Trojaner-Board - PC nach Trojanerbefall wirklich sauber?

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - PC nach Trojanerbefall wirklich sauber? (https://www.trojaner-board.de/125816-pc-trojanerbefall-wirklich-sauber.html)

Ok, eine Kontrolle bitte:

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Setze oben mittig den Haken bei Scanne alle Benutzer
Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die http://billy-oneal.com/Canned%20Spee.../customFix.png Textbox von OTL - wenn OTL auf deutsch ist wird sie mit http://larusso.trojaner-board.de/Images/otlfix.jpg beschriftet

Code:

netsvcs

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%systemdrive%\*.

%allusersprofile%\*. /s

%allusersprofile%\Application Data\*. /s

%appdata%\*. /s

%systemroot%\Installer\*. /s

%systemroot%\system32\*. /s

%systemroot%\system32\drivers\*. /s

%systemroot%\System32\config\*. /s

%systemroot%\*. /mp /s

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

Hallo, hier der 1. Teil:

Code:

OTL logfile created on: 24.10.2012 18:56:03 - Run 3

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\878\Desktop

 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 8.0.7601.17514)

Locale: 00000c07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy

 

2,00 Gb Total Physical Memory | 1,20 Gb Available Physical Memory | 59,86% Memory free

4,00 Gb Paging File | 3,06 Gb Available in Paging File | 76,55% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 465,75 Gb Total Space | 344,41 Gb Free Space | 73,95% Space Free | Partition Type: NTFS

 

Computer Name: 878-PC | User Name: 878 | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Users\878\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)

PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)

PRC - C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe ()

PRC - C:\Programme\AVG\AVG2012\avgidsagent.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Programme\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)

PRC - C:\Programme\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Programme\AVG\AVG2012\avgnsx.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Programme\Online Games Manager\ogmservice.exe (RealNetworks, Inc.)

PRC - C:\Programme\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Programme\AVG\AVG2012\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Programme\PDF24\pdf24.exe (Geek Software GmbH)

PRC - C:\Windows\System32\bgsmsnd.exe (Broadgun Software)

PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)

PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)

PRC - C:\Windows\explorer.exe (Microsoft Corporation)

PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)

PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)

PRC - C:\Programme\Winamp\winampa.exe (Nullsoft, Inc.)

PRC - C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)

PRC - C:\Programme\Nero\Update\NASvc.exe (Nero AG)

PRC - C:\Programme\Clear History\ClearHistory.exe (CS Software)

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Services (SafeList) ==========

 

SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)

SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)

SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)

SRV - (vToolbarUpdater12.2.6) -- C:\Programme\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe ()

SRV - (AVGIDSAgent) -- C:\Programme\AVG\AVG2012\avgidsagent.exe (AVG Technologies CZ, s.r.o.)

SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)

SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)

SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies)

SRV - (ogmservice) -- C:\Programme\Online Games Manager\ogmservice.exe (RealNetworks, Inc.)

SRV - (avgwd) -- C:\Programme\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)

SRV - (wlidsvc) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)

SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)

SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)

SRV - (NAUpdate) -- C:\Programme\Nero\Update\NASvc.exe (Nero AG)

SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)

SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)

SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)

SRV - (ose) -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found

DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found

DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found

DRV - (cpuz132) -- C:\Users\878\AppData\Local\Temp\cpuz132\cpuz132_x32.sys File not found

DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)

DRV - (avgtp) -- C:\Windows\System32\drivers\avgtpx86.sys (AVG Technologies)

DRV - (Avgtdix) -- C:\Windows\System32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)

DRV - (Avgldx86) -- C:\Windows\System32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)

DRV - (AVGIDSHX) -- C:\Windows\System32\drivers\avgidshx.sys (AVG Technologies CZ, s.r.o. )

DRV - (Avgrkx86) -- C:\Windows\System32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)

DRV - (Avgmfx86) -- C:\Windows\System32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)

DRV - (AVGIDSShim) -- C:\Windows\System32\drivers\avgidsshimx.sys (AVG Technologies CZ, s.r.o. )

DRV - (AVGIDSFilter) -- C:\Windows\System32\drivers\avgidsfilterx.sys (AVG Technologies CZ, s.r.o. )

DRV - (AVGIDSDriver) -- C:\Windows\System32\drivers\avgidsdriverx.sys (AVG Technologies CZ, s.r.o. )

DRV - (iBtFltCoex) -- C:\Windows\System32\drivers\iBtFltCoex.sys (Intel Corporation)

DRV - (btmhsf) -- C:\Windows\System32\drivers\btmhsf.sys (Intel Corporation)

DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)

DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)

DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)

DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)

DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)

DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)

DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)

DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)

DRV - (acedrv11) -- C:\Windows\System32\drivers\acedrv11.sys (Protect Software GmbH)

DRV - (BthAvrcp) -- C:\Windows\System32\drivers\BthAvrcp.sys (CSR, plc)

DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvm62x32.sys (NVIDIA Corporation)

DRV - (irsir) -- C:\Windows\System32\drivers\irsir.sys (Microsoft Corporation)

DRV - (P1120VID) -- C:\Windows\System32\drivers\P1120Vid.sys (Creative Technology Ltd.)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\..\SearchScopes,DefaultScope = 

 

 

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 

 

IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp

IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at

IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 95 39 38 76 99 AC CD 01  [binary data]

IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\..\SearchScopes,DefaultScope = 

IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26

FF - prefs.js..network.proxy.type: 0

FF - user.js - File not found

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll File not found

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@powerchallenge.com/PowerLoader: C:\Users\878\AppData\LocalLow\POWERC~1\nppowerloader.dll (Power Challenge Sweden AB)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012.09.11 09:57:36 | 000,000,000 | ---D | M]

 

[2010.10.05 19:26:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\878\AppData\Roaming\mozilla\Extensions

[2011.09.15 21:35:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\878\AppData\Roaming\mozilla\Firefox\Profiles\r9bisenm.default\extensions

[2011.09.15 23:09:17 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2010.10.05 19:28:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

[2010.10.22 16:03:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

[2011.01.15 20:07:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

[2011.03.15 10:41:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

[2011.06.16 20:00:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

[2010.10.05 19:28:42 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

[2010.10.22 16:03:29 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

[2011.01.15 20:07:50 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

[2011.03.15 10:41:49 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

[2011.06.16 20:00:14 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

[2011.05.04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

[2010.10.05 19:26:19 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files\mozilla firefox\plugins\npFoxitReaderPlugin.dll

[2010.07.12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll

 
 ========== Chrome  ==========

 

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}

CHR - homepage: hxxp://www.google.com/

CHR - plugin: Shockwave Flash (Enabled) = C:\Users\878\AppData\Local\Google\Chrome\Application\13.0.782.220\gcswf32.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.7 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll

CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll

CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

CHR - plugin: Chrome NaCl (Disabled) = C:\Users\878\AppData\Local\Google\Chrome\Application\13.0.782.220\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\878\AppData\Local\Google\Chrome\Application\13.0.782.220\pdf.dll

CHR - plugin: Garmin Communicator Plug-In (Enabled) = C:\Program Files\Garmin GPS Plugin\npGarmin.dll

CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll

CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

CHR - plugin: Default Plug-in (Enabled) = default_plugin

CHR - Extension: AVG Safe Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0\

CHR - Extension: AVG Secure Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.2.5.32_0\

CHR - Extension: AVG Safe Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.2210_0\

CHR - Extension: AVG Secure Search = C:\Users\878\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\12.2.5.32_0\

 

O1 HOSTS File: ([2012.10.23 21:39:09 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1       localhost

O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)

O2 - BHO: (pdfMachine) - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software)

O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (pdfMachine) - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software)

O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (pdfMachine) - {56CF4856-ECB4-4E46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software)

O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (pdfMachine) - {56CF4856-ECB4-4E46-A897-A378821F97B9} - C:\Windows\System32\spool\drivers\w32x86\3\bgstb.dll (Broadgun Software)

O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [bgsmsnd.exe] C:\Windows\System32\bgsmsnd.exe (Broadgun Software)

O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)

O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH)

O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)

O4 - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001..\Run: [ClearHistory] C:\Program Files\Clear History\ClearHistory.exe (CS Software)

O4 - HKU\S-1-5-21-4070557579-1729641792-2656704333-1001..\Run: [Steam] C:\Program Files\Steam1\Steam.exe (Valve Corporation)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)

O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O13 - gopher Prefix: missing

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab (UnoCtrl Class)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 10.9.2)

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)

O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.34.133.21 212.186.211.21

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9806874B-4621-4D96-B9FC-D8CB4C695FAA}: DhcpNameServer = 195.34.133.21 212.186.211.21

O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Common Files\microsoft shared\Web Components\10\OWC10.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Common Files\microsoft shared\Web Components\11\OWC11.DLL (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O33 - MountPoints2\{614e5986-25f7-11e1-9776-0019666c2b7e}\Shell - "" = AutoRun

O33 - MountPoints2\{614e5986-25f7-11e1-9776-0019666c2b7e}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 

NetSvcs: FastUserSwitchingCompatibility -  File not found

NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)

NetSvcs: Nla -  File not found

NetSvcs: Ntmssvc -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: SRService -  File not found

NetSvcs: WmdmPmSp -  File not found

NetSvcs: LogonHours -  File not found

NetSvcs: PCAudit -  File not found

NetSvcs: helpsvc -  File not found

NetSvcs: uploadmgr -  File not found

 

MsConfig - StartUpReg: CTRegRun - hkey= - key= - C:\Windows\Ctregrun.exe (Creative Technology Ltd )

MsConfig - State: "startup" - 2

 

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: HelpSvc - Service

SafeBootMin: NTDS -  File not found

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: sacsvr - Service

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vmms - Service

SafeBootMin: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: HelpSvc - Service

SafeBootNet: Messenger - Service

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: NTDS -  File not found

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: rdsessmgr - Service

SafeBootNet: sacsvr - Service

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: vmms - Service

SafeBootNet: WinDefend - C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)

SafeBootNet: WudfUsbccidDriver - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers

SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices

SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

 

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0

ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack

ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access

ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7

ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

 

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)

Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.10.23 21:38:52 | 000,000,000 | ---D | C] -- C:\_OTL

[2012.10.20 12:26:58 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\878\Desktop\OTL.exe

[2012.10.20 10:47:53 | 000,000,000 | ---D | C] -- C:\Program Files\ESET

[2012.10.17 20:12:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java

[2012.10.17 17:38:24 | 000,000,000 | ---D | C] -- C:\Users\878\AppData\Roaming\AVG

[2012.10.17 17:37:50 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG

[2012.10.17 17:37:47 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}

[2012.10.16 21:01:07 | 000,000,000 | ---D | C] -- C:\Users\878\Documents\Anti-Malware

[2012.10.16 19:11:14 | 000,000,000 | ---D | C] -- C:\Users\878\AppData\Roaming\Malwarebytes

[2012.10.16 19:11:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

[2012.10.16 19:11:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2012.10.16 19:11:04 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2012.10.16 19:11:04 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2012.10.06 01:30:50 | 000,000,000 | ---D | C] -- C:\Users\878\AppData\Roaming\TuneUp Software

[2012.10.06 01:30:47 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2013

[2012.10.06 01:30:45 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software

[2012.10.06 01:30:37 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

[2 C:\Users\878\Desktop\*.tmp files -> C:\Users\878\Desktop\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.10.24 19:00:05 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2012.10.24 18:59:21 | 000,014,336 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012.10.24 18:59:21 | 000,014,336 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012.10.24 18:55:45 | 098,483,969 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm

[2012.10.24 18:52:14 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012.10.24 18:52:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.10.24 18:52:04 | 1610,006,528 | -HS- | M] () -- C:\hiberfil.sys

[2012.10.24 09:24:00 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012.10.23 21:39:09 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts

[2012.10.22 19:57:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\878\Desktop\OTL.exe

[2012.10.20 12:23:05 | 000,538,941 | ---- | M] () -- C:\Users\878\Desktop\adwcleaner.exe

[2012.10.20 09:29:26 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.10.07 01:02:45 | 000,074,137 | ---- | M] () -- C:\ProgramData\eatstoapzfibbbc

[2012.10.05 20:36:52 | 000,378,368 | ---- | M] () -- C:\Users\878\Desktop\P1070175-pic.jpg

[2012.10.05 18:31:57 | 000,272,670 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm

[2012.10.03 00:52:48 | 000,121,837 | ---- | M] () -- C:\Users\878\Desktop\IMG_0210.JPG

[2012.10.02 16:12:03 | 000,653,928 | ---- | M] () -- C:\Windows\System32\perfh007.dat

[2012.10.02 16:12:03 | 000,615,810 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2012.10.02 16:12:03 | 000,129,800 | ---- | M] () -- C:\Windows\System32\perfc007.dat

[2012.10.02 16:12:03 | 000,106,190 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2012.09.29 19:54:26 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys

[2 C:\Users\878\Desktop\*.tmp files -> C:\Users\878\Desktop\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012.10.20 12:17:08 | 000,538,941 | ---- | C] () -- C:\Users\878\Desktop\adwcleaner.exe

[2012.10.16 19:11:05 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

[2012.10.07 01:02:39 | 000,074,137 | ---- | C] () -- C:\ProgramData\eatstoapzfibbbc

[2012.10.05 20:36:52 | 000,378,368 | ---- | C] () -- C:\Users\878\Desktop\P1070175-pic.jpg

[2012.10.03 00:52:48 | 000,121,837 | ---- | C] () -- C:\Users\878\Desktop\IMG_0210.JPG

[2012.08.21 08:27:53 | 000,027,520 | ---- | C] () -- C:\Users\878\AppData\Local\dt.dat

[2012.05.29 21:52:21 | 000,000,889 | ---- | C] () -- C:\Users\878\AppData\Local\recently-used.xbel

[2011.11.23 17:15:43 | 000,000,000 | ---- | C] () -- C:\Users\878\AppData\Local\{B99A73A0-AA41-4986-A67D-7E8B18B48CBE}

[2011.09.30 11:07:23 | 000,000,000 | ---- | C] () -- C:\Users\878\AppData\Local\{EC113985-85DB-4DC2-9ADE-06367B0D5E54}

[2011.08.09 13:06:31 | 000,761,856 | ---- | C] () -- C:\Windows\System32\FreeImage3.dll

[2011.08.09 13:06:31 | 000,761,856 | ---- | C] () -- C:\Windows\System32\FreeImage.dll

[2011.08.09 13:06:31 | 000,098,304 | ---- | C] () -- C:\Windows\System32\DVM.dll

[2011.08.09 13:06:31 | 000,053,248 | ---- | C] () -- C:\Windows\System32\RegisterExe.exe

[2011.08.07 00:41:05 | 000,216,776 | ---- | C] () -- C:\Windows\System32\bgsserv.exe

[2011.08.07 00:41:05 | 000,128,712 | ---- | C] () -- C:\Windows\System32\bgsreses.dll

[2011.08.07 00:41:05 | 000,127,176 | ---- | C] () -- C:\Windows\System32\bgsresfr.dll

[2011.08.07 00:41:05 | 000,125,640 | ---- | C] () -- C:\Windows\System32\bgsresit.dll

[2011.08.07 00:41:05 | 000,123,592 | ---- | C] () -- C:\Windows\System32\bgsrespt.dll

[2011.08.07 00:41:05 | 000,123,080 | ---- | C] () -- C:\Windows\System32\bgsrespl.dll

[2011.08.07 00:41:05 | 000,121,032 | ---- | C] () -- C:\Windows\System32\bgsresde.dll

[2011.08.07 00:41:05 | 000,119,496 | ---- | C] () -- C:\Windows\System32\bgsresen.dll

[2011.08.07 00:41:05 | 000,119,496 | ---- | C] () -- C:\Windows\System32\bgsresda.dll

[2011.08.07 00:41:05 | 000,061,640 | ---- | C] () -- C:\Windows\System32\bgspmnt.dll

[2011.06.21 11:45:02 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe

[2011.06.21 11:44:09 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe

[2011.05.29 19:22:15 | 000,000,000 | ---- | C] () -- C:\Users\878\AppData\Local\{68A286C1-2FC3-4162-8592-165066DD8103}

[2011.03.20 04:10:57 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat

[2011.03.01 17:33:21 | 000,000,807 | ---- | C] () -- C:\Users\878\AppData\Roaming\FrameFun.ini

[2011.01.22 19:15:39 | 000,116,224 | ---- | C] () -- C:\Windows\System32\redmonnt.dll

[2011.01.22 19:15:39 | 000,045,056 | ---- | C] () -- C:\Windows\System32\unredmon.exe

[2011.01.20 05:26:12 | 000,004,096 | -H-- | C] () -- C:\Users\878\AppData\Local\keyfile3.drm

[2010.12.18 18:42:30 | 000,004,608 | ---- | C] () -- C:\Users\878\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.11.12 22:48:33 | 000,074,219 | ---- | C] () -- C:\Windows\hpqins16.dat

[2010.10.05 20:55:17 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2010.11.20 14:21:19 | 012,872,192 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 
 ========== LOP Check ==========

 

[2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AlawarSouthpoint

[2012.10.17 17:38:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG

[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG2012

[2012.09.15 22:39:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap

[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN

[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR330TWN

[2010.12.13 05:02:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\DeepBurner

[2012.09.15 17:21:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios

[2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games

[2010.10.05 19:26:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit

[2010.10.05 19:26:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit Software

[2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GameHouse

[2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GamersDigital

[2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN

[2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii

[2010.10.05 19:27:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\IrfanView

[2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\LittleGamesCompany

[2011.04.14 17:40:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX

[2012.09.15 15:31:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MumboJumbo

[2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera

[2012.09.15 18:18:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon

[2012.05.29 22:03:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PhotoScape

[2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PlayFirst

[2012.09.10 22:42:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\RenPy

[2011.02.23 20:35:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skip-Bo

[2011.08.09 13:06:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Softinterface, Inc

[2012.05.29 21:58:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall

[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Top Evidence

[2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software

[2010.11.12 22:42:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue

[2012.09.15 14:08:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games

[2011.03.20 03:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga

[2011.08.09 13:24:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\WordToPDF

[2011.08.06 23:17:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\XnView

[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %systemdrive%\*. >

[2012.06.09 17:18:21 | 000,000,000 | -H-D | M] -- C:\$AVG

[2010.10.08 04:00:50 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin

[2011.11.10 21:53:08 | 000,000,000 | ---D | M] -- C:\Bearbeitung

[2012.09.15 14:02:20 | 000,000,000 | ---D | M] -- C:\BigFishGamesCache

[2012.10.04 17:25:39 | 000,000,000 | ---D | M] -- C:\Bildchen

[2011.10.19 18:06:43 | 000,000,000 | -HSD | M] -- C:\Boot

[2012.10.17 22:19:35 | 000,000,000 | -H-D | M] -- C:\Config.Msi

[2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen

[2012.10.17 21:05:32 | 000,000,000 | ---D | M] -- C:\Downloads

[2012.10.02 09:50:08 | 000,000,000 | ---D | M] -- C:\Eigene Dateien

[2012.10.07 02:27:03 | 000,000,000 | ---D | M] -- C:\Erledigungen Freizeit

[2012.10.02 16:10:16 | 000,000,000 | ---D | M] -- C:\Fotos

[2012.01.15 19:17:45 | 000,000,000 | ---D | M] -- C:\Media

[2010.10.05 22:27:54 | 000,000,000 | RH-D | M] -- C:\MSOCache

[2012.04.28 00:53:14 | 000,000,000 | ---D | M] -- C:\Musik

[2010.12.08 21:54:37 | 000,000,000 | ---D | M] -- C:\Oma

[2012.10.20 10:47:53 | 000,000,000 | R--D | M] -- C:\Program Files

[2012.10.23 21:38:53 | 000,000,000 | -H-D | M] -- C:\ProgramData

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\Programme

[2010.10.05 19:18:21 | 000,000,000 | -HSD | M] -- C:\Recovery

[2012.06.04 00:31:36 | 000,000,000 | ---D | M] -- C:\Ringtöne

[2011.11.10 21:51:21 | 000,000,000 | ---D | M] -- C:\Spiele

[2012.10.24 18:58:29 | 000,000,000 | -HSD | M] -- C:\System Volume Information

[2010.11.12 22:39:18 | 000,000,000 | ---D | M] -- C:\temp

[2011.08.09 14:50:37 | 000,000,000 | ---D | M] -- C:\Temporär

[2010.10.05 19:18:36 | 000,000,000 | R--D | M] -- C:\Users

[2012.10.21 17:58:53 | 000,000,000 | ---D | M] -- C:\Windows

[2012.10.23 21:38:52 | 000,000,000 | ---D | M] -- C:\_OTL

 
 < %programdata%\*. /s >

[2012.10.17 22:16:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe

[2011.03.20 02:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Alawar Stargaze

[2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\AlawarSouthpoint

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Anwendungsdaten

[2010.12.17 02:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple

[2010.12.17 02:29:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer

[2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data

[2012.10.17 17:39:00 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG

[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012

[2012.09.15 14:00:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games

[2011.10.19 18:20:02 | 000,000,000 | -H-D | M] -- C:\ProgramData\Common Files

[2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop

[2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumente

[2010.10.05 21:17:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Easy Driver Pro

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoriten

[2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites

[2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Floodlight Games

[2011.08.07 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\FreePDF

[2011.02.24 00:34:03 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse

[2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\ProgramData\GamersDigital

[2011.01.31 18:00:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin

[2010.11.12 22:48:32 | 000,000,000 | ---D | M] -- C:\ProgramData\HP

[2010.11.12 22:49:42 | 000,000,000 | ---D | M] -- C:\ProgramData\HPSSUPPLY

[2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\ProgramData\LittleGamesCompany

[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX

[2012.10.16 19:11:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes

[2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MFAData

[2012.07.13 21:11:56 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft

[2010.12.13 04:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero

[2010.10.05 19:39:12 | 000,000,000 | ---D | M] -- C:\ProgramData\NVIDIA

[2010.10.17 18:51:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Office Genuine Advantage

[2010.10.05 22:10:50 | 000,000,000 | ---D | M] -- C:\ProgramData\PC Drivers HeadQuarters

[2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\ProgramData\PlayFirst

[2011.01.13 04:55:15 | 000,000,000 | ---D | M] -- C:\ProgramData\regid.1986-12.com.adobe

[2012.07.18 20:00:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype

[2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Startmenü

[2010.10.05 19:28:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun

[2012.09.16 00:16:26 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP

[2009.07.14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates

[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Top Evidence

[2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software

[2010.11.12 22:42:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Uniblue

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Vorlagen

[2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom

[2010.12.17 02:30:49 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

[2012.10.06 01:30:37 | 000,000,000 | -HSD | M] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

[2012.10.17 17:37:47 | 000,000,000 | -HSD | M] -- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}

[2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86

[2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\x86

[2011.01.14 03:00:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AAMUpdater

[2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat

[2011.01.13 04:53:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AIR

[2012.10.21 22:50:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM

[2011.01.13 04:52:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Extension Manager CS5

[2011.11.26 12:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Setup

[2012.10.17 22:15:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\SLStore

[2010.10.05 19:24:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Updater6

[2011.01.14 03:00:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AAMUpdater\1.0

[2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat\10.0

[2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat\10.0\Replicate

[2011.11.25 01:51:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\Acrobat\10.0\Replicate\Security

[2011.01.13 04:53:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\AIR\Updater

[2011.04.03 17:56:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.0

[2011.11.26 12:28:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.1

[2012.01.24 22:51:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1

[2012.10.16 20:40:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.2

[2012.10.21 22:51:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.4

[2011.11.26 12:28:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.1\20891

[2011.11.26 12:28:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.0.1\24525

[2012.01.24 11:03:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1\1288

[2012.01.24 18:17:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1\20745

[2012.01.23 17:53:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe\ARM\Reader_10.1.1\28933

[2011.03.20 02:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Alawar Stargaze\Twisted Lands - Shadow Town Collector's Edition

[2011.03.20 02:28:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Alawar Stargaze\Twisted Lands - Shadow Town Collector's Edition\saves

[2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\AlawarSouthpoint\Dancing Craze

[2011.08.23 22:00:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\Installer Cache

[2012.08.10 02:16:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\iTunes

[2011.08.23 22:00:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\Installer Cache\iTunes 10.4.1.10

[2011.08.23 21:57:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer\Installer Cache\QuickTime 7.70.80.34

[2012.08.10 02:16:01 | 000,000,000 | -H-D | M] -- C:\ProgramData\Apple Computer\iTunes\SC Info

[2011.08.23 21:58:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache

[2010.12.17 02:28:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Mobile Device Support 3.3.0.69

[2011.02.08 21:41:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Mobile Device Support 3.3.1.3

[2011.08.23 21:58:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Mobile Device Support 3.4.1.2

[2011.08.23 21:55:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Apple Software Update 2.1.3.127

[2010.12.17 02:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\AppleApplicationSupport 1.4.1

[2011.08.23 21:56:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\AppleApplicationSupport 2.0.1

[2011.08.23 21:58:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple\Installer Cache\Bonjour 3.0.0.2

[2012.10.17 22:17:08 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG\AWL

[2012.10.17 22:18:08 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG\AWL2012

[2012.10.17 22:17:07 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG\AWL\Program Statistics

[2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\admincli

[2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Antispam

[2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\avgam

[2012.10.23 21:38:48 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Cfg

[2012.10.17 17:36:22 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\cfgall

[2012.10.24 09:46:25 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Chjw

[2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Dumps

[2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\EMC

[2012.10.24 09:08:26 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\fet

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS

[2012.10.24 18:52:28 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\log

[2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\lsdb

[2012.10.21 17:57:25 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\scanlogs

[2012.09.19 09:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\SetupBackup

[2012.10.24 18:59:40 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Temp

[2011.11.25 02:16:17 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update

[2012.10.24 14:51:56 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\Chjw\b414e05114e0185e

[2012.10.24 18:52:17 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\config

[2012.09.03 19:33:10 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\download

[2012.10.24 14:51:57 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\malwareprofile

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox

[2012.10.24 19:03:36 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\profile

[2012.10.16 20:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\quarantine

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\0

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\1

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\2

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\3

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\4

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\5

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\6

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\7

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\8

[2012.10.24 18:52:16 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\IDS\outbox\9

[2011.10.19 18:19:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\lsdb\prev

[2012.10.18 20:05:50 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update\backup

[2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update\download

[2012.10.24 18:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG2012\update\prepare

[2012.09.16 00:16:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\da_DK

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\de_DE

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\en_US

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\es_ES

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\fr_FR

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images

[2012.09.15 14:56:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\it_IT

[2012.09.15 14:56:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\javascript

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\ja_JP

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\nl_NL

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\pt_BR

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\sv_SE

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\br

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\de

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\dk

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\en

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\es

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\fr

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\it

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\jp

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\nl

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\se

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\br\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\de\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\dk\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\en\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\es\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\fr\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\it\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\jp\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\nl\screen

[2012.09.15 14:55:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\css\bfg\se\screen

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\fonts

[2012.09.15 14:55:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m

[2012.09.15 14:00:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\p

[2012.09.15 14:56:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\content_header

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\download_queue

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\game_rows

[2012.09.15 14:55:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\gyb_bottom

[2012.09.15 14:55:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\header

[2012.09.15 14:55:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\left_nav

[2012.09.15 14:55:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\m\overlay

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\ads

[2012.09.15 14:56:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\bg

[2012.09.15 14:56:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\boxes

[2012.09.15 14:56:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\felix

[2012.09.15 14:56:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\images\s\pointytips

[2012.09.15 14:56:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\javascript\bfg

[2012.09.15 14:56:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Big Fish Games\Game Manager\resources\default\javascript\bfg\screen

[2010.11.12 23:09:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Easy Driver Pro\Easy Driver Pro

[2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Floodlight Games\SED

[2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Campfire Legends II

[2011.02.24 00:34:03 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Games

[2011.02.24 00:34:03 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Games\HeartsMedicine

[2011.02.24 00:34:16 | 000,000,000 | ---D | M] -- C:\ProgramData\GameHouse\Games\HeartsMedicine\players

[2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\ProgramData\GamersDigital\Jack the Ripper

[2011.05.14 00:26:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps

[2011.05.14 00:27:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap

[2011.05.14 00:27:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\CNEuroNT_2011_30_mdr

