API tools faq
paste
CreativeUsername

OTL

CreativeUsername
Sep 23rd, 2013
836
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 248.19 KB | None | 0 0
raw download clone embed print report
  1. OTL logfile created on: 23.09.2013 19:28:56 - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Tanja\Desktop
  3. 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
  4. Internet Explorer (Version = 9.10.9200.16686)
  5. Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
  6.  
  7. 7,90 Gb Total Physical Memory | 5,37 Gb Available Physical Memory | 68,02% Memory free
  8. 15,80 Gb Paging File | 13,00 Gb Available in Paging File | 82,29% Paging File free
  9. Paging file location(s): ?:\pagefile.sys [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 414,66 Gb Total Space | 323,60 Gb Free Space | 78,04% Space Free | Partition Type: NTFS
  13. Drive D: | 465,76 Gb Total Space | 465,66 Gb Free Space | 99,98% Space Free | Partition Type: NTFS
  14. Drive E: | 50,00 Gb Total Space | 26,80 Gb Free Space | 53,60% Space Free | Partition Type: NTFS
  15.  
  16. Computer Name: TANJA-LAPTOP | User Name: Tanja | Logged in as Administrator.
  17. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  18. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days
  19.  
  20. [color=#E56717]========== Processes (SafeList) ==========[/color]
  21.  
  22. PRC - [2013.09.23 19:26:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tanja\Desktop\OTL.scr
  23. PRC - [2013.08.20 10:18:16 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
  24. PRC - [2013.08.20 10:16:53 | 000,815,160 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
  25. PRC - [2013.08.20 10:16:36 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
  26. PRC - [2013.08.20 10:16:35 | 000,347,192 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
  27. PRC - [2013.07.26 22:30:39 | 000,168,400 | ---- | M] (APN LLC.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
  28. PRC - [2013.07.26 22:30:31 | 001,558,480 | ---- | M] (APN) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
  29. PRC - [2013.07.26 22:30:31 | 000,264,656 | ---- | M] (APN LLC.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exe
  30. PRC - [2013.07.26 22:30:31 | 000,116,176 | ---- | M] (APN LLC.) -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ServiceLocator.exe
  31. PRC - [2013.06.26 19:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
  32. PRC - [2013.06.26 19:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
  33. PRC - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  34. PRC - [2013.04.04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  35. PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
  36. PRC - [2012.02.27 04:01:56 | 000,291,608 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  37. PRC - [2012.02.07 19:03:36 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
  38. PRC - [2012.02.07 19:03:34 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  39. PRC - [2012.02.07 19:03:16 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  40. PRC - [2012.02.04 13:59:00 | 002,458,944 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
  41. PRC - [2012.02.02 01:29:58 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
  42. PRC - [2012.02.02 01:29:56 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
  43. PRC - [2012.01.13 05:11:10 | 000,247,016 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
  44. PRC - [2011.12.20 04:16:50 | 001,104,208 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
  45. PRC - [2011.12.20 04:16:48 | 001,304,912 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
  46. PRC - [2011.12.20 04:16:44 | 001,014,096 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
  47. PRC - [2011.12.20 04:16:42 | 000,936,272 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
  48. PRC - [2011.06.29 20:36:12 | 002,482,176 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
  49. PRC - [2011.05.26 01:32:46 | 000,443,688 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
  50. PRC - [2010.08.04 00:39:38 | 000,107,816 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
  51. PRC - [2010.01.25 08:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files (x86)\Browny02\BrYNSvc.exe
  52. PRC - [2009.07.10 00:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\System Control Manager\MSIService.exe
  53.  
  54.  
  55. [color=#E56717]========== Modules (No Company Name) ==========[/color]
  56.  
  57. MOD - [2013.09.12 17:27:43 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll
  58. MOD - [2013.08.19 10:17:54 | 000,489,472 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\591b99d5681c59ed6c5e9544d7def0ea\IAStorUtil.ni.dll
  59. MOD - [2013.08.18 21:26:10 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll
  60. MOD - [2013.08.18 21:26:06 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
  61. MOD - [2013.08.18 21:25:56 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1f6f220f9efe936d1158c79b9d4b451f\WindowsBase.ni.dll
  62. MOD - [2013.08.18 21:25:51 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
  63. MOD - [2013.08.18 21:25:49 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8f7d83126a3cf283e5ac97f2d6d99f12\System.Configuration.ni.dll
  64. MOD - [2013.08.18 21:25:48 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
  65. MOD - [2013.07.19 22:31:21 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\45581138b36fd338c87813390775b65f\IAStorCommon.ni.dll
  66. MOD - [2013.07.15 18:14:27 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
  67. MOD - [2011.05.16 16:03:17 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll
  68. MOD - [2010.11.13 02:08:41 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
  69. MOD - [2010.08.04 00:39:38 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
  70. MOD - [2010.08.04 00:39:32 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
  71.  
  72.  
  73. [color=#E56717]========== Services (SafeList) ==========[/color]
  74.  
  75. SRV:[b]64bit:[/b] - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
  76. SRV:[b]64bit:[/b] - [2012.02.26 14:07:52 | 002,669,840 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
  77. SRV:[b]64bit:[/b] - [2012.02.26 14:07:42 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
  78. SRV:[b]64bit:[/b] - [2012.02.26 14:07:32 | 000,626,960 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
  79. SRV:[b]64bit:[/b] - [2012.02.26 14:07:26 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
  80. SRV:[b]64bit:[/b] - [2012.02.23 00:07:28 | 000,492,032 | ---- | M] () [Auto | Running] -- C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe -- (Qualcomm Atheros Killer Service)
  81. SRV:[b]64bit:[/b] - [2012.02.03 07:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
  82. SRV:[b]64bit:[/b] - [2012.01.18 01:12:28 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
  83. SRV:[b]64bit:[/b] - [2012.01.09 21:39:44 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
  84. SRV:[b]64bit:[/b] - [2010.09.23 03:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
  85. SRV - [2013.09.22 23:13:10 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
  86. SRV - [2013.08.28 23:47:18 | 000,563,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
  87. SRV - [2013.08.20 10:18:16 | 000,084,024 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
  88. SRV - [2013.08.20 10:16:53 | 000,815,160 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
  89. SRV - [2013.08.20 10:16:36 | 000,108,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
  90. SRV - [2013.07.26 22:30:39 | 000,168,400 | ---- | M] (APN LLC.) [Auto | Running] -- C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe -- (APNMCP)
  91. SRV - [2013.06.26 19:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
  92. SRV - [2013.06.26 19:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
  93. SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
  94. SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
  95. SRV - [2012.03.06 12:53:18 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
  96. SRV - [2012.02.07 19:03:36 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
  97. SRV - [2012.02.07 19:03:34 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
  98. SRV - [2012.02.07 19:03:16 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
  99. SRV - [2012.02.04 13:59:00 | 002,458,944 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
  100. SRV - [2012.02.02 01:29:58 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
  101. SRV - [2012.01.31 11:24:02 | 000,070,144 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\watchmi\TvdService.exe -- (watchmi)
  102. SRV - [2011.12.20 04:16:50 | 001,104,208 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)
  103. SRV - [2011.12.20 04:16:48 | 001,304,912 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)
  104. SRV - [2011.12.20 04:16:44 | 001,014,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)
  105. SRV - [2011.12.07 16:38:10 | 002,429,544 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R)
  106. SRV - [2011.09.28 02:47:38 | 000,025,824 | ---- | M] (Memeo) [Auto | Running] -- C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe -- (MemeoBackgroundService)
  107. SRV - [2010.03.18 22:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
  108. SRV - [2010.01.25 08:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Running] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc)
  109. SRV - [2009.09.20 11:55:20 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
  110. SRV - [2009.07.10 00:54:42 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\System Control Manager\MSIService.exe -- (Micro Star SCM)
  111. SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
  112.  
  113.  
  114. [color=#E56717]========== Driver Services (SafeList) ==========[/color]
  115.  
  116. DRV:[b]64bit:[/b] - [2013.09.04 16:00:22 | 000,105,344 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
  117. DRV:[b]64bit:[/b] - [2013.08.20 10:18:41 | 000,132,088 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
  118. DRV:[b]64bit:[/b] - [2013.07.29 21:58:30 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
  119. DRV:[b]64bit:[/b] - [2013.06.26 19:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol)
  120. DRV:[b]64bit:[/b] - [2013.06.26 19:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir)
  121. DRV:[b]64bit:[/b] - [2013.06.26 19:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay)
  122. DRV:[b]64bit:[/b] - [2013.06.26 19:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs)
  123. DRV:[b]64bit:[/b] - [2013.04.04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
  124. DRV:[b]64bit:[/b] - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
  125. DRV:[b]64bit:[/b] - [2012.02.28 01:55:24 | 014,741,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
  126. DRV:[b]64bit:[/b] - [2012.02.27 04:01:00 | 000,788,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
  127. DRV:[b]64bit:[/b] - [2012.02.27 04:01:00 | 000,356,120 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
  128. DRV:[b]64bit:[/b] - [2012.02.27 04:01:00 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
  129. DRV:[b]64bit:[/b] - [2012.02.23 00:08:32 | 000,075,880 | ---- | M] (Bigfoot Networks, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bflwfx64.sys -- (BfLwf)
  130. DRV:[b]64bit:[/b] - [2012.02.23 00:08:30 | 000,159,848 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e22W7x64.sys -- (L1C)
  131. DRV:[b]64bit:[/b] - [2012.02.20 21:36:58 | 011,471,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64)
  132. DRV:[b]64bit:[/b] - [2012.02.04 13:59:00 | 000,028,992 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
  133. DRV:[b]64bit:[/b] - [2012.02.02 01:16:40 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
  134. DRV:[b]64bit:[/b] - [2012.01.09 21:32:40 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
  135. DRV:[b]64bit:[/b] - [2012.01.09 21:32:40 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
  136. DRV:[b]64bit:[/b] - [2012.01.03 12:21:44 | 000,340,072 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR)
  137. DRV:[b]64bit:[/b] - [2011.12.06 04:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
  138. DRV:[b]64bit:[/b] - [2011.11.10 02:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
  139. DRV:[b]64bit:[/b] - [2011.04.14 05:47:55 | 000,031,216 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)
  140. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
  141. DRV:[b]64bit:[/b] - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
  142. DRV:[b]64bit:[/b] - [2010.11.25 15:59:00 | 000,694,888 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RTL8192su.sys -- (RTL8192su)
  143. DRV:[b]64bit:[/b] - [2010.11.21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
  144. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
  145. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
  146. DRV:[b]64bit:[/b] - [2010.11.21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
  147. DRV:[b]64bit:[/b] - [2010.09.23 22:03:06 | 000,129,008 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)
  148. DRV:[b]64bit:[/b] - [2010.09.16 20:14:56 | 001,393,200 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
  149. DRV:[b]64bit:[/b] - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
  150. DRV:[b]64bit:[/b] - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
  151. DRV:[b]64bit:[/b] - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
  152. DRV:[b]64bit:[/b] - [2009.06.10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
  153. DRV:[b]64bit:[/b] - [2009.06.10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
  154. DRV:[b]64bit:[/b] - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
  155. DRV:[b]64bit:[/b] - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
  156. DRV:[b]64bit:[/b] - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
  157. DRV:[b]64bit:[/b] - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
  158. DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
  159.  
  160.  
  161. [color=#E56717]========== Standard Registry (All) ==========[/color]
  162.  
  163.  
  164. [color=#E56717]========== Internet Explorer ==========[/color]
  165.  
  166. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
  167. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  168. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  169. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  170. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
  171. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  172. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  173. IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
  174. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
  175. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  176. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
  177. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
  178. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
  179. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  180. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
  181. IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
  182. IE - HKLM\..\SearchScopes,DefaultScope =
  183. IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  184.  
  185.  
  186. IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
  187. IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  188.  
  189. IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
  190. IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  191.  
  192. IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  193. IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
  194.  
  195. IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  196. IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
  197.  
  198. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
  199. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  200. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  201. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?rd=1&ucc=DE&dcc=DE&opt=0
  202. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
  203. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 62 7D 1E 4B F3 EB CC 01 [binary data]
  204. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  205. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\..\SearchScopes,DefaultScope =
  206. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
  207. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  208.  
  209. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
  210. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
  211. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  212. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
  213. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://duckduckgo.com/
  214. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
  215. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\..\SearchScopes,DefaultScope = {1E948A8C-FC52-4D92-AF8F-7E7904B58E22}
  216. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
  217. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\..\SearchScopes\{1E948A8C-FC52-4D92-AF8F-7E7904B58E22}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7MDNF_enDE393
  218. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\..\SearchScopes\{B1A4A99A-7561-433D-938D-C959EDEF9FDF}: "URL" = http://avira.search.ask.com/web?p2=%5EB0Y%5EYYYYYY%5EYY%5EDK&gct=&itbv=12.2.2.663&o=APN11080&tpid=AVIRA-V7&apn_uid=5EFEC8F4-4199-44FC-83A2-FC489E70F616&apn_ptnrs=%5EB0Y&apn_dtid=%5EYYYYYY%5EYY%5EDK&apn_dbr=cr_0.0.0.0&doi=2013-07-29&trgb=ALL&q={searchTerms}&psv=
  219. IE - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
  220.  
  221.  
  222. [color=#E56717]========== FireFox ==========[/color]
  223.  
  224. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  225. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  226. FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  227. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
  228. FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
  229. FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
  230. FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
  231. FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
  232. FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
  233. FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
  234. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  235. FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
  236. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  237. FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
  238.  
  239. FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013.08.07 09:03:29 | 000,000,000 | ---D | M]
  240. FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013.08.07 09:03:29 | 000,000,000 | ---D | M]
  241.  
  242. [2013.07.29 22:01:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tanja\AppData\Roaming\mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions
  243. [2013.07.26 22:31:20 | 000,713,729 | ---- | M] () (No name found) -- C:\Users\Tanja\AppData\Roaming\mozilla\firefox\profiles\{DefaultProfilesFolder}\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
  244.  
  245. [color=#E56717]========== Chrome ==========[/color]
  246.  
