruß Carbella |
Zitat:
Fertig :) Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :) Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. |
Alle Zeitangaben in WEZ +1. Es ist jetzt 15:45 Uhr. |
Copyright ©2000-2025, Trojaner-Board