[2011.05.14 00:27:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1

[2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356202

[2011.05.14 00:27:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356206

[2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356207

[2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356209

[2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356210

[2011.05.14 00:27:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356211

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356212

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356213

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356214

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356215

[2011.05.14 00:27:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356216

[2011.05.14 00:27:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356217

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356218

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356219

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356220

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356221

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356222

[2011.05.14 00:27:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356223

[2011.05.14 00:27:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356224

[2011.05.14 00:27:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356225

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356226

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356227

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356228

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356229

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356230

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356231

[2011.05.14 00:27:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356232

[2011.05.14 00:27:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356233

[2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356234

[2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356235

[2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356236

[2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356237

[2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356238

[2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356239

[2011.05.14 00:27:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356240

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356241

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356242

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356243

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356244

[2011.05.14 00:27:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356245

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356246

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356247

[2011.05.14 00:27:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356248

[2011.05.14 00:27:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356249

[2011.05.14 00:27:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356250

[2011.05.14 00:27:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356251

[2011.05.14 00:27:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356252

[2011.05.14 00:27:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356253

[2011.05.14 00:27:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356254

[2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356255

[2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356256

[2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356257

[2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356258

[2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356259

[2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356260

[2011.05.14 00:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356261

[2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356262

[2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356263

[2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356264

[2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356265

[2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356266

[2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356267

[2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356268

[2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356269

[2011.05.14 00:27:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356270

[2011.05.14 00:27:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356271

[2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356272

[2011.05.14 00:27:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356273

[2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356274

[2011.05.14 00:27:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356275

[2011.05.14 00:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356276

[2011.05.14 00:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356277

[2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356278

[2011.05.14 00:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356279

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356280

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356281

[2011.05.14 00:27:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356282

[2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356283

[2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356284

[2011.05.14 00:27:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356285

[2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356286

[2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356287

[2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356288

[2011.05.14 00:27:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356289

[2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356290

[2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356291

[2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356292

[2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356293

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356294

[2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356295

[2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356296

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356297

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356298

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356299

[2011.05.14 00:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356300

[2011.05.14 00:26:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356301

[2011.05.14 00:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356302

[2011.05.14 00:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356303

[2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356304

[2011.05.14 00:26:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356305

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356306

[2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356307

[2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356308

[2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356309

[2011.05.14 00:26:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356310

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356311

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356312

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356313

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356314

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356315

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356316

[2011.05.14 00:26:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356317

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356318

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356319

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356320

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356321

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356322

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356323

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356324

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356325

[2011.05.14 00:26:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356326

[2011.05.14 00:26:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356327

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356328

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356329

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356330

[2011.05.14 00:26:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356331

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356334

[2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356335

[2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356336

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356337

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356338

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356339

[2011.05.14 00:26:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356340

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356341

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356342

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356343

[2011.05.14 00:26:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356344

[2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356345

[2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356346

[2011.05.14 00:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356347

[2011.05.14 00:26:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356348

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356349

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356350

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356351

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356352

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356353

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356354

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356355

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356356

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356357

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356358

[2011.05.14 00:26:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356359

[2011.05.14 00:26:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356360

[2011.05.14 00:26:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356361

[2011.05.14 00:26:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356362

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356363

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356364

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356365

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356366

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356367

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356368

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356369

[2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356370

[2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356371

[2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356372

[2011.05.14 00:26:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356373

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356374

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356375

[2011.05.14 00:26:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356376

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356377

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356378

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356379

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356380

[2011.05.14 00:26:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356381

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356382

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356383

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356384

[2011.05.14 00:26:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356385

[2011.05.14 00:26:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356386

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356387

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356388

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356389

[2011.05.14 00:26:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356390

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356391

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356392

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356393

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356394

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356395

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356396

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356397

[2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356398

[2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356399

[2011.05.14 00:26:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356400

[2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356401

[2011.05.14 00:26:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356402

[2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356403

[2011.05.14 00:26:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356404

[2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356405

[2011.05.14 00:28:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356406

[2011.05.14 00:28:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356407

[2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356408

[2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356409

[2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356410

[2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356411

[2011.05.14 00:28:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356412

[2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356413

[2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356414

[2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356415

[2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356416

[2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356417

[2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356418

[2011.05.14 00:28:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356419

[2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356420

[2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356421

[2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356422

[2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356423

[2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356424

[2011.05.14 00:28:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356425

[2011.05.14 00:28:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356426

[2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356427

[2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356428

[2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356429

[2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356430

[2011.05.14 00:28:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356431

[2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356432

[2011.05.14 00:28:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356433

[2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356434

[2011.05.14 00:28:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356435

[2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356436

[2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356437

[2011.05.14 00:28:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356438

[2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356439

[2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356440

[2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356441

[2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356442

[2011.05.14 00:28:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356443

[2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356444

[2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356445

[2011.05.14 00:28:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356446

[2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356449

[2011.05.14 00:28:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356450

[2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356451

[2011.05.14 00:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356453

[2011.05.14 00:28:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356455

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356456

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356457

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356458

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356459

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356460

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356461

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356462

[2011.05.14 00:28:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356463

[2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356464

[2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356465

[2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356466

[2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356468

[2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356469

[2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356470

[2011.05.14 00:28:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356471

[2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356472

[2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356473

[2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356474

[2011.05.14 00:27:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356476

[2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356477

[2011.05.14 00:27:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356478

[2011.05.14 00:27:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356479

[2011.05.14 00:27:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356480

[2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356481

[2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356482

[2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356483

[2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356484

[2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356485

[2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356486

[2011.05.14 00:27:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356487

[2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356488

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356489

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356490

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356491

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356492

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356493

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356494

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356495

[2011.05.14 00:27:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356496

[2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356497

[2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356498

[2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356499

[2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356500

[2011.05.14 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356501

[2011.05.14 00:27:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356502

[2011.05.14 00:27:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356503

[2011.05.14 00:28:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356505

[2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356506

[2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356507

[2011.05.14 00:28:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356508

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356509

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356510

[2011.05.14 00:28:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356517

[2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356518

[2011.05.14 00:28:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356521

[2011.05.14 00:28:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356522

[2011.05.14 00:28:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356526

[2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356527

[2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356528

[2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00356529

[2011.05.14 00:28:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361746

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361765

[2011.05.14 00:28:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361768

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361816

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361824

[2011.05.14 00:28:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361825

[2011.05.14 00:27:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361828

[2011.05.14 00:27:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00361829

[2011.05.14 00:28:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00370354

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\00370355

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\CNEuroNT_2011_30

[2011.05.14 00:28:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Garmin\Maps\City Navigator Europe NT 2011.32.gmap\Product1\Logos

[2010.11.12 22:48:32 | 000,000,000 | ---D | M] -- C:\ProgramData\HP\Installer

[2010.11.12 23:10:39 | 000,000,000 | ---D | M] -- C:\ProgramData\HP\Installer\Temp

[2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\ProgramData\LittleGamesCompany\NightmareOnThePacific_CollectorsEdition

[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Common

[2012.05.30 00:19:38 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Foto_Designer_7

[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Common\Communities

[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Common\News Feed Info

[2011.04.14 17:40:43 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX\Foto_Designer_7\7.0

Teil 2:

Code:

[2010.10.17 17:59:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

[2011.06.16 20:04:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

[2010.12.13 04:26:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero

[2010.12.12 17:48:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nice PDF Compressor

[2012.02.04 19:32:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Blender

[2011.08.06 23:52:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24

[2010.10.05 22:17:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3

[2011.08.23 21:57:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

[2012.03.02 21:44:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

[2009.07.14 06:41:57 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

[2011.08.09 15:19:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

[2009.07.14 09:48:45 | 000,000,000 | RH-D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC

[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve

[2010.10.05 19:30:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

[2012.09.10 23:19:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waldmeister Sause Ballermann XS

[2010.10.09 22:39:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

[2011.08.09 13:24:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WordToPDF

[2012.10.17 22:20:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zylom

[2009.07.14 06:42:30 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility

[2009.07.14 06:42:29 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools

[2010.10.05 19:15:34 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC

[2009.07.14 06:46:36 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell

[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF\Example Conversion Jobs

[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF\Help

[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF\Help\Additional Conversion Tools

[2012.07.13 22:24:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative\Creative WebCam

[2012.10.20 09:29:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware\Tools

[2010.10.05 22:30:13 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office Tools

[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 10

[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 10\Handbücher

[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\Nero 10\Handbücher\Nero ControlCenter Handbücher

[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve\Steam

[2012.10.06 17:57:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive

[2012.10.06 17:57:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportQueue

[2011.11.25 02:08:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_74ec4b9d4ec83a35af0b04bb94097803020458d_04aed052

[2011.11.25 02:08:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_74ec4b9d4ec83a35af0b04bb94097803020458d_04aef07d

[2011.11.25 02:08:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af0405

[2011.11.25 02:08:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af17ac

[2011.11.25 02:08:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af2b24

[2011.11.25 02:08:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af34d9

[2011.11.25 02:08:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af3e9d

[2011.11.25 02:08:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af4851

[2011.11.25 02:08:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mDNSResponder.ex_c0b6a50303acd7dabc2df9dddfe58f97b5a33d_04af5206

[2012.10.06 17:57:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_TuneUpUtilitiesS_8d14d31c7991889751ba265d26e323166b08e58_049c767d

[2011.11.25 02:08:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_17f36b1270c6d8ae3c5bb4b951d855d44514b4_04af69d3

[2011.11.25 02:08:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_7af5b667aece2d9bf3901c29203f1344b9b35e4f_04af7db9

[2011.12.02 17:14:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_815e9586b06f6f2ab1c6be44c2b06399f7ef6e4e_04bce81e

[2011.12.02 17:14:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7600.16385_de418d6c9fd330dfc5d343e86be259a35bc1e3_04bcfb77

[2012.07.13 22:23:21 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_demo32.exe_f6b7bcc615555b6ce9697d9e8ad1e246ee284e_16df7147

[2011.11.25 02:09:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_4241_enu_w2k_xp._d04ec2d96e46333b84593248b938ff876af472_04af9170

[2011.11.25 02:09:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_22a967544ad93cc17e8a851ea151dd8b291d94_04af9c0f

[2011.11.25 02:09:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_314dba050848b59681e9c7fb2de59bda0fea8f0_04afa630

[2011.11.25 02:09:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_314dba050848b59681e9c7fb2de59bda0fea8f0_04afafe5

[2011.11.25 02:09:15 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_ea4ffeefbcb2e92c67e4415830263c11e0f3da7f_04afbfe3

[2011.11.25 02:09:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_7.3.7600.16385_f532f6c89e72ddbcd24855325bd9e639dd417ddb_04afc9a7

[2011.11.25 02:08:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_80072ee2_dfe7f2364827e3178b198f8adf5f79af1838fb3_036973ed

[2011.11.25 02:08:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_8024402c_a728027ac40dacf25be0b7dcff722b28db819_03949cec

[2012.07.13 22:28:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_CtDrvIns.exe_7a9d87cc72e2838c3d3d5ac1ef05a3148de3c98_0fbbc2de

[2011.11.25 02:09:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Macromedia_Flash_75108bb91569bcca25d820189b41a8e58495d62_04afd3c8

[2011.11.25 02:09:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_191f28d52b3f46d0b12439531b5518b4b6c4d0c0_04afe2fb

[2011.12.02 17:42:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_bfaaf118574187e22f1f1a82cfa0cf3a35733e_0c4b2e22

[2011.12.02 17:13:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_bfaaf118574187e22f1f1a82cfa0cf3a35733e_0ed095f7

[2011.12.02 17:30:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft Corpor_bfaaf118574187e22f1f1a82cfa0cf3a35733e_10479b9b

[2011.11.25 02:09:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a00085

[2011.11.25 02:09:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a00a49

[2011.11.25 02:09:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a0141d

[2011.11.25 02:09:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a01dd1

[2011.11.25 02:09:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a027a5

[2011.11.25 02:09:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04a03169

[2011.11.25 02:09:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04afecee

[2011.11.25 02:09:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_3fe7c4f2de441e37d5c5597df5457d5b128f23b_04aff6b2

[2011.11.25 02:09:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_54f9284bc7537a39acaef3b8d2616f34f8fd4a86_04a03b3d

[2011.11.25 02:09:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_54f9284bc7537a39acaef3b8d2616f34f8fd4a86_04a04510

[2011.11.25 02:09:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_54f9284bc7537a39acaef3b8d2616f34f8fd4a86_04a04ed4

[2011.11.25 02:09:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_55f3b0fe6ba96fe294402a76bf6480aa117ef252_04a058a8

[2011.11.25 02:09:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0628b

[2011.11.25 02:09:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a06c6e

[2011.11.25 02:10:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a07623

[2011.11.25 02:10:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a07fe7

[2011.11.25 02:10:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0899b

[2011.11.25 02:10:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0935f

[2011.11.25 02:10:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a09d14

[2011.11.25 02:10:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0a6c8

[2011.11.25 02:10:17 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_576339d546844be99157de73fac47ed040db51_04a0b08c

[2011.11.25 02:10:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0ba50

[2011.11.25 02:10:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0c404

[2011.11.25 02:10:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0cdc8

[2011.11.25 02:10:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0d829

[2011.11.25 02:10:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0e1dd

[2011.11.25 02:10:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0eba1

[2011.11.25 02:10:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_Microsoft_87d3ecf78cfdd89f992e6896f5532d3876adf9_04a0f565

[2011.11.25 02:10:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_WUNX_PCDrv_A2_1__f91f3f4fc0ac7fe2c258ddd7c2f8efb5f8ef76_04a0ff19

[2011.11.25 02:10:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_x86_d8dda76ece474b3d189b376fb74a062abc2942d_04a108ce

[2012.07.13 21:14:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WLSetup\CabLogs

[2012.07.13 21:09:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WLSetup\Logs

[2009.07.14 06:52:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc\Profiles

[2010.12.13 04:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Agent

[2010.12.13 04:26:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Nero 10

[2010.12.13 04:26:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Agent\Repository

[2010.12.13 04:26:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Nero 10\OnlineServices

[2010.12.13 04:26:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Nero\Nero 10\OnlineServices\PushMarketingFeeds

[2010.10.17 18:51:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Office Genuine Advantage\data

[2010.10.08 00:11:21 | 000,000,000 | ---D | M] -- C:\ProgramData\PC Drivers HeadQuarters\Driver Detective

[2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\ProgramData\PlayFirst\wedding-dash-4-ever

[2012.03.02 21:44:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps

[2010.10.05 20:55:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins

[2012.02.25 21:18:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{AA59DDE4-B672-4621-A016-4C248204957A}

[2010.10.05 19:30:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{D103C4BA-F905-437A-8049-DB24763BBE36}

[2011.07.15 23:55:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}

[2010.12.10 23:39:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}

[2012.03.02 21:43:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}

[2012.07.13 22:11:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login

[2012.07.13 22:11:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\css

[2012.03.02 21:44:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\images

[2012.07.13 22:11:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\js

[2012.07.13 22:11:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\languages

[2012.07.13 22:11:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Apps\login\css\platform

[2010.11.20 02:06:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Local Cache

[2010.10.05 19:30:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins

[2010.10.05 19:30:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Local Cache\Categories

[2010.10.05 20:55:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8

[2010.10.30 02:01:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games

[2010.10.05 20:55:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Local Cache

[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2

[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892

[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C

[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2\help

[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2\help\enu

[2010.10.17 21:11:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\7FF10FD1D9E1467181402A0155363CB2\help\enu\images

[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892\help

[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892\help\enu

[2010.10.30 00:27:52 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\CA2E420582B3484EA454CB5E7A1C8892\help\enu\images

[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C\help

[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C\help\enu

[2010.10.30 02:01:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype\Plugins\Plugins\F57B48ADF2224F088EDD1A2B9BAD84E8\Games\EB659AD2FCC647F38E82982293E1663C\help\enu\images

[2010.10.05 19:28:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun\Java

[2010.10.05 19:28:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun\Java\Java Update

[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Top Evidence\WitchHuntersStolenBeautyCE

[2012.10.07 01:47:16 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TU2013

[2012.10.17 17:31:00 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TuneUp Utilities

[2012.10.17 17:31:22 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TuneUp Utilities 2013

[2012.10.17 17:30:04 | 000,000,000 | ---D | M] -- C:\ProgramData\TuneUp Software\TuneUp Utilities\Program Statistics

[2010.11.12 22:42:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Uniblue\DriverScanner

[2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\Games

[2012.04.07 04:36:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer

[2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\Games\TextExpress2Web

[2012.04.07 04:36:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\Games\TextExpress2Web\players

[2012.04.07 04:43:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom

[2012.04.07 04:44:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\GTBExtension

[2012.04.07 04:36:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\MyZylomExtension

[2012.04.07 04:36:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2

[2010.12.05 17:31:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\ZylomDeluxeInstaller

[2012.04.07 04:36:48 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\ZylomExtension

[2012.04.07 04:40:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE

[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media

[2012.04.07 04:36:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\data

[2012.04.07 04:36:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\fonts

[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images

[2012.04.07 04:36:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\properties

[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\sound

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene

[2012.04.09 03:23:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\loadingscene

[2012.04.07 04:36:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs\advert

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs\help

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\dialogs\hint

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\effects

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\gui

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\levelend

[2012.04.07 04:36:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Zylom\ZylomGamesPlayer\Zylom\textexpress2\de-DE\media\images\gamescene\train

 
 < %allusersprofile%\Application Data\*. /s >

 
 < %appdata%\*. /s >

[2011.08.06 21:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe

[2011.02.24 23:26:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AlawarSouthpoint

[2010.12.17 03:06:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer

[2012.10.17 17:38:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG

[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG2012

[2012.09.15 22:39:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap

[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN

[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR330TWN

[2012.01.15 19:17:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Creative

[2010.12.13 05:02:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\DeepBurner

[2012.09.15 17:21:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios

[2011.03.20 03:37:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games

[2010.10.05 19:26:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit

[2010.10.05 19:26:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit Software

[2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GameHouse

[2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GamersDigital

[2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN

[2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii

[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities

[2010.10.05 19:27:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\IrfanView

[2011.02.25 00:13:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\LittleGamesCompany

[2010.10.05 21:15:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia

[2011.04.14 17:40:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX

[2012.10.16 19:11:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes

[2009.07.14 09:48:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Media Center Programs

[2011.07.11 22:29:58 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft

[2010.10.05 19:26:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla

[2012.09.15 15:31:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MumboJumbo

[2010.12.13 04:28:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero

[2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera

[2012.09.15 18:18:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon

[2012.05.29 22:03:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PhotoScape

[2011.06.24 21:34:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PlayFirst

[2012.09.10 22:42:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\RenPy

[2011.02.23 20:35:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skip-Bo

[2012.10.17 21:08:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype

[2010.12.11 01:00:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\skypePM

[2011.08.09 13:06:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Softinterface, Inc

[2012.05.29 21:58:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall

[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Top Evidence

[2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software

[2010.11.12 22:42:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue

[2012.09.15 14:08:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games

[2011.03.20 03:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga

[2011.11.30 03:23:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\vlc

[2012.10.20 15:18:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp

[2010.10.09 22:42:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\WinRAR

[2011.08.09 13:24:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\WordToPDF

[2011.08.06 23:17:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\XnView

[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe PDF

[2011.01.13 04:57:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5

[2011.01.13 05:00:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\AIR

[2011.01.13 05:03:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CameraRaw

[2011.08.06 23:58:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Color

[2011.01.13 04:53:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager

[2011.01.13 04:52:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\ExtendScript Toolkit

[2011.01.13 04:52:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Extension Manager CS5

[2012.07.22 03:14:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Headlights

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Linguistics

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\LogTransport2

[2011.08.06 21:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Plugins

[2011.01.13 04:51:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\SwitchBoard

[2012.10.22 00:21:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0

[2011.01.23 01:33:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Collab

[2011.07.12 13:11:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Forms

[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\JavaScripts

[2012.10.22 00:21:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\JSCache

[2012.10.21 22:50:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Security

[2011.07.11 22:35:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Stamps

[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Acrobat\10.0\Security\CRLCache

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe PDF\Settings

[2011.08.06 23:58:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Adobe Photoshop CS5 Settings

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets

[2011.01.13 04:57:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Adobe Photoshop CS5 Settings\WorkSpaces

[2011.01.13 05:10:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Adobe Photoshop CS5 Settings\WorkSpaces (Modified)

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Actions

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Black and White

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Brushes

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Channel Mixer

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Color Swatches

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Contours

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Curves

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Custom Shapes

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Duotones

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Exposure

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Gradients

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\HDR Toning

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Hue and Saturation

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Keyboard Shortcuts

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Levels

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Lights

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Materials

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Menu Customization

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Patterns

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Render Settings

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Selective Color

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Styles

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Tools

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Adobe Photoshop CS5\Presets\Volumes

[2011.01.13 05:00:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\AIR\CRLCache

[2011.01.13 04:53:01 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\AIR\Updater

[2011.01.13 05:03:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CameraRaw\Defaults

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Color\Proofing

[2011.01.13 04:57:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Color\Settings

[2011.01.13 04:57:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\cache

[2011.01.13 04:52:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\configuration

[2011.01.13 04:53:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\extensions

[2011.01.13 04:57:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\logs

[2011.01.13 04:52:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\preference

[2011.01.13 04:52:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\StageManager

[2011.01.13 04:57:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\cache\ConnectionsHome

[2011.01.13 04:57:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\CS5ServiceManager\cache\ExtensionManifest

[2011.01.13 04:57:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\ExtendScript Toolkit\3.5

[2012.07.22 03:14:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player\AFCache

[2010.10.05 21:15:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player\AssetCache

[2012.10.19 00:03:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Flash Player\AssetCache\7TSBTUSB

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Linguistics\Dictionaries

[2011.08.06 21:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Plugins\Adobe Dicom CS5

[2011.08.06 21:36:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Adobe\Plugins\Adobe Dicom CS5\Photoshop

[2011.02.24 23:27:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AlawarSouthpoint\Dancing Craze

[2012.08.10 02:46:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\iTunes

[2012.08.10 02:16:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\Logs

[2012.08.10 02:16:23 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\Preferences

[2012.08.10 02:46:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\iTunes\Cookies

[2010.12.17 02:31:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Apple Computer\iTunes\iTunes Plug-ins

[2012.10.17 17:39:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012

[2012.10.17 17:43:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\Backups

[2012.10.17 17:39:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\Dashboard

[2012.10.17 17:39:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\StartUp Manager

[2012.10.17 17:39:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG\AWL2012\TuningIndex

[2011.11.30 03:23:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\AVG2012\cfgall

[2012.09.15 22:39:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap\Awakening_SkywardCastle

[2012.09.15 23:32:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Boomzap\Awakening_SkywardCastle\CE

[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN\Images

[2012.01.15 19:17:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Creative\Monitor

[2010.10.05 21:41:00 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Creative\WebCam Center

[2012.09.15 17:21:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios\Gothic Fiction

[2012.09.15 18:02:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios\Gothic Fiction\CE

[2012.09.15 17:21:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\ERS Game Studios\Gothic Fiction\CE\data

[2011.03.20 03:37:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games\SED

[2011.03.20 03:39:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Floodlight Games\SED\Saves

[2010.12.14 16:15:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit Software\Foxit Reader

[2010.10.05 19:26:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Foxit\images

[2011.02.23 23:27:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GameHouse\Campfire Legends II

[2011.02.25 01:20:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GamersDigital\Jack the Ripper

[2011.01.30 15:59:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\Devices

[2011.05.14 00:03:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\Map Update

[2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapInstall

[2011.05.14 00:32:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\Maps

[2011.01.31 18:03:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapSource

[2011.01.31 18:04:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapInstall\TileCache

[2011.05.14 00:33:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\GARMIN\MapSource\TileCache

[2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii\Trapped

[2011.03.20 01:12:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii\Trapped\Zylom

[2011.03.20 02:11:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Gogii\Trapped\Zylom\data

[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities\{00013KEU-UKQE-K6V0-9MH3-29NVUQ9IEVNK}

[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities\{000HQ7FF-AD7A-3FG3-4A90-24BL1LF8IVV1}

[2010.10.05 19:18:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Identities\{72EBA75F-4626-4E3A-BF7C-2A65325BC5FF}

[2011.02.25 00:16:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\LittleGamesCompany\NightmareOnThePacific_CollectorsEdition

[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player

[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects

[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com

[2012.10.24 08:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\QZR24LPR

[2012.10.24 08:26:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\QZR24LPR\aka-cdn-ns.adtech.de

[2012.10.24 18:55:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\QZR24LPR\s.ytimg.com

[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support

[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer

[2012.10.24 08:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys

[2012.10.24 08:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aka-cdn-ns.adtech.de

[2012.10.23 21:41:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com

[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX\Foto_Designer_7

[2011.04.14 17:40:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MAGIX\Foto_Designer_7\UserData

[2012.10.16 19:11:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware

[2012.10.20 10:24:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs

[2012.10.16 20:35:16 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine

[2011.07.12 13:08:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Access

[2010.10.06 00:30:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\AddIns

[2010.11.29 00:28:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Clip Organizer

[2010.10.05 21:21:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\CLR Security Config

[2010.10.05 19:18:42 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Credentials

[2010.10.05 19:28:43 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Crypto

[2010.10.08 02:46:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\eHome

[2012.09.23 15:26:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Excel

[2010.12.13 05:03:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\HTML Help

[2010.10.17 23:32:33 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IdentityCRL

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IME12

[2011.07.11 22:29:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP10

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP12

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP8_1

[2011.01.23 01:33:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IMJP9_0

[2011.10.19 18:23:43 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer

[2010.10.05 19:20:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\MMC

[2012.10.17 21:08:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\MSN Messenger

[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network

[2012.10.17 21:08:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Office

[2011.01.27 14:39:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\OIS

[2011.02.19 23:00:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\PowerPoint

[2012.10.23 21:41:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Proof

[2010.10.05 19:18:51 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Protect

[2012.02.18 02:07:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Publisher

[2012.10.17 20:23:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Speech

[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates

[2010.10.25 16:25:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Templates

[2012.10.23 22:11:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Vorlagen

[2010.10.05 19:18:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows

[2012.10.23 22:11:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Word

[2010.12.12 18:14:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312

[2010.10.05 19:28:43 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Crypto\RSA

[2012.10.17 22:20:54 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-4070557579-1729641792-2656704333-1001

[2011.03.15 20:03:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Excel\XLSTART

[2012.07.13 21:11:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\IdentityCRL\production

[2012.10.16 23:07:40 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

[2012.10.17 21:08:29 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\UserData

[2010.10.05 21:30:26 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned

[2010.10.05 22:19:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts

[2012.10.06 01:12:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu

[2012.10.17 21:22:11 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

[2010.10.05 22:19:38 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7e4dca80246863e3

[2012.10.17 21:08:29 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low

[2010.10.14 22:15:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\MSN Messenger\3024787189

[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network\Connections

[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network\Connections\Pbk

[2010.10.05 19:19:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Network\Connections\Pbk\_hiddenPbk

[2012.10.24 08:49:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Office\Zuletzt verwendet

[2012.09.10 19:28:21 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Protect\S-1-5-21-4070557579-1729641792-2656704333-1001

[2012.10.17 20:23:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Speech\Files

[2012.10.17 20:23:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Speech\Files\UserLexicons

[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My

[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates

[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs

[2010.10.05 19:19:39 | 000,000,000 | --SD | M] -- C:\Users\878\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs

[2012.10.20 12:09:05 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Cookies

[2012.10.17 22:17:49 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IECompatCache

[2012.10.17 21:22:21 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IETldCache

[2011.09.17 12:59:28 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Libraries

[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Network Shortcuts

[2009.07.14 04:04:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Printer Shortcuts

[2012.10.17 22:17:52 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\PrivacIE

[2012.10.22 01:30:53 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Recent

[2012.05.30 00:19:57 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\SendTo

[2012.10.06 01:39:35 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu

[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Templates

[2011.01.26 06:29:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Themes

[2012.10.17 21:08:28 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Cookies\Low

[2012.10.17 17:36:28 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IECompatCache\Low

[2011.01.26 03:43:11 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\IETldCache\Low

[2011.01.26 03:43:11 | 000,000,000 | -H-D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\PrivacIE\Low

[2012.10.21 22:50:16 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations

[2012.10.24 18:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations

[2010.10.05 19:18:40 | 000,000,000 | -HSD | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

[2012.10.17 22:20:00 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

[2009.07.14 06:42:04 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

[2011.09.17 12:59:28 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

[2012.09.15 22:37:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Awakening - The Skyward Castle Collector's Edition

[2011.02.25 01:15:06 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

[2011.09.15 23:45:11 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

[2010.10.05 19:27:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView

[2009.07.14 06:37:42 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

[2012.02.04 19:32:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Blender

[2011.01.23 01:40:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge

[2011.08.07 00:30:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\pdfFactory

[2011.09.17 12:59:28 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Valve

[2010.10.05 22:16:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in

[2010.10.09 22:39:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

[2009.07.14 06:41:43 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Accessibility

[2010.10.05 19:19:00 | 000,000,000 | R--D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools

[2011.08.14 04:50:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Valve\Steam

[2010.10.06 00:30:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Microsoft\Word\STARTUP

[2010.10.05 19:26:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Extensions

[2010.10.05 19:26:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox

[2010.10.05 19:26:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}

[2011.09.07 18:18:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Crash Reports

[2010.10.05 19:26:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles

[2011.08.14 11:49:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Crash Reports\pending

[2012.10.21 17:57:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default

[2011.09.15 17:09:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\bookmarkbackups