  247. CHR - default_search_provider: Google (Enabled)
  248. CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
  249. CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
  250. CHR - homepage: http://www.google.com/ig/redirectdomain?brand=MDNF&bmod=MDNF
  251. CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll
  252. CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
  253. CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll
  254. CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\pdf.dll
  255. CHR - plugin: ChromeUtilPlugin (Enabled) = C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\background/ChromeUtilPlugin.dll
  256. CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
  257. CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL
  258. CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
  259. CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
  260. CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
  261. CHR - plugin: Java(TM) Platform SE 7 U3 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
  262. CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
  263. CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
  264. CHR - Extension: Avira SearchFree Toolbar plus Web Protection = C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\20.53263_0\
  265. CHR - Extension: Chrome In-App Payments service = C:\Users\Tanja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0\
  266.  
  267. O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
  268. O2:[b]64bit:[/b] - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
  269. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  270. O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
  271. O2 - BHO: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
  272. O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
  273. O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
  274. O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
  275. O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
  276. O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
  277. O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
  278. O3 - HKU\S-1-5-21-852896953-3442371496-1655193167-1001\..\Toolbar\WebBrowser: (Avira SearchFree Toolbar plus Web Protection) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
  279. O4:[b]64bit:[/b] - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
  280. O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
  281. O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
  282. O4:[b]64bit:[/b] - HKLM..\Run: [MedionReminder] C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe (CyberLink)
  283. O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
  284. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
  285. O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
  286. O4:[b]64bit:[/b] - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
  287. O4 - HKLM..\Run: [ApnTBMon] C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
  288. O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
  289. O4 - HKLM..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
  290. O4 - HKLM..\Run: [CLMLServer] C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
  291. O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
  292. O4 - HKLM..\Run: [Dolby Home Theater v4] C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (Dolby Laboratories Inc.)
  293. O4 - HKLM..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
  294. O4 - HKLM..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe (Hewlett-Packard)
  295. O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
  296. O4 - HKLM..\Run: [MGSysCtrl] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe (Micro-Star International Co., Ltd.)
  297. O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
  298. O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
  299. O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  300. O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  301. O4 - HKU\S-1-5-21-852896953-3442371496-1655193167-1000..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
  302. O4 - HKU\S-1-5-21-852896953-3442371496-1655193167-1001..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
  303. O4:[b]64bit:[/b] - HKLM..\RunOnce: [MedionReminder] C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe (CyberLink)
  304. O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  305. O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  306. O4 - HKU\S-1-5-21-852896953-3442371496-1655193167-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
  307. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
  308. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
  309. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
  310. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
  311. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
  312. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
  313. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
  314. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
  315. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
  316. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
  317. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
  318. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
  319. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
  320. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
  321. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
  322. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
  323. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
  324. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
  325. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
  326. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
  327. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
  328. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
  329. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
  330. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
  331. O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
  332. O7 - HKU\S-1-5-21-852896953-3442371496-1655193167-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
  333. O8:[b]64bit:[/b] - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
  334. O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
  335. O9:[b]64bit:[/b] - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-31/4 File not found
  336. O9:[b]64bit:[/b] - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-31/4 File not found
  337. O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-31/4 File not found
  338. O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-31/4 File not found
  339. O9 - Extra Button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  340. O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
  341. O9 - Extra Button: HP Smart Web Printing ein- oder ausblenden - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
  342. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
  343. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
  344. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  345. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
  346. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  347. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
  348. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  349. O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  350. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  351. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  352. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  353. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  354. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  355. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  356. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  357. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  358. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  359. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  360. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  361. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  362. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  363. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000014 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  364. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000015 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  365. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000016 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  366. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000017 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  367. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000018 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
  368. O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda64.dll (Avira Operations GmbH & Co. KG)
  369. O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
  370. O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
  371. O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  372. O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
  373. O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  374. O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
  375. O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  376. O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
  377. O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  378. O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  379. O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  380. O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  381. O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  382. O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  383. O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  384. O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  385. O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  386. O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  387. O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  388. O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  389. O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  390. O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  391. O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  392. O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  393. O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  394. O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
  395. O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files (x86)\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
  396. O13[b]64bit:[/b] - gopher Prefix: missing
  397. O13 - gopher Prefix: missing
  398. O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0)
  399. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
  400. O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03)
  401. O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
  402. O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
  403. O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{00BF684E-AA6F-4FF0-881D-8D005A6FFAFB}: DhcpNameServer = 192.168.1.1
  404. O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  405. O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  406. O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  407. O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  408. O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  409. O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  410. O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  411. O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  412. O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  413. O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
  414. O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  415. O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  416. O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
  417. O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
  418. O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
  419. O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
  420. O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  421. O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
  422. O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
  423. O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
  424. O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
  425. O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  426. O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  427. O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  428. O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  429. O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  430. O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  431. O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  432. O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  433. O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  434. O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
  435. O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  436. O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  437. O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
  438. O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
  439. O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
  440. O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
  441. O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  442. O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
  443. O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
  444. O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
  445. O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
  446. O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  447. O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  448. O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation)
  449. O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  450. O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  451. O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
  452. O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
  453. O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
  454. O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
  455. O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
  456. O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
  457. O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
  458. O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
  459. O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
  460. O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
  461. O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  462. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
  463. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  464. O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation)
  465. O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  466. O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  467. O30:[b]64bit:[/b] - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation)
  468. O30:[b]64bit:[/b] - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation)
  469. O30:[b]64bit:[/b] - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation)
  470. O30:[b]64bit:[/b] - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation)
  471. O30:[b]64bit:[/b] - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation)
  472. O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
  473. O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corp.)
  474. O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation)
  475. O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation)
  476. O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation)
  477. O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation)
  478. O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation)
  479. O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
  480. O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corp.)
  481. O31 - SafeBoot: AlternateShell - cmd.exe
  482. O32 - HKLM CDRom: AutoRun - 1
  483. O34 - HKLM BootExecute: (autocheck autochk *)
  484. O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
  485. O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
  486. O35 - HKLM\..comfile [open] -- "%1" %*
  487. O35 - HKLM\..exefile [open] -- "%1" %*
  488. O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
  489. O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
  490. O37 - HKLM\...com [@ = comfile] -- "%1" %*
  491. O37 - HKLM\...exe [@ = exefile] -- "%1" %*
  492. O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
  493. O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
  494. O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
  495.  
  496.  
  497.  
  498. SafeBootMin:[b]64bit:[/b] 92273379.sys - Driver
  499. SafeBootMin:[b]64bit:[/b] AppMgmt - Service
  500. SafeBootMin:[b]64bit:[/b] Base - Driver Group
  501. SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
  502. SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
  503. SafeBootMin:[b]64bit:[/b] File system - Driver Group
  504. SafeBootMin:[b]64bit:[/b] Filter - Driver Group
  505. SafeBootMin:[b]64bit:[/b] HelpSvc - Service
  506. SafeBootMin:[b]64bit:[/b] hitmanpro37 - Reg Error: Value error.
  507. SafeBootMin:[b]64bit:[/b] hitmanpro37.sys - Reg Error: Value error.
  508. SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
  509. SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
  510. SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
  511. SafeBootMin:[b]64bit:[/b] sacsvr - Service
  512. SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
  513. SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
  514. SafeBootMin:[b]64bit:[/b] vmms - Service
  515. SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
  516. SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  517. SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  518. SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  519. SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  520. SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  521. SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  522. SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  523. SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  524. SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  525. SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  526. SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  527. SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  528. SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  529. SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  530. SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  531. SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  532. SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  533. SafeBootMin: 92273379.sys - Driver
  534. SafeBootMin: AppMgmt - Service
  535. SafeBootMin: Base - Driver Group
  536. SafeBootMin: Boot Bus Extender - Driver Group
  537. SafeBootMin: Boot file system - Driver Group
  538. SafeBootMin: File system - Driver Group
  539. SafeBootMin: Filter - Driver Group
  540. SafeBootMin: HelpSvc - Service
  541. SafeBootMin: hitmanpro37 - Reg Error: Value error.
  542. SafeBootMin: hitmanpro37.sys - Reg Error: Value error.
  543. SafeBootMin: PCI Configuration - Driver Group
  544. SafeBootMin: PNP Filter - Driver Group
  545. SafeBootMin: Primary disk - Driver Group
  546. SafeBootMin: sacsvr - Service
  547. SafeBootMin: SCSI Class - Driver Group
  548. SafeBootMin: System Bus Extender - Driver Group
  549. SafeBootMin: vmms - Service
  550. SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  551. SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  552. SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  553. SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  554. SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  555. SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  556. SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  557. SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  558. SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  559. SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  560. SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  561. SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  562. SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  563. SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  564. SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  565. SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  566. SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  567.  
  568. SafeBootNet:[b]64bit:[/b] 92273379.sys - Driver
  569. SafeBootNet:[b]64bit:[/b] AppMgmt - Service
  570. SafeBootNet:[b]64bit:[/b] Base - Driver Group
  571. SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
  572. SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
  573. SafeBootNet:[b]64bit:[/b] File system - Driver Group
  574. SafeBootNet:[b]64bit:[/b] Filter - Driver Group
  575. SafeBootNet:[b]64bit:[/b] HelpSvc - Service
  576. SafeBootNet:[b]64bit:[/b] hitmanpro37 - Reg Error: Value error.
  577. SafeBootNet:[b]64bit:[/b] hitmanpro37.sys - Reg Error: Value error.
  578. SafeBootNet:[b]64bit:[/b] Messenger - Service
  579. SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
  580. SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
  581. SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
  582. SafeBootNet:[b]64bit:[/b] Network - Driver Group
  583. SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
  584. SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
  585. SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
  586. SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
  587. SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
  588. SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
  589. SafeBootNet:[b]64bit:[/b] sacsvr - Service
  590. SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
  591. SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
  592. SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
  593. SafeBootNet:[b]64bit:[/b] TDI - Driver Group
  594. SafeBootNet:[b]64bit:[/b] vmms - Service
  595. SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
  596. SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
  597. SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  598. SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  599. SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  600. SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  601. SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  602. SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  603. SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  604. SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  605. SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  606. SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  607. SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  608. SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  609. SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  610. SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  611. SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  612. SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  613. SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  614. SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  615. SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  616. SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  617. SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  618. SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  619. SafeBootNet: 92273379.sys - Driver
  620. SafeBootNet: AppMgmt - Service
  621. SafeBootNet: Base - Driver Group
  622. SafeBootNet: Boot Bus Extender - Driver Group
  623. SafeBootNet: Boot file system - Driver Group
  624. SafeBootNet: File system - Driver Group
  625. SafeBootNet: Filter - Driver Group
  626. SafeBootNet: HelpSvc - Service
  627. SafeBootNet: hitmanpro37 - Reg Error: Value error.
  628. SafeBootNet: hitmanpro37.sys - Reg Error: Value error.
  629. SafeBootNet: Messenger - Service
  630. SafeBootNet: NDIS Wrapper - Driver Group
  631. SafeBootNet: NetBIOSGroup - Driver Group
  632. SafeBootNet: NetDDEGroup - Driver Group
  633. SafeBootNet: Network - Driver Group
  634. SafeBootNet: NetworkProvider - Driver Group
  635. SafeBootNet: PCI Configuration - Driver Group
  636. SafeBootNet: PNP Filter - Driver Group
  637. SafeBootNet: PNP_TDI - Driver Group
  638. SafeBootNet: Primary disk - Driver Group
  639. SafeBootNet: rdsessmgr - Service
  640. SafeBootNet: sacsvr - Service
  641. SafeBootNet: SCSI Class - Driver Group
  642. SafeBootNet: Streams Drivers - Driver Group
  643. SafeBootNet: System Bus Extender - Driver Group
  644. SafeBootNet: TDI - Driver Group
  645. SafeBootNet: vmms - Service
  646. SafeBootNet: WudfUsbccidDriver - Driver
  647. SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
  648. SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
  649. SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
  650. SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
  651. SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
  652. SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
  653. SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
  654. SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
  655. SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
  656. SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
  657. SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
  658. SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
  659. SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
  660. SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
  661. SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
  662. SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
  663. SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
  664. SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
  665. SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
  666. SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
  667. SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
  668. SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
  669.  
  670. ActiveX:[b]64bit:[/b] {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
  671. ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  672. ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  673. ActiveX:[b]64bit:[/b] {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
  674. ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  675. ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  676. ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  677. ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  678. ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  679. ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  680. ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  681. ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  682. ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  683. ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  684. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  685. ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
  686. ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
  687. ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  688. ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  689. ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  690. ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  691. ActiveX:[b]64bit:[/b] {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  692. ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
  693. ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  694. ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
  695. ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
  696. ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
  697. ActiveX: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
  698. ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
  699. ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
  700. ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
  701. ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
  702. ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
  703. ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
  704. ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
  705. ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
  706. ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
  707. ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
  708. ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
  709. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
  710. ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
  711. ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
  712. ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.76\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
  713. ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
  714. ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
  715. ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
  716. ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
  717. ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
  718. ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
  719.  
  720. Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  721. Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
  722. Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
  723.  
  724. [color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
  725.  