[2010.10.05 19:26:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\chrome

[2011.09.15 21:35:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\extensions

[2011.08.19 21:56:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\minidumps

[2010.10.05 22:32:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2010.10.05 22:32:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Mozilla\Firefox\Profiles\r9bisenm.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}\chrome

[2012.09.15 15:31:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\MumboJumbo\Angelica Weaver - Catch Me When You Can CE

[2010.12.14 20:21:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10

[2010.12.16 02:53:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10\Nero BurnLite

[2010.12.13 04:39:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10\OnlineServices

[2011.01.31 21:51:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Nero\Nero 10\OnlineServices\FeedManager

[2012.10.24 18:55:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera

[2011.02.22 13:36:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\dictionaries

[2012.10.17 21:08:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\pstorage

[2012.10.24 18:55:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\sessions

[2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\styles

[2012.09.11 20:56:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\toolbar

[2010.10.05 19:29:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\webserver

[2010.10.05 19:29:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Opera\Opera\styles\user

[2012.09.15 18:18:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon\The Agency of Anomalies - The Last Performance

[2012.09.15 18:55:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Orneon\The Agency of Anomalies - The Last Performance\CE
 
 

[2011.06.24 21:38:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\PlayFirst\wedding-dash-4-ever

[2012.09.10 22:59:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\RenPy\MagicalDiaryHorseHall

[2010.10.05 21:27:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\Content

[2012.09.29 21:23:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\DbTemp

[2012.09.29 21:23:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987

[2010.10.05 20:55:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\My Skype Received Files

[2012.06.25 21:07:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\Pictures

[2011.12.07 01:08:13 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577

[2012.10.06 01:27:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_dynco

[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html

[2012.10.06 01:27:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_httpfe

[2011.12.13 21:39:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya

[2012.07.13 23:38:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync

[2010.10.05 20:55:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\httpfe

[2010.10.05 20:55:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\voicemail

[2010.11.28 03:07:56 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\03

[2011.12.16 22:44:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\05

[2010.10.29 21:25:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\06

[2012.02.25 21:29:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\08

[2011.02.28 20:13:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\09

[2012.04.06 19:45:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\0c

[2012.01.15 18:47:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\0e

[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\13

[2011.03.10 23:47:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\15

[2011.08.04 13:44:52 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\17

[2011.03.06 17:21:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\1d

[2011.02.28 20:19:06 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\22

[2011.02.25 22:12:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\28

[2012.06.25 19:33:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\2b

[2011.03.02 21:51:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\2d

[2011.03.06 16:46:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\30

[2011.01.28 21:04:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\31

[2011.03.05 21:45:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\33

[2011.02.18 14:52:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\34

[2011.02.28 20:19:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\38

[2011.02.25 22:12:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\3d

[2011.01.16 00:18:10 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\3e

[2011.03.06 16:46:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\43

[2012.07.13 23:31:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\4a

[2012.04.04 19:31:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\4d

[2010.12.01 23:52:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\53

[2011.06.08 03:04:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\54

[2011.07.16 02:57:15 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\56

[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\57

[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\5b

[2011.03.12 02:11:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\5e

[2011.02.03 23:23:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\5f

[2011.03.05 21:45:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\60

[2012.06.25 19:09:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\61

[2011.06.08 03:04:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\65

[2012.04.28 18:30:23 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\6d

[2011.02.03 23:23:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\6f

[2011.03.05 21:46:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\7d

[2011.03.06 16:46:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\82

[2011.02.28 20:19:30 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\83

[2011.06.08 03:04:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\84

[2010.11.28 03:07:56 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\86

[2011.02.08 23:19:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\89

[2010.11.29 17:43:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\8a

[2011.03.12 01:11:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\8e

[2012.07.13 23:38:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\94

[2010.12.12 01:27:22 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\a0

[2011.02.22 18:04:33 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\a1

[2011.03.04 19:09:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b0

[2011.03.04 21:33:06 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b2

[2011.02.18 01:20:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b4

[2011.07.16 00:05:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b5

[2011.03.06 17:18:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b8

[2011.03.02 21:51:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\b9

[2010.10.07 21:16:33 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\ba

[2012.04.15 21:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\bc

[2011.02.28 20:13:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\bd

[2012.03.01 22:55:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c1

[2011.02.06 02:52:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c2

[2010.10.10 23:02:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c3

[2011.02.18 14:33:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c8

[2011.02.18 01:20:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\c9

[2012.01.13 16:16:27 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\ca

[2011.02.03 23:23:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\cf

[2010.11.18 22:44:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d0

[2012.06.25 19:33:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d2

[2012.05.01 21:20:57 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d4

[2010.10.31 02:00:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d6

[2011.02.22 18:04:34 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\d9

[2011.06.08 03:04:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\db

[2010.10.29 21:26:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\df

[2011.03.06 17:18:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\e4

[2011.07.24 17:17:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\e6

[2010.11.23 00:59:42 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\eb

[2010.11.18 22:44:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\f0

[2011.02.16 19:51:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\f1

[2012.05.07 23:08:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\marion_n1987\chatsync\ff

[2011.12.06 21:13:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync

[2011.09.30 23:09:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\httpfe

[2011.09.30 23:06:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\voicemail

[2011.10.12 13:35:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\02

[2011.11.15 22:59:47 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\0f

[2011.10.12 13:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\10

[2011.10.29 20:47:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\1a

[2011.10.03 19:29:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\1e

[2011.11.03 14:16:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\23

[2011.10.05 10:16:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\47

[2011.11.03 14:05:38 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\4c

[2011.10.04 12:21:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\4e

[2011.10.04 12:19:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\56

[2011.10.07 20:57:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\66

[2011.10.03 19:29:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\77

[2011.09.30 23:08:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\7a

[2011.11.30 19:56:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\7b

[2011.12.06 19:08:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\7d

[2011.10.03 19:29:48 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\82

[2011.12.06 16:24:01 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\8a

[2011.10.12 13:35:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\96

[2011.12.06 21:13:58 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\9e

[2011.10.25 19:53:17 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\a1

[2011.11.21 13:00:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ae

[2011.10.05 16:13:09 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\b5

[2011.10.12 14:33:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\b9

[2011.12.06 21:13:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ca

[2011.10.03 19:29:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\cc

[2011.11.03 14:05:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ce

[2011.12.06 19:11:11 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\d4

[2011.11.09 18:46:32 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\da

[2011.11.16 19:14:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\ea

[2011.10.03 19:29:31 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\f2

[2011.10.07 20:16:23 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\f3

[2011.10.29 20:47:37 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\f5

[2011.10.12 13:35:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\sash4577\chatsync\fe

[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html\skypehome

[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html\skypehome\i

[2011.07.15 23:56:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\shared_html\skypehome\i\production

[2011.12.13 21:22:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync

[2011.10.03 19:29:12 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\httpfe

[2011.10.03 18:47:16 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\voicemail

[2011.12.06 19:21:11 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\07

[2011.11.15 22:14:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\0c

[2011.11.09 18:47:19 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\0d

[2011.10.25 19:51:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\1c

[2011.10.25 20:33:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\31

[2011.11.01 22:34:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\32

[2011.10.22 23:58:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\53

[2011.10.07 20:08:05 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\5c

[2011.10.03 19:31:24 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\5e

[2011.11.15 20:48:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\6e

[2011.11.16 18:44:07 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\7d

[2011.11.13 19:39:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\8d

[2011.11.28 15:25:02 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\98

[2011.12.12 20:39:56 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\a1

[2011.10.07 15:01:46 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\aa

[2011.12.06 19:21:32 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\af

[2011.10.03 19:31:26 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\b0

[2011.10.12 15:35:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\bc

[2011.10.22 23:58:45 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\d1

[2011.11.28 15:25:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\d4

[2011.12.13 21:22:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\da

[2011.10.03 18:48:00 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\f8

[2011.10.07 20:17:51 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Skype\volchara.ya\chatsync\fc

[2011.08.09 13:06:36 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Softinterface, Inc\Convert Image To PDF

[2012.05.29 21:58:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape

[2012.05.29 21:58:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\%ProgramFilesDir%

[2012.05.29 21:58:54 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\SKEL

[2012.05.29 21:58:35 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\%ProgramFilesDir%\PhotoScape

[2012.05.29 21:59:03 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Thinstall\PhotoScape\%ProgramFilesDir%\PhotoScape\frame

[2012.09.15 23:52:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Top Evidence\WitchHuntersStolenBeautyCE

[2012.10.06 01:40:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013

[2012.10.06 01:30:50 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\Backups

[2012.10.06 01:40:18 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\Dashboard

[2012.10.06 01:40:08 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\StartUp Manager

[2012.10.06 01:36:25 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\TuneUp Software\TU2013\TuningIndex

[2010.11.12 22:42:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue\DriverScanner

[2010.11.12 22:42:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue\DriverScanner\drivers

[2010.11.12 22:42:41 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Uniblue\DriverScanner\_temp

[2012.09.15 14:08:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit

[2012.09.15 14:08:21 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit\CE

[2012.09.15 14:08:39 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit\CE\Players

[2012.09.15 14:46:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\URSE Games\Mystery Heritage - Sign of the Spirit\CE\Players\1

[2011.03.20 03:56:59 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga\eng

[2011.03.20 03:56:29 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\VampireSaga\eng\profiles

[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\vlc\art

[2011.12.14 04:52:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins

[2011.12.14 04:52:40 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\Gracenote

[2012.10.20 15:18:04 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\ml

[2010.10.05 23:22:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\omBrowser

[2010.10.05 23:22:28 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\ml\cache

[2010.10.05 23:22:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\omBrowser\cache

[2010.10.05 23:22:14 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Winamp\Plugins\omBrowser\cache\thumbnails

[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2080

[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2573

[2010.12.03 23:45:01 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\ZylomGamesPlayer

[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2080\zgw

[2010.12.03 23:45:55 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2080\zgw\ads

[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2573\zgw

[2011.02.25 01:15:53 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\Zylom\2573\zgw\ads

 
 < %systemroot%\Installer\*. /s >

[2010.10.05 19:23:24 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$

[2011.01.13 04:51:17 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}

[2011.08.09 15:19:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}

[2011.01.13 04:51:01 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}

[2011.01.13 04:52:58 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}

[2010.12.13 04:26:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}

[2012.10.17 20:10:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{26A24AE4-039D-4CA4-87B4-2F83217009FF}

[2010.10.05 19:26:31 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}

[2010.10.08 00:11:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{4640FDE1-B83A-4376-84ED-86F86BEE2D41}

[2011.01.31 18:01:59 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{499A37A3-9A0D-4929-AA3E-588FA230D66F}

[2010.12.13 04:26:34 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}

[2011.08.23 21:57:51 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{57752979-A1C9-4C02-856B-FBB27AC4E02C}

[2011.01.13 04:51:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}

[2010.12.13 04:26:39 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}

[2011.01.30 15:59:14 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}

[2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{69995C7A-062A-4A90-A4DF-8C22895DF522}

[2011.08.23 21:56:45 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}

[2010.12.13 04:26:12 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6DFB899F-17A2-48F0-A533-ED8D6866CF38}

[2011.08.23 21:55:50 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}

[2010.12.13 04:26:06 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}

[2010.12.13 14:02:37 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

[2011.06.16 20:04:20 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

[2011.06.11 00:51:28 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90110407-6000-11D3-8CFE-0150048383C9}

[2011.06.11 00:51:38 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}

[2011.01.13 04:50:57 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}

[2010.12.13 04:26:28 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}

[2012.10.16 20:42:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-AA1000000001}

[2011.01.30 15:59:15 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{B1EE1CC5-6CED-4801-BFFF-8454F21A245A}

[2011.08.23 21:58:54 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C23CD6DA-1958-43A5-ADD0-59396572E02E}

[2011.08.23 21:57:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{C9E14402-3631-4182-B377-6B0DFB1C0339}

[2011.08.23 21:58:35 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D03482C5-9AD8-496D-B388-692AE04C93AF}

[2011.01.13 04:51:14 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}

[2011.01.13 04:51:10 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}

[2010.10.05 19:39:03 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{DA97BDF9-BC72-46FD-8E76-427F2BB951EE}

[2012.07.13 21:13:44 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}

[2012.07.18 20:00:48 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}

[2010.12.13 14:02:23 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

[2010.11.12 23:10:01 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{FD27D456-ED8A-4027-A1E4-BBF95FAF4799}

[2012.10.17 17:31:22 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed

[2010.10.26 21:45:45 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC

[2010.10.17 23:32:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC

[2011.09.18 13:30:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC

[2012.07.13 21:13:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0EE4E59FE6C037246B9B19DFF670D167

[2012.07.13 21:13:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11F12B5E3396B0E42AC597363E0CD711

[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\20B91A1DE71869244AB57058F37DD475

[2011.04.13 18:17:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\25BBB29DFF28DE24A8C3E460F249A47B

[2010.12.13 14:02:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2FA726BAE7C9DBD418B6B362648BE198

[2011.10.19 18:21:32 | 000,000,000 | ---D | M] -- C:\Windows\Installer\$PatchCache$\Managed\3339386520806D04A905BE9BBEB25F14

[2012.07.13 21:12:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3D04254D3B6B9FF42B3445CE3E1E0066

[2011.06.11 00:48:26 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\47D9F3A608BB1544C81AB4A358F73195

[2012.07.13 21:14:02 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4CD7BA2CE9849EB488A72562F2ABBD0E

[2011.04.13 18:14:52 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A

[2012.07.13 21:13:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\61B33B7353527E949809236678800A3A

[2011.06.24 13:45:22 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1

[2010.10.05 19:25:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B7449A0300000010

[2011.11.30 03:23:06 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B744AA0100000010

[2012.10.20 09:29:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware

[2012.10.20 09:29:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Configuration

[2012.10.24 07:25:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs

[2012.10.16 19:12:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine

[2012.06.09 17:08:10 | 000,000,000 | ---D | M] -- C:\ProgramData\MFAData\logs

[2009.07.14 06:57:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage

[2009.07.14 04:05:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\DeviceSync

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\DRM

[2010.10.08 02:46:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome

[2011.08.09 13:07:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\HTML Help

[2010.10.14 21:54:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IdentityCRL

[2010.10.05 19:18:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IlsCache

[2009.07.14 06:54:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Media Player

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\MF

[2010.10.05 22:29:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\MSDAIPP

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Network

[2010.10.05 22:29:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\OFFICE

[2010.10.05 19:30:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\PlayReady

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC

[2010.10.05 19:18:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search

[2010.10.05 19:18:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\User Account Pictures

[2009.07.14 04:04:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Vault

[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows

[2011.10.19 18:20:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender

[2012.07.13 21:11:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Live

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT

[2012.07.13 21:14:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WLSetup

[2010.10.05 19:18:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\WPD

[2009.07.14 06:52:30 | 000,000,000 | -H-D | M] -- C:\ProgramData\Microsoft\WwanSvc

[2009.07.14 06:57:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client

[2010.10.06 05:11:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client\1.0

[2011.09.17 12:58:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE

[2011.09.17 12:58:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\DSS

[2012.06.26 07:19:19 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft\Crypto\Keys

[2010.10.05 19:18:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\RSA

[2009.07.14 04:04:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\DSS\MachineKeys

[2012.10.24 18:52:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

[2012.10.24 18:52:15 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Device

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US

[2009.07.14 04:04:35 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\DRM\Server

[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\logs

[2010.10.08 02:46:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\mcepg2-0

[2010.10.08 02:46:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\RecoveryTasks

[2010.10.08 02:46:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\eHome\SharedSBE

[2012.07.13 21:13:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IdentityCRL\production

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\IdentityCRL\production\temp

[2010.10.05 22:29:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\MSDAIPP\OFFLINE

[2009.07.14 04:04:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Network\Connections

[2009.07.14 06:55:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Network\Downloader

[2010.10.06 00:30:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\OFFICE\DATA

[2009.07.14 04:05:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\Outbound

[2011.09.15 17:00:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\PublishedData

[2011.09.15 17:00:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\StateData

[2012.10.24 18:59:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\RAC\Temp

[2010.10.05 19:18:23 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data

[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications

[2012.10.24 18:52:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Temp

[2012.10.24 18:52:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows

[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Config

[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs

[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects

[2012.10.24 07:25:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex

[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex

[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer

[2012.10.17 21:22:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap

[2012.10.17 21:22:33 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore

[2012.10.24 18:55:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles

[2012.10.24 18:52:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\User Account Pictures\Default Pictures

[2011.10.11 08:09:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\LocalCopy

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Quarantine

[2011.10.11 08:09:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans

[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Support

[2010.10.15 14:20:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates

[2011.10.19 18:09:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{70337400-8CA2-49B2-97B6-70B9F449B0E4}

[2010.10.05 20:29:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History

[2011.09.29 15:57:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager

[2010.10.09 04:31:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results

[2010.12.15 13:51:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service

[2010.10.05 20:29:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Store

[2012.10.17 21:08:44 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick

[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows Live\SOXE

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSScan

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Queue

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US

[2009.07.14 04:05:17 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft\Windows\AIT

[2011.09.17 12:59:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Caches

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\DeviceMetadataStore

[2010.10.05 19:19:10 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\Windows\DRM

[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\GameExplorer

[2012.10.17 20:56:54 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Power Efficiency Diagnostics

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Ringtones

[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm

[2010.10.05 19:18:20 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu

[2009.07.14 04:04:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Templates

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\WER

[2009.07.14 04:37:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\DeviceMetadataStore\en-US

[2009.07.14 06:52:30 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\Windows\DRM\Cache

[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm\Manifest

[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm\Sessions

[2010.10.05 19:14:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Sqm\Upload

[2010.10.05 19:18:20 | 000,000,000 | -HSD | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programme

[2012.10.17 22:20:28 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs

[2010.10.05 19:21:57 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

[2011.11.30 03:23:07 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

[2010.10.05 19:15:39 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools

[2011.01.13 04:53:14 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe

[2012.09.11 09:57:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

[2012.09.15 22:37:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Awakening - The Skyward Castle Collector's Edition

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BroadGun Software

[2011.08.09 13:06:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert Image To PDF

[2012.07.13 22:19:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative

[2012.10.17 17:42:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DeepBurner

[2010.10.05 19:26:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader

[2011.01.22 19:15:39 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePDF

[2012.10.17 22:20:00 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games

[2011.01.31 18:02:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin

[2010.10.05 19:27:41 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView

[2011.08.23 22:00:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

[2009.07.14 06:42:30 | 000,000,000 | R--D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance

[2012.10.20 09:29:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware

Teil 3:

Code:

[2010.10.17 10:50:08 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7040110900063D11C8EF10054038389C

[2012.07.13 21:12:28 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7B292C385A83B0447A137070E0186AF4

[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\8F7463F0D15ECCF48826A9D8C0A5FC52

[2011.04.13 18:14:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\91785D291CBB3CC40AB8659C8E48CCC2

[2011.08.23 22:00:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A7C59996A26009A44AFDC82298D55F22

[2012.07.13 21:13:17 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\B6ACDB9A3563B764CA384963D73AFB3E

[2011.06.16 20:04:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a

[2012.07.13 21:14:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\CDBD1AB11345DF646AF61AE71B4C93EE

[2010.10.05 19:29:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100

[2010.12.13 14:02:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDA39468D428E8B4DB27C8D5DC5CA217

[2012.07.13 21:12:36 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\E97A59ECCF4EFFF4A857920FB449F22F

[2012.07.13 21:13:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F132F0B0A6ECD384AA32773B467F9571

[2012.07.13 21:12:05 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4E3B286A696ED244AC1C470AE61874B

[2011.06.11 00:51:38 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6514

[2010.10.17 23:32:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\000021599B0090400000000000F01FEC\12.0.6012

[2011.09.18 13:30:41 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130

[2012.07.13 21:13:56 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\0EE4E59FE6C037246B9B19DFF670D167\15.4.3502

[2012.07.13 21:13:44 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\11F12B5E3396B0E42AC597363E0CD711\15.4.3538

[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\20B91A1DE71869244AB57058F37DD475\8.0.50727

[2011.04.13 18:17:35 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\25BBB29DFF28DE24A8C3E460F249A47B\8.0.50727

[2010.12.13 14:02:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\2FA726BAE7C9DBD418B6B362648BE198\10.0.10500

[2011.10.19 18:21:33 | 000,000,000 | ---D | M] -- C:\Windows\Installer\$PatchCache$\Managed\3339386520806D04A905BE9BBEB25F14\12.0.2085

[2012.07.13 21:12:20 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\3D04254D3B6B9FF42B3445CE3E1E0066\15.4.3502

[2011.06.11 00:48:26 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\47D9F3A608BB1544C81AB4A358F73195\2.0.1

[2012.07.13 21:14:01 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\4CD7BA2CE9849EB488A72562F2ABBD0E\15.4.3502

[2011.09.17 15:15:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\5C1093C35543A0E32A41B090A305076A\4.0.30319

[2012.07.13 21:13:50 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\61B33B7353527E949809236678800A3A\15.4.3508

[2011.06.24 13:47:15 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\689C057F0135A5A3598FE47CC1A80CC1\4.0.30319

[2012.10.16 20:43:32 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA71301B744AA0100000010\10.1.0

[2010.10.17 17:58:53 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7040110900063D11C8EF10054038389C\11.0.5614

[2011.07.13 11:47:59 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7040110900063D11C8EF10054038389C\11.0.8173

[2012.07.13 21:12:28 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\7B292C385A83B0447A137070E0186AF4\15.4.3508

[2011.04.13 18:17:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\8F7463F0D15ECCF48826A9D8C0A5FC52\8.0.50727

[2011.04.13 18:14:21 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\91785D291CBB3CC40AB8659C8E48CCC2\8.0.50727

[2011.08.23 22:00:34 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\A7C59996A26009A44AFDC82298D55F22\10.4.1

[2012.07.13 21:13:17 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\B6ACDB9A3563B764CA384963D73AFB3E\15.4.3502

[2011.06.16 20:04:25 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\c1c4f01781cc94c4c8fb1542c0981a2a\8.0.61001

[2012.07.13 21:14:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\CDBD1AB11345DF646AF61AE71B4C93EE\15.4.3538

[2010.10.05 19:29:57 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0

[2010.12.13 14:02:37 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\DDA39468D428E8B4DB27C8D5DC5CA217\4.20.9870

[2012.07.13 21:12:36 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\E97A59ECCF4EFFF4A857920FB449F22F\15.4.3502

[2012.07.13 21:13:00 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F132F0B0A6ECD384AA32773B467F9571\15.4.3502

[2012.07.13 21:12:05 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$\Managed\F4E3B286A696ED244AC1C470AE61874B\15.4.3502

 
 < %systemroot%\system32\*. /s >

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\0407

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\0409

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\AdvancedInstallers

[2010.10.05 21:46:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\appmgmt

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\ar-SA

[2009.07.14 04:37:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\bg-BG

[2011.09.17 12:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Boot

[2012.10.17 20:06:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot

[2012.10.17 22:18:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2

[2011.11.30 03:23:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\CodeIntegrity

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\com

[2012.10.24 14:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\config

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\cs-CZ

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\da-DK

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\de

[2012.10.17 20:16:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism

[2012.10.21 16:01:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers

[2012.04.27 20:52:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore

[2010.12.17 02:30:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DRVSTORE

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\el-GR

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\en

[2012.10.17 20:16:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\es-ES

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\et-EE

[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\fi-FI

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\fr-FR

[2009.07.14 06:42:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\FxsTmp

[2009.07.14 04:03:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicy

[2009.07.14 04:03:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicyUsers

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\he-IL

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\hr-HR

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\hu-HU

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\ias

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\icsxml

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME

[2009.07.14 04:05:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\inetsrv

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\it-IT

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\ja-JP

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\ko-KR

[2011.09.16 11:23:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\lt-LT

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\lv-LV

[2010.10.05 19:26:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\Macromed

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\manifeststore

[2009.07.14 06:34:06 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\Msdtc

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\nb-NO

[2011.10.03 16:16:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\NDF

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\nl-NL

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\pl-PL

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-BR

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-PT

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\ras

[2010.10.05 19:18:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\Recovery

[2010.10.05 19:22:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\restore

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\ro-RO

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\ru-RU

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\sk-SK

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\sl-SI

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech

[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\sppui

[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\sr-Latn-CS

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\sv-SE

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep

[2012.10.17 22:20:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\th-TH

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\tr-TR

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\uk-UA

[2010.10.17 03:00:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\Wat

[2011.11.30 03:23:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN

[2010.10.16 21:25:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\wfp

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioDatabase

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioPlugIns

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\winevt

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\XPSViewer

[2009.07.14 04:37:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-CN

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-HK

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-TW

[2010.10.05 21:46:07 | 000,000,000 | --SD | M] -- C:\Windows\system32\appmgmt\MACHINE

[2010.10.05 21:46:07 | 000,000,000 | --SD | M] -- C:\Windows\system32\appmgmt\S-1-5-18

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Boot\de-DE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\Boot\en-US

[2009.07.14 06:55:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}

[2012.10.17 20:06:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\com\de-DE

[2009.07.14 04:04:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\com\dmp

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\com\en-US

[2009.07.14 04:04:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\Journal

[2012.10.17 20:53:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\RegBack

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile

[2011.11.29 18:24:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\TxR

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData

[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\system32\config\systemprofile\Favorites

[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local

[2012.07.10 19:45:18 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow

[2010.12.17 02:28:21 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming

[2011.04.22 14:42:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Google

[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft

[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\pdfMachine

[2011.04.22 14:37:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Google\CrashReports

[2010.11.23 12:48:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Google\GBScreensaver

[2012.10.17 21:28:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Device Metadata

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL

[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer

[2010.10.15 14:33:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\OFFICE

[2010.10.14 14:22:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Portable Devices

[2009.07.14 06:41:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows

[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache

[2011.12.02 17:27:48 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache\downloads

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production\temp

[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery

[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High

[2011.08.07 00:41:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active

[2009.07.14 06:37:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files

[2009.07.14 06:41:53 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low

[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized

[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2L4UWCS7

[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O3ZC791N

[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q2Y5HK5G

[2010.11.11 19:44:19 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W9FYELDD

[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Apple Computer

[2012.07.10 19:45:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search

[2010.10.15 14:34:24 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun

[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Apple Computer\QuickTime

[2012.08.30 19:54:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search\cache

[2009.07.14 06:43:06 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache

[2010.10.15 14:34:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\Silverlight

[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content

[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin

[2010.12.17 02:28:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Apple Computer

[2011.08.07 00:41:06 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft

[2012.10.24 18:52:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Apple Computer\Logs

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL

[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production

[2012.10.20 09:14:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production\temp

[2011.08.07 00:41:06 | 000,000,000 | R--D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE\Low

[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\system32\config\systemprofile\Favorites\Links

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Enterprise

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\EnterpriseE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\EnterpriseN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomeBasic

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomeBasicE

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomeBasicN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomePremium

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomePremiumE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\HomePremiumN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Professional

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\ProfessionalE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\ProfessionalN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Starter

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\StarterE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\StarterN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\Ultimate

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\UltimateE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\_Default\UltimateN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Enterprise

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\EnterpriseE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\EnterpriseN

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomeBasic

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomeBasicE

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomeBasicN

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomePremium

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomePremiumE

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\HomePremiumN

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Professional

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\ProfessionalE

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\ProfessionalN

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Starter

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\StarterE

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\StarterN

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\Ultimate

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\UltimateE

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\eval\UltimateN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Enterprise

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\EnterpriseE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\EnterpriseN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomeBasic

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomeBasicE

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomeBasicN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomePremium

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomePremiumE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\HomePremiumN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Professional

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\ProfessionalE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\ProfessionalN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Starter

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\StarterE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\StarterN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\Ultimate

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\UltimateE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE\Licenses\OEM\UltimateN

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism\de-DE

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism\en-US

[2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\AVG

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\de-DE

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\en-US

[2012.10.23 21:39:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\etc

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\de-DE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\en-US

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\de-DE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\en-US

[2012.04.27 20:52:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository

[2012.04.27 20:52:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\Temp

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\1394.inf_x86_neutral_832ec31f25d91fee

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\61883.inf_x86_neutral_f2be571a17fa203a

[2011.09.17 12:54:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\acpi.inf_x86_neutral_a1f4891fe0de4401

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\acpipmi.inf_x86_neutral_71194ee3f26255a7

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\adp94xx.inf_x86_neutral_4928c8870f6a1577

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\adpahci.inf_x86_neutral_b082e95ec9f8c3f9

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\adpu320.inf_x86_neutral_4ea3d42a9839982a

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\af9035bda.inf_x86_neutral_aa11aa34552d1d4d

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\agp.inf_x86_neutral_a61b8b06718e8352

[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\amdsata.inf_x86_neutral_5c3d0d1e97e99e10

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\amdsata.inf_x86_neutral_67db50590108ebd9

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\amdsbs.inf_x86_neutral_5cae6933bef20aa8

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\angel.inf_x86_neutral_8bb84b2b92dfa947

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\angel2.inf_x86_neutral_6a809c9c7f9c8486

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\angelusb.inf_x86_neutral_7bfd84ec2b59623e

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\arc.inf_x86_neutral_11b52dec8e94d9aa

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\arcsas.inf_x86_neutral_c763887719bed95d

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\atiilhag.inf_x86_neutral_1d882551ede2c65b

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\atiriolh.inf_x86_neutral_cdb610d99bcbc631

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\avc.inf_x86_neutral_6ae951c52c898d14

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2h826d_noaverir.inf_x86_neutral_4663ffee9c09b012

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2hbtv.inf_x86_neutral_30c25b3574f8bcf5

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2swtv.inf_x86_neutral_c099b789396c5410

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averfx2swtv_noavin.inf_x86_neutral_622d8263ea46770a

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\averhbh826_noaverir.inf_x86_neutral_620e8a01977ecb40

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\avmisdnc.inf_x86_neutral_e8031e434b323b61

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\battery.inf_x86_neutral_5752155055c5e2d7

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bda.inf_x86_neutral_41c6262952846788

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\blbdrive.inf_x86_neutral_1aa816fe7dc98c3f

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcmdm.inf_x86_neutral_3b38c2e8e6f06c1b

[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcmf.inf_x86_neutral_33717b093227cd8c

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcsto.inf_x86_neutral_39ae61431a44cded

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcumd.inf_x86_neutral_e78e46b32f6347a3

[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfcwia.inf_x86_neutral_2d38149df9cd17c4

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\brmfport.inf_x86_neutral_401d08f12a7f8ee1

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bth.inf_x86_neutral_2d4ce84c4a0b8470

[2011.11.30 03:23:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bth.inf_x86_neutral_92c343c9dc681a74

[2012.04.27 20:52:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthavrcp.inf_x86_neutral_ef3dde218c465a8f

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthmtpenum.inf_x86_neutral_c70e85b87ee4ece9

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthpan.inf_x86_neutral_0ed0bba2c23dd70b

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthprint.inf_x86_neutral_e8a51e97a7c39491

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\bthspp.inf_x86_neutral_c702854f7c2d88b2

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\circlass.inf_x86_neutral_5bbf290689fced8f

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\compositebus.inf_x86_neutral_a53ef080c39c3218

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cpu.inf_x86_neutral_729b871528391032

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\crcdisk.inf_x86_neutral_dd39b6b0a45226c4

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxfalcon_ibv32.inf_x86_neutral_01ff517b4c863eb6

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxfalpal_ibv32.inf_x86_neutral_809fe20c75cbdcae

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxraptor_fm1216mk5_ibv32.inf_x86_neutral_d4097f19ee2b5d2f

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxraptor_fm1236mk5_ibv32.inf_x86_neutral_beee91ccd1e8c623

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\cxraptor_philipstuv1236d_ibv32.inf_x86_neutral_2af0839f9805ea5f

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\dc21x4vm.inf_x86_neutral_8887242a56ee027e

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\digitalmediadevice.inf_x86_neutral_6fd673519d66ab20

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\disk.inf_x86_neutral_b431b61a11f8df6c

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\display.inf_x86_neutral_36353e26d7770ebb

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\divacx86.inf_x86_neutral_d9558f410186db36

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\djsvs.inf_x86_neutral_836a3a3240941631

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\dot4.inf_x86_neutral_b079cf65ff1cb755

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\dot4prt.inf_x86_neutral_ff48d313003e46b8

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\eaphost.inf_x86_neutral_1123a0147c1e97cc

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ehstorcertdrv.inf_x86_neutral_2e1cecffae9c899a

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ehstorpwddrv.inf_x86_neutral_ecd233d7cabbdebf

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\elxstor.inf_x86_neutral_4263942b9dfe9077

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\faxca003.inf_x86_neutral_fd10e857c1342eac

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\faxcn001.inf_x86_neutral_7e5a499c236b8028

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\faxcn002.inf_x86_neutral_29a66691dd7a46a5

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\fdc.inf_x86_neutral_67322cb863995ea8

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\flpydisk.inf_x86_neutral_2102f5344367a352

[2011.01.22 19:16:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\freepdfxp.inf_x86_neutral_391ac37a3eb3478d

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\gameport.inf_x86_neutral_fe5c4f29488f121e

[2011.01.30 15:59:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\grmnusb.inf_x86_neutral_3e4b654f12f06d57

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hal.inf_x86_neutral_bf3422256b0b201d

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hcw72bda.inf_x86_neutral_8c31e8d2dc91b975

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hcw85bda.inf_x86_neutral_0c9092aa3e31c11c

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hcw85cir.inf_x86_neutral_e96b5c9f415a42b6

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hdaudbus.inf_x86_neutral_77479a4820fb8643

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hdaudio.inf_x86_neutral_5a5e688ecb9e273f

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hdaudss.inf_x86_neutral_3f3a26225c0b8f9c

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidbth.inf_x86_neutral_96487048bb26cf0c

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hiddigi.inf_x86_neutral_12aaf5742a9969da

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidir.inf_x86_neutral_a7b6b38a183ef6fe

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidirkbd.inf_x86_neutral_b7b6ffb126da2654

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hidserv.inf_x86_neutral_32c4c73e5497e483

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1nd.inf_x86_neutral_7b6f40298882eaa3

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1sd.inf_x86_neutral_360cdfe0d1ef39bf

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1so.inf_x86_neutral_5b4a3ef5e5601b42

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpoa1ss.inf_x86_neutral_b8a0ac47cc2c2b5d

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\hpsamd.inf_x86_neutral_84ae149ecc9f8033

[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ibtfltcoexhs.inf_x86_neutral_ef26afc63105bc64

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\igdlh.inf_x86_neutral_2d255f193700d214

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iirsp.inf_x86_neutral_25c14d33af7f54f1

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iirsp2.inf_x86_neutral_9ed65fe0bab06b1b

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\image.inf_x86_neutral_7a389207019f8699

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\input.inf_x86_neutral_9e1eba5724be176f

[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ipmidrv.inf_x86_neutral_2084908fa838c2b9

[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\iscsi.inf_x86_neutral_7ad2bf0be3b9a90e

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\keyboard.inf_x86_neutral_50ad659974198591

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ks.inf_x86_neutral_2b583ce4a6a029a1

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\kscaptur.inf_x86_neutral_6cb3fb6811a3f83d

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ksfilter.inf_x86_neutral_92aac3fbbef4a5e4

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_fc.inf_x86_neutral_a7088f3644ca646a

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_sas.inf_x86_neutral_a4d6780f72cbd5b4

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_sas2.inf_x86_neutral_e12a5c4cfbe49204

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\lsi_scsi.inf_x86_neutral_cfbbf0b0b66ba280

[2011.09.17 12:54:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mchgr.inf_x86_neutral_185970e67258389c

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mcx2.inf_x86_neutral_8cf9cade8f7bba56

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdm3com.inf_x86_neutral_61b1d2017160ceb3

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdm5674a.inf_x86_neutral_32e293dc839d3ea6

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmadc.inf_x86_neutral_ce6df7a95faad9ab

[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmagrm.inf_x86_neutral_8ff94c5737626019

[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmagrs.inf_x86_neutral_81c67a5080f3eef2

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmairte.inf_x86_neutral_5bc983e9703af897

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa.inf_x86_neutral_c2d261f9c2b8299f

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa3.inf_x86_neutral_836d7becdc26be7c

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa4.inf_x86_neutral_9a20824e01be5808

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwa5.inf_x86_neutral_d60cbdef6ff206a0

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaiwat.inf_x86_neutral_ade95bcd36fc6206

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmar1.inf_x86_neutral_b0999a224b848025

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmarch.inf_x86_neutral_3ae8598a7913eec2

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmarn.inf_x86_neutral_661b8f49b2e37287

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmati.inf_x86_neutral_96d3e2f4c2326f0b

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmatm2k.inf_x86_neutral_50b7155b64dfef63

[2009.07.14 06:51:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmaus.inf_x86_neutral_a31a27eac8eac079

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmboca.inf_x86_neutral_d8d32cd62c998da9

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr002.inf_x86_neutral_da2024ed84d3191d

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr004.inf_x86_neutral_98c1a220af939228

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr005.inf_x86_neutral_9d6675b8a97638e3

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr006.inf_x86_neutral_ccf3e0108e39bf8b

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr007.inf_x86_neutral_5d5fc97500c2267d

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr008.inf_x86_neutral_7823bcb17f3813ee

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbr00a.inf_x86_neutral_f6d7a36091b1af37

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbsb.inf_x86_neutral_92cc2963ca6a905a

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbtmdm.inf_x86_neutral_321fa2ecf7803227

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbug3.inf_x86_neutral_c29e5576244e2124

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmbw561.inf_x86_neutral_aa3607cf9d93f8c0

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmc26a.inf_x86_neutral_60a854d64d6e68bf

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcdp.inf_x86_neutral_6388368bec8b4e3e

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcm28.inf_x86_neutral_57712de4f9c6d527

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcodex.inf_x86_neutral_b39ddfe03c7a0e60

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcom1.inf_x86_neutral_c239d64c485a0ad2

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcommu.inf_x86_neutral_2f1d25831bc469b5

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcomp.inf_x86_neutral_71908e78cff42441

[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcpq.inf_x86_neutral_9f203c20b6f0dabd

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcpq2.inf_x86_neutral_d5315a7393dd6002

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcpv.inf_x86_neutral_424f03b97cc007db

[2009.07.14 06:51:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcrtix.inf_x86_neutral_c14a1ef4ed1fec95

[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcxav3.inf_x86_neutral_3c9275be906b01dd

[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcxhv3.inf_x86_neutral_15b13e9a734fb085

[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmcxpv3.inf_x86_neutral_fb18b60a7ae25b18

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdcm5.inf_x86_neutral_f7e102d648101629

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdcm6.inf_x86_neutral_1d84a358e9409e1c

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdf56f.inf_x86_neutral_f29859e5e5332dfb

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdgitn.inf_x86_neutral_f557769cb87d8731

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdp2.inf_x86_neutral_b7c1bc32f986a5b3

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdsi.inf_x86_neutral_5352518dfa03c76f

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmdyna.inf_x86_neutral_ae284d0cd38cec95

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmeiger.inf_x86_neutral_f5b5d816f4fe88d7

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmelsa.inf_x86_neutral_035934cfd6dd3122

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmeric.inf_x86_neutral_13608f1b6d6388d9

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmeric2.inf_x86_neutral_ac9c3cb0b5fb00a9

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmetech.inf_x86_neutral_5be2fe46e416a83e

[2009.07.14 06:51:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmfj2.inf_x86_neutral_e800633dd6eedc16

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgatew.inf_x86_neutral_c895ee8908d12f25

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgcs.inf_x86_neutral_4274c7a3888cef70

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgen.inf_x86_neutral_926d65c254079820

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl001.inf_x86_neutral_9209e816461a1a73

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl002.inf_x86_neutral_e204d4267d752eb7

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl003.inf_x86_neutral_4c78da9e48068043

[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl004.inf_x86_neutral_1874f16002601f78

[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl005.inf_x86_neutral_8b56291bfd2a4061

[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl006.inf_x86_neutral_e5693eb731048022

[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl007.inf_x86_neutral_935cd017fcb965ee

[2009.07.14 06:51:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl008.inf_x86_neutral_d225e15af1a594cd

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl009.inf_x86_neutral_bed6224f27f5c478

[2009.07.14 06:51:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgl010.inf_x86_neutral_46f466c9e68abb4a

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmgsm.inf_x86_neutral_b9136824e071aa43

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhaeu.inf_x86_neutral_72bf10d025ec128d

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhandy.inf_x86_neutral_e43d5c3fa1774569

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhay2.inf_x86_neutral_4bc09702f318f9be

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmhayes.inf_x86_neutral_e814828f9fb0d4df

[2009.07.14 06:51:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdminfot.inf_x86_neutral_1403b0133ea862c7

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmiodat.inf_x86_neutral_8f2918b26d48efb3

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmirmdm.inf_x86_neutral_b64ae6e8f8db8514

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmisdn.inf_x86_neutral_c21e340225d7c6d5

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmjf56e.inf_x86_neutral_be032a9152b5642f

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmke.inf_x86_neutral_2ab6764455927942

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmkortx.inf_x86_neutral_25bec1fb48843358

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmlasat.inf_x86_neutral_28293794988ce599

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmlasno.inf_x86_neutral_34eb90af717f869f

[2009.07.14 06:51:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmlucnt.inf_x86_neutral_100c174a78c3e432

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmc288.inf_x86_neutral_904d48d44a7c5ecb

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmcd.inf_x86_neutral_55a9c55fb48473ce

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmcom.inf_x86_neutral_e973b9a1b51c2b2f

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmct.inf_x86_neutral_2175f3d457a013a9

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmega.inf_x86_neutral_056a7f9c2f8ec088

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmetri.inf_x86_neutral_ec5f50ab9ec6191a

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmhrtz.inf_x86_neutral_1c6813a32dde365f

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmhzel.inf_x86_neutral_d6658ac4c3567af0

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmminij.inf_x86_neutral_c8028d505d722f96

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmod.inf_x86_neutral_ff5c77294e038f67

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmoto1.inf_x86_neutral_abac121bbd78f10a

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmotou.inf_x86_neutral_77763577a40a11dc

[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmotsm.inf_x86_neutral_c1415d9789c54b89

[2009.07.14 06:51:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmmts.inf_x86_neutral_4f8efb8b21967e53

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmneuhs.inf_x86_neutral_693dc92cc3806779

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis1u.inf_x86_neutral_21539a0b3ba8c6e3

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis2u.inf_x86_neutral_2a8b0a751f385d39

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis3t.inf_x86_neutral_7113f2971c91fbb8

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnis5t.inf_x86_neutral_d89a2aded51ecac3

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnokia.inf_x86_neutral_a8e9a41983d33a0b

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnova.inf_x86_neutral_81c772e3350d17f3

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmntt1.inf_x86_neutral_187b4c208d1a7adf

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttd2.inf_x86_neutral_697347a56d862efc

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttd6.inf_x86_neutral_1a7790e1a07b710e

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttme.inf_x86_neutral_78a105adf91770cf

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttp.inf_x86_neutral_e4d850f8a1a26fe6

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttp2.inf_x86_neutral_5e37ec17d0b5ace7

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmnttte.inf_x86_neutral_a29230c136fdaf8e

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmolic.inf_x86_neutral_f186913a5367cd56

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmomrn3.inf_x86_neutral_d41ffd65fdae5d15

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmoptn.inf_x86_neutral_6ab26061287b320d

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmosi.inf_x86_neutral_bf94271fafa0d646

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpace.inf_x86_neutral_f5caca1789a3c28b

[2009.07.14 06:51:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpenr.inf_x86_neutral_8075aaa424f36192

[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpin.inf_x86_neutral_f0c406047f5a7dc5

[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpn1.inf_x86_neutral_40a7e43b0adc056b

[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpp.inf_x86_neutral_b53cc77015d962f0

[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmpsion.inf_x86_neutral_26845d3968953608

[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmracal.inf_x86_neutral_b5b12e793f94f3f8

[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock.inf_x86_neutral_60e0e01cc11eeb89

[2009.07.14 06:51:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock3.inf_x86_neutral_c345818f4520db06

[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock4.inf_x86_neutral_3428cf61c6a0bb23

[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmrock5.inf_x86_neutral_e6f3135f34c11cb2

[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsier.inf_x86_neutral_a6200371d3ecdb82

[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsii64.inf_x86_neutral_a32e605ab89d62e6

[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsmart.inf_x86_neutral_daedddd66ae49f4d

[2009.07.14 06:51:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsonyu.inf_x86_neutral_b1ca4e47492f36bc

[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsun1.inf_x86_neutral_6dcf5920efcd8b9b

[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsun2.inf_x86_neutral_50c7c2b8719aaff8

[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsupr3.inf_x86_neutral_dc84399e03fbfcd4

[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsupra.inf_x86_neutral_7474084e6eaf04bc

[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmsuprv.inf_x86_neutral_7d981ed202f564e1

[2009.07.14 06:51:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdk.inf_x86_neutral_31cb3ae015c74d0a

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj2.inf_x86_neutral_1818c9080508de95

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj3.inf_x86_neutral_4af0d99c5345ea90

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj4.inf_x86_neutral_8df3f305ccbf60a5

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj5.inf_x86_neutral_213bea3d7d51bba1

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj6.inf_x86_neutral_2c282453839753e3

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtdkj7.inf_x86_neutral_e82dbe2c7d660711

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtexas.inf_x86_neutral_c193921ec654db8b

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmti.inf_x86_neutral_dcb6f1180d313279

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtkr.inf_x86_neutral_9a6c721a56a4ae4a

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmtron.inf_x86_neutral_898c23c643f818db

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrf.inf_x86_neutral_6fbcae4419a7e461

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrg.inf_x86_neutral_5953e856037c5639

[2009.07.14 06:51:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrgl.inf_x86_neutral_cc23f8899b453d6c

[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrk1.inf_x86_neutral_e1e41e3eef953389

[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmusrsp.inf_x86_neutral_50208ddd73116ac1

[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmvdot.inf_x86_neutral_1d02a3a1c47d9610

[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmvv.inf_x86_neutral_ec2b9772b37353a3

[2009.07.14 06:51:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmwhql0.inf_x86_neutral_df7fb046fec7c967

[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmx5560.inf_x86_neutral_f4f9ee69f0d60bfb

[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzoom.inf_x86_neutral_15bd73698ecdea29

[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzyp.inf_x86_neutral_c2db4af563e94b15

[2009.07.14 06:51:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzyxel.inf_x86_neutral_a555079da4bd8392

[2009.07.14 06:51:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mdmzyxlg.inf_x86_neutral_380073a54d79b567

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\megasas.inf_x86_neutral_395276dd9b7a7448

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\megasas2.inf_x86_neutral_599d713507780ed4

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\megasr.inf_x86_neutral_30b367f92ca46598

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\memory.inf_x86_neutral_0e5e977bd78905af

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mf.inf_x86_neutral_feb8c30ef59487a2

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\modemcsa.inf_x86_neutral_0243209867cd0efc

[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\monitor.inf_x86_neutral_f7168ca1d7f8ec24

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mpio.inf_x86_neutral_18f08f79e68b1972

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msclmd.inf_x86_neutral_1984ed5209e72520

[2009.07.14 09:47:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msdri.inf_x86_neutral_86bb50f34c49ae71

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msdsm.inf_x86_neutral_cacb427259f0d93e

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msdv.inf_x86_neutral_4322b3da4858d42a

[2011.09.17 12:54:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msmouse.inf_x86_neutral_7a9084e0177406eb

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\msports.inf_x86_neutral_c1a802e06677f73f

Teil 4:

Code:

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mstape.inf_x86_neutral_b2cccf4ea41e4c0f

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\mtconfig.inf_x86_neutral_4de24f49b5e60c45

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\multiprt.inf_x86_neutral_988a34fc912eab54

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net1k32.inf_x86_neutral_78f8b10949489fd3

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net1q32.inf_x86_neutral_18f9b5da166792ca

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net1y32.inf_x86_neutral_17f1bc814dc1043f

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net44x32.inf_x86_neutral_70a6663fd52fa256

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net8185.inf_x86_neutral_20a13cfe2956ed8a

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net8187bv32.inf_x86_neutral_4133912759f4531a

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\net8187se86.inf_x86_neutral_dbc0aab1acd9c67e

[2011.08.23 21:58:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netaapl.inf_x86_neutral_b1e5350f88598904

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netathr.inf_x86_neutral_c6f6c3fd633fd5e7

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netb57vx.inf_x86_neutral_575b8ca932333f72

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netbc6.inf_x86_neutral_a7e1745ea707c8d1

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netbvbdx.inf_x86_neutral_6d29499ebc7c7338

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netbxndx.inf_x86_neutral_94ba965704caa228

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nete1e32.inf_x86_neutral_4bf5bdee9123a61d

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nete1g32.inf_x86_neutral_ce57dbaa251ea290

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netefe32.inf_x86_neutral_9590f3b23d1d64f3

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netevbdx.inf_x86_neutral_7f439b41eebc75ae

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netgb6.inf_x86_neutral_437f729e64df024b

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netimm.inf_x86_neutral_9b64397618841a19

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netirda.inf_x86_neutral_93a886f96cea2847

[2010.10.05 19:39:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netirsir.inf_x86_neutral_c4f5b1cfd8f589b3

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netk57x.inf_x86_neutral_5cfca89527c3f708

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl160x.inf_x86_neutral_cef6a4c5e38079d6

[2009.07.14 06:51:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl1c86.inf_x86_neutral_49e2658f4a72e53f

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl1e86.inf_x86_neutral_a34f2431367128ea

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netl260x.inf_x86_neutral_30b3156b81adc0bb

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netloop.inf_x86_neutral_856142fd87f1c21a

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netmyk01.inf_x86_neutral_a3f8c82b61266bbe

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netnvm32.inf_x86_neutral_163a5a97980bb89d

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netnvmx.inf_x86_neutral_7af3f06863f3b983

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netr28.inf_x86_neutral_980e8922b9be3562

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netr28u.inf_x86_neutral_b42b25ec42f762c2

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netr73.inf_x86_neutral_d8d856fa32ab7ec2

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netrndis.inf_x86_neutral_4c56d83f6e4d75b0

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netrtl32.inf_x86_neutral_79fee35a46b8dacd

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netrtx32.inf_x86_neutral_aa92429bfa083dca

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nettun.inf_x86_neutral_49694089c24355d2

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netvfx86.inf_x86_neutral_325ccb4cde393e5d

[2009.07.14 06:51:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netvg62.inf_x86_neutral_4a0e9c58796bca8a

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netvwifibus.inf_x86_neutral_9d0740f32ce81d24

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netw5v32.inf_x86_neutral_a8056bed0ad979c3

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\netxe32.inf_x86_neutral_2d971e2b4a578e3d

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nfrd960.inf_x86_neutral_cfc8c0013e9ede68

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ntprint.inf_x86_neutral_88459cb66b0e2d44

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nulhpopr.inf_x86_neutral_ec00f8f18ac02be3

[2010.10.05 19:38:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nvmo.inf_x86_neutral_3cb41c50f61ecf58

[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14

[2010.10.05 19:26:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nv_disp.inf_x86_neutral_a651bb730e78eedd

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\nv_lh.inf_x86_neutral_bbe628dbdd6fce25

[2012.01.15 18:56:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\p1120dev.inf_x86_neutral_1f7f163763681028

[2010.10.05 21:25:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\p1120dev.inf_x86_neutral_d159b4813c8feae1

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\pcmcia.inf_x86_neutral_42dda5eb5768a3df

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc0.inf_x86_neutral_c24bcc939e6dfc23

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc1.inf_x86_neutral_662220c3016bb4d0

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc10.inf_x86_neutral_2c5d0c618dbfaf2a

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc11.inf_x86_neutral_bb18e5f134c40c68

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc12.inf_x86_neutral_ff7295ba5a46d63f

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc2.inf_x86_neutral_7621f5d62d77f42e

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc3.inf_x86_neutral_1da6abc36a79974f

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc4.inf_x86_neutral_310871d800afa82a

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc5.inf_x86_neutral_2270382453de2dbb

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc6.inf_x86_neutral_2818f7b3b62bdd39

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc7.inf_x86_neutral_348f512722c79525

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc8.inf_x86_neutral_c93e7023ef90e637

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph3xibc9.inf_x86_neutral_ff3a566e4b6ba035

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph6xib32c0.inf_x86_neutral_a7233f8f3a9f58ff

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ph6xib32c1.inf_x86_neutral_569a6f95e9320f9c

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr002.inf_x86_neutral_1d14699bf2d4d936

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr003.inf_x86_neutral_21c4516754f2bda5

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr004.inf_x86_neutral_a976dec554a0be13

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr005.inf_x86_neutral_407befecac90c7f1

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr006.inf_x86_neutral_331a0c6df1c9d3e1

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr007.inf_x86_neutral_af94d26aafd1ca3a

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr008.inf_x86_neutral_87aae9d395393afd

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr009.inf_x86_neutral_3f6b69c8d1091fd8

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr00a.inf_x86_neutral_e9f0919e54780621

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca003.inf_x86_neutral_f0a023edfd5cd833

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00a.inf_x86_neutral_18bf309f5cc01a3a

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00b.inf_x86_neutral_c675b60dd45218c1

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00c.inf_x86_neutral_9339602328d9603b

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00d.inf_x86_neutral_8883e3ab4a33bfbb

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00e.inf_x86_neutral_a70781c21927bfb2

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00f.inf_x86_neutral_b94365c0e502f290

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00g.inf_x86_neutral_b19defbd7969a7c7

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00h.inf_x86_neutral_b859249f26c03a2f

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00i.inf_x86_neutral_ab67935506742738

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00x.inf_x86_neutral_4dacaa756f2a85fc

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00y.inf_x86_neutral_a6e2b48d7bbe4516

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00z.inf_x86_neutral_494753193fc9051a

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep002.inf_x86_neutral_9111d9b86cbd3f64

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep003.inf_x86_neutral_342be98eb74e1449

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep004.inf_x86_neutral_25623e649d146f5d

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep005.inf_x86_neutral_f4a4a2a89cb57323

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00a.inf_x86_neutral_d4494950448771ed

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00b.inf_x86_neutral_d0e9433101a2df79

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00c.inf_x86_neutral_92ff44dcbf1c760c

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00d.inf_x86_neutral_9fef51141804900a

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00e.inf_x86_neutral_2fbbb3b50e96331c

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00f.inf_x86_neutral_07f7a94e565e9af0

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00g.inf_x86_neutral_cb6ac931b3d225af

[2009.07.14 06:51:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00l.inf_x86_neutral_3323920c1a72a42d

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnfx002.inf_x86_neutral_f83f67e1c22e557b

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnge001.inf_x86_neutral_51cbe14e4cdde8c2

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt002.inf_x86_neutral_a10ecaa46786286d

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt003.inf_x86_neutral_eeb0fb3ee2847db5

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt004.inf_x86_neutral_f7b569fe96e4f7ae

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp002.inf_x86_neutral_e6daa9c39ac001a3

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp003.inf_x86_neutral_8685826a5ca37e6b

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp004.inf_x86_neutral_95288ae6f32f1fe7

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp005.inf_x86_neutral_9307c57b91a7985e

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin002.inf_x86_neutral_b9fa18a8d63d5294

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin003.inf_x86_neutral_dca922447801904c

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin004.inf_x86_neutral_2aba7beb4ab9a9e8

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm002.inf_x86_neutral_ded1a36701bddc86

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm003.inf_x86_neutral_ea465b3729b37f54

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm004.inf_x86_neutral_b456c14d5367f83c

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm005.inf_x86_neutral_a2013031e279b6f6

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky002.inf_x86_neutral_141ca768bc51ceff

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky003.inf_x86_neutral_60797ae48ab1b87f

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky004.inf_x86_neutral_dfafbddbf301a9d0

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky005.inf_x86_neutral_8a163d363abb7d5a

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky006.inf_x86_neutral_141ee497dd7c43c1

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky007.inf_x86_neutral_68b0fb35c207d0a0

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky008.inf_x86_neutral_212e30a5479d6fcd

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky009.inf_x86_neutral_f01eb3bc43e6f348

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle002.inf_x86_neutral_e9f41ef23faed72b

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle003.inf_x86_neutral_a8106f7f3af21d88

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle004.inf_x86_neutral_60637fb8287b0bdb

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx002.inf_x86_neutral_b460391110491d41

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx003.inf_x86_neutral_336d87d2fe949d82

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx004.inf_x86_neutral_ce7ad6f91a9470d7

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx005.inf_x86_neutral_18db8f40f5f5b950

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx006.inf_x86_neutral_6e4dca7de1f2cbe6

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx007.inf_x86_neutral_6d0bcfb01c9e96a5

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx008.inf_x86_neutral_7777e9ad978d9704

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx009.inf_x86_neutral_b6bfd02f6a69918b

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00a.inf_x86_neutral_0a6bc7f26d808a89

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00b.inf_x86_neutral_cbb4d358ebfaa1a3

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00c.inf_x86_neutral_7bc7cec2e7b7c3ed

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00d.inf_x86_neutral_303d19e2d575a492

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00e.inf_x86_neutral_ecad95350ea4a9ce

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00v.inf_x86_neutral_52b9cad0a55731b7

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00w.inf_x86_neutral_600a5a25c538ae65

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00x.inf_x86_neutral_4c73c1f7a0f2d2cb

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00y.inf_x86_neutral_a307e415ad8916dc

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00z.inf_x86_neutral_fa9c724522edf9cf

[2009.07.14 06:42:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms001.inf_x86_neutral_1dd3de102185d5d9

[2011.09.17 12:57:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms001.inf_x86_neutral_a1ff1bc29207b04f

[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms002.inf_x86_neutral_baa1493e6380688b