  726. [2013.09.23 19:26:30 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Tanja\Desktop\OTL.scr
  727. [2013.09.23 10:30:48 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
  728. [2013.09.23 10:29:57 | 009,879,648 | ---- | C] (SurfRight B.V.) -- C:\Users\Tanja\Desktop\HitmanPro36_x64.exe
  729. [2013.09.23 10:19:13 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Desktop\JavaRa-2.0
  730. [2013.09.22 22:51:23 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  731. [2013.09.22 22:51:23 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  732. [2013.09.22 21:43:37 | 050,573,696 | ---- | C] (Adobe Systems Incorporated) -- C:\Users\Tanja\Desktop\AdbeRdr11004_en_US.exe
  733. [2013.09.22 21:33:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
  734. [2013.09.22 21:33:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
  735. [2013.09.22 21:33:02 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
  736. [2013.09.22 21:32:57 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
  737. [2013.09.22 21:32:57 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
  738. [2013.09.22 21:32:57 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
  739. [2013.09.22 21:32:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  740. [2013.09.22 21:32:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
  741. [2013.09.22 21:24:31 | 029,036,456 | ---- | C] (Oracle Corporation) -- C:\Users\Tanja\Desktop\jre-7u40-windows-i586.exe
  742. [2013.09.22 15:56:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
  743. [2013.09.22 14:20:46 | 000,000,000 | ---D | C] -- C:\AdwCleaner
  744. [2013.09.22 14:17:44 | 000,358,923 | ---- | C] (Farbar) -- C:\Users\Tanja\Desktop\FSS.exe
  745. [2013.09.22 13:53:21 | 002,748,256 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Tanja\Desktop\tdsskiller.exe
  746. [2013.09.22 13:43:29 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Desktop\RK_Quarantine
  747. [2013.09.21 23:41:13 | 000,000,000 | ---D | C] -- C:\FRST
  748. [2013.09.21 23:40:35 | 001,956,670 | ---- | C] (Farbar) -- C:\Users\Tanja\Desktop\FRST64.exe
  749. [2013.09.21 20:56:10 | 000,688,992 | R--- | C] (Swearware) -- C:\Users\Tanja\Desktop\dds.com
  750. [2013.09.21 11:18:04 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Desktop\rkill
  751. [2013.09.21 11:17:16 | 001,898,112 | ---- | C] (Bleeping Computer, LLC) -- C:\Users\Tanja\Desktop\rkill.exe
  752. [2013.09.21 10:52:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
  753. [2013.09.21 10:48:40 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Desktop\mbar
  754. [2013.09.21 10:47:50 | 012,907,592 | ---- | C] (Malwarebytes Corp.) -- C:\Users\Tanja\Desktop\mbar-1.07.0.1005.exe
  755. [2013.09.21 10:25:09 | 000,760,937 | ---- | C] (Farbar) -- C:\Users\Tanja\Desktop\MiniToolBox.exe
  756. [2013.09.20 16:43:34 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Desktop\Autoruns
  757. [2013.09.18 23:13:02 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Malwarebytes
  758. [2013.09.18 23:12:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
  759. [2013.09.18 23:12:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
  760. [2013.09.18 23:12:51 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
  761. [2013.09.18 23:12:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  762. [2013.09.18 20:42:40 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\TERA
  763. [2013.09.12 17:31:56 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  764. [2013.09.12 17:31:55 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  765. [2013.09.12 17:31:55 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
  766. [2013.09.12 17:31:55 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
  767. [2013.09.12 17:31:55 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
  768. [2013.09.12 17:31:55 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
  769. [2013.09.12 17:31:55 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  770. [2013.09.12 17:31:55 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  771. [2013.09.12 17:31:55 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  772. [2013.09.12 17:31:55 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  773. [2013.09.12 17:31:55 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  774. [2013.09.12 17:31:54 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  775. [2013.09.12 17:31:54 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  776. [2013.09.12 17:31:54 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  777. [2013.09.12 17:31:53 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  778. [2013.09.11 10:43:11 | 000,155,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
  779. [2013.09.11 10:43:08 | 003,968,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  780. [2013.09.11 10:43:06 | 003,913,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  781. [2013.09.11 10:43:05 | 005,550,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  782. [2013.09.11 10:43:04 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
  783. [2013.09.11 10:43:03 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  784. [2013.09.11 10:43:02 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
  785. [2013.09.11 10:43:02 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
  786. [2013.09.11 10:43:02 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
  787. [2013.09.11 10:43:02 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
  788. [2013.09.11 10:43:02 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
  789. [2013.09.11 10:43:02 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
  790. [2013.09.11 10:43:02 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
  791. [2013.09.11 10:43:02 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
  792. [2013.09.11 10:43:02 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
  793. [2013.09.11 10:43:02 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
  794. [2013.09.11 10:43:02 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
  795. [2013.09.11 10:43:02 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
  796. [2013.09.11 10:43:02 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
  797. [2013.09.11 10:43:02 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
  798. [2013.09.11 10:43:02 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
  799. [2013.09.11 10:43:02 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
  800. [2013.09.11 10:43:02 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
  801. [2013.09.11 10:43:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
  802. [2013.09.11 10:43:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
  803. [2013.09.11 10:43:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
  804. [2013.09.11 10:43:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
  805. [2013.09.11 10:43:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
  806. [2013.09.11 10:43:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
  807. [2013.09.11 10:43:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
  808. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
  809. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
  810. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
  811. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
  812. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
  813. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
  814. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
  815. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
  816. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
  817. [2013.09.11 10:43:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
  818. [2013.09.11 10:43:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
  819. [2013.09.11 10:43:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
  820. [2013.09.11 10:43:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
  821. [2013.09.11 10:43:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
  822. [2013.09.11 10:43:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
  823. [2013.09.11 10:43:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
  824. [2013.09.11 10:43:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
  825. [2013.09.11 10:43:01 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
  826. [2013.09.11 10:43:01 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
  827. [2013.09.11 10:43:01 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
  828. [2013.09.11 10:43:01 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
  829. [2013.09.11 10:43:01 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
  830. [2013.09.11 10:43:01 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
  831. [2013.09.11 10:43:01 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
  832. [2013.09.11 10:43:01 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
  833. [2013.09.11 10:43:01 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
  834. [2013.09.11 10:43:01 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
  835. [2013.09.11 10:43:01 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
  836. [2013.09.11 10:43:01 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
  837. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
  838. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
  839. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
  840. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
  841. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
  842. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
  843. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
  844. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
  845. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
  846. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
  847. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
  848. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
  849. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
  850. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
  851. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
  852. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
  853. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
  854. [2013.09.11 10:43:01 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
  855. [2013.09.11 10:43:01 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
  856. [2013.09.11 10:42:57 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
  857. [2013.09.04 15:27:40 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Documents\Youcam
  858. [2013.09.02 20:42:51 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Documents\Introduktion til bioteknologi
  859. [2013.08.31 15:06:59 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Documents\Matematik og databehandling
  860. [2013.08.31 15:03:07 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Documents\Fysiksupplering
  861. [2013.08.19 16:51:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R
  862. [2013.08.19 16:50:46 | 000,000,000 | ---D | C] -- C:\Program Files\R
  863. [2013.08.17 16:54:37 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\{0B3FE79C-250B-4C41-81B0-5345D29FBDB8}
  864. [2013.08.17 15:31:11 | 001,472,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  865. [2013.08.17 15:31:11 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
  866. [2013.08.17 15:31:10 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
  867. [2013.08.17 15:30:39 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
  868. [2013.08.17 15:30:39 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
  869. [2013.08.17 15:30:37 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
  870. [2013.08.08 10:11:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
  871. [2013.08.07 09:08:10 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\HP
  872. [2013.08.07 09:06:25 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBREG
  873. [2013.08.07 09:03:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Yahoo! Companion
  874. [2013.08.07 09:03:40 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Yahoo!
  875. [2013.08.07 09:03:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Yahoo!
  876. [2013.08.07 09:02:32 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant
  877. [2013.08.07 09:02:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
  878. [2013.08.07 09:02:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool
  879. [2013.08.07 09:01:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard
  880. [2013.08.07 09:01:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP
  881. [2013.08.07 08:58:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP
  882. [2013.08.07 08:56:40 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
  883. [2013.08.07 08:56:36 | 000,642,360 | ---- | C] (Hewlett-Packard) -- C:\Windows\SysNative\hpzids40.dll
  884. [2013.08.07 07:56:06 | 000,000,000 | -H-D | C] -- C:\Config.Msi
  885. [2013.08.07 07:54:09 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\HP
  886. [2013.08.03 11:02:53 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\Programs
  887. [2013.08.02 20:55:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache
  888. [2013.08.02 19:07:28 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\{969D5C69-A518-4418-98DB-842185548A81}
  889. [2013.07.29 22:07:30 | 000,081,112 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
  890. [2013.07.29 22:03:51 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Avira
  891. [2013.07.29 22:03:33 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\AskPartnerNetwork
  892. [2013.07.29 22:01:36 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Mozilla
  893. [2013.07.29 22:01:36 | 000,000,000 | ---D | C] -- C:\ProgramData\AskPartnerNetwork
  894. [2013.07.29 22:01:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AskPartnerNetwork
  895. [2013.07.29 22:01:16 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
  896. [2013.07.29 21:59:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
  897. [2013.07.29 21:59:00 | 000,132,088 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
  898. [2013.07.29 21:59:00 | 000,105,344 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
  899. [2013.07.29 21:59:00 | 000,028,600 | ---- | C] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
  900. [2013.07.29 21:58:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
  901. [2013.07.29 19:59:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
  902. [2013.07.26 14:18:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
  903. [2013.07.26 14:16:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Browny02
  904. [2013.07.26 14:16:29 | 000,061,440 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\brprtink.dll
  905. [2013.07.26 14:16:24 | 000,217,088 | ---- | C] (brother) -- C:\Windows\SysWow64\NSSearch.dll
  906. [2013.07.26 14:16:24 | 000,073,728 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2.dll
  907. [2013.07.26 14:16:24 | 000,005,632 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2L.dll
  908. [2013.07.26 14:16:24 | 000,003,072 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2S.dll
  909. [2013.07.26 14:16:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Brother
  910. [2013.07.26 14:16:22 | 000,180,224 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysWow64\BroSNMP.dll
  911. [2013.07.26 14:15:34 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\InstallShield
  912. [2013.07.26 14:15:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Brother
  913. [2013.07.25 20:23:12 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\{5A3B4272-53C4-4F1B-A291-CCB3246FEBC8}
  914. [2013.07.25 20:23:12 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\{01A0F8D0-F1BC-49E9-8651-3469773AE7D6}
  915. [2013.07.24 17:48:41 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
  916. [2013.07.23 20:27:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\dumps
  917. [2013.07.23 20:13:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
  918. [2013.07.23 20:13:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
  919. [2013.07.23 20:13:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
  920. [2013.07.22 18:02:24 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\OpenOffice.org
  921. [2013.07.22 18:01:49 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
  922. [2013.07.22 18:01:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3
  923. [2013.07.20 16:02:14 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
  924. [2013.07.16 14:05:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Deutsch)
  925. [2013.07.16 14:04:31 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
  926. [2013.07.15 16:38:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
  927. [2013.07.15 16:38:20 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
  928. [2013.07.15 16:28:02 | 000,367,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
  929. [2013.07.15 16:28:02 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
  930. [2013.07.15 16:28:02 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
  931. [2013.07.15 16:28:02 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
  932. [2013.07.15 16:26:21 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
  933. [2013.07.15 16:26:21 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
  934. [2013.07.15 16:26:21 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
  935. [2013.07.15 16:26:21 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
  936. [2013.07.15 16:02:53 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
  937. [2013.07.15 15:35:13 | 000,054,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys
  938. [2013.07.15 15:35:13 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wdfres.dll
  939. [2013.07.15 15:29:00 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  940. [2013.07.15 15:29:00 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  941. [2013.07.15 15:29:00 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
  942. [2013.07.15 15:29:00 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
  943. [2013.07.15 15:29:00 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  944. [2013.07.15 15:29:00 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
  945. [2013.07.15 15:29:00 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
  946. [2013.07.15 15:29:00 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  947. [2013.07.15 15:29:00 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
  948. [2013.07.15 15:29:00 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
  949. [2013.07.15 15:29:00 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  950. [2013.07.15 15:29:00 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
  951. [2013.07.15 15:28:59 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  952. [2013.07.15 15:28:59 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  953. [2013.07.15 15:28:59 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
  954. [2013.07.15 15:28:59 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
  955. [2013.07.15 15:28:59 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  956. [2013.07.15 15:28:59 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  957. [2013.07.15 15:28:59 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  958. [2013.07.15 15:28:59 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  959. [2013.07.15 15:28:59 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  960. [2013.07.15 15:28:59 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  961. [2013.07.15 15:28:59 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  962. [2013.07.15 15:28:59 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  963. [2013.07.15 15:28:59 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  964. [2013.07.15 15:28:59 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  965. [2013.07.15 15:28:59 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
  966. [2013.07.15 15:28:59 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  967. [2013.07.15 15:28:59 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  968. [2013.07.15 15:28:59 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
  969. [2013.07.15 15:28:59 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
  970. [2013.07.15 15:28:59 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
  971. [2013.07.15 15:28:59 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
  972. [2013.07.15 15:28:59 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
  973. [2013.07.15 15:28:59 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