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr002.inf_x86_neutral_b9a1c43c0cb6c940

[2009.07.14 06:51:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr003.inf_x86_neutral_02802729a95f0eed

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr004.inf_x86_neutral_15e7dc89d102e928

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnod002.inf_x86_neutral_c36a5fe1ac15a734

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnok002.inf_x86_neutral_436ff5d24333cca0

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc002.inf_x86_neutral_3fb2e6c401a9c7d8

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc003.inf_x86_neutral_e9198ff5f961d947

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc004.inf_x86_neutral_7d5665e9e43f678d

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc005.inf_x86_neutral_73b01a2655fdb5c5

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc006.inf_x86_neutral_404ca57b9d9c1e47

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc007.inf_x86_neutral_cfebba21b1c02dd7

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00a.inf_x86_neutral_7818fe41c7df6d84

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00b.inf_x86_neutral_354df7938905aa3b

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00c.inf_x86_neutral_d5646e537534e115

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsa002.inf_x86_neutral_db272f9cd17a383f

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsh002.inf_x86_neutral_c41038f4d2ab5958

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnso002.inf_x86_neutral_650312518f503b7b

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv002.inf_x86_neutral_ee0379dbd4a7194e

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv003.inf_x86_neutral_2011fa0a7f786266

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv004.inf_x86_neutral_3ee5a15023f3b3ed

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts002.inf_x86_neutral_8f9e057c9ae8c777

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts003.inf_x86_neutral_b5366a7425b89579

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnxx002.inf_x86_neutral_385ccd442fb8f3bb

[2009.07.14 06:51:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\qd3x86.inf_x86_neutral_b4bd3d3a68e99799

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ql2300.inf_x86_neutral_ca8487daf77ff7cb

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ql40xx.inf_x86_neutral_77a826e5c0a07842

[2009.07.14 06:51:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ql40xx2.inf_x86_neutral_b95932400326817e

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ramdisk.inf_x86_neutral_a5e0c07c2a8b4571

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rawsilo.inf_x86_neutral_a625e7b9dcdf1780

[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rdlsbuscbs.inf_x86_neutral_351e56205fd4c200

[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rdpbus.inf_x86_neutral_27637529205407be

[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rdvgwddm.inf_x86_neutral_345f205da00aaad5

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ricoh.inf_x86_neutral_925e66fc0306537d

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\rndiscmp.inf_x86_neutral_4ca64d28e1be8fa9

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sbp2.inf_x86_neutral_bfc02db3bc163c19

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\scrawpdo.inf_x86_neutral_18f3d1cd9736f87d

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\scsidev.inf_x86_neutral_174cd8d27b46ca16

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sdbus.inf_x86_neutral_47b152eccdb186c8

[2009.07.14 09:47:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sensorsalsdriver.inf_x86_neutral_e8b9902de1fb346a

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sffdisk.inf_x86_neutral_7e5210507f8fc265

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sisraid2.inf_x86_neutral_845e008c32615283

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sisraid4.inf_x86_neutral_65ab84e9830f6f4b

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\smartcrd.inf_x86_neutral_63e72c669d043f14

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\stexstor.inf_x86_neutral_80ee226e29362f51

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\sti.inf_x86_neutral_6a74c91c1f723826

[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\synth3dvsc.inf_x86_neutral_bccbc5fb46a05558

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tape.inf_x86_neutral_2ad11993c0ac6624

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tdibth.inf_x86_neutral_b67cdc538738f6b9

[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\termkbd.inf_x86_neutral_1125d2fa6c2adf13

[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\termmou.inf_x86_neutral_4cc2997d96f50d62

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tpm.inf_x86_neutral_8d77c50b5c066979

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\transfercable.inf_x86_neutral_82f4c743c8996d67

[2011.09.17 12:53:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsgenericusbdriver.inf_x86_neutral_10faa3d9ed6a6c29

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsprint.inf_x86_neutral_c48d421ad2c1e3e3

[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsusbhub.inf_x86_neutral_927afe150d9ff343

[2011.09.17 12:53:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsusbhubfilter.inf_x86_neutral_a0ea34b6bcf6540e

[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ts_generic.inf_x86_neutral_4678e55cce9859ad

[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ts_wpdmtp.inf_x86_neutral_daa64ca27846aa23

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\umbus.inf_x86_neutral_79120b2cb6857971

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\umpass.inf_x86_neutral_8f915e601c25e75b

[2009.07.14 06:51:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\unknown.inf_x86_neutral_aad5835b879ce7e4

[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usb.inf_x86_neutral_1584ed9878602b0f

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usb.inf_x86_neutral_2620fd493cad7d41

[2011.08.23 21:58:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbaapl.inf_x86_neutral_1e34817a8e80d76d

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbcir.inf_x86_neutral_43aeabd51df61d2c

[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbport.inf_x86_neutral_18e46bb8fd6f032e

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbport.inf_x86_neutral_f9abf85fd00186bd

[2009.07.14 06:51:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbprint.inf_x86_neutral_203e16627752a160

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbstor.inf_x86_neutral_c77d41a490bdc63d

[2011.09.18 08:58:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbstor.inf_x86_neutral_e6d53e776821c5b8

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\usbvideo.inf_x86_neutral_8fe3504355514e0c

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\vhdmp.inf_x86_neutral_efa659e9a38d5b8c

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\volsnap.inf_x86_neutral_42f862e05fcb0306

[2011.09.17 12:54:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\vsmraid.inf_x86_neutral_be11b7aaa746e92d

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\v_mscdsc.inf_x86_neutral_ef3a0c30c03f0225

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wave.inf_x86_neutral_a86dc645b68a1b2f

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wceisvista.inf_x86_neutral_3500779911f7f3ca

[2009.07.14 06:51:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wd.inf_x86_neutral_81cae93d8afd51d5

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wdmaudio.inf_x86_neutral_aed2a4456700dfde

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wdma_usb.inf_x86_neutral_a721e4f3907a2769

[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wdmvsc.inf_x86_neutral_a2cf745000e2ea92

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr002.inf_x86_neutral_001cc6b7e8835965

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr004.inf_x86_neutral_7d1d9b8c3c8f2a9e

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr005.inf_x86_neutral_ad07b12feea9a3ff

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr006.inf_x86_neutral_4eaab35acf775ef3

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr007.inf_x86_neutral_50c5638ba44de2c4

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr008.inf_x86_neutral_73557b9c99d61d54

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr009.inf_x86_neutral_f9fcfafc6cd98b47

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiabr00a.inf_x86_neutral_ac88c3f9903ef7c8

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00a.inf_x86_neutral_02cc6c151e42a79e

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00b.inf_x86_neutral_c60fc0e9500f223d

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00c.inf_x86_neutral_53fa05c2a4afede5

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00d.inf_x86_neutral_18a2362487e9d14a

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00e.inf_x86_neutral_460d611128d40de9

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00f.inf_x86_neutral_635bf81e41f3872f

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaca00i.inf_x86_neutral_caf094f37544a669

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiacn001.inf_x86_neutral_d961f50801bfb4ab

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaep002.inf_x86_neutral_f695353fd0a22a29

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaep003.inf_x86_neutral_eef30f8de263d9ad

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiahp001.inf_x86_neutral_dae31af07561f03f

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaky002.inf_x86_neutral_c4a21cbd41020ee5

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx002.inf_x86_neutral_1dc4f8e789cfb4f0

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx003.inf_x86_neutral_c74d32723c75b87b

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx004.inf_x86_neutral_f6a21289cb5f23b6

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx005.inf_x86_neutral_dfd299ed243bbc21

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wialx006.inf_x86_neutral_3a78b4761e61c040

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiasa002.inf_x86_neutral_d00cb75222cc8460

[2009.07.14 06:51:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wiaxx002.inf_x86_neutral_47abc82fbe682ba5

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\windowssideshowenhanceddriver.inf_x86_neutral_184a2ef2a8f57c33

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\winusb.inf_x86_neutral_6cb50ae9f480775b

[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wnetvsc.inf_x86_neutral_548addf09cb466fa

[2011.09.17 12:54:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdcomp.inf_x86_neutral_c74d9db8cbb3545c

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdfs.inf_x86_neutral_fc4ebadff3a40ae4

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdmtp.inf_x86_neutral_28f06ca2e38e8979

[2009.07.14 06:51:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wpdmtphw.inf_x86_neutral_a7a22bb0bb81abb0

[2011.09.17 12:54:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ws3cap.inf_x86_neutral_dac7c9faa4fc2a78

[2009.07.14 06:51:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wsdprint.inf_x86_neutral_05711b33589b27a9

[2009.07.14 06:51:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wsdscdrv.inf_x86_neutral_93205116e7f7a608

[2011.09.17 12:54:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wstorflt.inf_x86_neutral_3db956c41708f7f5

[2011.09.17 12:54:05 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wstorvsc.inf_x86_neutral_d7bf942e99bb1d41

[2011.09.17 12:54:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wudfusbcciddriver.inf_x86_neutral_b961cfda3f3ba863

[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmbus.inf_x86_neutral_fca91999602b0343

[2011.09.17 12:54:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmbushid.inf_x86_neutral_337ff5bbc81c06e8

[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmbusvideo.inf_x86_neutral_1b297af3587246aa

[2011.09.17 12:54:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\wvmic.inf_x86_neutral_b94eb92e8150fa35

[2009.07.14 06:51:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\xcbdav.inf_x86_neutral_8e8664e62708b91f

[2009.07.14 06:51:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\xnacc.inf_x86_neutral_13c4e272a96185a1

[2011.01.30 15:59:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\grmnusb.inf_x86_neutral_3e4b654f12f06d57\I386

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ibtfltcoexhs.inf_x86_neutral_ef26afc63105bc64\Win32

[2011.09.17 12:53:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\ntprint.inf_x86_neutral_88459cb66b0e2d44\I386

[2009.07.14 06:50:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr002.inf_x86_neutral_1d14699bf2d4d936\I386

[2009.07.14 06:50:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr003.inf_x86_neutral_21c4516754f2bda5\I386

[2009.07.14 06:50:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr004.inf_x86_neutral_a976dec554a0be13\I386

[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr005.inf_x86_neutral_407befecac90c7f1\I386

[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr006.inf_x86_neutral_331a0c6df1c9d3e1\I386

[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr007.inf_x86_neutral_af94d26aafd1ca3a\I386

[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr008.inf_x86_neutral_87aae9d395393afd\I386

[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr009.inf_x86_neutral_3f6b69c8d1091fd8\I386

[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnbr00a.inf_x86_neutral_e9f0919e54780621\I386

[2009.07.14 06:50:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca003.inf_x86_neutral_f0a023edfd5cd833\I386

[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00a.inf_x86_neutral_18bf309f5cc01a3a\I386

[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00b.inf_x86_neutral_c675b60dd45218c1\I386

[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00c.inf_x86_neutral_9339602328d9603b\I386

[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00d.inf_x86_neutral_8883e3ab4a33bfbb\I386

[2009.07.14 06:50:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00e.inf_x86_neutral_a70781c21927bfb2\I386

[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00f.inf_x86_neutral_b94365c0e502f290\I386

[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00g.inf_x86_neutral_b19defbd7969a7c7\I386

[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00h.inf_x86_neutral_b859249f26c03a2f\I386

[2009.07.14 06:50:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00i.inf_x86_neutral_ab67935506742738\I386

[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00x.inf_x86_neutral_4dacaa756f2a85fc\I386

[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00y.inf_x86_neutral_a6e2b48d7bbe4516\I386

[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnca00z.inf_x86_neutral_494753193fc9051a\I386

[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep002.inf_x86_neutral_9111d9b86cbd3f64\I386

[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep003.inf_x86_neutral_342be98eb74e1449\I386

[2009.07.14 06:51:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep004.inf_x86_neutral_25623e649d146f5d\I386

[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep005.inf_x86_neutral_f4a4a2a89cb57323\I386

[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00a.inf_x86_neutral_d4494950448771ed\I386

[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00b.inf_x86_neutral_d0e9433101a2df79\I386

[2009.07.14 06:51:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00c.inf_x86_neutral_92ff44dcbf1c760c\I386

[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00d.inf_x86_neutral_9fef51141804900a\I386

[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00e.inf_x86_neutral_2fbbb3b50e96331c\I386

[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00f.inf_x86_neutral_07f7a94e565e9af0\I386

[2009.07.14 06:51:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00g.inf_x86_neutral_cb6ac931b3d225af\I386

[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnep00l.inf_x86_neutral_3323920c1a72a42d\I386

[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnfx002.inf_x86_neutral_f83f67e1c22e557b\I386

[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnge001.inf_x86_neutral_51cbe14e4cdde8c2\I386

[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt002.inf_x86_neutral_a10ecaa46786286d\I386

[2009.07.14 06:51:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt003.inf_x86_neutral_eeb0fb3ee2847db5\I386

[2009.07.14 06:51:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prngt004.inf_x86_neutral_f7b569fe96e4f7ae\I386

[2009.07.14 06:51:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp002.inf_x86_neutral_e6daa9c39ac001a3\I386

[2009.07.14 06:51:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp003.inf_x86_neutral_8685826a5ca37e6b\I386

[2009.07.14 06:51:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp004.inf_x86_neutral_95288ae6f32f1fe7\I386

[2009.07.14 06:51:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnhp005.inf_x86_neutral_9307c57b91a7985e\I386

[2009.07.14 06:51:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin002.inf_x86_neutral_b9fa18a8d63d5294\I386

[2009.07.14 06:51:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin003.inf_x86_neutral_dca922447801904c\I386

[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnin004.inf_x86_neutral_2aba7beb4ab9a9e8\I386

[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm002.inf_x86_neutral_ded1a36701bddc86\I386

[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm003.inf_x86_neutral_ea465b3729b37f54\I386

[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm004.inf_x86_neutral_b456c14d5367f83c\I386

[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnkm005.inf_x86_neutral_a2013031e279b6f6\I386

[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky002.inf_x86_neutral_141ca768bc51ceff\I386

[2009.07.14 06:51:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky003.inf_x86_neutral_60797ae48ab1b87f\I386

[2009.07.14 06:51:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky004.inf_x86_neutral_dfafbddbf301a9d0\I386

[2009.07.14 06:51:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky005.inf_x86_neutral_8a163d363abb7d5a\I386

[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky006.inf_x86_neutral_141ee497dd7c43c1\I386

[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky007.inf_x86_neutral_68b0fb35c207d0a0\I386

[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky008.inf_x86_neutral_212e30a5479d6fcd\I386

[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnky009.inf_x86_neutral_f01eb3bc43e6f348\I386

[2009.07.14 06:51:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle002.inf_x86_neutral_e9f41ef23faed72b\I386

[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle003.inf_x86_neutral_a8106f7f3af21d88\I386

[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnle004.inf_x86_neutral_60637fb8287b0bdb\I386

[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx002.inf_x86_neutral_b460391110491d41\I386

[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx003.inf_x86_neutral_336d87d2fe949d82\I386

[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx004.inf_x86_neutral_ce7ad6f91a9470d7\I386

[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx005.inf_x86_neutral_18db8f40f5f5b950\I386

[2009.07.14 06:51:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx006.inf_x86_neutral_6e4dca7de1f2cbe6\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx007.inf_x86_neutral_6d0bcfb01c9e96a5\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx008.inf_x86_neutral_7777e9ad978d9704\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx009.inf_x86_neutral_b6bfd02f6a69918b\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00a.inf_x86_neutral_0a6bc7f26d808a89\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00b.inf_x86_neutral_cbb4d358ebfaa1a3\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00c.inf_x86_neutral_7bc7cec2e7b7c3ed\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00d.inf_x86_neutral_303d19e2d575a492\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00e.inf_x86_neutral_ecad95350ea4a9ce\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00v.inf_x86_neutral_52b9cad0a55731b7\I386

[2009.07.14 06:51:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00w.inf_x86_neutral_600a5a25c538ae65\I386

[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00x.inf_x86_neutral_4c73c1f7a0f2d2cb\I386

[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00y.inf_x86_neutral_a307e415ad8916dc\I386

[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnlx00z.inf_x86_neutral_fa9c724522edf9cf\I386

[2011.09.17 12:53:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnms002.inf_x86_neutral_baa1493e6380688b\I386

[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr002.inf_x86_neutral_b9a1c43c0cb6c940\I386

[2009.07.14 06:51:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr003.inf_x86_neutral_02802729a95f0eed\I386

[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnnr004.inf_x86_neutral_15e7dc89d102e928\I386

[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnod002.inf_x86_neutral_c36a5fe1ac15a734\I386

[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnok002.inf_x86_neutral_436ff5d24333cca0\I386

[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc002.inf_x86_neutral_3fb2e6c401a9c7d8\I386

[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc003.inf_x86_neutral_e9198ff5f961d947\I386

[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc004.inf_x86_neutral_7d5665e9e43f678d\I386

[2009.07.14 06:51:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc005.inf_x86_neutral_73b01a2655fdb5c5\I386

[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc006.inf_x86_neutral_404ca57b9d9c1e47\I386

[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc007.inf_x86_neutral_cfebba21b1c02dd7\I386

[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00a.inf_x86_neutral_7818fe41c7df6d84\I386

[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00b.inf_x86_neutral_354df7938905aa3b\I386

[2009.07.14 06:51:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnrc00c.inf_x86_neutral_d5646e537534e115\I386

[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsa002.inf_x86_neutral_db272f9cd17a383f\I386

[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsh002.inf_x86_neutral_c41038f4d2ab5958\I386

[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnso002.inf_x86_neutral_650312518f503b7b\I386

[2009.07.14 06:51:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv002.inf_x86_neutral_ee0379dbd4a7194e\I386

[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv003.inf_x86_neutral_2011fa0a7f786266\I386

[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnsv004.inf_x86_neutral_3ee5a15023f3b3ed\I386

[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts002.inf_x86_neutral_8f9e057c9ae8c777\I386

[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnts003.inf_x86_neutral_b5366a7425b89579\I386

[2009.07.14 06:51:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\prnxx002.inf_x86_neutral_385ccd442fb8f3bb\I386

[2011.09.17 12:53:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\transfercable.inf_x86_neutral_82f4c743c8996d67\x86

[2011.09.17 12:53:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\FileRepository\tsprint.inf_x86_neutral_c48d421ad2c1e3e3\i386

[2009.07.14 06:42:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore\Temp\{6f3fd468-5fcf-59bb-59ac-0d62d16bc66f}

[2010.12.17 02:30:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C

[2010.12.17 02:30:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Enterprise

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\EnterpriseE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\EnterpriseN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomeBasic

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomeBasicE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomeBasicN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomePremium

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomePremiumE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\HomePremiumN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Professional

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\ProfessionalE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\ProfessionalN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Starter

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\StarterE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\StarterN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\Ultimate

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\UltimateE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\_Default\UltimateN

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Enterprise

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\EnterpriseE

[2011.09.17 12:54:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\EnterpriseN

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomeBasic

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomeBasicE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomeBasicN

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomePremium

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomePremiumE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\HomePremiumN

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Professional

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\ProfessionalE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\ProfessionalN

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Starter

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\StarterE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\StarterN

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\Ultimate

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\UltimateE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\eval\UltimateN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Enterprise

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\EnterpriseE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\EnterpriseN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomeBasic

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomeBasicE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomeBasicN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomePremium

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomePremiumE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\HomePremiumN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Professional

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\ProfessionalE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\ProfessionalN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Starter

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\StarterE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\StarterN

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\Ultimate

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\UltimateE

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US\Licenses\OEM\UltimateN

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ar-sa

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\bg-bg

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\cs-cz

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\da-dk

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\de-de

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\el-gr

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\en-us

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\es-es

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\et-ee

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\fi-fi

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\fr-fr

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\he-il

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\hr-hr

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\hu-hu

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\it-it

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ja-jp

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ko-kr

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\lt-lt

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\lv-lv

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\nb-no

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\nl-nl

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\pl-pl

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\pt-br

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\pt-pt

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ro-ro

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\ru-ru

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sk-sk

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sl-si

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sr-latn-cs

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\sv-se

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\th-th

[2011.09.17 11:35:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\tr-tr

[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\uk-ua

[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\zh-cn

[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\zh-hk

[2011.09.17 11:35:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\EventProviders\zh-tw

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMEJP10

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\imekr8

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMESC5

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMETC10

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\shared

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMEJP10\APPLETS

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\imekr8\applets

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\imekr8\dicts

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMESC5\applets

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\IMETC10\applets

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME\shared\res

[2010.10.05 19:40:40 | 000,000,000 | --SD | M] -- C:\Windows\system32\LogFiles\AIT

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Fax

[2009.07.14 04:03:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Firewall

[2010.10.08 01:04:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\HTTPERR

[2011.10.19 18:20:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Scm

[2010.10.06 05:00:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\SQM

[2011.11.29 18:24:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Srt

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Windows Portable Devices

[2009.07.14 06:34:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\WMI

[2010.10.05 19:18:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\WUDF

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Fax\Incoming

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\Fax\Outgoing

[2012.10.24 18:52:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles\WMI\RtBackup

[2012.10.17 22:16:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\Macromed\Flash

[2010.10.08 02:46:39 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect

[2012.09.10 17:20:21 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-18

[2012.09.10 19:26:57 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-19

[2010.10.08 02:46:40 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-20

[2012.09.10 17:19:01 | 000,000,000 | --SD | M] -- C:\Windows\system32\Microsoft\Protect\S-1-5-18\User

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\de-DE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\en-US

[2011.09.17 12:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT

[2011.09.17 12:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\dlmanifests

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\replacementmanifests

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\dlmanifests\Microsoft-Windows-RasServer-MigPlugin

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasApi-MigPlugin

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasServer-MigPlugin

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\de-DE

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\en-US

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\BITSExtensions-Server

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-ActiveDirectory-WebServices-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-ADFS-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-Bluetooth-Config

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-COM-ComPlus-Setup-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-COM-DTC-Setup-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-DHCPServerMigPlugin-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-DirectoryServices-ADAM-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-IasServer-MigPlugin

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-IE-ESC

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-IIS-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-International-Core-DL

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer-DRM-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-msmq-messagingcoreservice

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-NDIS

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-NetworkBridge

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-NetworkLoadBalancing-Core

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-OfflineFiles-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-PerformanceCounterInfrastructure-DL

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-RasApi

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-RasConnectionManager

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-RasServer-MigPlugin

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-shmig-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-StorageMigration

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-Sxs

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-TapiSetup

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-Unimodem-Config

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Microsoft-Windows-WMI-Core

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\dlmanifests\Networking-MPSSVC-Svc

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes\data

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes\Web

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\PostMigRes\Web\base_images

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-activedirectory-webservices

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-international-core

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-audio-mmecore-other

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-GameUXMig

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-iis-rm

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-ndis

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-OfflineFiles-Core

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\microsoft-windows-shmig

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-AppServer-Licensing

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-LicenseServer

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\Usb

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz\replacementmanifests\WindowsSearchEngine

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\Msdtc\Trace

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI\0407

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI\0409

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI\dispspec

[2010.10.05 19:17:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList\Icons

[2009.07.14 04:37:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList\Icons\StockIcons

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe\de-DE

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup\de-DE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr\0407

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr\0409

[2009.07.14 04:04:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Manifests

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Schema

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Store

[2012.10.17 20:15:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\SMI\Store\Machine

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Common

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines\SR

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines\SR\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\Engines\SR\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX\en-gb

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech\SpeechUX\en-us

[2011.08.07 00:29:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers

[2012.10.06 20:01:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\PRINTERS

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs

[2009.07.14 06:41:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\SERVERS

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools

[2011.01.13 04:53:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\color

[2009.07.14 06:42:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\IA64

[2011.09.17 12:57:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86

[2011.08.07 00:29:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\WIN40

[2009.07.14 06:42:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\x64

[2011.09.17 12:57:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3

[2011.01.18 20:04:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\I386

[2011.09.18 08:58:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\PCC

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\de-DE

[2009.07.14 09:49:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\mui

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\mui\0407

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\drivers\w32x86\3\mui\0409

[2011.09.18 08:58:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs\w32x86

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs\w32x86\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\prtprocs\w32x86\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools\de-DE

[2009.07.14 09:49:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools\en-US

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool\tools\Microsoft XPS Document Writer

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\plugin-manifests-signed

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\channels

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\identity

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\issuance

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\pkeyconfig

[2011.09.18 08:58:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\ppdlic

[2009.07.14 09:49:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\skus

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\channels\OCUR

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp\tokens\skus\Security-SPP-Component-SKU-Ultimate

[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ar-sa

[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\bg-bg

[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\cs-cz

[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\da-dk

[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\de-de

[2011.09.17 11:36:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\el-gr

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\en-us

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\es-es

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\et-ee

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\fi-fi

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\fr-fr

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\he-il

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\hr-hr

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\hu-hu

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\it-it

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ja-jp

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ko-kr

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\lt-lt

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\lv-lv

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\nb-no

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\nl-nl

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\pl-pl

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\pt-br

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\pt-pt

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ro-ro

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\ru-ru

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sk-sk

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sl-si

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sr-latn-cs

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\sv-se

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\th-th

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\tr-tr

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\uk-ua

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\zh-cn

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\zh-hk

[2011.09.17 11:36:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\SPReview\zh-tw

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\de-DE

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\en-US

[2010.10.05 19:15:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\Panther

[2010.10.05 19:15:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep\Panther\IE

[2011.08.23 21:55:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Apple

[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft

[2009.07.14 06:54:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\WPD

[2010.10.17 17:58:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Office Genuine Advantage

[2010.10.17 03:00:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows

[2011.10.19 18:20:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows Defender

[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows Live

[2012.07.13 21:11:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows Live\SOXE

[2009.07.14 06:41:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Active Directory Rights Management Services Client

[2009.07.14 06:42:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\AppID

[2009.07.14 06:41:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Application Experience

[2009.07.14 06:37:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Autochk

[2009.07.14 06:42:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Bluetooth

[2009.07.14 06:41:10 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\CertificateServicesClient

[2009.07.14 06:53:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Customer Experience Improvement Program

[2009.07.14 06:46:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Defrag

[2009.07.14 06:42:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Diagnosis

[2010.10.05 19:15:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\DiskDiagnostic

[2009.07.14 06:42:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Location

[2009.07.14 06:42:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Maintenance

[2010.10.08 02:46:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Media Center

[2009.07.14 06:41:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\MemoryDiagnostic

[2010.10.05 19:15:34 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\MobilePC

[2009.07.14 06:41:56 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\MUI

[2009.07.14 06:42:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Multimedia

[2009.07.14 06:42:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\NetTrace

[2009.07.14 06:53:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\NetworkAccessProtection

[2010.10.05 19:15:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Offline Files

[2009.07.14 06:42:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\PerfTrack

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\PLA

[2009.07.14 06:41:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics

[2009.07.14 06:53:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\RAC

[2009.07.14 06:37:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Ras

[2009.07.14 06:42:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Registry

[2009.07.14 04:05:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update

[2009.07.14 06:42:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\RemoteAssistance

[2009.07.14 06:53:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Shell

[2010.10.05 19:15:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SideShow

[2009.07.14 06:37:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SyncCenter

[2009.07.14 06:46:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\SystemRestore

[2009.07.14 06:41:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Task Manager

[2009.07.14 06:41:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Tcpip

[2009.07.14 06:41:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\TextServicesFramework

[2009.07.14 06:37:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Time Synchronization

[2009.07.14 06:37:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\UPnP

[2009.07.14 06:41:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\User Profile Service

[2009.07.14 06:37:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\WDI

[2011.10.19 18:02:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Activation Technologies

[2009.07.14 06:37:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Error Reporting

[2009.07.14 06:37:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Filtering Platform

[2009.07.14 06:46:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Windows Media Sharing

Nun der 5 und letzte Teil:

Code:

[2009.07.14 06:42:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\WindowsBackup

[2009.07.14 06:42:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\WindowsColorSystem

[2009.07.14 09:49:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\Media Center\Extender

[2009.07.14 06:53:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft\Windows\PLA\System

[2011.09.17 12:58:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\AutoRecover

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\de-DE

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\en-US

[2009.07.14 04:03:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\Logs

[2009.07.14 06:53:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\MOF

[2012.10.02 16:12:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\Performance

[2012.10.24 18:52:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\repository

[2009.07.14 04:05:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\tmf

[2009.07.14 04:37:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\xml

[2009.07.14 06:53:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\MOF\bad

[2009.07.14 06:53:50 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem\MOF\good

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN\de-DE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN\en-US

[2010.10.05 19:13:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\LogFiles

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\perftrack

[2011.10.31 16:00:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}

[2012.10.24 19:02:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}

[2011.10.31 16:00:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}

[2012.10.23 21:41:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{04be64eb-7974-44da-b3d9-023ebd7b00c4}

[2012.10.05 12:06:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{07e18c0e-394b-4b51-b4b0-667461dec993}

[2012.09.29 17:20:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{07ff3b59-ddb8-495b-b947-98b655b2a452}

[2012.10.21 19:02:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{08a2eeca-422b-4943-a2c1-f34551feb973}

[2012.10.03 18:56:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{090c95c8-e261-4441-aa79-be047a0b5420}

[2012.10.05 16:28:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{0c6b2989-a6c4-4a10-a5cd-824fcc276777}

[2012.10.22 22:43:29 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{136b12c6-b72e-4053-a7fb-c5de7cd11d31}

[2012.10.05 23:47:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1385a8fb-61fd-4640-b0c8-4dd5ad7ecccf}

[2012.09.30 18:32:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1e90db51-3396-47df-ba5f-8b2ce8863237}

[2012.09.30 19:56:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{1eb78503-aaf9-4cea-abc3-613213007517}

[2012.09.30 14:29:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{27bb092d-9857-49e5-8260-88d323591cea}

[2012.10.04 12:24:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{27bd2e84-3552-48a1-9100-160c0b68e4c3}

[2012.10.17 20:35:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{29fa9cc7-2e4a-4b0a-8f03-045e2a337ce5}

[2012.09.25 18:53:46 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2abe5d6d-3b70-438f-a057-a5d61c39f48c}

[2012.10.23 20:16:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2d5ef46b-ce59-47bb-b250-8c0c3d844495}

[2012.09.28 11:43:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{2dd00525-204a-47de-9fdb-9589c9b6362d}

[2012.10.20 09:16:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{31d267a2-1400-4703-8694-dedbfbdcb57c}

[2012.09.24 22:29:32 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{336b703e-b8c3-417b-be6c-fed9b7762b86}

[2012.09.25 17:15:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{37cf8fff-99d6-412b-b314-490259b9a30c}

[2012.10.04 13:22:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{41ad2d59-9fd3-41ff-a538-0c47ffa63430}

[2012.09.29 18:53:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{43a618ae-91a0-45f4-9db7-715a2a25857f}

[2012.09.28 13:28:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{4cd680b6-e738-415a-9932-57251e226971}

[2012.10.21 17:52:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{4d1fa960-b5fd-47d2-ae36-8a232d7ee52e}

[2012.10.03 07:23:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{4daea611-d384-4410-a458-66221245d3bd}

[2012.09.27 07:27:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{56cc3223-4692-4455-a681-1a2f70b57543}

[2012.10.22 19:46:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{5710c98d-8a05-4e07-a558-7c3f5a05360b}

[2012.09.28 12:40:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{57d8cced-c0d5-4644-85b8-6a07b83b3f6d}

[2012.09.29 13:14:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{59584f17-e233-47ce-a435-1849f5121286}

[2012.10.17 20:18:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{614e20f2-2fcf-49f0-8b42-701960266cb9}

[2012.10.24 18:53:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{61fccfee-9825-4d12-ac9d-c620a4cff3f4}

[2012.09.29 16:29:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{63e39e96-cb29-4aff-9738-6c08044d61a6}

[2012.10.17 21:23:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{6657425d-7d22-40d5-a6a5-fd274dfbf2b4}

[2012.10.01 19:15:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{744bfd14-a6d5-42ac-84d4-4a21c96875b4}

[2012.10.21 20:08:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7535428b-b713-4924-911f-a8d0786863e7}

[2012.09.27 20:04:51 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{76cec45c-5d4b-4170-a757-07bd665490e0}

[2012.10.24 07:27:06 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{76fa4d8f-09d6-4a86-a22d-c5d9951d82f8}

[2012.10.21 01:20:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{775e4fa5-d553-4184-b346-45fe9509bcc4}

[2012.09.29 19:18:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7845ece5-7dc0-4df2-a607-90d33c44c8cf}

[2012.10.02 12:58:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7aead139-453e-4442-a256-cb96b30a220e}

[2012.09.30 16:52:39 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{7de3a462-1696-4e0c-a23f-cb5a27ea3c9f}

[2012.09.29 11:39:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{80588938-6a7e-495c-8145-8d3f89bbe4db}

[2012.10.08 22:29:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{83495eb8-074b-40a2-b39a-3c9030eff9fc}

[2012.10.21 22:31:28 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{871cffa1-59b0-4b43-ae2f-7446bff6764f}

[2012.10.19 08:44:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8744afcd-b515-4f04-992d-8861809c3c1a}

[2012.10.22 08:06:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8817e2eb-ff47-4a4e-8a2e-a9d9462e456c}

[2012.10.03 09:42:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8822b9dd-5939-46a1-bfb2-08de089ddd33}

[2012.09.26 09:12:22 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{89c9db24-4dab-42ab-9378-357bf1f94ce3}

[2012.10.01 17:03:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8b185b3b-a21c-4ef5-b3db-725653b9078e}

[2012.10.02 09:15:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8bd6475d-f6aa-4a6b-9510-a30cf97c16b0}

[2012.09.25 08:40:54 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{8f7edde5-6c95-4e44-ab7b-d206e865b0a8}

[2012.09.28 09:55:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{95e3721d-460f-4057-a762-d4b91ab45053}

[2012.09.30 11:04:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{9b252490-8ab5-402d-beb3-97e69ea99d03}

[2012.10.04 08:53:11 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{9ece8c30-0290-4323-af40-59926586d752}

[2012.10.21 18:00:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a1ec208d-2794-4912-8a48-2f2fc28aee38}

[2012.10.05 08:30:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a5806577-7e56-42ba-b623-29f23b31486e}

[2012.10.21 13:16:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{a9144061-d2da-4cf3-9fc6-ecf92efc6246}

[2012.10.20 18:07:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{ac74bf24-160f-473f-ade6-28b86db5af8e}

[2012.10.22 14:49:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{af11f992-c464-47d0-b922-369c3a533d03}

[2012.10.24 14:35:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{af6de6a6-1bb2-49fb-9015-4ed3ba522de2}

[2012.09.29 18:31:21 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bad4f58f-eccd-48f8-bb50-aca9362744eb}

[2012.10.21 21:18:37 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bbd742bd-cbd9-4913-b42a-f240ae806675}

[2012.10.06 13:31:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bd0cd6f2-2462-48ef-a240-44e45bdb50bb}

[2012.10.01 07:27:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bd33452f-efd1-4390-81f4-4f951af7db39}

[2012.09.24 19:18:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{bec541ae-da8c-45ea-925c-63e3d1cce23e}

[2012.10.17 20:02:22 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c4193530-06e7-4a99-9d0d-7303ce706c38}

[2012.10.06 01:07:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c4ba94bb-9748-4515-9b02-6a2f59c5c216}

[2012.10.02 16:10:37 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c6632295-9b33-43e1-b0e9-1f5dea649562}

[2012.09.25 15:44:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c6d2fa29-9b9d-4fb7-b491-c524cc422f9e}

[2012.10.05 12:28:22 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c7b9f4a8-3817-4e82-bb83-a6f203d177f1}

[2012.10.06 17:45:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c838dafc-ce9c-49c7-a365-2ef5875536d3}

[2012.10.23 11:46:08 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c8a1c6f7-1af5-4dec-a545-40ba6b82609c}

[2012.09.26 20:13:49 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{c9e72a70-e9c7-4874-9c79-a36cb4051058}

[2012.09.25 21:04:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{cd943439-fbc6-4b20-b4d0-c87178bfab86}

[2012.10.16 20:56:18 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{cec86649-a4d6-4219-a813-3d0a2c38260c}

[2012.10.02 14:55:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{d0bff252-f4f5-4a7d-bad3-84df1ade405e}

[2012.10.20 13:45:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{d0fd97e7-289f-49ae-b758-9d8855258191}

[2012.10.04 16:59:59 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{dfbf67ec-79ed-4168-a216-8b3efb4a8956}

[2012.09.25 19:31:44 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e2c3ca69-7971-488b-b04d-f1f4950c3b72}

[2012.09.27 17:26:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e343bd05-b07f-4164-97f6-7c20472b78a8}

[2012.10.16 20:39:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e4c8e706-ef6a-40ea-9245-156312bac845}

[2012.10.18 20:03:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e4e56cfa-3a5f-4bc7-bcf9-db959994481a}

[2012.10.17 17:29:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e67f66d8-6956-4b99-bd96-9ef24ccbe682}

[2012.09.28 19:45:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{e9c440a3-27cb-4f84-a5f2-3c904fd24992}

[2012.09.27 15:08:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{ea8b9a5a-c786-4fe1-a91c-78e160a6a01e}

[2012.10.02 17:10:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f01aeed6-68b9-4707-9f8b-968d3fdc7962}

[2012.10.05 13:44:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f19a56c4-528f-4354-a7c8-a0631b582a68}

[2012.10.23 08:10:58 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f4fa90d9-83e9-4b71-836c-ab6d06877a2f}

[2012.09.26 12:20:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{f5852e2e-6928-4c67-89c3-74040ccc9ec1}

[2012.09.27 12:16:40 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{fbc714cc-a2b0-47ed-8746-e4cc49f0f3fd}

[2012.10.02 11:08:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\{ffc5aeb3-633a-4610-8b82-f85671d56dc4}

[2009.07.14 06:52:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi\perftrack\traces

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioPlugIns\de-DE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\WinBioPlugIns\en-US

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0

[2011.09.17 12:54:53 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\en-US

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Examples

[2009.07.14 09:49:45 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules

[2010.10.06 05:10:41 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker

[2011.09.17 12:54:53 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer

[2009.07.14 06:52:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\PSDiagnostics

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\TroubleshootingPack

[2010.10.06 05:10:41 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker\de-DE

[2009.07.14 09:49:45 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\AppLocker\en-US

[2010.10.06 05:10:41 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer\de-DE

[2009.07.14 06:56:47 | 000,000,000 | --SD | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitsTransfer\en-US

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\de-DE

[2009.07.14 06:56:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\en-US

[2012.10.16 19:20:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\winevt\Logs

[2009.07.14 04:03:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\winevt\TraceFormat

[2010.10.06 05:10:42 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm\0407

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm\0409

[2011.09.17 12:54:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\XPSViewer\de-DE

 
 < %systemroot%\system32\drivers\*. /s >

[2012.10.24 18:55:47 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\AVG

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\de-DE

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\en-US

[2012.10.23 21:39:09 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\etc

[2011.09.17 12:54:52 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF

[2010.10.06 05:10:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\de-DE

[2009.07.14 06:56:48 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers\UMDF\en-US

 
 < %systemroot%\System32\config\*. /s >

[2009.07.14 04:04:23 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\Journal

[2012.10.17 20:53:42 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\RegBack

[2011.11.30 03:23:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile

[2011.11.29 18:24:00 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\TxR

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData

[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\System32\config\systemprofile\Favorites

[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local

[2012.07.10 19:45:18 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow

[2010.12.17 02:28:21 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming

[2011.04.22 14:42:00 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Google

[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft

[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\pdfMachine

[2011.04.22 14:37:12 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Google\CrashReports

[2010.11.23 12:48:38 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Google\GBScreensaver

[2012.10.17 21:28:11 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Device Metadata

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL

[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer

[2010.10.15 14:33:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\OFFICE

[2010.10.14 14:22:33 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Portable Devices

[2009.07.14 06:41:53 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows

[2011.12.02 17:27:48 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache

[2011.12.02 17:27:48 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Device Metadata\dmrccache\downloads

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\IdentityCRL\production\temp

[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery

[2011.08.07 00:41:08 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High

[2011.08.07 00:41:19 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active

[2009.07.14 06:37:42 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files

[2009.07.14 06:41:53 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low

[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized

[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2L4UWCS7

[2010.10.05 19:17:23 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O3ZC791N

[2012.10.17 20:56:53 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q2Y5HK5G

[2010.11.11 19:44:19 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W9FYELDD

[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Apple Computer

[2012.07.10 19:45:18 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\AVG Secure Search

[2010.10.15 14:34:24 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun

[2010.12.17 02:31:01 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Apple Computer\QuickTime

[2012.08.30 19:54:51 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\AVG Secure Search\cache

[2009.07.14 06:43:06 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache

[2010.10.15 14:34:24 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\Silverlight

[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content

[2012.10.16 21:45:30 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\host

[2010.10.22 16:03:25 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\muffin

[2010.12.17 02:28:21 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Apple Computer

[2011.08.07 00:41:06 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft

[2012.10.24 18:52:10 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Apple Computer\Logs

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL

[2011.08.07 00:41:06 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows

[2010.10.14 21:54:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production

[2012.10.20 09:14:56 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\IdentityCRL\production\temp

[2011.08.07 00:41:06 | 000,000,000 | R--D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs

[2009.07.14 06:36:39 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache

[2011.08.07 00:41:07 | 000,000,000 | -HSD | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE

[2011.08.07 00:41:07 | 000,000,000 | ---D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IECompatCache\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\Low

[2011.08.07 00:41:07 | 000,000,000 | -H-D | M] -- C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE\Low

[2011.08.07 00:41:08 | 000,000,000 | R--D | M] -- C:\Windows\System32\config\systemprofile\Favorites\Links

 
 < %systemroot%\*. /mp /s >

 
 ========== Files - Unicode (All) ==========

[2011.07.16 02:26:42 | 014,814,100 | ---- | M] ()(C:\Users\878\Documents\????, ????? ??????????, ??? 2010.wmv) -- C:\Users\878\Documents\Саня, Точка невозврата, НТВ 2010.wmv

[2011.07.16 02:25:52 | 014,814,100 | ---- | C] ()(C:\Users\878\Documents\????, ????? ??????????, ??? 2010.wmv) -- C:\Users\878\Documents\Саня, Точка невозврата, НТВ 2010.wmv
 

< End of report >

Beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

:OTL

[2012.10.07 01:02:39 | 000,074,137 | ---- | C] () -- C:\ProgramData\eatstoapzfibbbc

[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR120TWN

[2010.11.10 14:54:20 | 000,000,000 | ---D | M] -- C:\Users\878\AppData\Roaming\CR330TWN

ipconfig /flushdns /c

:Commands

[purity]

[emptytemp]

[resethosts]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

Hier das Ergebnis:

Code:

All processes killed

========== OTL ==========

C:\ProgramData\eatstoapzfibbbc moved successfully.

C:\Users\878\AppData\Roaming\CR120TWN\Images folder moved successfully.

C:\Users\878\AppData\Roaming\CR120TWN folder moved successfully.

C:\Users\878\AppData\Roaming\CR330TWN folder moved successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: 878

->Temp folder emptied: 17426 bytes

->Temporary Internet Files folder emptied: 35923 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 0 bytes

->Google Chrome cache emptied: 13800037 bytes

->Opera cache emptied: 51327676 bytes

->Flash cache emptied: 1342 bytes

 

User: All Users

 

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

 

User: Public

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 14364 bytes

RecycleBin emptied: 0 bytes

 

Total Files Cleaned = 62,00 mb

 

C:\Windows\System32\drivers\etc\Hosts moved successfully.

HOSTS file reset successfully

 

OTL by OldTimer - Version 3.2.69.0 log created on 10242012_230754
 

Files\Folders moved on Reboot...
 

PendingFileRenameOperations files...
 

Registry entries deleted on Reboot...

Bitte nun (im normalen Windows-Modus) dieses Tool von Kaspersky (TDSS-Killer) ausführen und das Log posten Anleitung und Downloadlink hier => http://www.trojaner-board.de/82358-t...entfernen.html

Hinweis: Bitte den Virenscanner abstellen bevor du den TDSS-Killer ausführst, denn v.a. Avira meldet im TDSS-Tool oft einen Fehalalrm!

Das Tool so einstellen wie unten im Bild angegeben - klick auf change parameters und setze die Haken wie im folgenden Screenshot abgebildet,
Dann auf Start Scan klicken und wenn es durch ist auf den Button Report klicken um das Log anzuzeigen. Dieses bitte komplett posten.

Wenn du das Log nicht findest oder den Inhalt kopieren und in dein Posting übertragen kannst, dann schau bitte direkt auf deiner Windows-Systempartition ( meistens Laufwerk C: ) nach, da speichert der TDSS-Killer seine Logs.

Hinweis: Bitte nichts voreilig mit dem TDSS-Killer löschen! Falls Objekte vom TDSS-Killer bemängelt werden, alle mit der Aktion "skip" behandeln und hier nur das Log posten!

http://saved.im/mtg4nzy0ywy5/settings_2012-09-04.png

Hallo, hier der Report:

Code:

20:44:45.0667 2224  TDSS rootkit removing tool 2.8.13.0 Oct 12 2012 17:26:47

20:44:46.0105 2224  ============================================================

20:44:46.0105 2224  Current date / time: 2012/10/25 20:44:46.0105

20:44:46.0105 2224  SystemInfo:

20:44:46.0105 2224  

20:44:46.0105 2224  OS Version: 6.1.7601 ServicePack: 1.0

20:44:46.0105 2224  Product type: Workstation

20:44:46.0105 2224  ComputerName: 878-PC

20:44:46.0105 2224  UserName: 878

20:44:46.0105 2224  Windows directory: C:\Windows

20:44:46.0105 2224  System windows directory: C:\Windows

20:44:46.0105 2224  Processor architecture: Intel x86

20:44:46.0105 2224  Number of processors: 2

20:44:46.0105 2224  Page size: 0x1000

20:44:46.0105 2224  Boot type: Normal boot

20:44:46.0105 2224  ============================================================

20:44:47.0761 2224  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

20:44:47.0761 2224  ============================================================

20:44:47.0761 2224  \Device\Harddisk0\DR0:

20:44:47.0761 2224  MBR partitions:

20:44:47.0761 2224  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A380D41

20:44:47.0761 2224  ============================================================

20:44:47.0777 2224  C: <-> \Device\Harddisk0\DR0\Partition1

20:44:47.0777 2224  ============================================================

20:44:47.0777 2224  Initialize success

20:44:47.0777 2224  ============================================================

20:44:57.0137 5968  ============================================================

20:44:57.0137 5968  Scan started

20:44:57.0137 5968  Mode: Manual; SigCheck; TDLFS; 

20:44:57.0137 5968  ============================================================

20:44:58.0684 5968  ================ Scan system memory ========================

20:44:58.0684 5968  System memory - ok

20:44:58.0684 5968  ================ Scan services =============================

20:44:58.0950 5968  [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys

20:44:59.0043 5968  1394ohci - ok

20:44:59.0122 5968  [ E6F53D6C0DEA3D375362265E175CA638 ] acedrv11        C:\Windows\system32\drivers\acedrv11.sys

20:44:59.0387 5968  acedrv11 - ok

20:44:59.0403 5968  [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI            C:\Windows\system32\drivers\ACPI.sys

20:44:59.0418 5968  ACPI - ok

20:44:59.0450 5968  [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys

20:44:59.0512 5968  AcpiPmi - ok

20:44:59.0622 5968  [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

20:44:59.0637 5968  AdobeARMservice - ok

20:44:59.0715 5968  [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

20:44:59.0731 5968  AdobeFlashPlayerUpdateSvc - ok

20:44:59.0778 5968  [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx         C:\Windows\system32\DRIVERS\adp94xx.sys

20:44:59.0793 5968  adp94xx - ok

20:44:59.0809 5968  [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci         C:\Windows\system32\DRIVERS\adpahci.sys

20:44:59.0825 5968  adpahci - ok

20:44:59.0840 5968  [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320         C:\Windows\system32\DRIVERS\adpu320.sys

20:44:59.0856 5968  adpu320 - ok

20:44:59.0887 5968  [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

20:44:59.0934 5968  AeLookupSvc - ok

20:44:59.0997 5968  [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD             C:\Windows\system32\drivers\afd.sys

20:45:00.0059 5968  AFD - ok

20:45:00.0090 5968  [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440          C:\Windows\system32\drivers\agp440.sys

20:45:00.0106 5968  agp440 - ok

20:45:00.0122 5968  [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx         C:\Windows\system32\DRIVERS\djsvs.sys

20:45:00.0137 5968  aic78xx - ok

20:45:00.0153 5968  [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG             C:\Windows\System32\alg.exe

20:45:00.0184 5968  ALG - ok

20:45:00.0200 5968  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide          C:\Windows\system32\drivers\aliide.sys

20:45:00.0217 5968  aliide - ok

20:45:00.0235 5968  [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

20:45:00.0235 5968  amdagp - ok

20:45:00.0250 5968  [ CD5914170297126B6266860198D1D4F0 ] amdide          C:\Windows\system32\drivers\amdide.sys

20:45:00.0266 5968  amdide - ok

20:45:00.0282 5968  [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

20:45:00.0329 5968  AmdK8 - ok

20:45:00.0344 5968  [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys

20:45:00.0375 5968  AmdPPM - ok

20:45:00.0422 5968  [ D320BF87125326F996D4904FE24300FC ] amdsata         C:\Windows\system32\drivers\amdsata.sys

20:45:00.0438 5968  amdsata - ok

20:45:00.0454 5968  [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys

20:45:00.0469 5968  amdsbs - ok

20:45:00.0485 5968  [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata         C:\Windows\system32\drivers\amdxata.sys

20:45:00.0485 5968  amdxata - ok

20:45:00.0532 5968  [ AEA177F783E20150ACE5383EE368DA19 ] AppID           C:\Windows\system32\drivers\appid.sys

20:45:00.0704 5968  AppID - ok

20:45:00.0719 5968  [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc        C:\Windows\System32\appidsvc.dll

20:45:00.0766 5968  AppIDSvc - ok

20:45:00.0813 5968  [ FB1959012294D6AD43E5304DF65E3C26 ] Appinfo         C:\Windows\System32\appinfo.dll

20:45:00.0844 5968  Appinfo - ok

20:45:00.0969 5968  [ 20F6F19FE9E753F2780DC2FA083AD597 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

20:45:00.0969 5968  Apple Mobile Device - ok

20:45:01.0016 5968  [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt         C:\Windows\System32\appmgmts.dll

20:45:01.0079 5968  AppMgmt - ok

20:45:01.0094 5968  [ 2932004F49677BD84DBC72EDB754FFB3 ] arc             C:\Windows\system32\DRIVERS\arc.sys

20:45:01.0110 5968  arc - ok

20:45:01.0125 5968  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys

20:45:01.0141 5968  arcsas - ok

20:45:01.0157 5968  [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

20:45:01.0267 5968  AsyncMac - ok

20:45:01.0298 5968  [ 338C86357871C167A96AB976519BF59E ] atapi           C:\Windows\system32\drivers\atapi.sys

20:45:01.0314 5968  atapi - ok

20:45:01.0361 5968  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

20:45:01.0408 5968  AudioEndpointBuilder - ok

20:45:01.0423 5968  [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv        C:\Windows\System32\Audiosrv.dll

20:45:01.0470 5968  Audiosrv - ok

20:45:01.0642 5968  [ F6A528DE535396C2FB1A4E3C6F00CEC4 ] AVGIDSAgent     C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

20:45:01.0736 5968  AVGIDSAgent - ok

20:45:01.0783 5968  [ 1074F787080068C71303B61FAE7E7CA4 ] AVGIDSDriver    C:\Windows\system32\DRIVERS\avgidsdriverx.sys

20:45:01.0783 5968  AVGIDSDriver - ok

20:45:01.0798 5968  [ 61A7E0B02F82CFF3DB2445BBE50B3589 ] AVGIDSFilter    C:\Windows\system32\DRIVERS\avgidsfilterx.sys

20:45:01.0814 5968  AVGIDSFilter - ok

20:45:01.0845 5968  [ D63D83659EEDF60B3A3E620281A888E5 ] AVGIDSHX        C:\Windows\system32\DRIVERS\avgidshx.sys

20:45:01.0861 5968  AVGIDSHX - ok

20:45:01.0892 5968  [ BAF975B72062F53D327788E99D64197E ] AVGIDSShim      C:\Windows\system32\DRIVERS\avgidsshimx.sys

20:45:01.0908 5968  AVGIDSShim - ok

20:45:01.0923 5968  [ DCB09125C8B4766A88C86914B65487C1 ] Avgldx86        C:\Windows\system32\DRIVERS\avgldx86.sys

20:45:01.0939 5968  Avgldx86 - ok

20:45:01.0955 5968  [ CCDD61545AAEA265977E4B1EFDC74E8C ] Avgmfx86        C:\Windows\system32\DRIVERS\avgmfx86.sys

20:45:01.0970 5968  Avgmfx86 - ok

20:45:02.0017 5968  [ 1FD90B28D2C3100BF4500199C8AD6358 ] Avgrkx86        C:\Windows\system32\DRIVERS\avgrkx86.sys

20:45:02.0033 5968  Avgrkx86 - ok

20:45:02.0064 5968  [ C0BC3B2E3FD625E7F55E1FF863E94592 ] Avgtdix         C:\Windows\system32\DRIVERS\avgtdix.sys

20:45:02.0080 5968  Avgtdix - ok

20:45:02.0126 5968  [ 6F76908F065C3C151C4BFCA7DFD86979 ] avgtp           C:\Windows\system32\drivers\avgtpx86.sys

20:45:02.0126 5968  avgtp - ok

20:45:02.0158 5968  [ EA1145DEBCD508FD25BD1E95C4346929 ] avgwd           C:\Program Files\AVG\AVG2012\avgwdsvc.exe

20:45:02.0173 5968  avgwd - ok

20:45:02.0220 5968  [ 6E30D02AAC9CAC84F421622E3A2F6178 ] AxInstSV        C:\Windows\System32\AxInstSV.dll

20:45:02.0298 5968  AxInstSV - ok

20:45:02.0330 5968  [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv         C:\Windows\system32\DRIVERS\bxvbdx.sys

20:45:02.0376 5968  b06bdrv - ok

20:45:02.0408 5968  [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys

20:45:02.0439 5968  b57nd60x - ok

20:45:02.0486 5968  [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC          C:\Windows\System32\bdesvc.dll

20:45:02.0548 5968  BDESVC - ok

20:45:02.0564 5968  [ 505506526A9D467307B3C393DEDAF858 ] Beep            C:\Windows\system32\drivers\Beep.sys

20:45:02.0611 5968  Beep - ok

20:45:02.0673 5968  [ 1E2BAC209D184BB851E1A187D8A29136 ] BFE             C:\Windows\System32\bfe.dll

20:45:02.0720 5968  BFE - ok

20:45:02.0783 5968  [ E585445D5021971FAE10393F0F1C3961 ] BITS            C:\Windows\System32\qmgr.dll

20:45:02.0845 5968  BITS - ok

20:45:02.0876 5968  [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys

20:45:02.0908 5968  blbdrive - ok

20:45:02.0986 5968  [ 1C87705CCB2F60172B0FC86B5D82F00D ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

20:45:03.0001 5968  Bonjour Service - ok

20:45:03.0033 5968  [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

20:45:03.0080 5968  bowser - ok

20:45:03.0080 5968  [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys

20:45:03.0126 5968  BrFiltLo - ok

20:45:03.0126 5968  [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys

20:45:03.0158 5968  BrFiltUp - ok

20:45:03.0205 5968  [ 6E11F33D14D020F58D5E02E4D67DFA19 ] Browser         C:\Windows\System32\browser.dll

20:45:03.0251 5968  Browser - ok

20:45:03.0283 5968  [ 845B8CE732E67F3B4133164868C666EA ] Brserid         C:\Windows\System32\Drivers\Brserid.sys

20:45:03.0314 5968  Brserid - ok

20:45:03.0345 5968  [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys

20:45:03.0376 5968  BrSerWdm - ok

20:45:03.0392 5968  [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys

20:45:03.0423 5968  BrUsbMdm - ok

20:45:03.0439 5968  [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys

20:45:03.0455 5968  BrUsbSer - ok

20:45:03.0501 5968  [ DB99076533FFB38CBEC8AC88E4535850 ] BthAvrcp        C:\Windows\system32\DRIVERS\BthAvrcp.sys

20:45:03.0548 5968  BthAvrcp - ok

20:45:03.0580 5968  [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum         C:\Windows\system32\DRIVERS\BthEnum.sys

20:45:03.0611 5968  BthEnum - ok

20:45:03.0626 5968  [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys

20:45:03.0673 5968  BTHMODEM - ok

20:45:03.0705 5968  [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys

20:45:03.0736 5968  BthPan - ok

20:45:03.0783 5968  [ C2FBF6D271D9A94D839C416BF186EAD9 ] BTHPORT         C:\Windows\system32\Drivers\BTHport.sys

20:45:03.0830 5968  BTHPORT - ok

20:45:03.0861 5968  [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv         C:\Windows\system32\bthserv.dll

20:45:03.0908 5968  bthserv - ok

20:45:03.0939 5968  [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB          C:\Windows\system32\Drivers\BTHUSB.sys

20:45:03.0955 5968  BTHUSB - ok

20:45:03.0970 5968  [ D517BA16793D76210C963DAB2A88B74F ] btmhsf          C:\Windows\system32\DRIVERS\btmhsf.sys

20:45:04.0001 5968  btmhsf - ok

20:45:04.0017 5968  [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

20:45:04.0080 5968  cdfs - ok

20:45:04.0111 5968  [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

20:45:04.0126 5968  cdrom - ok

20:45:04.0173 5968  [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc     C:\Windows\System32\certprop.dll