  974. [2013.07.15 15:28:59 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
  975. [2013.07.15 15:28:59 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
  976. [2013.07.15 15:28:59 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  977. [2013.07.15 15:28:59 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
  978. [2013.07.15 15:28:59 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
  979. [2013.07.15 15:28:59 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
  980. [2013.07.15 15:28:59 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
  981. [2013.07.15 15:28:59 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
  982. [2013.07.15 15:28:59 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
  983. [2013.07.15 15:28:59 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
  984. [2013.07.15 15:28:59 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
  985. [2013.07.15 15:28:59 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
  986. [2013.07.15 15:28:59 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
  987. [2013.07.15 15:28:59 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
  988. [2013.07.15 15:28:59 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
  989. [2013.07.15 15:28:59 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
  990. [2013.07.15 15:28:59 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
  991. [2013.07.15 15:28:59 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
  992. [2013.07.15 15:27:03 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
  993. [2013.07.15 15:27:03 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
  994. [2013.07.15 15:27:03 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
  995. [2013.07.15 15:27:03 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
  996. [2013.07.15 15:27:03 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
  997. [2013.07.15 15:27:03 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
  998. [2013.07.15 15:27:03 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
  999. [2013.07.15 15:27:03 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
  1000. [2013.07.15 15:27:03 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
  1001. [2013.07.15 15:27:03 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
  1002. [2013.07.15 15:27:03 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
  1003. [2013.07.15 15:27:03 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
  1004. [2013.07.15 15:27:03 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
  1005. [2013.07.15 15:27:03 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
  1006. [2013.07.15 15:27:03 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
  1007. [2013.07.15 15:27:03 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
  1008. [2013.07.15 15:27:03 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
  1009. [2013.07.15 15:27:03 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
  1010. [2013.07.15 15:27:03 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
  1011. [2013.07.15 15:27:03 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
  1012. [2013.07.15 15:27:03 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
  1013. [2013.07.15 15:27:03 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  1014. [2013.07.15 15:27:03 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  1015. [2013.07.15 15:27:03 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  1016. [2013.07.15 15:27:03 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  1017. [2013.07.15 15:27:03 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
  1018. [2013.07.15 15:27:03 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
  1019. [2013.07.15 15:27:03 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
  1020. [2013.07.15 15:27:03 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
  1021. [2013.07.15 15:27:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
  1022. [2013.07.15 15:27:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
  1023. [2013.07.15 15:27:03 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
  1024. [2013.07.15 15:27:03 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
  1025. [2013.07.15 15:27:03 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
  1026. [2013.07.15 15:27:03 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
  1027. [2013.07.15 15:27:03 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
  1028. [2013.07.15 15:27:03 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
  1029. [2013.07.15 15:24:34 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
  1030. [2013.07.14 18:53:23 | 000,000,000 | ---D | C] -- C:\ProgramData\VirtualizedApplications
  1031. [2013.07.14 12:54:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
  1032. [2013.07.14 12:54:09 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
  1033. [2013.07.14 12:54:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
  1034. [2013.07.14 12:51:49 | 000,000,000 | RH-D | C] -- C:\MSOCache
  1035. [2013.07.14 12:46:20 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\SoftGrid Client
  1036. [2013.07.14 12:46:19 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\SoftGrid Client
  1037. [2013.07.14 12:45:39 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
  1038. [2013.07.14 12:45:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Application Virtualization Client
  1039. [2013.07.14 12:45:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
  1040. [2013.07.14 12:45:25 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\TP
  1041. [2013.07.13 17:58:07 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
  1042. [2013.07.13 17:58:07 | 000,023,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys
  1043. [2013.07.12 18:20:18 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
  1044. [2013.07.12 18:20:18 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
  1045. [2013.07.12 18:19:22 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
  1046. [2013.07.12 18:19:22 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
  1047. [2013.07.12 18:19:09 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore6.dll
  1048. [2013.07.12 18:19:09 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dhcpcore6.dll
  1049. [2013.07.12 18:19:09 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcsvc6.dll
  1050. [2013.07.12 18:19:03 | 003,717,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
  1051. [2013.07.12 18:19:02 | 003,217,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
  1052. [2013.07.12 18:19:02 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
  1053. [2013.07.12 18:19:02 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
  1054. [2013.07.12 18:19:02 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
  1055. [2013.07.12 18:19:02 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
  1056. [2013.07.12 18:19:00 | 000,288,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
  1057. [2013.07.12 18:18:43 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
  1058. [2013.07.12 18:18:43 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
  1059. [2013.07.12 18:18:43 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
  1060. [2013.07.12 18:18:37 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
  1061. [2013.07.12 18:18:34 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys
  1062. [2013.07.12 18:18:34 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
  1063. [2013.07.12 18:18:33 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
  1064. [2013.07.12 18:18:33 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
  1065. [2013.07.12 18:18:33 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
  1066. [2013.07.12 18:18:30 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
  1067. [2013.07.12 18:18:30 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
  1068. [2013.07.12 18:18:28 | 000,376,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
  1069. [2013.07.12 18:18:28 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcorehc.dll
  1070. [2013.07.12 18:18:28 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
  1071. [2013.07.12 18:18:28 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcorehc.dll
  1072. [2013.07.12 18:18:28 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
  1073. [2013.07.12 18:18:28 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netevent.dll
  1074. [2013.07.12 18:18:28 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netevent.dll
  1075. [2013.07.12 18:04:35 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll
  1076. [2013.07.12 18:04:34 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnet.dll
  1077. [2013.07.12 18:04:34 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
  1078. [2013.07.12 18:04:30 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OxpsConverter.exe
  1079. [2013.07.12 18:03:55 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
  1080. [2013.07.12 18:03:52 | 002,746,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
  1081. [2013.07.12 18:03:52 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll
  1082. [2013.07.12 18:03:52 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\fpb.rs
  1083. [2013.07.12 18:03:52 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysNative\fpb.rs
  1084. [2013.07.12 18:03:52 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc-nz.rs
  1085. [2013.07.12 18:03:52 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc-nz.rs
  1086. [2013.07.12 18:03:52 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegibbfc.rs
  1087. [2013.07.12 18:03:52 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegibbfc.rs
  1088. [2013.07.12 18:03:52 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\csrr.rs
  1089. [2013.07.12 18:03:52 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysNative\csrr.rs
  1090. [2013.07.12 18:03:52 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cob-au.rs
  1091. [2013.07.12 18:03:52 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cob-au.rs
  1092. [2013.07.12 18:03:52 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\usk.rs
  1093. [2013.07.12 18:03:52 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysNative\usk.rs
  1094. [2013.07.12 18:03:52 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\grb.rs
  1095. [2013.07.12 18:03:52 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysNative\grb.rs
  1096. [2013.07.12 18:03:52 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-pt.rs
  1097. [2013.07.12 18:03:52 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-pt.rs
  1098. [2013.07.12 18:03:52 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi.rs
  1099. [2013.07.12 18:03:52 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi.rs
  1100. [2013.07.12 18:03:52 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\djctq.rs
  1101. [2013.07.12 18:03:52 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysNative\djctq.rs
  1102. [2013.07.12 18:03:51 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
  1103. [2013.07.12 18:03:51 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Wpc.dll
  1104. [2013.07.12 18:03:50 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cero.rs
  1105. [2013.07.12 18:03:50 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cero.rs
  1106. [2013.07.12 18:03:50 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\esrb.rs
  1107. [2013.07.12 18:03:50 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysNative\esrb.rs
  1108. [2013.07.12 18:03:50 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc.rs
  1109. [2013.07.12 18:03:50 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc.rs
  1110. [2013.07.12 18:03:50 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-fi.rs
  1111. [2013.07.12 18:03:50 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-fi.rs
  1112. [2013.07.12 18:02:57 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
  1113. [2013.07.12 18:02:02 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll
  1114. [2013.07.12 18:02:02 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\synceng.dll
  1115. [2013.07.12 18:02:01 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
  1116. [2013.07.12 18:02:01 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
  1117. [2013.07.12 18:01:56 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
  1118. [2013.07.12 18:01:53 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
  1119. [2013.07.12 18:01:53 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
  1120. [2013.07.12 18:01:52 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
  1121. [2013.07.12 18:01:49 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll
  1122. [2013.07.12 18:01:49 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
  1123. [2013.07.12 18:01:30 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
  1124. [2013.07.12 18:01:23 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
  1125. [2013.07.12 18:01:22 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
  1126. [2013.07.12 18:01:22 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
  1127. [2013.07.12 18:01:22 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
  1128. [2013.07.12 18:01:03 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
  1129. [2013.07.12 18:00:57 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
  1130. [2013.07.12 18:00:56 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
  1131. [2013.07.12 18:00:51 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
  1132. [2013.07.12 18:00:51 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
  1133. [2013.07.12 18:00:46 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
  1134. [2013.07.09 22:10:20 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
  1135. [2013.07.09 14:07:09 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\Adobe
  1136. [2013.07.09 13:32:54 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
  1137. [2013.07.09 13:32:54 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
  1138. [2013.07.09 13:32:54 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
  1139. [2013.07.09 13:32:42 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
  1140. [2013.07.09 13:32:42 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
  1141. [2013.07.09 13:32:42 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
  1142. [2013.07.09 13:32:34 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
  1143. [2013.07.09 13:32:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
  1144. [2013.07.09 13:32:02 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Adobe
  1145. [2013.07.09 13:31:54 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\Google
  1146. [2013.07.09 13:26:32 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\Diagnostics
  1147. [2013.07.09 13:19:58 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\CyberLink
  1148. [2013.07.09 13:19:51 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Intel Corporation
  1149. [2013.07.09 13:18:57 | 000,000,000 | -H-D | C] -- C:\ProgramData\Medion Reminder
  1150. [2013.07.09 13:18:52 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\Power2Go
  1151. [2013.07.09 13:18:35 | 000,000,000 | R--D | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
  1152. [2013.07.09 13:18:35 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Searches
  1153. [2013.07.09 13:18:35 | 000,000,000 | R--D | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
  1154. [2013.07.09 13:18:27 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Identities
  1155. [2013.07.09 13:18:25 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Contacts
  1156. [2013.07.09 13:18:25 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
  1157. [2013.07.09 13:18:24 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\VirtualStore
  1158. [2013.07.09 13:18:19 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Intel
  1159. [2013.07.09 13:18:18 | 000,000,000 | --SD | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft
  1160. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Videos
  1161. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Saved Games
  1162. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Pictures
  1163. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Music
  1164. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
  1165. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Links
  1166. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Favorites
  1167. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Downloads
  1168. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Documents
  1169. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\Desktop
  1170. [2013.07.09 13:18:18 | 000,000,000 | R--D | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
  1171. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Vorlagen
  1172. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\AppData\Local\Verlauf
  1173. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\AppData\Local\Temporary Internet Files
  1174. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Startmenü
  1175. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\SendTo
  1176. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Recent
  1177. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Netzwerkumgebung
  1178. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Lokale Einstellungen
  1179. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Documents\Eigene Videos
  1180. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Documents\Eigene Musik
  1181. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Eigene Dateien
  1182. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Documents\Eigene Bilder
  1183. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Druckumgebung
  1184. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Cookies
  1185. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\AppData\Local\Anwendungsdaten
  1186. [2013.07.09 13:18:18 | 000,000,000 | -HSD | C] -- C:\Users\Tanja\Anwendungsdaten
  1187. [2013.07.09 13:18:18 | 000,000,000 | -H-D | C] -- C:\Users\Tanja\AppData
  1188. [2013.07.09 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\Temp
  1189. [2013.07.09 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\Tanja\Roaming
  1190. [2013.07.09 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Local\Microsoft
  1191. [2013.07.09 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Media Center Programs
  1192. [2013.07.09 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Macromedia
  1193. [2013.07.09 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HomeCinema
  1194. [2013.07.09 13:18:18 | 000,000,000 | ---D | C] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerRecover
  1195. [2013.07.09 13:18:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mediathek
  1196. [2013.07.09 13:18:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Memeo
  1197. [2013.07.09 13:18:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Memeo
  1198. [2013.07.09 13:18:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Memeo
  1199. [2013.07.09 13:17:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Rescue Disk 10
  1200. [2013.07.09 13:15:52 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady
  1201. [2013.07.09 13:15:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\watchmi
  1202. [2013.07.09 13:15:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\watchmi
  1203. [2013.07.09 13:15:40 | 000,000,000 | ---D | C] -- C:\ProgramData\TvdPersonal
  1204. [2013.07.09 13:15:34 | 000,000,000 | ---D | C] -- C:\Program Files\Google
  1205. [2013.07.09 13:15:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
  1206. [2013.07.09 13:15:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
  1207. [2013.07.09 13:13:32 | 000,000,000 | -HSD | C] -- C:\Recovery
  1208. [2013.07.09 13:13:32 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
  1209. [2013.06.26 19:21:50 | 000,023,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftvollh.sys
  1210. [2013.06.26 19:21:48 | 000,028,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftredirlh.sys
  1211. [2013.06.26 19:21:46 | 001,777,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sftldr.dll
  1212. [2013.06.26 19:21:46 | 001,130,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sftldr_wow64.dll
  1213. [2013.06.26 19:21:46 | 000,273,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftplaylh.sys
  1214. [2013.06.26 19:21:44 | 000,767,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftfslh.sys
  1215.  
  1216. [color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
  1217.  
  1218. [2013.09.23 19:30:01 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  1219. [2013.09.23 19:28:06 | 000,017,152 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  1220. [2013.09.23 19:28:06 | 000,017,152 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  1221. [2013.09.23 19:26:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Tanja\Desktop\OTL.scr
  1222. [2013.09.23 19:20:47 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  1223. [2013.09.23 19:20:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
  1224. [2013.09.23 19:20:00 | 2066,333,695 | -HS- | M] () -- C:\hiberfil.sys
  1225. [2013.09.23 11:16:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  1226. [2013.09.23 10:31:03 | 009,879,648 | ---- | M] (SurfRight B.V.) -- C:\Users\Tanja\Desktop\HitmanPro36_x64.exe
  1227. [2013.09.23 10:18:09 | 000,135,237 | ---- | M] () -- C:\Users\Tanja\Desktop\JavaRa-2.0.zip
  1228. [2013.09.22 23:13:10 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
  1229. [2013.09.22 23:13:10 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
  1230. [2013.09.22 22:38:22 | 050,573,696 | ---- | M] (Adobe Systems Incorporated) -- C:\Users\Tanja\Desktop\AdbeRdr11004_en_US.exe
  1231. [2013.09.22 21:41:49 | 001,635,172 | ---- | M] () -- C:\Users\Tanja\Desktop\AdbeRdr11004_en_US.exe.twbtgvz.partial
  1232. [2013.09.22 21:32:54 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
  1233. [2013.09.22 21:32:53 | 000,868,264 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npdeployJava1.dll
  1234. [2013.09.22 21:32:53 | 000,790,440 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
  1235. [2013.09.22 21:32:53 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
  1236. [2013.09.22 21:32:53 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
  1237. [2013.09.22 21:32:53 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
  1238. [2013.09.22 21:28:54 | 029,036,456 | ---- | M] (Oracle Corporation) -- C:\Users\Tanja\Desktop\jre-7u40-windows-i586.exe
  1239. [2013.09.22 14:20:00 | 001,039,554 | ---- | M] () -- C:\Users\Tanja\Desktop\AdwCleaner.exe
  1240. [2013.09.22 14:17:44 | 000,358,923 | ---- | M] (Farbar) -- C:\Users\Tanja\Desktop\FSS.exe
  1241. [2013.09.22 13:53:22 | 002,748,256 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Tanja\Desktop\tdsskiller.exe
  1242. [2013.09.22 13:42:57 | 000,922,112 | ---- | M] () -- C:\Users\Tanja\Desktop\RogueKiller.exe
  1243. [2013.09.21 23:40:50 | 001,956,670 | ---- | M] (Farbar) -- C:\Users\Tanja\Desktop\FRST64.exe
  1244. [2013.09.21 20:56:10 | 000,688,992 | R--- | M] (Swearware) -- C:\Users\Tanja\Desktop\dds.com
  1245. [2013.09.21 11:17:16 | 001,898,112 | ---- | M] (Bleeping Computer, LLC) -- C:\Users\Tanja\Desktop\rkill.exe
  1246. [2013.09.21 10:48:03 | 012,907,592 | ---- | M] (Malwarebytes Corp.) -- C:\Users\Tanja\Desktop\mbar-1.07.0.1005.exe
  1247. [2013.09.21 10:40:36 | 000,027,276 | ---- | M] () -- C:\Users\Tanja\Desktop\Logs.odt
  1248. [2013.09.21 10:25:10 | 000,760,937 | ---- | M] (Farbar) -- C:\Users\Tanja\Desktop\MiniToolBox.exe
  1249. [2013.09.21 10:08:10 | 000,891,144 | ---- | M] () -- C:\Users\Tanja\Desktop\SecurityCheck.exe
  1250. [2013.09.20 16:43:19 | 000,550,371 | ---- | M] () -- C:\Users\Tanja\Desktop\Autoruns.zip
  1251. [2013.09.19 21:32:05 | 000,002,187 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  1252. [2013.09.18 23:12:54 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  1253. [2013.09.12 18:39:38 | 000,318,048 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
  1254. [2013.09.12 17:31:41 | 001,527,912 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  1255. [2013.09.12 17:31:41 | 000,654,852 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
  1256. [2013.09.12 17:31:41 | 000,616,694 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
  1257. [2013.09.12 17:31:41 | 000,130,434 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
  1258. [2013.09.12 17:31:41 | 000,106,816 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
  1259. [2013.09.04 16:00:22 | 000,105,344 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avgntflt.sys
  1260. [2013.09.03 18:49:40 | 001,500,294 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
  1261. [2013.08.20 10:18:41 | 000,132,088 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avipbb.sys
  1262. [2013.08.20 10:18:41 | 000,081,112 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
  1263. [2013.08.19 16:51:04 | 000,001,026 | ---- | M] () -- C:\Users\Public\Desktop\R i386 3.0.1.lnk
  1264. [2013.08.19 16:51:04 | 000,001,019 | ---- | M] () -- C:\Users\Public\Desktop\R x64 3.0.1.lnk
  1265. [2013.08.10 07:22:38 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
  1266. [2013.08.10 07:21:15 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
  1267. [2013.08.10 07:20:59 | 003,959,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
  1268. [2013.08.10 07:20:59 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
  1269. [2013.08.10 07:20:55 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
  1270. [2013.08.10 07:20:55 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
  1271. [2013.08.10 07:20:55 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
  1272. [2013.08.10 07:20:55 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
  1273. [2013.08.10 05:58:09 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
  1274. [2013.08.10 05:58:06 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
  1275. [2013.08.10 05:58:06 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
  1276. [2013.08.10 05:58:06 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
  1277. [2013.08.10 05:58:05 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
  1278. [2013.08.10 04:27:59 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
  1279. [2013.08.10 04:17:19 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
  1280. [2013.08.07 09:04:37 | 000,245,488 | ---- | M] () -- C:\Windows\hpoins19.dat
  1281. [2013.08.07 09:03:11 | 000,002,171 | ---- | M] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
  1282. [2013.08.07 09:02:30 | 000,001,355 | ---- | M] () -- C:\Users\Public\Desktop\HP Solution Center.lnk
  1283. [2013.08.07 09:02:23 | 000,001,193 | ---- | M] () -- C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
  1284. [2013.08.05 04:25:45 | 000,155,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
  1285. [2013.08.03 16:41:25 | 000,000,219 | ---- | M] () -- C:\Users\Tanja\Desktop\Portal 2.url
  1286. [2013.08.02 04:23:53 | 005,550,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
  1287. [2013.08.02 04:15:44 | 001,732,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
  1288. [2013.08.02 04:15:03 | 000,362,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
  1289. [2013.08.02 04:15:03 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
  1290. [2013.08.02 04:15:03 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
  1291. [2013.08.02 04:14:57 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
  1292. [2013.08.02 04:14:11 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
  1293. [2013.08.02 04:13:34 | 001,161,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
  1294. [2013.08.02 04:13:34 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
  1295. [2013.08.02 04:12:47 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
  1296. [2013.08.02 04:12:20 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
  1297. [2013.08.02 04:12:20 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
  1298. [2013.08.02 04:12:20 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
  1299. [2013.08.02 04:12:20 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
  1300. [2013.08.02 04:12:20 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
  1301. [2013.08.02 04:12:20 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
  1302. [2013.08.02 04:12:20 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
  1303. [2013.08.02 04:12:20 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
  1304. [2013.08.02 04:12:19 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
  1305. [2013.08.02 04:12:19 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
  1306. [2013.08.02 04:12:19 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
  1307. [2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
  1308. [2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
  1309. [2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
  1310. [2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
  1311. [2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
  1312. [2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
  1313. [2013.08.02 04:12:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
  1314. [2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
  1315. [2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
  1316. [2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
  1317. [2013.08.02 04:12:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
  1318. [2013.08.02 04:12:18 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
  1319. [2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
  1320. [2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
  1321. [2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
  1322. [2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
  1323. [2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
  1324. [2013.08.02 04:12:18 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
  1325. [2013.08.02 03:59:30 | 003,968,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
  1326. [2013.08.02 03:59:30 | 003,913,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
  1327. [2013.08.02 03:50:42 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
  1328. [2013.08.02 03:48:15 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
  1329. [2013.08.02 03:48:15 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
  1330. [2013.08.02 03:48:15 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
  1331. [2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
  1332. [2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
  1333. [2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
  1334. [2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
  1335. [2013.08.02 03:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
  1336. [2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
  1337. [2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
  1338. [2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
  1339. [2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
  1340. [2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
  1341. [2013.08.02 03:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
  1342. [2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
  1343. [2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
  1344. [2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
  1345. [2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
  1346. [2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
  1347. [2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
  1348. [2013.08.02 03:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
  1349. [2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
  1350. [2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
  1351. [2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
  1352. [2013.08.02 03:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
  1353. [2013.08.02 03:09:17 | 000,338,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
  1354. [2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
  1355. [2013.08.02 02:45:37 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
  1356. [2013.08.02 02:45:36 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
  1357. [2013.08.02 02:45:35 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
  1358. [2013.08.02 02:45:34 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
  1359. [2013.08.02 02:43:05 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
  1360. [2013.08.02 02:43:05 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
  1361. [2013.08.02 02:43:05 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
  1362. [2013.08.02 02:43:05 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
  1363. [2013.07.29 21:59:08 | 000,002,070 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
  1364. [2013.07.29 21:58:30 | 000,028,600 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avkmgr.sys
  1365. [2013.07.26 14:19:03 | 000,002,144 | ---- | M] () -- C:\Users\Public\Desktop\Brother Creative Center.lnk
  1366. [2013.07.26 14:18:38 | 000,000,425 | ---- | M] () -- C:\Windows\BRWMARK.INI
  1367. [2013.07.26 14:16:48 | 000,000,050 | ---- | M] () -- C:\Windows\SysNative\BRIDF10A.DAT
  1368. [2013.07.26 04:24:56 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
  1369. [2013.07.25 17:35:38 | 676,942,738 | ---- | M] () -- C:\Windows\MEMORY.DMP
  1370. [2013.07.25 11:25:54 | 001,888,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
  1371. [2013.07.25 10:57:27 | 001,620,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
  1372. [2013.07.24 17:48:41 | 000,000,219 | ---- | M] () -- C:\Users\Tanja\Desktop\Portal.url
  1373. [2013.07.23 20:13:51 | 000,000,921 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
  1374. [2013.07.22 18:01:49 | 000,001,172 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
  1375. [2013.07.15 15:29:00 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
  1376. [2013.07.15 15:29:00 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
  1377. [2013.07.15 15:29:00 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
  1378. [2013.07.15 15:29:00 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
  1379. [2013.07.15 15:29:00 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
  1380. [2013.07.15 15:29:00 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
  1381. [2013.07.15 15:29:00 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
  1382. [2013.07.15 15:29:00 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
  1383. [2013.07.15 15:29:00 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
  1384. [2013.07.15 15:29:00 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
  1385. [2013.07.15 15:29:00 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
  1386. [2013.07.15 15:29:00 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
  1387. [2013.07.15 15:28:59 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
  1388. [2013.07.15 15:28:59 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
  1389. [2013.07.15 15:28:59 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
  1390. [2013.07.15 15:28:59 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
  1391. [2013.07.15 15:28:59 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
  1392. [2013.07.15 15:28:59 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
  1393. [2013.07.15 15:28:59 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
  1394. [2013.07.15 15:28:59 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
  1395. [2013.07.15 15:28:59 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
  1396. [2013.07.15 15:28:59 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
  1397. [2013.07.15 15:28:59 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
  1398. [2013.07.15 15:28:59 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
  1399. [2013.07.15 15:28:59 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
  1400. [2013.07.15 15:28:59 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
  1401. [2013.07.15 15:28:59 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
  1402. [2013.07.15 15:28:59 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
  1403. [2013.07.15 15:28:59 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
  1404. [2013.07.15 15:28:59 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
  1405. [2013.07.15 15:28:59 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
  1406. [2013.07.15 15:28:59 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
  1407. [2013.07.15 15:28:59 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
  1408. [2013.07.15 15:28:59 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
  1409. [2013.07.15 15:28:59 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
  1410. [2013.07.15 15:28:59 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
  1411. [2013.07.15 15:28:59 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
  1412. [2013.07.15 15:28:59 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
  1413. [2013.07.15 15:28:59 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
  1414. [2013.07.15 15:28:59 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
  1415. [2013.07.15 15:28:59 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
  1416. [2013.07.15 15:28:59 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
  1417. [2013.07.15 15:28:59 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
  1418. [2013.07.15 15:28:59 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
  1419. [2013.07.15 15:28:59 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
  1420. [2013.07.15 15:28:59 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
  1421. [2013.07.15 15:28:59 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
  1422. [2013.07.15 15:28:59 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
  1423. [2013.07.15 15:28:59 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
  1424. [2013.07.15 15:28:59 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
  1425. [2013.07.15 15:28:59 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
  1426. [2013.07.15 15:28:59 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
  1427. [2013.07.15 15:28:59 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
  1428. [2013.07.15 15:28:59 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
  1429. [2013.07.15 15:28:59 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
  1430. [2013.07.15 15:27:03 | 003,928,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
  1431. [2013.07.15 15:27:03 | 002,776,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
  1432. [2013.07.15 15:27:03 | 002,565,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
  1433. [2013.07.15 15:27:03 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
  1434. [2013.07.15 15:27:03 | 001,682,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
  1435. [2013.07.15 15:27:03 | 001,238,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
  1436. [2013.07.15 15:27:03 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
  1437. [2013.07.15 15:27:03 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
  1438. [2013.07.15 15:27:03 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
  1439. [2013.07.15 15:27:03 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
  1440. [2013.07.15 15:27:03 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
  1441. [2013.07.15 15:27:03 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
  1442. [2013.07.15 15:27:03 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
  1443. [2013.07.15 15:27:03 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
  1444. [2013.07.15 15:27:03 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
  1445. [2013.07.15 15:27:03 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
  1446. [2013.07.15 15:27:03 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
  1447. [2013.07.15 15:27:03 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
  1448. [2013.07.15 15:27:03 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
  1449. [2013.07.15 15:27:03 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
  1450. [2013.07.15 15:27:03 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
  1451. [2013.07.15 15:27:03 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  1452. [2013.07.15 15:27:03 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
  1453. [2013.07.15 15:27:03 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  1454. [2013.07.15 15:27:03 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
  1455. [2013.07.15 15:27:03 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
  1456. [2013.07.15 15:27:03 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
  1457. [2013.07.15 15:27:03 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
  1458. [2013.07.15 15:27:03 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
  1459. [2013.07.15 15:27:03 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
  1460. [2013.07.15 15:27:03 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
  1461. [2013.07.15 15:27:03 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
  1462. [2013.07.15 15:27:03 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
  1463. [2013.07.15 15:27:03 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
  1464. [2013.07.15 15:27:03 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
  1465. [2013.07.15 15:27:03 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
  1466. [2013.07.15 15:27:03 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
  1467. [2013.07.09 22:11:40 | 000,159,772 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
  1468. [2013.07.09 22:11:40 | 000,159,772 | ---- | M] () -- C:\Windows\SysNative\license.rtf
  1469. [2013.07.09 07:52:52 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
  1470. [2013.07.09 07:51:16 | 001,217,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
  1471. [2013.07.09 07:46:20 | 001,472,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
  1472. [2013.07.09 07:46:20 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
  1473. [2013.06.26 19:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftvollh.sys
  1474. [2013.06.26 19:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftredirlh.sys
  1475. [2013.06.26 19:21:46 | 001,777,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sftldr.dll
  1476. [2013.06.26 19:21:46 | 001,130,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\sftldr_wow64.dll
  1477. [2013.06.26 19:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftplaylh.sys
  1478. [2013.06.26 19:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Sftfslh.sys
  1479.  
  1480. [color=#E56717]========== Files Created - No Company Name ==========[/color]
  1481.  