20:45:04.0205 5968  CertPropSvc - ok

20:45:04.0236 5968  [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys

20:45:04.0251 5968  circlass - ok

20:45:04.0283 5968  [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS            C:\Windows\system32\CLFS.sys

20:45:04.0298 5968  CLFS - ok

20:45:04.0345 5968  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

20:45:04.0361 5968  clr_optimization_v2.0.50727_32 - ok

20:45:04.0408 5968  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

20:45:04.0439 5968  clr_optimization_v4.0.30319_32 - ok

20:45:04.0455 5968  [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys

20:45:04.0486 5968  CmBatt - ok

20:45:04.0501 5968  [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

20:45:04.0517 5968  cmdide - ok

20:45:04.0533 5968  [ 1B675691ED940766149C93E8F4488D68 ] CNG             C:\Windows\system32\Drivers\cng.sys

20:45:04.0564 5968  CNG - ok

20:45:04.0580 5968  [ A6023D3823C37043986713F118A89BEE ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys

20:45:04.0580 5968  Compbatt - ok

20:45:04.0595 5968  [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys

20:45:04.0642 5968  CompositeBus - ok

20:45:04.0658 5968  COMSysApp - ok

20:45:04.0751 5968  cpuz132 - ok

20:45:04.0751 5968  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk         C:\Windows\system32\DRIVERS\crcdisk.sys

20:45:04.0767 5968  crcdisk - ok

20:45:04.0814 5968  [ A585BEBF7D054BD9618EDA0922D5484A ] CryptSvc        C:\Windows\system32\cryptsvc.dll

20:45:04.0845 5968  CryptSvc - ok

20:45:04.0892 5968  [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC             C:\Windows\system32\drivers\csc.sys

20:45:04.0939 5968  CSC - ok

20:45:04.0986 5968  [ 15F93B37F6801943360D9EB42485D5D3 ] CscService      C:\Windows\System32\cscsvc.dll

20:45:05.0001 5968  CscService - ok

20:45:05.0017 5968  [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch      C:\Windows\system32\rpcss.dll

20:45:05.0064 5968  DcomLaunch - ok

20:45:05.0095 5968  [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc       C:\Windows\System32\defragsvc.dll

20:45:05.0142 5968  defragsvc - ok

20:45:05.0173 5968  [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

20:45:05.0220 5968  DfsC - ok

20:45:05.0251 5968  [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp            C:\Windows\system32\dhcpcore.dll

20:45:05.0298 5968  Dhcp - ok

20:45:05.0330 5968  [ 1A050B0274BFB3890703D490F330C0DA ] discache        C:\Windows\system32\drivers\discache.sys

20:45:05.0376 5968  discache - ok

20:45:05.0423 5968  [ 565003F326F99802E68CA78F2A68E9FF ] Disk            C:\Windows\system32\DRIVERS\disk.sys

20:45:05.0439 5968  Disk - ok

20:45:05.0470 5968  [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache        C:\Windows\System32\dnsrslvr.dll

20:45:05.0517 5968  Dnscache - ok

20:45:05.0548 5968  [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc         C:\Windows\System32\dot3svc.dll

20:45:05.0580 5968  dot3svc - ok

20:45:05.0626 5968  [ B5E479EB83707DD698F66953E922042C ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys

20:45:05.0658 5968  Dot4 - ok

20:45:05.0705 5968  [ CAEFD09B6A6249C53A67D55A9A9FCABF ] Dot4Print       C:\Windows\system32\drivers\Dot4Prt.sys

20:45:05.0751 5968  Dot4Print - ok

20:45:05.0767 5968  [ CF491FF38D62143203C065260567E2F7 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys

20:45:05.0798 5968  dot4usb - ok

20:45:05.0830 5968  [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS             C:\Windows\system32\dps.dll

20:45:05.0892 5968  DPS - ok

20:45:05.0908 5968  [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

20:45:05.0939 5968  drmkaud - ok

20:45:06.0001 5968  [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

20:45:06.0033 5968  DXGKrnl - ok

20:45:06.0064 5968  [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost         C:\Windows\System32\eapsvc.dll

20:45:06.0111 5968  EapHost - ok

20:45:06.0189 5968  [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv           C:\Windows\system32\DRIVERS\evbdx.sys

20:45:06.0267 5968  ebdrv - ok

20:45:06.0314 5968  [ F42309C4191C506B71DB5D1126D26318 ] EFS             C:\Windows\System32\lsass.exe

20:45:06.0345 5968  EFS - ok

20:45:06.0408 5968  [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

20:45:06.0439 5968  ehRecvr - ok

20:45:06.0470 5968  [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched         C:\Windows\ehome\ehsched.exe

20:45:06.0501 5968  ehSched - ok

20:45:06.0533 5968  [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor         C:\Windows\system32\DRIVERS\elxstor.sys

20:45:06.0548 5968  elxstor - ok

20:45:06.0580 5968  [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev          C:\Windows\system32\drivers\errdev.sys

20:45:06.0611 5968  ErrDev - ok

20:45:06.0658 5968  [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem     C:\Windows\system32\es.dll

20:45:06.0720 5968  EventSystem - ok

20:45:06.0736 5968  [ 2DC9108D74081149CC8B651D3A26207F ] exfat           C:\Windows\system32\drivers\exfat.sys

20:45:06.0783 5968  exfat - ok

20:45:06.0798 5968  [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

20:45:06.0845 5968  fastfat - ok

20:45:06.0908 5968  [ 967EA5B213E9984CBE270205DF37755B ] Fax             C:\Windows\system32\fxssvc.exe

20:45:06.0955 5968  Fax - ok

20:45:06.0970 5968  [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

20:45:07.0001 5968  fdc - ok

20:45:07.0017 5968  [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost         C:\Windows\system32\fdPHost.dll

20:45:07.0064 5968  fdPHost - ok

20:45:07.0095 5968  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub        C:\Windows\system32\fdrespub.dll

20:45:07.0142 5968  FDResPub - ok

20:45:07.0158 5968  [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

20:45:07.0173 5968  FileInfo - ok

20:45:07.0189 5968  [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

20:45:07.0236 5968  Filetrace - ok

20:45:07.0287 5968  [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

20:45:07.0318 5968  flpydisk - ok

20:45:07.0349 5968  [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

20:45:07.0365 5968  FltMgr - ok

20:45:07.0396 5968  [ B3A5EC6B6B6673DB7E87C2BCDBDDC074 ] FontCache       C:\Windows\system32\FntCache.dll

20:45:07.0458 5968  FontCache - ok

20:45:07.0521 5968  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

20:45:07.0521 5968  FontCache3.0.0.0 - ok

20:45:07.0537 5968  [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys

20:45:07.0552 5968  FsDepends - ok

20:45:07.0568 5968  [ A574B4360E438977038AAE4BF60D79A2 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

20:45:07.0568 5968  Fs_Rec - ok

20:45:07.0615 5968  [ 8A73E79089B282100B9393B644CB853B ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys

20:45:07.0630 5968  fvevol - ok

20:45:07.0646 5968  [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys

20:45:07.0662 5968  gagp30kx - ok

20:45:07.0708 5968  [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

20:45:07.0724 5968  GEARAspiWDM - ok

20:45:07.0771 5968  [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc           C:\Windows\System32\gpsvc.dll

20:45:07.0818 5968  gpsvc - ok

20:45:07.0896 5968  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe

20:45:07.0912 5968  gupdate - ok

20:45:07.0927 5968  [ 8F0DE4FEF8201E306F9938B0905AC96A ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

20:45:07.0943 5968  gupdatem - ok

20:45:07.0974 5968  [ C1B577B2169900F4CF7190C39F085794 ] gusvc           C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

20:45:07.0990 5968  gusvc - ok

20:45:08.0005 5968  [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys

20:45:08.0052 5968  hcw85cir - ok

20:45:08.0083 5968  [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

20:45:08.0115 5968  HdAudAddService - ok

20:45:08.0130 5968  [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys

20:45:08.0162 5968  HDAudBus - ok

20:45:08.0162 5968  [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt         C:\Windows\system32\DRIVERS\HidBatt.sys

20:45:08.0193 5968  HidBatt - ok

20:45:08.0208 5968  [ 89448F40E6DF260C206A193A4683BA78 ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys

20:45:08.0240 5968  HidBth - ok

20:45:08.0272 5968  [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr           C:\Windows\system32\DRIVERS\hidir.sys

20:45:08.0303 5968  HidIr - ok

20:45:08.0350 5968  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv         C:\Windows\system32\hidserv.dll

20:45:08.0397 5968  hidserv - ok

20:45:08.0444 5968  [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys

20:45:08.0459 5968  HidUsb - ok

20:45:08.0491 5968  [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc          C:\Windows\system32\kmsvc.dll

20:45:08.0538 5968  hkmsvc - ok

20:45:08.0569 5968  [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll

20:45:08.0600 5968  HomeGroupListener - ok

20:45:08.0631 5968  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

20:45:08.0678 5968  HomeGroupProvider - ok

20:45:08.0725 5968  [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys

20:45:08.0725 5968  HpSAMD - ok

20:45:08.0772 5968  [ 871917B07A141BFF43D76D8844D48106 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

20:45:08.0819 5968  HTTP - ok

20:45:08.0850 5968  [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys

20:45:08.0850 5968  hwpolicy - ok

20:45:08.0897 5968  [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt        C:\Windows\system32\drivers\i8042prt.sys

20:45:08.0928 5968  i8042prt - ok

20:45:08.0959 5968  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys

20:45:08.0991 5968  iaStorV - ok

20:45:08.0991 5968  [ 61401BA4183BC171BA114FCE4981BB33 ] iBtFltCoex      C:\Windows\system32\DRIVERS\iBtFltCoex.sys

20:45:09.0022 5968  iBtFltCoex - ok

20:45:09.0084 5968  [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

20:45:09.0116 5968  idsvc - ok

20:45:09.0147 5968  [ 4173FF5708F3236CF25195FECD742915 ] iirsp           C:\Windows\system32\DRIVERS\iirsp.sys

20:45:09.0147 5968  iirsp - ok

20:45:09.0178 5968  [ F95622F161474511B8D80D6B093AA610 ] IKEEXT          C:\Windows\System32\ikeext.dll

20:45:09.0225 5968  IKEEXT - ok

20:45:09.0256 5968  [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide        C:\Windows\system32\drivers\intelide.sys

20:45:09.0256 5968  intelide - ok

20:45:09.0272 5968  [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

20:45:09.0303 5968  intelppm - ok

20:45:09.0319 5968  [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

20:45:09.0381 5968  IPBusEnum - ok

20:45:09.0413 5968  [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

20:45:09.0444 5968  IpFilterDriver - ok

20:45:09.0491 5968  [ 4D65A07B795D6674312F879D09AA7663 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

20:45:09.0538 5968  iphlpsvc - ok

20:45:09.0569 5968  [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys

20:45:09.0600 5968  IPMIDRV - ok

20:45:09.0631 5968  [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT           C:\Windows\system32\drivers\ipnat.sys

20:45:09.0678 5968  IPNAT - ok

20:45:09.0741 5968  [ F62C69376A95795FE7CDB1C778EDACA4 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

20:45:09.0772 5968  iPod Service - ok

20:45:09.0788 5968  [ 9F7E491FB0BA0F9E370163834FC1FE31 ] irda            C:\Windows\system32\DRIVERS\irda.sys

20:45:09.0834 5968  irda - ok

20:45:09.0866 5968  [ 42996CFF20A3084A56017B7902307E9F ] IRENUM          C:\Windows\system32\drivers\irenum.sys

20:45:09.0881 5968  IRENUM - ok

20:45:09.0913 5968  [ 4220D2F03D5C4226D0A1AA4B84025E45 ] Irmon           C:\Windows\System32\irmon.dll

20:45:09.0928 5968  Irmon - ok

20:45:09.0959 5968  [ 5896B5FF6332AB2BE1582523E9656A67 ] irsir           C:\Windows\system32\DRIVERS\irsir.sys

20:45:10.0022 5968  irsir - ok

20:45:10.0053 5968  [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

20:45:10.0069 5968  isapnp - ok

20:45:10.0100 5968  [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys

20:45:10.0116 5968  iScsiPrt - ok

20:45:10.0147 5968  [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

20:45:10.0163 5968  kbdclass - ok

20:45:10.0194 5968  [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys

20:45:10.0225 5968  kbdhid - ok

20:45:10.0241 5968  [ F42309C4191C506B71DB5D1126D26318 ] KeyIso          C:\Windows\system32\lsass.exe

20:45:10.0241 5968  KeyIso - ok

20:45:10.0289 5968  [ 412CEA1AA78CC02A447F5C9E62B32FF1 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

20:45:10.0289 5968  KSecDD - ok

20:45:10.0320 5968  [ 26C046977E85B95036453D7B88BA1820 ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys

20:45:10.0320 5968  KSecPkg - ok

20:45:10.0367 5968  [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm           C:\Windows\system32\msdtckrm.dll

20:45:10.0414 5968  KtmRm - ok

20:45:10.0445 5968  [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer    C:\Windows\system32\srvsvc.dll

20:45:10.0492 5968  LanmanServer - ok

20:45:10.0523 5968  [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

20:45:10.0554 5968  LanmanWorkstation - ok

20:45:10.0570 5968  [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

20:45:10.0617 5968  lltdio - ok

20:45:10.0648 5968  [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

20:45:10.0695 5968  lltdsvc - ok

20:45:10.0726 5968  [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts         C:\Windows\System32\lmhsvc.dll

20:45:10.0757 5968  lmhosts - ok

20:45:10.0804 5968  [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys

20:45:10.0820 5968  LSI_FC - ok

20:45:10.0835 5968  [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS         C:\Windows\system32\DRIVERS\lsi_sas.sys

20:45:10.0835 5968  LSI_SAS - ok

20:45:10.0851 5968  [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys

20:45:10.0867 5968  LSI_SAS2 - ok

20:45:10.0882 5968  [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys

20:45:10.0898 5968  LSI_SCSI - ok

20:45:10.0914 5968  [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv           C:\Windows\system32\drivers\luafv.sys

20:45:10.0945 5968  luafv - ok

20:45:10.0992 5968  [ 500D089CE760D83DA2B6CBA681AA9949 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

20:45:10.0992 5968  MBAMProtector - ok

20:45:11.0054 5968  [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler   C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

20:45:11.0070 5968  MBAMScheduler - ok

20:45:11.0101 5968  [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService     C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

20:45:11.0132 5968  MBAMService - ok

20:45:11.0164 5968  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

20:45:11.0179 5968  Mcx2Svc - ok

20:45:11.0195 5968  [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas         C:\Windows\system32\DRIVERS\megasas.sys

20:45:11.0210 5968  megasas - ok

20:45:11.0226 5968  [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys

20:45:11.0242 5968  MegaSR - ok

20:45:11.0242 5968  [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS           C:\Windows\system32\mmcss.dll

20:45:11.0289 5968  MMCSS - ok

20:45:11.0320 5968  [ F001861E5700EE84E2D4E52C712F4964 ] Modem           C:\Windows\system32\drivers\modem.sys

20:45:11.0367 5968  Modem - ok

20:45:11.0382 5968  [ 79D10964DE86B292320E9DFE02282A23 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

20:45:11.0414 5968  monitor - ok

20:45:11.0429 5968  [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

20:45:11.0445 5968  mouclass - ok

20:45:11.0460 5968  [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys

20:45:11.0492 5968  mouhid - ok

20:45:11.0523 5968  [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys

20:45:11.0539 5968  mountmgr - ok

20:45:11.0554 5968  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio            C:\Windows\system32\drivers\mpio.sys

20:45:11.0570 5968  mpio - ok

20:45:11.0585 5968  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

20:45:11.0632 5968  mpsdrv - ok

20:45:11.0679 5968  [ 9835584E999D25004E1EE8E5F3E3B881 ] MpsSvc          C:\Windows\system32\mpssvc.dll

20:45:11.0726 5968  MpsSvc - ok

20:45:11.0773 5968  [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

20:45:11.0804 5968  MRxDAV - ok

20:45:11.0867 5968  [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

20:45:11.0882 5968  mrxsmb - ok

20:45:11.0945 5968  [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

20:45:11.0976 5968  mrxsmb10 - ok

20:45:12.0007 5968  [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

20:45:12.0039 5968  mrxsmb20 - ok

20:45:12.0070 5968  [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci          C:\Windows\system32\drivers\msahci.sys

20:45:12.0070 5968  msahci - ok

20:45:12.0101 5968  [ 55055F8AD8BE27A64C831322A780A228 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

20:45:12.0117 5968  msdsm - ok

20:45:12.0148 5968  [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC           C:\Windows\System32\msdtc.exe

20:45:12.0179 5968  MSDTC - ok

20:45:12.0210 5968  [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs            C:\Windows\system32\drivers\Msfs.sys

20:45:12.0242 5968  Msfs - ok

20:45:12.0257 5968  [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys

20:45:12.0289 5968  mshidkmdf - ok

20:45:12.0335 5968  [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

20:45:12.0351 5968  msisadrv - ok

20:45:12.0382 5968  [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

20:45:12.0414 5968  MSiSCSI - ok

20:45:12.0414 5968  msiserver - ok

20:45:12.0429 5968  [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

20:45:12.0492 5968  MSKSSRV - ok

20:45:12.0507 5968  [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

20:45:12.0554 5968  MSPCLOCK - ok

20:45:12.0585 5968  [ F456E973590D663B1073E9C463B40932 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

20:45:12.0617 5968  MSPQM - ok

20:45:12.0632 5968  [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

20:45:12.0648 5968  MsRPC - ok

20:45:12.0664 5968  [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys

20:45:12.0679 5968  mssmbios - ok

20:45:12.0695 5968  [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

20:45:12.0726 5968  MSTEE - ok

20:45:12.0742 5968  [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys

20:45:12.0773 5968  MTConfig - ok

20:45:12.0789 5968  [ 159FAD02F64E6381758C990F753BCC80 ] Mup             C:\Windows\system32\Drivers\mup.sys

20:45:12.0804 5968  Mup - ok

20:45:12.0851 5968  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent        C:\Windows\system32\qagentRT.dll

20:45:12.0898 5968  napagent - ok

20:45:12.0929 5968  [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

20:45:12.0960 5968  NativeWifiP - ok

20:45:13.0039 5968  [ 9D1CCE440552500DED3A62F9D779CDB4 ] NAUpdate        C:\Program Files\Nero\Update\NASvc.exe

20:45:13.0054 5968  NAUpdate - ok

20:45:13.0085 5968  [ E7C54812A2AAF43316EB6930C1FFA108 ] NDIS            C:\Windows\system32\drivers\ndis.sys

20:45:13.0101 5968  NDIS - ok

20:45:13.0117 5968  [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys

20:45:13.0164 5968  NdisCap - ok

20:45:13.0179 5968  [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

20:45:13.0226 5968  NdisTapi - ok

20:45:13.0257 5968  [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

20:45:13.0289 5968  Ndisuio - ok

20:45:13.0320 5968  [ 38FBE267E7E6983311179230FACB1017 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

20:45:13.0351 5968  NdisWan - ok

20:45:13.0382 5968  [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

20:45:13.0429 5968  NDProxy - ok

20:45:13.0445 5968  [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

20:45:13.0507 5968  NetBIOS - ok

20:45:13.0539 5968  [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys

20:45:13.0585 5968  NetBT - ok

20:45:13.0601 5968  [ F42309C4191C506B71DB5D1126D26318 ] Netlogon        C:\Windows\system32\lsass.exe

20:45:13.0617 5968  Netlogon - ok

20:45:13.0664 5968  [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman          C:\Windows\System32\netman.dll

20:45:13.0710 5968  Netman - ok

20:45:13.0726 5968  [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm        C:\Windows\System32\netprofm.dll

20:45:13.0757 5968  netprofm - ok

20:45:13.0789 5968  [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

20:45:13.0804 5968  NetTcpPortSharing - ok

20:45:13.0835 5968  [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960         C:\Windows\system32\DRIVERS\nfrd960.sys

20:45:13.0851 5968  nfrd960 - ok

20:45:13.0882 5968  [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc          C:\Windows\System32\nlasvc.dll

20:45:13.0929 5968  NlaSvc - ok

20:45:13.0929 5968  [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs            C:\Windows\system32\drivers\Npfs.sys

20:45:13.0976 5968  Npfs - ok

20:45:14.0007 5968  [ BA387E955E890C8A88306D9B8D06BF17 ] nsi             C:\Windows\system32\nsisvc.dll

20:45:14.0039 5968  nsi - ok

20:45:14.0039 5968  [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

20:45:14.0070 5968  nsiproxy - ok

20:45:14.0132 5968  [ 81189C3D7763838E55C397759D49007A ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

20:45:14.0164 5968  Ntfs - ok

20:45:14.0179 5968  [ F9756A98D69098DCA8945D62858A812C ] Null            C:\Windows\system32\drivers\Null.sys

20:45:14.0226 5968  Null - ok

20:45:14.0273 5968  [ B5E37E31C053BC9950455A257526514B ] NVENETFD        C:\Windows\system32\DRIVERS\nvm62x32.sys

20:45:14.0304 5968  NVENETFD - ok

20:45:14.0570 5968  [ C8CB6135884CBC2A10225C4C3CEF0F95 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

20:45:14.0820 5968  nvlddmkm - ok

20:45:14.0867 5968  [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid          C:\Windows\system32\drivers\nvraid.sys

20:45:14.0867 5968  nvraid - ok

20:45:14.0898 5968  [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

20:45:14.0914 5968  nvstor - ok

20:45:14.0945 5968  [ C1303870D5F9EAD4BEB68559AAB7A87B ] nvsvc           C:\Windows\system32\nvvsvc.exe

20:45:14.0960 5968  nvsvc - ok

20:45:14.0960 5968  [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

20:45:14.0976 5968  nv_agp - ok

20:45:15.0054 5968  [ 0182074B2B8915C8371EA5A006BAC44E ] ogmservice      C:\Program Files\Online Games Manager\ogmservice.exe

20:45:15.0085 5968  ogmservice - ok

20:45:15.0117 5968  [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys

20:45:15.0164 5968  ohci1394 - ok

20:45:15.0195 5968  [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

20:45:15.0210 5968  ose - ok

20:45:15.0257 5968  [ DB78FAED7D72774DF78B1A60F1618798 ] P1120VID        C:\Windows\system32\DRIVERS\P1120Vid.sys

20:45:15.0351 5968  P1120VID - ok

20:45:15.0382 5968  [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll

20:45:15.0445 5968  p2pimsvc - ok

20:45:15.0476 5968  [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc          C:\Windows\system32\p2psvc.dll

20:45:15.0507 5968  p2psvc - ok

20:45:15.0539 5968  [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport         C:\Windows\system32\DRIVERS\parport.sys

20:45:15.0554 5968  Parport - ok

20:45:15.0570 5968  [ BF8F6AF06DA75B336F07E23AEF97D93B ] partmgr         C:\Windows\system32\drivers\partmgr.sys

20:45:15.0585 5968  partmgr - ok

20:45:15.0601 5968  [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys

20:45:15.0617 5968  Parvdm - ok

20:45:15.0632 5968  [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc          C:\Windows\System32\pcasvc.dll

20:45:15.0648 5968  PcaSvc - ok

20:45:15.0664 5968  [ 673E55C3498EB970088E812EA820AA8F ] pci             C:\Windows\system32\drivers\pci.sys

20:45:15.0679 5968  pci - ok

20:45:15.0726 5968  [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide          C:\Windows\system32\drivers\pciide.sys

20:45:15.0726 5968  pciide - ok

20:45:15.0757 5968  [ F396431B31693E71E8A80687EF523506 ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys

20:45:15.0773 5968  pcmcia - ok

20:45:15.0789 5968  [ 250F6B43D2B613172035C6747AEEB19F ] pcw             C:\Windows\system32\drivers\pcw.sys

20:45:15.0804 5968  pcw - ok

20:45:15.0820 5968  [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

20:45:15.0882 5968  PEAUTH - ok

20:45:15.0929 5968  [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc     C:\Windows\system32\peerdistsvc.dll

20:45:15.0960 5968  PeerDistSvc - ok

20:45:16.0039 5968  [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla             C:\Windows\system32\pla.dll

20:45:16.0117 5968  pla - ok

20:45:16.0179 5968  [ EC7BC28D207DA09E79B3E9FAF8B232CA ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

20:45:16.0226 5968  PlugPlay - ok

20:45:16.0257 5968  [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll

20:45:16.0289 5968  PNRPAutoReg - ok

20:45:16.0325 5968  [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll

20:45:16.0340 5968  PNRPsvc - ok

20:45:16.0372 5968  [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

20:45:16.0418 5968  PolicyAgent - ok

20:45:16.0450 5968  [ F87D30E72E03D579A5199CCB3831D6EA ] Power           C:\Windows\system32\umpo.dll

20:45:16.0481 5968  Power - ok

20:45:16.0528 5968  [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

20:45:16.0575 5968  PptpMiniport - ok

20:45:16.0590 5968  [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor       C:\Windows\system32\DRIVERS\processr.sys

20:45:16.0606 5968  Processor - ok

20:45:16.0622 5968  [ 43CA4CCC22D52FB58E8988F0198851D0 ] ProfSvc         C:\Windows\system32\profsvc.dll

20:45:16.0684 5968  ProfSvc - ok

20:45:16.0700 5968  [ F42309C4191C506B71DB5D1126D26318 ] ProtectedStorage C:\Windows\system32\lsass.exe

20:45:16.0715 5968  ProtectedStorage - ok

20:45:16.0731 5968  [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched          C:\Windows\system32\DRIVERS\pacer.sys

20:45:16.0762 5968  Psched - ok

20:45:16.0809 5968  [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys

20:45:16.0840 5968  ql2300 - ok

20:45:16.0903 5968  [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys

20:45:16.0918 5968  ql40xx - ok

20:45:16.0950 5968  [ 31AC809E7707EB580B2BDB760390765A ] QWAVE           C:\Windows\system32\qwave.dll

20:45:16.0981 5968  QWAVE - ok

20:45:17.0012 5968  [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

20:45:17.0043 5968  QWAVEdrv - ok

20:45:17.0059 5968  [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

20:45:17.0090 5968  RasAcd - ok

20:45:17.0137 5968  [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys

20:45:17.0168 5968  RasAgileVpn - ok

20:45:17.0184 5968  [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto         C:\Windows\System32\rasauto.dll

20:45:17.0215 5968  RasAuto - ok

20:45:17.0231 5968  [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

20:45:17.0278 5968  Rasl2tp - ok

20:45:17.0341 5968  [ CB9E04DC05EACF5B9A36CA276D475006 ] RasMan          C:\Windows\System32\rasmans.dll

20:45:17.0373 5968  RasMan - ok

20:45:17.0388 5968  [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

20:45:17.0419 5968  RasPppoe - ok

20:45:17.0435 5968  [ 44101F495A83EA6401D886E7FD70096B ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

20:45:17.0466 5968  RasSstp - ok

20:45:17.0513 5968  [ D528BC58A489409BA40334EBF96A311B ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

20:45:17.0560 5968  rdbss - ok

20:45:17.0576 5968  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys

20:45:17.0607 5968  rdpbus - ok

20:45:17.0654 5968  [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

20:45:17.0701 5968  RDPCDD - ok

20:45:17.0732 5968  [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR           C:\Windows\system32\drivers\rdpdr.sys

20:45:17.0779 5968  RDPDR - ok

20:45:17.0810 5968  [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

20:45:17.0857 5968  RDPENCDD - ok

20:45:17.0873 5968  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys

20:45:17.0919 5968  RDPREFMP - ok

20:45:17.0982 5968  [ 68A0387F58E226DEEE23D9715955572A ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

20:45:18.0013 5968  RdpVideoMiniport - ok

20:45:18.0060 5968  [ 288B06960D78428FF89E811632684E20 ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

20:45:18.0107 5968  RDPWD - ok

20:45:18.0154 5968  [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys

20:45:18.0169 5968  rdyboost - ok

20:45:18.0185 5968  [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess    C:\Windows\System32\mprdim.dll

20:45:18.0216 5968  RemoteAccess - ok

20:45:18.0232 5968  [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

20:45:18.0294 5968  RemoteRegistry - ok

20:45:18.0326 5968  [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys

20:45:18.0341 5968  RFCOMM - ok

20:45:18.0373 5968  [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll

20:45:18.0419 5968  RpcEptMapper - ok

20:45:18.0435 5968  [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator      C:\Windows\system32\locator.exe

20:45:18.0466 5968  RpcLocator - ok

20:45:18.0498 5968  [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs           C:\Windows\system32\rpcss.dll