  1482. [2013.09.23 10:17:39 | 000,135,237 | ---- | C] () -- C:\Users\Tanja\Desktop\JavaRa-2.0.zip
  1483. [2013.09.22 22:51:24 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
  1484. [2013.09.22 21:39:44 | 001,635,172 | ---- | C] () -- C:\Users\Tanja\Desktop\AdbeRdr11004_en_US.exe.twbtgvz.partial
  1485. [2013.09.22 14:20:00 | 001,039,554 | ---- | C] () -- C:\Users\Tanja\Desktop\AdwCleaner.exe
  1486. [2013.09.22 13:42:57 | 000,922,112 | ---- | C] () -- C:\Users\Tanja\Desktop\RogueKiller.exe
  1487. [2013.09.21 10:24:21 | 000,027,276 | ---- | C] () -- C:\Users\Tanja\Desktop\Logs.odt
  1488. [2013.09.21 10:08:10 | 000,891,144 | ---- | C] () -- C:\Users\Tanja\Desktop\SecurityCheck.exe
  1489. [2013.09.20 16:43:15 | 000,550,371 | ---- | C] () -- C:\Users\Tanja\Desktop\Autoruns.zip
  1490. [2013.09.18 23:12:54 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
  1491. [2013.08.19 16:51:04 | 000,001,026 | ---- | C] () -- C:\Users\Public\Desktop\R i386 3.0.1.lnk
  1492. [2013.08.19 16:51:04 | 000,001,019 | ---- | C] () -- C:\Users\Public\Desktop\R x64 3.0.1.lnk
  1493. [2013.08.07 09:03:11 | 000,002,171 | ---- | C] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
  1494. [2013.08.07 09:02:42 | 000,001,060 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
  1495. [2013.08.07 09:02:30 | 000,001,355 | ---- | C] () -- C:\Users\Public\Desktop\HP Solution Center.lnk
  1496. [2013.08.07 09:02:23 | 000,001,193 | ---- | C] () -- C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
  1497. [2013.08.07 08:56:51 | 000,245,488 | ---- | C] () -- C:\Windows\hpoins19.dat
  1498. [2013.08.07 08:56:50 | 000,013,898 | ---- | C] () -- C:\Windows\hpomdl19.dat
  1499. [2013.08.03 16:41:25 | 000,000,219 | ---- | C] () -- C:\Users\Tanja\Desktop\Portal 2.url
  1500. [2013.08.02 20:56:10 | 000,002,555 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint Viewer .lnk
  1501. [2013.07.29 21:59:08 | 000,002,070 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
  1502. [2013.07.26 14:19:03 | 000,002,144 | ---- | C] () -- C:\Users\Public\Desktop\Brother Creative Center.lnk
  1503. [2013.07.26 14:18:38 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
  1504. [2013.07.26 14:16:48 | 000,000,050 | ---- | C] () -- C:\Windows\SysNative\BRIDF10A.DAT
  1505. [2013.07.24 17:48:41 | 000,000,219 | ---- | C] () -- C:\Users\Tanja\Desktop\Portal.url
  1506. [2013.07.23 20:13:51 | 000,000,921 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
  1507. [2013.07.22 18:01:49 | 000,001,172 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
  1508. [2013.07.20 16:02:12 | 676,942,738 | ---- | C] () -- C:\Windows\MEMORY.DMP
  1509. [2013.07.15 16:26:21 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
  1510. [2013.07.15 15:35:14 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
  1511. [2013.07.15 15:28:59 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
  1512. [2013.07.15 15:28:59 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
  1513. [2013.07.14 12:45:43 | 001,527,912 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
  1514. [2013.07.09 22:01:33 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\MEDION_120327_20051695.mrk
  1515. [2013.07.09 21:59:05 | 2066,333,695 | -HS- | C] () -- C:\hiberfil.sys
  1516. [2013.07.09 13:18:36 | 000,001,425 | ---- | C] () -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  1517. [2013.07.09 13:18:07 | 000,002,526 | ---- | C] () -- C:\Users\Public\Desktop\MEDION mediathek.lnk
  1518. [2013.07.09 13:16:00 | 000,002,786 | ---- | C] () -- C:\Users\Public\Desktop\MEDIONmail.lnk
  1519. [2013.07.09 13:16:00 | 000,002,291 | ---- | C] () -- C:\Users\Public\Desktop\MEDIONplay.lnk
  1520. [2013.07.09 13:16:00 | 000,002,101 | ---- | C] () -- C:\Users\Public\Desktop\Erstellen Sie Ihre Support-DVD.lnk
  1521. [2013.07.09 13:16:00 | 000,001,943 | ---- | C] () -- C:\Users\Public\Desktop\MEDION Serviceportal.lnk
  1522. [2013.07.09 13:15:42 | 000,001,762 | ---- | C] () -- C:\Users\Public\Desktop\watchmi.lnk
  1523. [2013.07.09 13:15:36 | 000,002,360 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
  1524. [2013.07.09 13:15:27 | 000,002,187 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
  1525. [2013.07.09 13:15:18 | 000,001,110 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  1526. [2013.07.09 13:15:16 | 000,001,106 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  1527. [2012.03.27 21:57:04 | 000,735,796 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin
  1528. [2012.03.27 21:57:03 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin
  1529. [2012.03.27 21:57:00 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
  1530. [2012.03.27 21:56:58 | 013,024,256 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll
  1531. [2012.02.03 07:08:26 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
  1532.  
  1533. [color=#E56717]========== ZeroAccess Check ==========[/color]
  1534.  
  1535. [2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
  1536.  
  1537. [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1538.  
  1539. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1540.  
  1541. [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
  1542.  
  1543. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  1544.  
  1545. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
  1546. "" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
  1547. "ThreadingModel" = Apartment
  1548.  
  1549. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  1550. "" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  1551. "ThreadingModel" = Apartment
  1552.  
  1553. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
  1554. "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
  1555. "ThreadingModel" = Free
  1556.  
  1557. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
  1558. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  1559. "ThreadingModel" = Free
  1560.  
  1561. [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
  1562. "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
  1563. "ThreadingModel" = Both
  1564.  
  1565. [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
  1566.  
  1567. [color=#E56717]========== LOP Check ==========[/color]
  1568.  
  1569. [2013.07.22 18:02:24 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\OpenOffice.org
  1570. [2013.09.10 15:09:15 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\SoftGrid Client
  1571. [2013.09.18 20:42:40 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\TERA
  1572. [2013.07.14 12:46:27 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\TP
  1573.  
  1574. [color=#E56717]========== Purity Check ==========[/color]
  1575.  
  1576.  
  1577.  
  1578. [color=#E56717]========== Custom Scans ==========[/color]
  1579.  
  1580. [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
  1581. [2013.09.23 19:20:00 | 2066,333,695 | -HS- | M] () -- C:\hiberfil.sys
  1582. [2013.09.23 19:20:06 | 4186,771,455 | -HS- | M] () -- C:\pagefile.sys
  1583. [2013.09.22 13:58:14 | 000,005,084 | ---- | M] () -- C:\TDSSKiller.2.9.2.0_22.09.2013_13.55.20_log.txt
  1584. [2013.09.22 14:03:07 | 000,615,316 | ---- | M] () -- C:\TDSSKiller.2.9.2.0_22.09.2013_14.00.24_log.txt
  1585. [2013.09.22 14:09:09 | 000,862,412 | ---- | M] () -- C:\TDSSKiller.2.9.2.0_22.09.2013_14.08.14_log.txt
  1586.  
  1587. [color=#A23BEC]< %USERPROFILE%\*.* >[/color]
  1588. [2013.09.14 15:49:39 | 000,066,974 | ---- | M] () -- C:\Users\Tanja\danid.log
  1589. [2013.09.23 19:33:55 | 001,835,008 | -HS- | M] () -- C:\Users\Tanja\NTUSER.DAT
  1590. [2013.09.23 19:33:55 | 000,262,144 | -HS- | M] () -- C:\Users\Tanja\ntuser.dat.LOG1
  1591. [2013.07.09 13:18:18 | 000,000,000 | -HS- | M] () -- C:\Users\Tanja\ntuser.dat.LOG2
  1592. [2013.07.09 18:26:19 | 000,065,536 | -HS- | M] () -- C:\Users\Tanja\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
  1593. [2013.07.09 18:26:19 | 000,524,288 | -HS- | M] () -- C:\Users\Tanja\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
  1594. [2013.07.09 18:26:19 | 000,524,288 | -HS- | M] () -- C:\Users\Tanja\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
  1595. [2013.07.09 13:18:18 | 000,000,020 | -HS- | M] () -- C:\Users\Tanja\ntuser.ini
  1596.  
  1597. [color=#A23BEC]< %USERPROFILE%\AppData\Local\*.* >[/color]
  1598. [2013.08.07 09:07:28 | 000,072,296 | ---- | M] () -- C:\Users\Tanja\AppData\Local\GDIPFONTCACHEV1.DAT
  1599. [2013.09.23 11:46:59 | 003,905,818 | -H-- | M] () -- C:\Users\Tanja\AppData\Local\IconCache.db
  1600.  
  1601. [color=#A23BEC]< %USERPROFILE%\AppData\Local\*. >[/color]
  1602. [2013.09.22 22:50:49 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Adobe
  1603. [2013.07.09 13:18:18 | 000,000,000 | -HSD | M] -- C:\Users\Tanja\AppData\Local\Anwendungsdaten
  1604. [2013.07.29 22:03:33 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\AskPartnerNetwork
  1605. [2013.07.09 13:19:58 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\CyberLink
  1606. [2013.09.20 13:34:14 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Diagnostics
  1607. [2013.09.18 21:47:11 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Google
  1608. [2013.08.07 09:08:10 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\HP
  1609. [2013.08.19 16:40:36 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft
  1610. [2013.07.09 13:18:52 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Power2Go
  1611. [2013.08.03 11:02:53 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Programs
  1612. [2013.07.14 12:46:20 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\SoftGrid Client
  1613. [2013.09.23 19:33:49 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Temp
  1614. [2013.07.09 13:18:18 | 000,000,000 | -HSD | M] -- C:\Users\Tanja\AppData\Local\Temporary Internet Files
  1615. [2013.07.09 13:18:18 | 000,000,000 | -HSD | M] -- C:\Users\Tanja\AppData\Local\Verlauf
  1616. [2013.07.09 13:18:24 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\VirtualStore
  1617. [2013.07.25 20:23:35 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\{01A0F8D0-F1BC-49E9-8651-3469773AE7D6}
  1618. [2013.08.17 16:54:48 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\{0B3FE79C-250B-4C41-81B0-5345D29FBDB8}
  1619. [2013.07.25 20:23:26 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\{5A3B4272-53C4-4F1B-A291-CCB3246FEBC8}
  1620. [2013.08.02 19:07:28 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\{969D5C69-A518-4418-98DB-842185548A81}
  1621.  
  1622. [color=#A23BEC]< %USERPROFILE%\AppData\Local\temp\*.exe >[/color]
  1623. [2013.09.07 14:31:28 | 000,344,583 | ---- | M] () -- C:\Users\Tanja\AppData\Local\temp\Quarantine.exe
  1624. [234 C:\Users\Tanja\AppData\Local\temp\*.tmp files -> C:\Users\Tanja\AppData\Local\temp\*.tmp -> ]
  1625.  
  1626. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\*.* >[/color]
  1627.  
  1628. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\*. >[/color]
  1629. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Adobe
  1630. [2013.07.29 22:03:51 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Avira
  1631. [2013.08.07 09:08:10 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\HP
  1632. [2013.07.09 13:18:27 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Identities
  1633. [2013.07.26 14:15:34 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\InstallShield
  1634. [2013.07.09 13:18:19 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Intel
  1635. [2013.07.09 13:19:51 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Intel Corporation
  1636. [2012.03.14 23:50:39 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Macromedia
  1637. [2013.09.18 23:13:02 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Malwarebytes
  1638. [2011.04.12 10:28:03 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Media Center Programs
  1639. [2013.08.18 14:54:45 | 000,000,000 | --SD | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft
  1640. [2013.07.29 22:01:36 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Mozilla
  1641. [2013.07.22 18:02:24 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\OpenOffice.org
  1642. [2013.09.10 15:09:15 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\SoftGrid Client
  1643. [2013.09.18 20:42:40 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\TERA
  1644. [2013.07.14 12:46:27 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\TP
  1645. [2013.08.07 09:03:40 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Yahoo!
  1646.  
  1647. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Templates\*.* >[/color]
  1648.  
  1649. [color=#A23BEC]< %USERPROFILE%\AppData\Local\Microsoft\*.* >[/color]
  1650.  
  1651. [color=#A23BEC]< %USERPROFILE%\AppData\Local\Microsoft\*. >[/color]
  1652. [2013.07.09 13:27:34 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Assistance
  1653. [2013.09.23 19:20:54 | 000,000,000 | --SD | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Credentials
  1654. [2013.08.19 16:40:49 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Device Metadata
  1655. [2013.08.19 16:40:35 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Device Stage
  1656. [2010.11.21 04:51:29 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Feeds
  1657. [2013.07.15 18:14:35 | 000,000,000 | -HSD | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Feeds Cache
  1658. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\IME12
  1659. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\IMJP12
  1660. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\IMJP8_1
  1661. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\IMJP9_0
  1662. [2013.09.16 21:15:27 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Internet Explorer
  1663. [2013.08.30 23:12:24 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Media Player
  1664. [2013.09.11 09:21:45 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\NetTraces
  1665. [2013.07.14 12:49:00 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Office
  1666. [2013.08.19 16:40:36 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\UserScanProfiles
  1667. [2013.07.22 17:13:02 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows
  1668. [2013.07.13 18:00:44 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows Live
  1669. [2013.08.29 17:57:33 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows Live Movie Maker
  1670. [2013.07.22 17:26:39 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows Live Photo Gallery
  1671. [2013.07.09 13:18:39 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows Mail
  1672. [2013.07.09 13:18:34 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows Media
  1673. [2013.08.17 16:58:16 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows Photo Gallery
  1674. [2013.07.09 13:18:47 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\Windows Sidebar
  1675. [2013.09.21 11:21:43 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Local\Microsoft\WLSetup
  1676.  
  1677. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\Microsoft\*.* >[/color]
  1678.  
  1679. [color=#A23BEC]< %USERPROFILE%\AppData\Roaming\Microsoft\*. >[/color]
  1680. [2013.07.09 13:18:19 | 000,000,000 | --SD | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Credentials
  1681. [2013.07.09 13:18:20 | 000,000,000 | --SD | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Crypto
  1682. [2013.07.14 12:46:39 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Document Building Blocks
  1683. [2013.07.13 19:29:18 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\eHome
  1684. [2013.07.23 10:00:32 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Excel
  1685. [2013.07.22 17:04:16 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\HTML Help
  1686. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\IME12
  1687. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\IMJP12
  1688. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\IMJP8_1
  1689. [2013.07.09 14:07:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\IMJP9_0
  1690. [2013.07.20 16:10:41 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Internet Explorer
  1691. [2013.07.09 13:18:54 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Network
  1692. [2013.07.14 12:46:39 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Office
  1693. [2013.07.14 12:46:39 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Proof
  1694. [2013.07.09 13:18:21 | 000,000,000 | --SD | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Protect
  1695. [2013.07.25 20:22:09 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Speech
  1696. [2013.07.18 18:41:50 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Spelling
  1697. [2013.07.09 13:18:49 | 000,000,000 | --SD | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\SystemCertificates
  1698. [2013.09.10 13:08:00 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Templates
  1699. [2013.07.14 12:46:39 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\UProof
  1700. [2013.07.15 18:14:32 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows
  1701. [2013.08.18 21:26:25 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Windows Live Photo Gallery
  1702. [2013.09.04 20:41:24 | 000,000,000 | ---D | M] -- C:\Users\Tanja\AppData\Roaming\Microsoft\Word
  1703.  