20:45:18.0529 5968  RpcSs - ok

20:45:18.0560 5968  [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

20:45:18.0576 5968  rspndr - ok

20:45:18.0607 5968  [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap           C:\Windows\system32\drivers\vms3cap.sys

20:45:18.0654 5968  s3cap - ok

20:45:18.0669 5968  [ F42309C4191C506B71DB5D1126D26318 ] SamSs           C:\Windows\system32\lsass.exe

20:45:18.0685 5968  SamSs - ok

20:45:18.0701 5968  [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

20:45:18.0716 5968  sbp2port - ok

20:45:18.0748 5968  [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

20:45:18.0794 5968  SCardSvr - ok

20:45:18.0810 5968  [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys

20:45:18.0857 5968  scfilter - ok

20:45:18.0904 5968  [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule        C:\Windows\system32\schedsvc.dll

20:45:18.0966 5968  Schedule - ok

20:45:18.0982 5968  [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc     C:\Windows\System32\certprop.dll

20:45:19.0013 5968  SCPolicySvc - ok

20:45:19.0060 5968  [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

20:45:19.0107 5968  SDRSVC - ok

20:45:19.0138 5968  [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

20:45:19.0169 5968  secdrv - ok

20:45:19.0169 5968  [ A59B3A4442C52060CC7A85293AA3546F ] seclogon        C:\Windows\system32\seclogon.dll

20:45:19.0216 5968  seclogon - ok

20:45:19.0248 5968  [ DCB7FCDCC97F87360F75D77425B81737 ] SENS            C:\Windows\System32\sens.dll

20:45:19.0294 5968  SENS - ok

20:45:19.0326 5968  [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc        C:\Windows\system32\sensrsvc.dll

20:45:19.0357 5968  SensrSvc - ok

20:45:19.0373 5968  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum         C:\Windows\system32\DRIVERS\serenum.sys

20:45:19.0404 5968  Serenum - ok

20:45:19.0419 5968  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial          C:\Windows\system32\DRIVERS\serial.sys

20:45:19.0451 5968  Serial - ok

20:45:19.0482 5968  [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys

20:45:19.0498 5968  sermouse - ok

20:45:19.0576 5968  [ 4AE380F39A0032EAB7DD953030B26D28 ] SessionEnv      C:\Windows\system32\sessenv.dll

20:45:19.0623 5968  SessionEnv - ok

20:45:19.0638 5968  [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

20:45:19.0669 5968  sffdisk - ok

20:45:19.0685 5968  [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

20:45:19.0716 5968  sffp_mmc - ok

20:45:19.0732 5968  [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

20:45:19.0763 5968  sffp_sd - ok

20:45:19.0794 5968  [ DB96666CC8312EBC45032F30B007A547 ] sfloppy         C:\Windows\system32\DRIVERS\sfloppy.sys

20:45:19.0826 5968  sfloppy - ok

20:45:19.0857 5968  [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

20:45:19.0888 5968  SharedAccess - ok

20:45:19.0935 5968  [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

20:45:19.0982 5968  ShellHWDetection - ok

20:45:19.0998 5968  [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp          C:\Windows\system32\drivers\sisagp.sys

20:45:20.0013 5968  sisagp - ok

20:45:20.0029 5968  [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys

20:45:20.0044 5968  SiSRaid2 - ok

20:45:20.0060 5968  [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys

20:45:20.0076 5968  SiSRaid4 - ok

20:45:20.0123 5968  [ EA396139541706B4B433641D62EA53CE ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe

20:45:20.0138 5968  SkypeUpdate - ok

20:45:20.0154 5968  [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb             C:\Windows\system32\DRIVERS\smb.sys

20:45:20.0185 5968  Smb - ok

20:45:20.0216 5968  [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

20:45:20.0232 5968  SNMPTRAP - ok

20:45:20.0263 5968  [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr           C:\Windows\system32\drivers\spldr.sys

20:45:20.0279 5968  spldr - ok

20:45:20.0294 5968  [ 866A43013535DC8587C258E43579C764 ] Spooler         C:\Windows\System32\spoolsv.exe

20:45:20.0341 5968  Spooler - ok

20:45:20.0435 5968  [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc          C:\Windows\system32\sppsvc.exe

20:45:20.0513 5968  sppsvc - ok

20:45:20.0560 5968  [ B0180B20B065D89232A78A40FE56EAA6 ] sppuinotify     C:\Windows\system32\sppuinotify.dll

20:45:20.0591 5968  sppuinotify - ok

20:45:20.0623 5968  [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv             C:\Windows\system32\DRIVERS\srv.sys

20:45:20.0669 5968  srv - ok

20:45:20.0701 5968  [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

20:45:20.0732 5968  srv2 - ok

20:45:20.0763 5968  [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

20:45:20.0794 5968  srvnet - ok

20:45:20.0826 5968  [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

20:45:20.0857 5968  SSDPSRV - ok

20:45:20.0873 5968  [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc         C:\Windows\system32\sstpsvc.dll

20:45:20.0904 5968  SstpSvc - ok

20:45:20.0919 5968  Steam Client Service - ok

20:45:20.0951 5968  [ DB32D325C192B801DF274BFD12A7E72B ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys

20:45:20.0966 5968  stexstor - ok

20:45:20.0998 5968  [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc          C:\Windows\System32\wiaservc.dll

20:45:21.0044 5968  StiSvc - ok

20:45:21.0076 5968  [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt         C:\Windows\system32\drivers\vmstorfl.sys

20:45:21.0091 5968  storflt - ok

20:45:21.0107 5968  [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc         C:\Windows\system32\drivers\storvsc.sys

20:45:21.0107 5968  storvsc - ok

20:45:21.0123 5968  [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum          C:\Windows\system32\drivers\swenum.sys

20:45:21.0138 5968  swenum - ok

20:45:21.0154 5968  [ A28BD92DF340E57B024BA433165D34D7 ] swprv           C:\Windows\System32\swprv.dll

20:45:21.0185 5968  swprv - ok

20:45:21.0201 5968  Synth3dVsc - ok

20:45:21.0263 5968  [ 36650D618CA34C9D357DFD3D89B2C56F ] SysMain         C:\Windows\system32\sysmain.dll

20:45:21.0294 5968  SysMain - ok

20:45:21.0310 5968  [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll

20:45:21.0326 5968  TabletInputService - ok

20:45:21.0373 5968  [ 613BF4820361543956909043A265C6AC ] TapiSrv         C:\Windows\System32\tapisrv.dll

20:45:21.0404 5968  TapiSrv - ok

20:45:21.0419 5968  [ B799D9FDB26111737F58288D8DC172D9 ] TBS             C:\Windows\System32\tbssvc.dll

20:45:21.0451 5968  TBS - ok

20:45:21.0513 5968  [ 04E4A7D53A7ACE02E8C55B17A498F631 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

20:45:21.0560 5968  Tcpip - ok

20:45:21.0591 5968  [ 04E4A7D53A7ACE02E8C55B17A498F631 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys

20:45:21.0623 5968  TCPIP6 - ok

20:45:21.0654 5968  [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

20:45:21.0685 5968  tcpipreg - ok

20:45:21.0732 5968  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

20:45:21.0763 5968  TDPIPE - ok

20:45:21.0794 5968  [ 2C10395BAA4847F83042813C515CC289 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

20:45:21.0826 5968  TDTCP - ok

20:45:21.0873 5968  [ B459575348C20E8121D6039DA063C704 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

20:45:21.0919 5968  tdx - ok

20:45:21.0951 5968  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD          C:\Windows\system32\drivers\termdd.sys

20:45:21.0982 5968  TermDD - ok

20:45:22.0013 5968  [ 382C804C92811BE57829D8E550A900E2 ] TermService     C:\Windows\System32\termsrv.dll

20:45:22.0060 5968  TermService - ok

20:45:22.0091 5968  [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes          C:\Windows\system32\themeservice.dll

20:45:22.0123 5968  Themes - ok

20:45:22.0154 5968  [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER     C:\Windows\system32\mmcss.dll

20:45:22.0185 5968  THREADORDER - ok

20:45:22.0201 5968  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks          C:\Windows\System32\trkwks.dll

20:45:22.0263 5968  TrkWks - ok

20:45:22.0294 5968  [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

20:45:22.0341 5968  TrustedInstaller - ok

20:45:22.0373 5968  [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

20:45:22.0404 5968  tssecsrv - ok

20:45:22.0435 5968  [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys

20:45:22.0482 5968  TsUsbFlt - ok

20:45:22.0482 5968  tsusbhub - ok

20:45:22.0544 5968  [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

20:45:22.0591 5968  tunnel - ok

20:45:22.0623 5968  [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys

20:45:22.0623 5968  uagp35 - ok

20:45:22.0669 5968  [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

20:45:22.0701 5968  udfs - ok

20:45:22.0748 5968  [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

20:45:22.0779 5968  UI0Detect - ok

20:45:22.0794 5968  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

20:45:22.0810 5968  uliagpkx - ok

20:45:22.0841 5968  [ D295BED4B898F0FD999FCFA9B32B071B ] umbus           C:\Windows\system32\drivers\umbus.sys

20:45:22.0841 5968  umbus - ok

20:45:22.0873 5968  [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys

20:45:22.0888 5968  UmPass - ok

20:45:22.0919 5968  [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService    C:\Windows\System32\umrdp.dll

20:45:22.0951 5968  UmRdpService - ok

20:45:22.0982 5968  [ 833FBB672460EFCE8011D262175FAD33 ] upnphost        C:\Windows\System32\upnphost.dll

20:45:23.0029 5968  upnphost - ok

20:45:23.0060 5968  [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys

20:45:23.0076 5968  usbccgp - ok

20:45:23.0107 5968  [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

20:45:23.0123 5968  usbcir - ok

20:45:23.0154 5968  [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

20:45:23.0169 5968  usbehci - ok

20:45:23.0201 5968  [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

20:45:23.0232 5968  usbhub - ok

20:45:23.0263 5968  [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

20:45:23.0279 5968  usbohci - ok

20:45:23.0310 5968  [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys

20:45:23.0326 5968  usbprint - ok

20:45:23.0357 5968  [ F991AB9CC6B908DB552166768176896A ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

20:45:23.0419 5968  USBSTOR - ok

20:45:23.0435 5968  [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys

20:45:23.0451 5968  usbuhci - ok

20:45:23.0482 5968  [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms           C:\Windows\System32\uxsms.dll

20:45:23.0529 5968  UxSms - ok

20:45:23.0544 5968  [ F42309C4191C506B71DB5D1126D26318 ] VaultSvc        C:\Windows\system32\lsass.exe

20:45:23.0560 5968  VaultSvc - ok

20:45:23.0576 5968  [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys

20:45:23.0576 5968  vdrvroot - ok

20:45:23.0623 5968  [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds             C:\Windows\System32\vds.exe

20:45:23.0669 5968  vds - ok

20:45:23.0701 5968  [ 17C408214EA61696CEC9C66E388B14F3 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

20:45:23.0732 5968  vga - ok

20:45:23.0748 5968  [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave         C:\Windows\System32\drivers\vga.sys

20:45:23.0794 5968  VgaSave - ok

20:45:23.0810 5968  VGPU - ok

20:45:23.0857 5968  [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys

20:45:23.0873 5968  vhdmp - ok

20:45:23.0888 5968  [ C829317A37B4BEA8F39735D4B076E923 ] viaagp          C:\Windows\system32\drivers\viaagp.sys

20:45:23.0888 5968  viaagp - ok

20:45:23.0919 5968  [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7           C:\Windows\system32\DRIVERS\viac7.sys

20:45:23.0951 5968  ViaC7 - ok

20:45:23.0966 5968  [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide          C:\Windows\system32\drivers\viaide.sys

20:45:23.0982 5968  viaide - ok

20:45:23.0998 5968  [ C2F2911156FDC7817C52829C86DA494E ] vmbus           C:\Windows\system32\drivers\vmbus.sys

20:45:24.0013 5968  vmbus - ok

20:45:24.0029 5968  [ D4D77455211E204F370D08F4963063CE ] VMBusHID        C:\Windows\system32\drivers\VMBusHID.sys

20:45:24.0060 5968  VMBusHID - ok

20:45:24.0076 5968  [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

20:45:24.0091 5968  volmgr - ok

20:45:24.0107 5968  [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

20:45:24.0123 5968  volmgrx - ok

20:45:24.0154 5968  [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

20:45:24.0169 5968  volsnap - ok

20:45:24.0201 5968  [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid         C:\Windows\system32\DRIVERS\vsmraid.sys

20:45:24.0216 5968  vsmraid - ok

20:45:24.0263 5968  [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS             C:\Windows\system32\vssvc.exe

20:45:24.0310 5968  VSS - ok

20:45:24.0436 5968  [ CBA3F6EF1E70167DB376B4013F71A62B ] vToolbarUpdater12.2.6 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe

20:45:24.0452 5968  vToolbarUpdater12.2.6 - ok

20:45:24.0483 5968  [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus        C:\Windows\System32\drivers\vwifibus.sys

20:45:24.0499 5968  vwifibus - ok

20:45:24.0545 5968  [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time         C:\Windows\system32\w32time.dll

20:45:24.0592 5968  W32Time - ok

20:45:24.0624 5968  [ DE3721E89C653AA281428C8A69745D90 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys

20:45:24.0655 5968  WacomPen - ok

20:45:24.0702 5968  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys

20:45:24.0733 5968  WANARP - ok

20:45:24.0749 5968  [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

20:45:24.0764 5968  Wanarpv6 - ok

20:45:24.0842 5968  [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe

20:45:24.0889 5968  WatAdminSvc - ok

20:45:24.0936 5968  [ 691E3285E53DCA558E1A84667F13E15A ] wbengine        C:\Windows\system32\wbengine.exe

20:45:24.0999 5968  wbengine - ok

20:45:25.0014 5968  [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll

20:45:25.0045 5968  WbioSrvc - ok

20:45:25.0092 5968  [ 34EEE0DFAADB4F691D6D5308A51315DC ] wcncsvc         C:\Windows\System32\wcncsvc.dll

20:45:25.0124 5968  wcncsvc - ok

20:45:25.0139 5968  [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

20:45:25.0186 5968  WcsPlugInService - ok

20:45:25.0217 5968  [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd              C:\Windows\system32\DRIVERS\wd.sys

20:45:25.0233 5968  Wd - ok

20:45:25.0249 5968  [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

20:45:25.0280 5968  Wdf01000 - ok

20:45:25.0295 5968  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost  C:\Windows\system32\wdi.dll

20:45:25.0342 5968  WdiServiceHost - ok

20:45:25.0358 5968  [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost   C:\Windows\system32\wdi.dll

20:45:25.0374 5968  WdiSystemHost - ok

20:45:25.0420 5968  [ A9D880F97530D5B8FEE278923349929D ] WebClient       C:\Windows\System32\webclnt.dll

20:45:25.0452 5968  WebClient - ok

20:45:25.0467 5968  [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc          C:\Windows\system32\wecsvc.dll

20:45:25.0499 5968  Wecsvc - ok

20:45:25.0514 5968  [ AC804569BB2364FB6017370258A4091B ] wercplsupport   C:\Windows\System32\wercplsupport.dll

20:45:25.0545 5968  wercplsupport - ok

20:45:25.0561 5968  [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc          C:\Windows\System32\WerSvc.dll

20:45:25.0592 5968  WerSvc - ok

20:45:25.0639 5968  [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys

20:45:25.0686 5968  WfpLwf - ok

20:45:25.0702 5968  [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount        C:\Windows\system32\drivers\wimmount.sys

20:45:25.0717 5968  WIMMount - ok

20:45:25.0764 5968  [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

20:45:25.0811 5968  WinDefend - ok

20:45:25.0811 5968  WinHttpAutoProxySvc - ok

20:45:25.0874 5968  [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

20:45:25.0905 5968  Winmgmt - ok

20:45:25.0967 5968  [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM           C:\Windows\system32\WsmSvc.dll

20:45:26.0030 5968  WinRM - ok

20:45:26.0077 5968  [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc         C:\Windows\System32\wlansvc.dll

20:45:26.0124 5968  Wlansvc - ok

20:45:26.0217 5968  [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

20:45:26.0264 5968  wlidsvc - ok

20:45:26.0280 5968  [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

20:45:26.0295 5968  WmiAcpi - ok

20:45:26.0327 5968  [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

20:45:26.0342 5968  wmiApSrv - ok

20:45:26.0389 5968  [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

20:45:26.0436 5968  WMPNetworkSvc - ok

20:45:26.0452 5968  [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc          C:\Windows\System32\wpcsvc.dll

20:45:26.0483 5968  WPCSvc - ok

20:45:26.0530 5968  [ AA53356D60AF47EACC85BC617A4F3F66 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

20:45:26.0561 5968  WPDBusEnum - ok

20:45:26.0577 5968  [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

20:45:26.0624 5968  ws2ifsl - ok

20:45:26.0639 5968  [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc          C:\Windows\System32\wscsvc.dll

20:45:26.0686 5968  wscsvc - ok

20:45:26.0686 5968  WSearch - ok

20:45:26.0764 5968  [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv        C:\Windows\system32\wuaueng.dll

20:45:26.0795 5968  wuauserv - ok

20:45:26.0842 5968  [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys

20:45:26.0874 5968  WudfPf - ok

20:45:26.0889 5968  [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

20:45:26.0920 5968  WUDFRd - ok

20:45:26.0983 5968  [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

20:45:27.0014 5968  wudfsvc - ok

20:45:27.0045 5968  [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc         C:\Windows\System32\wwansvc.dll

20:45:27.0077 5968  WwanSvc - ok

20:45:27.0139 5968  ================ Scan global ===============================

20:45:27.0155 5968  [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll

20:45:27.0186 5968  [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll

20:45:27.0202 5968  [ 183B4188D5D91B271613EC3EFD1B3CEF ] C:\Windows\system32\winsrv.dll

20:45:27.0233 5968  [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll

20:45:27.0264 5968  [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe

20:45:27.0264 5968  [Global] - ok

20:45:27.0264 5968  ================ Scan MBR ==================================

20:45:27.0280 5968  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

20:45:27.0702 5968  \Device\Harddisk0\DR0 - ok

20:45:27.0702 5968  ================ Scan VBR ==================================

20:45:27.0717 5968  [ BEA379E744E1769B146E186E7B63F528 ] \Device\Harddisk0\DR0\Partition1

20:45:27.0717 5968  \Device\Harddisk0\DR0\Partition1 - ok

20:45:27.0717 5968  ============================================================

20:45:27.0717 5968  Scan finished

20:45:27.0717 5968  ============================================================

20:45:27.0733 5848  Detected object count: 0

20:45:27.0733 5848  Actual detected object count: 0

Bitte nun Logs mit GMER (<<< klick für Anleitung) und aswMBR (Anleitung etwas weiter unten) erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim zweiten Mal nicht will, lass es einfach weg und führ nur aswMBR aus.

aswMBR-Download => aswMBR.exe - speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Noch ein Hinweis: Sollte aswMBR abstürzen und es kommt eine Meldung wie "aswMBR.exe funktioniert nicht mehr, dann mach Folgendes:
Starte aswMBR neu, wähle unten links im Drop-Down-Menü (unten links im Fenster von aswMBR) bei "AV scan" (none) aus und klick nochmal auf den Scan-Button.

Scan mit Gmer:

GMER Logfile:

Code:

GMER 1.0.15.15641 - hxxp://www.gmer.net

Rootkit scan 2012-10-26 09:09:18

Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\00000061 SAMSUNG_ rev.1AA0

Running: lxpuud1g.exe; Driver: C:\Users\878\AppData\Local\Temp\uwldqpow.sys
 
 

---- System - GMER 1.0.15 ----
 

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwNotifyChangeKey [0x96D96004]

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwNotifyChangeMultipleKeys [0x96D960D4]

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwOpenProcess [0x96D95D76]

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwTerminateProcess [0x96D95E1E]

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwTerminateThread [0x96D95EBA]

SSDT            \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. )  ZwWriteVirtualMemory [0x96D95F56]
 

---- Kernel code sections - GMER 1.0.15 ----
 

.text           ntkrnlpa.exe!ZwSaveKey + 13D1                                                                                                82C48349 1 Byte  [06]

.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                                       82C81D52 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

.text           ntkrnlpa.exe!KeRemoveQueueEx + 1357                                                                                          82C8900C 8 Bytes  [04, 60, D9, 96, D4, 60, D9, ...] {ADD AL, 0x60; FST DWORD [ESI-0x69269f2c]}

.text           ntkrnlpa.exe!KeRemoveQueueEx + 139F                                                                                          82C89054 4 Bytes  [76, 5D, D9, 96]

.text           ntkrnlpa.exe!KeRemoveQueueEx + 166F                                                                                          82C89324 8 Bytes  [1E, 5E, D9, 96, BA, 5E, D9, ...] {PUSH DS; POP ESI; FST DWORD [ESI-0x6926a146]}

.text           ntkrnlpa.exe!KeRemoveQueueEx + 16E3                                                                                          82C89398 4 Bytes  [56, 5F, D9, 96]

.vmp2           C:\Windows\system32\drivers\acedrv11.sys                                                                                     entry point in ".vmp2" section [0x96D9069D]
 

---- User IAT/EAT - GMER 1.0.15 ----
 

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipAlloc]                                               [73982437] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusStartup]                                          [73965600] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown]                                         [739656BE] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipFree]                                                [739824B2] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics]                                      [73978514] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage]                                        [73974CC8] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth]                                       [7397506F] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight]                                      [73975144] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromHBITMAP]                             [73976671] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC]                                       [7397826B] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode]                                  [739787BA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode]                                [7397901B] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI]                                      [7397E1BE] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)

IAT             C:\Windows\Explorer.EXE[308] @ C:\Windows\Explorer.EXE [gdiplus.dll!GdipCloneImage]                                          [73974BFA] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
 

---- Devices - GMER 1.0.15 ----
 

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                                       avgidsfilterx.sys (IDS Application Activity Monitor Filter Driver./AVG Technologies CZ, s.r.o. )

AttachedDevice  \Driver\tdx \Device\Tcp                                                                                                      avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                                                       fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
 

Device          \Driver\ACPI_HAL \Device\0000004d                                                                                            halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
 

AttachedDevice  \Driver\tdx \Device\Udp                                                                                                      avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

AttachedDevice  \Driver\tdx \Device\RawIp                                                                                                    avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
 

---- Registry - GMER 1.0.15 ----
 

Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015834e8f79                                                  

Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015834e8f79@00265f7cca1f                                     0x30 0xD3 0x43 0x9C ...

Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015834e8f79@045a954970c7                                     0x23 0xBA 0xAF 0x83 ...

Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015834e8f79 (not active ControlSet)                              

Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015834e8f79@00265f7cca1f                                         0x30 0xD3 0x43 0x9C ...

Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015834e8f79@045a954970c7                                         0x23 0xBA 0xAF 0x83 ...
 

---- EOF - GMER 1.0.15 ----

--- --- ---

Scan mit aswMBR:

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software

Run date: 2012-10-26 09:13:26

-----------------------------

09:13:26.675    OS Version: Windows 6.1.7601 Service Pack 1

09:13:26.675    Number of processors: 2 586 0x6B02

09:13:26.679    ComputerName: 878-PC  UserName: 878

09:13:28.535    Initialize success

09:14:40.614    AVAST engine defs: 12102502

09:15:59.874    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000061

09:15:59.877    Disk 0 Vendor: SAMSUNG_ 1AA0 Size: 476940MB BusType: 3

09:16:00.083    Disk 0 MBR read successfully

09:16:00.084    Disk 0 MBR scan

09:16:00.106    Disk 0 Windows 7 default MBR code

09:16:00.159    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS       476929 MB offset 63

09:16:00.333    Disk 0 scanning sectors +976752000

09:16:00.745    Disk 0 scanning C:\Windows\system32\drivers

09:17:04.045    Service scanning

09:17:26.414    Modules scanning

09:18:41.174    Disk 0 trace - called modules:

09:18:41.202    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor.sys 

09:18:41.206    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85da8030]

09:18:41.213    3 CLASSPNP.SYS[88fa259e] -> nt!IofCallDriver -> [0x85578020]

09:18:41.219    5 ACPI.sys[833aa3d4] -> nt!IofCallDriver -> \Device\00000061[0x85578ad0]

09:18:42.161    AVAST engine scan C:\Windows

09:19:17.967    Disk 0 MBR has been saved successfully to "C:\Users\878\Desktop\MBR.dat"

09:19:17.989    The log file has been saved successfully to "C:\Users\878\Desktop\aswMBR.txt"

Ich hoffe, der PC ist in Ordnung soweit. Fliege heute Abend für 1 Woche auf Urlaub. Wie weit sind wir denn schon gekommen? Falls noch etwas zu tun ist, was heute nicht mehr zu bewältigen ist, melde ich mich umgehend nach meiner Rückkehr wieder.

Liebe Grüße,
mar87

Ups, war bisschen voreilig, aswMBR hat erst jetzt den Scan beendet:

Code:

aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software

Run date: 2012-10-26 09:13:26

-----------------------------

09:13:26.675    OS Version: Windows 6.1.7601 Service Pack 1

09:13:26.675    Number of processors: 2 586 0x6B02

09:13:26.679    ComputerName: 878-PC  UserName: 878

09:13:28.535    Initialize success

09:14:40.614    AVAST engine defs: 12102502

09:15:59.874    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000061

09:15:59.877    Disk 0 Vendor: SAMSUNG_ 1AA0 Size: 476940MB BusType: 3

09:16:00.083    Disk 0 MBR read successfully

09:16:00.084    Disk 0 MBR scan

09:16:00.106    Disk 0 Windows 7 default MBR code

09:16:00.159    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS       476929 MB offset 63

09:16:00.333    Disk 0 scanning sectors +976752000

09:16:00.745    Disk 0 scanning C:\Windows\system32\drivers

09:17:04.045    Service scanning

09:17:26.414    Modules scanning

09:18:41.174    Disk 0 trace - called modules:

09:18:41.202    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll storport.sys nvstor.sys 

09:18:41.206    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85da8030]

09:18:41.213    3 CLASSPNP.SYS[88fa259e] -> nt!IofCallDriver -> [0x85578020]

09:18:41.219    5 ACPI.sys[833aa3d4] -> nt!IofCallDriver -> \Device\00000061[0x85578ad0]

09:18:42.161    AVAST engine scan C:\Windows

09:19:17.967    Disk 0 MBR has been saved successfully to "C:\Users\878\Desktop\MBR.dat"

09:19:17.989    The log file has been saved successfully to "C:\Users\878\Desktop\aswMBR.txt"

09:21:09.980    AVAST engine scan C:\Windows\system32

09:29:45.811    AVAST engine scan C:\Windows\system32\drivers

09:30:25.464    AVAST engine scan C:\Users\878

09:37:05.117    AVAST engine scan C:\ProgramData

09:39:19.216    Scan finished successfully

09:39:43.190    Disk 0 MBR has been saved successfully to "C:\Users\878\Desktop\MBR.dat"

09:39:43.221    The log file has been saved successfully to "C:\Users\878\Desktop\aswMBR.txt"

PS: Ich nütze den PC nicht alleine, kann meine Familie während meiner Abwesenheit die Urlaubsfotos auf den Computer laden oder ist das zu unsicher? Habe bis jetzt nicht mein OK dazu gegeben, wollte zuerst die Meinung eines Fachmannes hören.

Liebe Grüße,
mar87

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle Scans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Hallo,
bin von meiner Reise zurück und habe nun die benötigten Scans durchgeführt. Hier die Ergebnisse:

Malwarebytes Anti-Malware

Code:

Malwarebytes Anti-Malware 1.65.1.1000

www.malwarebytes.org
 

Datenbank Version: v2012.11.05.07
 

Windows 7 Service Pack 1 x86 NTFS

Internet Explorer 8.0.7601.17514

878 :: 878-PC [Administrator]
 

05.11.2012 22:07:58

mbam-log-2012-11-05 (22-07-58).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 329269

Laufzeit: 52 Minute(n), 50 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

SUPERAntiSpyware

Code:

SUPERAntiSpyware Scan Log

hxxp://www.superantispyware.com
 

Generated 11/06/2012 at 00:22 AM
 

Application Version : 5.6.1014
 

Core Rules Database Version : 9532

Trace Rules Database Version: 7344
 

Scan type       : Complete Scan

Total Scan Time : 01:13:13
 

Operating System Information

Windows 7 Ultimate 32-bit, Service Pack 1 (Build 6.01.7601)

UAC On - Administrator
 

Memory items scanned      : 645

Memory threats detected   : 0

Registry items scanned    : 38339

Registry threats detected : 0

File items scanned        : 120766

File threats detected     : 2
 

Adware.Tracking Cookie

        aka-cdn-ns.adtech.de [ C:\USERS\878\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4AUJQM34 ]

        imagesrv.adition.com [ C:\USERS\878\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4AUJQM34 ]

LG,
mar87

Sieht ok aus, da wurden nur Cookies gefunden, die können alle weg.
Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?