  1704. [color=#A23BEC]< %windir%\AppPatch\*.* >[/color]
  1705. [2013.04.13 06:45:15 | 002,176,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcGenral.dll
  1706. [2012.10.16 09:39:52 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcLayers.dll
  1707. [2009.07.14 03:03:47 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcRes.dll
  1708. [2013.04.13 06:45:16 | 000,474,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcSpecfc.dll
  1709. [2013.08.02 03:48:11 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\acwow64.dll
  1710. [2009.07.14 03:14:52 | 000,211,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcXtrnal.dll
  1711. [2009.07.14 03:14:53 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\apihex86.dll
  1712. [2013.04.13 01:33:29 | 000,151,630 | ---- | M] () -- C:\Windows\AppPatch\drvmain.sdb
  1713. [2011.03.04 02:02:15 | 001,826,582 | ---- | M] () -- C:\Windows\AppPatch\msimain.sdb
  1714. [2011.03.04 01:56:14 | 000,044,930 | ---- | M] () -- C:\Windows\AppPatch\pcamain.sdb
  1715. [2013.04.13 01:33:26 | 004,080,530 | ---- | M] () -- C:\Windows\AppPatch\sysmain.sdb
  1716.  
  1717. [color=#A23BEC]< %windir%\AppPatch\*. >[/color]
  1718. [2013.07.15 16:38:35 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\AppPatch64
  1719. [2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\Custom
  1720. [2011.05.16 16:04:17 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\de-DE
  1721. [2013.07.09 18:32:54 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\en-US
  1722. [2013.07.09 18:33:34 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\es-ES
  1723. [2013.07.09 18:28:37 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\fr-FR
  1724. [2013.07.09 18:29:56 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\it-IT
  1725. [2013.07.09 18:30:46 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch\nl-NL
  1726.  
  1727. [color=#A23BEC]< %Public%\Documents\*.* >[/color]
  1728. [2009.07.14 06:54:24 | 000,000,278 | -HS- | M] () -- C:\Users\Public\Documents\desktop.ini
  1729.  
  1730. [color=#A23BEC]< %Public%\Documents\*. >[/color]
  1731. [2012.03.27 23:22:54 | 000,000,000 | ---D | M] -- C:\Users\Public\Documents\CyberLink
  1732. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Users\Public\Documents\My Music
  1733. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Users\Public\Documents\My Pictures
  1734. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\Users\Public\Documents\My Videos
  1735.  
  1736. [color=#A23BEC]< %ProgramData%\*.* >[/color]
  1737. [2013.08.07 09:04:38 | 000,001,444 | ---- | M] () -- C:\ProgramData\hpzinstall.log
  1738.  
  1739. [color=#A23BEC]< %ProgramData%\*. >[/color]
  1740. [2013.09.22 22:49:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe
  1741. [2013.07.29 22:01:16 | 000,000,000 | ---D | M] -- C:\ProgramData\APN
  1742. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
  1743. [2013.07.29 22:01:36 | 000,000,000 | ---D | M] -- C:\ProgramData\AskPartnerNetwork
  1744. [2013.07.29 21:58:59 | 000,000,000 | ---D | M] -- C:\ProgramData\Avira
  1745. [2012.03.27 22:44:10 | 000,000,000 | ---D | M] -- C:\ProgramData\Bigfoot Networks
  1746. [2013.07.26 14:15:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Brother
  1747. [2012.03.27 23:17:36 | 000,000,000 | ---D | M] -- C:\ProgramData\CLSK
  1748. [2013.09.19 21:19:38 | 000,000,000 | ---D | M] -- C:\ProgramData\CyberLink
  1749. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
  1750. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
  1751. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
  1752. [2013.07.09 13:33:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Google
  1753. [2013.09.23 10:36:52 | 000,000,000 | ---D | M] -- C:\ProgramData\HitmanPro
  1754. [2013.08.07 09:04:34 | 000,000,000 | ---D | M] -- C:\ProgramData\HP
  1755. [2013.08.07 09:02:32 | 000,000,000 | ---D | M] -- C:\ProgramData\HP Product Assistant
  1756. [2012.03.28 17:25:10 | 000,000,000 | ---D | M] -- C:\ProgramData\install_clap
  1757. [2012.03.27 22:37:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Intel
  1758. [2012.03.27 22:37:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Intel.sav
  1759. [2013.07.09 13:17:45 | 000,000,000 | ---D | M] -- C:\ProgramData\Kaspersky Rescue Disk 10
  1760. [2013.09.18 23:12:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes
  1761. [2013.09.21 11:14:01 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
  1762. [2013.07.09 13:18:57 | 000,000,000 | -H-D | M] -- C:\ProgramData\Medion Reminder
  1763. [2013.07.22 17:04:15 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft
  1764. [2012.03.27 22:23:43 | 000,000,000 | ---D | M] -- C:\ProgramData\NVIDIA
  1765. [2012.03.27 22:21:52 | 000,000,000 | ---D | M] -- C:\ProgramData\NVIDIA Corporation
  1766. [2013.09.22 21:33:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Oracle
  1767. [2012.03.27 22:38:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Roaming
  1768. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
  1769. [2011.07.18 23:13:58 | 000,000,000 | ---D | M] -- C:\ProgramData\Sun
  1770. [2012.03.27 23:20:28 | 000,000,000 | ---D | M] -- C:\ProgramData\Temp
  1771. [2009.07.14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
  1772. [2013.07.09 13:15:41 | 000,000,000 | ---D | M] -- C:\ProgramData\TvdPersonal
  1773. [2013.07.15 15:32:59 | 000,000,000 | ---D | M] -- C:\ProgramData\VirtualizedApplications
  1774. [2013.08.07 09:06:25 | 000,000,000 | ---D | M] -- C:\ProgramData\WEBREG
  1775. [2013.08.07 09:03:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Yahoo! Companion
  1776.  
  1777. [color=#A23BEC]< %CommonProgramFiles%\*.* >[/color]
  1778.  
  1779. [color=#A23BEC]< %CommonProgramFiles%\*. >[/color]
  1780. [2013.07.14 12:45:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\DESIGNER
  1781. [2013.08.07 09:01:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Hewlett-Packard
  1782. [2013.08.07 09:01:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\HP
  1783. [2012.03.27 22:24:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\InstallShield
  1784. [2012.03.27 22:16:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Intel
  1785. [2012.03.27 22:11:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Intel Corporation
  1786. [2013.09.22 21:33:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Java
  1787. [2013.07.09 13:18:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Memeo
  1788. [2013.07.14 12:49:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\microsoft shared
  1789. [2012.03.27 23:19:19 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Nikon
  1790. [2012.03.27 22:02:13 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\postureAgent
  1791. [2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Services
  1792. [2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\SpeechEngines
  1793. [2013.08.29 10:32:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Steam
  1794. [2013.07.09 18:35:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\System
  1795. [2011.07.18 22:49:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Windows Live
  1796.  
  1797. [color=#A23BEC]< %CommonProgramFiles%\ComObjects\*.exe >[/color]
  1798.  
  1799. [color=#A23BEC]< %ProgramFiles%\*.* >[/color]
  1800. [2009.07.14 06:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini
  1801.  
  1802. [color=#A23BEC]< %ProgramFiles%\*. >[/color]
  1803. [2013.09.22 22:49:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe
  1804. [2013.07.29 22:01:36 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\AskPartnerNetwork
  1805. [2013.07.29 21:58:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Avira
  1806. [2013.07.26 14:16:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Brother
  1807. [2013.07.26 14:16:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Browny02
  1808. [2012.03.27 22:37:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cisco
  1809. [2013.09.22 22:49:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files
  1810. [2012.03.28 17:25:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\CyberLink
  1811. [2012.03.27 22:31:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Dolby Home Theater v4
  1812. [2013.07.23 20:27:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\dumps
  1813. [2013.09.22 15:56:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\ESET
  1814. [2013.07.12 17:00:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google
  1815. [2013.08.07 09:02:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\HP
  1816. [2013.07.26 14:16:13 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information
  1817. [2012.03.27 22:42:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel
  1818. [2013.09.12 17:34:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer
  1819. [2013.09.22 21:32:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Java
  1820. [2013.09.18 23:12:54 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
  1821. [2013.07.09 13:18:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mediathek
  1822. [2013.07.09 13:18:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Memeo
  1823. [2013.09.12 17:31:40 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Application Virtualization Client
  1824. [2013.07.14 12:45:39 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office
  1825. [2013.07.14 12:54:09 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight
  1826. [2011.07.18 22:55:10 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
  1827. [2011.07.18 22:17:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET
  1828. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild
  1829. [2013.08.02 20:55:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSECache
  1830. [2013.08.08 10:11:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0
  1831. [2012.03.27 22:22:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\NVIDIA Corporation
  1832. [2013.07.22 18:01:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\OpenOffice.org 3
  1833. [2012.03.27 22:34:04 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek
  1834. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies
  1835. [2013.09.23 19:22:31 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Steam
  1836. [2012.03.27 22:43:05 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\System Control Manager
  1837. [2012.03.27 22:24:54 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Temp
  1838. [2009.07.14 06:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information
  1839. [2013.07.09 13:15:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\watchmi
  1840. [2013.07.15 16:38:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender
  1841. [2011.07.18 22:57:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Live
  1842. [2013.07.09 18:34:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail
  1843. [2013.07.09 18:34:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player
  1844. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT
  1845. [2013.07.09 18:34:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer
  1846. [2010.11.21 05:31:38 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices
  1847. [2013.07.09 18:34:50 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar
  1848. [2013.08.07 09:03:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Yahoo!
  1849.  
  1850. [color=#A23BEC]< %programdata%\Microsoft\Windows\DRM\*.tmp >[/color]
  1851.  
  1852. [color=#A23BEC]< %programdata%\Microsoft\DRM\*.tmp >[/color]
  1853.  
  1854. [color=#A23BEC]< %systemroot%\System32\config\systemprofile\*.* >[/color]
  1855.  
  1856. [color=#A23BEC]< %systemroot%\System32\config\systemprofile\*. >[/color]
  1857. [2009.07.14 06:55:33 | 000,000,000 | --SD | M] -- C:\Windows\System32\config\systemprofile\AppData
  1858.  
  1859. [color=#A23BEC]< %systemroot%\SysWow64\config\systemprofile\*.* >[/color]
  1860.  
  1861. [color=#A23BEC]< %systemroot%\SysWow64\config\systemprofile\*. >[/color]
  1862. [2009.07.14 06:55:33 | 000,000,000 | --SD | M] -- C:\Windows\SysWow64\config\systemprofile\AppData
  1863.  
  1864. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Local\*.* >[/color]
  1865. [2013.08.07 13:44:03 | 000,072,296 | ---- | M] () -- C:\Windows\system32\config\systemprofile\AppData\Local\GDIPFONTCACHEV1.DAT
  1866.  
  1867. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Local\*. >[/color]
  1868. [2013.07.09 13:15:12 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Google
  1869. [2012.03.27 23:19:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\MediaServer
  1870. [2009.07.14 06:54:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft
  1871. [2013.09.12 17:31:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\SoftGrid Client
  1872. [2013.07.09 13:17:57 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Local\temp
  1873.  
  1874. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Roaming\*.* >[/color]
  1875.  
  1876. [color=#A23BEC]< %systemroot%\system32\config\systemprofile\AppData\Roaming\*. >[/color]
  1877. [2013.07.09 13:18:00 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft
  1878. [2013.09.23 11:47:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\SoftGrid Client
  1879. [2013.07.14 12:46:03 | 000,000,000 | ---D | M] -- C:\Windows\system32\config\systemprofile\AppData\Roaming\{90140011-0066-0407-0000-0000000FF1CE}
  1880.  
  1881. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Local\*.* >[/color]
  1882. [2013.08.07 13:44:03 | 000,072,296 | ---- | M] () -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\GDIPFONTCACHEV1.DAT
  1883.  
  1884. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Local\*. >[/color]
  1885. [2013.07.09 13:15:12 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Google
  1886. [2012.03.27 23:19:00 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\MediaServer
  1887. [2009.07.14 06:54:17 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft
  1888. [2013.09.12 17:31:41 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SoftGrid Client
  1889. [2013.07.09 13:17:57 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\temp
  1890.  
  1891. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Roaming\*.* >[/color]
  1892.  
  1893. [color=#A23BEC]< %windir%\SysWOW64\config\systemprofile\AppData\Roaming\*. >[/color]
  1894. [2013.07.09 13:18:00 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft
  1895. [2013.09.23 11:47:07 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client
  1896. [2013.07.14 12:46:03 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\{90140011-0066-0407-0000-0000000FF1CE}
  1897.  
  1898. [color=#A23BEC]< %windir%\ServiceProfiles\LocalService\AppData\Local\Temp\*.tlb >[/color]
  1899.  
  1900. [color=#A23BEC]< %windir%\ServiceProfiles\NetworkService\AppData\Local\Temp\*.tlb >[/color]
  1901.  
  1902. [color=#A23BEC]< %windir%\temp\*.exe >[/color]
  1903.  
  1904. [color=#A23BEC]< %windir%\*. >[/color]
  1905. [2009.07.14 07:32:39 | 000,000,000 | ---D | M] -- C:\Windows\addins
  1906. [2009.07.14 05:20:08 | 000,000,000 | ---D | M] -- C:\Windows\AppCompat
  1907. [2013.09.12 17:34:35 | 000,000,000 | ---D | M] -- C:\Windows\AppPatch
  1908. [2013.09.16 11:01:37 | 000,000,000 | R-SD | M] -- C:\Windows\assembly
  1909. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Boot
  1910. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Branding
  1911. [2009.07.14 07:32:39 | 000,000,000 | ---D | M] -- C:\Windows\Cursors
  1912. [2011.07.18 22:58:14 | 000,000,000 | ---D | M] -- C:\Windows\da
  1913. [2011.07.18 22:55:27 | 000,000,000 | ---D | M] -- C:\Windows\de
  1914. [2011.05.16 16:04:23 | 000,000,000 | ---D | M] -- C:\Windows\de-DE
  1915. [2013.07.09 22:07:06 | 000,000,000 | ---D | M] -- C:\Windows\debug
  1916. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\diagnostics
  1917. [2011.05.16 16:47:33 | 000,000,000 | ---D | M] -- C:\Windows\DigitalLocker
  1918. [2013.09.22 15:56:06 | 000,000,000 | ---D | M] -- C:\Windows\Downloaded Program Files
  1919. [2013.07.09 18:35:31 | 000,000,000 | ---D | M] -- C:\Windows\ehome
  1920. [2011.07.18 22:55:33 | 000,000,000 | ---D | M] -- C:\Windows\el
  1921. [2011.07.18 22:55:38 | 000,000,000 | ---D | M] -- C:\Windows\en
  1922. [2013.07.09 18:33:10 | 000,000,000 | ---D | M] -- C:\Windows\en-US
  1923. [2011.07.18 22:55:44 | 000,000,000 | ---D | M] -- C:\Windows\es
  1924. [2013.07.09 18:33:34 | 000,000,000 | ---D | M] -- C:\Windows\es-ES
  1925. [2013.08.07 09:02:34 | 000,000,000 | R-SD | M] -- C:\Windows\Fonts
  1926. [2011.07.18 22:55:50 | 000,000,000 | ---D | M] -- C:\Windows\fr
  1927. [2013.07.09 18:29:00 | 000,000,000 | ---D | M] -- C:\Windows\fr-FR
  1928. [2011.04.12 10:30:40 | 000,000,000 | ---D | M] -- C:\Windows\Globalization
  1929. [2012.03.27 22:48:36 | 000,000,000 | ---D | M] -- C:\Windows\Help
  1930. [2011.07.18 22:55:56 | 000,000,000 | ---D | M] -- C:\Windows\hu
  1931. [2013.07.09 18:34:35 | 000,000,000 | ---D | M] -- C:\Windows\IME
  1932. [2013.09.12 17:31:41 | 000,000,000 | ---D | M] -- C:\Windows\inf
  1933. [2013.09.22 22:49:42 | 000,000,000 | -HSD | M] -- C:\Windows\Installer
  1934. [2011.07.18 22:56:02 | 000,000,000 | ---D | M] -- C:\Windows\it
  1935. [2013.07.09 18:30:27 | 000,000,000 | ---D | M] -- C:\Windows\it-IT
  1936. [2009.07.14 07:32:39 | 000,000,000 | ---D | M] -- C:\Windows\L2Schemas
  1937. [2009.07.14 04:34:24 | 000,000,000 | ---D | M] -- C:\Windows\LiveKernelReports
  1938. [2013.07.15 15:34:10 | 000,000,000 | ---D | M] -- C:\Windows\Logs
  1939. [2009.07.14 07:32:40 | 000,000,000 | R-SD | M] -- C:\Windows\Media
  1940. [2013.09.16 11:01:58 | 000,000,000 | ---D | M] -- C:\Windows\Microsoft.NET
  1941. [2013.07.25 17:35:44 | 000,000,000 | ---D | M] -- C:\Windows\Minidump
  1942. [2009.07.14 04:34:34 | 000,000,000 | ---D | M] -- C:\Windows\ModemLogs
  1943. [2011.07.18 22:56:07 | 000,000,000 | ---D | M] -- C:\Windows\nl
  1944. [2013.07.09 18:31:14 | 000,000,000 | ---D | M] -- C:\Windows\nl-NL
  1945. [2009.07.14 07:32:40 | 000,000,000 | ---D | M] -- C:\Windows\Offline Web Pages
  1946. [2013.07.09 13:13:34 | 000,000,000 | ---D | M] -- C:\Windows\Panther
  1947. [2011.07.18 22:49:43 | 000,000,000 | ---D | M] -- C:\Windows\PCHEALTH
  1948. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Performance
  1949. [2011.07.18 22:56:13 | 000,000,000 | ---D | M] -- C:\Windows\pl
  1950. [2009.07.14 05:20:10 | 000,000,000 | ---D | M] -- C:\Windows\PLA
  1951. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\PolicyDefinitions
  1952. [2013.08.28 19:24:22 | 000,000,000 | ---D | M] -- C:\Windows\Prefetch
  1953. [2013.07.09 18:32:39 | 000,000,000 | ---D | M] -- C:\Windows\pt-PT
  1954. [2009.07.14 05:20:11 | 000,000,000 | ---D | M] -- C:\Windows\Registration
  1955. [2013.09.20 13:34:22 | 000,000,000 | ---D | M] -- C:\Windows\rescache
  1956. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Resources
  1957. [2009.07.14 04:35:47 | 000,000,000 | ---D | M] -- C:\Windows\SchCache
  1958. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\schemas
  1959. [2009.07.14 05:20:10 | 000,000,000 | ---D | M] -- C:\Windows\security
  1960. [2009.07.14 06:45:47 | 000,000,000 | ---D | M] -- C:\Windows\ServiceProfiles
  1961. [2013.07.09 18:34:46 | 000,000,000 | ---D | M] -- C:\Windows\servicing
  1962. [2011.07.18 22:48:01 | 000,000,000 | ---D | M] -- C:\Windows\Setup
  1963. [2011.04.12 10:28:10 | 000,000,000 | ---D | M] -- C:\Windows\ShellNew
  1964. [2011.07.18 22:56:24 | 000,000,000 | ---D | M] -- C:\Windows\sl
  1965. [2013.07.13 17:56:38 | 000,000,000 | ---D | M] -- C:\Windows\SoftwareDistribution
  1966. [2011.04.12 10:17:51 | 000,000,000 | ---D | M] -- C:\Windows\Speech
  1967. [2009.07.14 04:36:55 | 000,000,000 | ---D | M] -- C:\Windows\system
  1968. [2013.09.12 17:34:38 | 000,000,000 | ---D | M] -- C:\Windows\System32
  1969. [2013.09.23 19:21:46 | 000,000,000 | ---D | M] -- C:\Windows\SysWOW64
  1970. [2009.07.14 06:57:13 | 000,000,000 | ---D | M] -- C:\Windows\TAPI
  1971. [2013.09.22 22:51:24 | 000,000,000 | ---D | M] -- C:\Windows\Tasks
  1972. [2013.09.23 19:33:49 | 000,000,000 | ---D | M] -- C:\Windows\Temp
  1973. [2011.07.18 22:56:29 | 000,000,000 | ---D | M] -- C:\Windows\tr
  1974. [2009.07.14 04:34:33 | 000,000,000 | ---D | M] -- C:\Windows\tracing
  1975. [2013.08.07 09:01:37 | 000,000,000 | ---D | M] -- C:\Windows\twain_32
  1976. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\Vss
  1977. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\Web
  1978. [2013.09.12 18:40:28 | 000,000,000 | ---D | M] -- C:\Windows\winsxs
  1979.  
  1980. [color=#A23BEC]< %windir%\ShellNew\*.* >[/color]
  1981. [2009.06.10 22:44:28 | 000,004,544 | ---- | M] () -- C:\Windows\ShellNew\Journal.jnt
  1982.  
  1983. [color=#A23BEC]< %windir%\installer\*. >[/color]
  1984. [2011.07.18 22:19:12 | 000,000,000 | -HSD | M] -- C:\Windows\installer\$PatchCache$
  1985. [2012.03.27 22:38:29 | 000,000,000 | ---D | M] -- C:\Windows\installer\_{37EC048A-81A2-452A-8D1F-3BE2018E767D}
  1986. [2012.03.27 22:37:27 | 000,000,000 | ---D | M] -- C:\Windows\installer\_{E97F409F-9E1C-42A0-B72D-765A78DF3696}
  1987. [2012.03.27 22:40:29 | 000,000,000 | ---D | M] -- C:\Windows\installer\_{F0932859-AA60-459E-B843-0BDECA34E2C7}
  1988. [2012.03.27 23:19:47 | 000,000,000 | ---D | M] -- C:\Windows\installer\{01FB4998-33C4-4431-85ED-079E3EEFE75D}
  1989. [2013.07.23 20:13:47 | 000,000,000 | ---D | M] -- C:\Windows\installer\{048298C9-A4D3-490B-9FF9-AB023A9238F3}
  1990. [2013.08.07 09:02:01 | 000,000,000 | ---D | M] -- C:\Windows\installer\{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}
  1991. [2012.03.27 23:20:22 | 000,000,000 | ---D | M] -- C:\Windows\installer\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}
  1992. [2013.07.22 18:01:49 | 000,000,000 | ---D | M] -- C:\Windows\installer\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}
  1993. [2013.09.22 21:32:53 | 000,000,000 | ---D | M] -- C:\Windows\installer\{26A24AE4-039D-4CA4-87B4-2F83217040FF}
  1994. [2012.03.27 23:20:07 | 000,000,000 | ---D | M] -- C:\Windows\installer\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}
  1995. [2012.03.27 22:38:34 | 000,000,000 | ---D | M] -- C:\Windows\installer\{37EC048A-81A2-452A-8D1F-3BE2018E767D}
  1996. [2012.03.27 23:17:19 | 000,000,000 | ---D | M] -- C:\Windows\installer\{40BF1E83-20EB-11D8-97C5-0009C5020658}
  1997. [2013.07.29 22:01:38 | 000,000,000 | ---D | M] -- C:\Windows\installer\{41564952-412D-5637-00A7-A758B70C0202}
  1998. [2011.07.18 23:23:12 | 000,000,000 | ---D | M] -- C:\Windows\installer\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}
  1999. [2012.03.27 23:15:48 | 000,000,000 | ---D | M] -- C:\Windows\installer\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41}
  2000. [2013.08.07 09:02:53 | 000,000,000 | ---D | M] -- C:\Windows\installer\{7059BDA7-E1DB-442C-B7A1-6144596720A4}
  2001. [2013.08.08 10:11:25 | 000,000,000 | ---D | M] -- C:\Windows\installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
  2002. [2013.07.14 12:54:59 | 000,000,000 | ---D | M] -- C:\Windows\installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
  2003. [2013.09.12 17:31:40 | 000,000,000 | ---D | M] -- C:\Windows\installer\{90140000-006D-0407-1000-0000000FF1CE}
  2004. [2013.09.12 17:26:32 | 000,000,000 | ---D | M] -- C:\Windows\installer\{95140000-0070-0000-0000-0000000FF1CE}
  2005. [2013.09.12 17:31:34 | 000,000,000 | ---D | M] -- C:\Windows\installer\{95140000-00AF-0407-0000-0000000FF1CE}
  2006. [2011.07.18 22:56:35 | 000,000,000 | ---D | M] -- C:\Windows\installer\{A726AE06-AAA3-43D1-87E3-70F510314F04}
  2007. [2011.07.18 23:12:34 | 000,000,000 | ---D | M] -- C:\Windows\installer\{AC76BA86-7AD7-5464-3428-A00000000004}
  2008. [2012.03.27 22:31:31 | 000,000,000 | ---D | M] -- C:\Windows\installer\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}
  2009. [2012.03.27 23:15:58 | 000,000,000 | ---D | M] -- C:\Windows\installer\{C59C179C-668D-49A9-B6EA-0121CCFC1243}
  2010. [2013.08.07 09:03:11 | 000,000,000 | ---D | M] -- C:\Windows\installer\{D79113E7-274C-470B-BD46-01B10219DF6A}
  2011. [2013.08.07 09:03:29 | 000,000,000 | ---D | M] -- C:\Windows\installer\{DC635845-46D3-404B-BCB1-FC4A91091AFA}
  2012. [2011.07.18 22:57:11 | 000,000,000 | ---D | M] -- C:\Windows\installer\{DECDCB7C-58CC-4865-91AF-627F9798FE48}
  2013. [2012.03.27 22:31:20 | 000,000,000 | ---D | M] -- C:\Windows\installer\{DF446558-ADF7-4884-9B2D-281979CCE71F}
  2014. [2012.03.27 23:17:30 | 000,000,000 | ---D | M] -- C:\Windows\installer\{E3D04529-6EDB-11D8-A372-0050BAE317E1}
  2015. [2011.07.18 22:51:56 | 000,000,000 | ---D | M] -- C:\Windows\installer\{E5B21F11-6933-4E0B-A25C-7963E3C07D11}
  2016. [2012.03.27 22:37:32 | 000,000,000 | ---D | M] -- C:\Windows\installer\{E97F409F-9E1C-42A0-B72D-765A78DF3696}
  2017. [2013.07.09 13:15:42 | 000,000,000 | ---D | M] -- C:\Windows\installer\{F0559C5E-7912-4391-B1A0-6B975F0E5064}
  2018. [2012.03.27 22:42:53 | 000,000,000 | ---D | M] -- C:\Windows\installer\{F0932859-AA60-459E-B843-0BDECA34E2C7}
  2019. [2011.07.18 22:55:10 | 000,000,000 | ---D | M] -- C:\Windows\installer\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
  2020. [2013.08.09 10:51:12 | 000,000,000 | ---D | M] -- C:\Windows\installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
  2021.  
  2022. [color=#A23BEC]< %windir%\system32\*. >[/color]
  2023. [2011.05.16 16:04:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\0407
  2024. [2010.11.21 05:31:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\AdvancedInstallers
  2025. [2009.07.14 05:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\ar-SA
  2026. [2009.07.14 05:20:16 | 000,000,000 | ---D | M] -- C:\Windows\system32\bg-BG
  2027. [2009.07.14 04:35:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot
  2028. [2009.07.14 04:35:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\catroot2
  2029. [2013.07.09 18:35:22 | 000,000,000 | ---D | M] -- C:\Windows\system32\com
  2030. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\config
  2031. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\cs-CZ
  2032. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\da-DK
  2033. [2011.05.16 16:04:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\de
  2034. [2013.09.12 17:34:34 | 000,000,000 | ---D | M] -- C:\Windows\system32\de-DE
  2035. [2013.07.09 18:34:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Dism
  2036. [2013.07.09 18:35:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\drivers
  2037. [2013.07.09 18:34:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\DriverStore
  2038. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\el-GR
  2039. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\en-US
  2040. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\es-ES
  2041. [2009.07.14 05:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\et-EE
  2042. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\fi-FI
  2043. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\fr-FR
  2044. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\FxsTmp
  2045. [2009.07.14 04:34:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicy
  2046. [2009.07.14 04:34:27 | 000,000,000 | ---D | M] -- C:\Windows\system32\GroupPolicyUsers
  2047. [2009.07.14 05:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\he-IL
  2048. [2009.07.14 05:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\hr-HR
  2049. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\hu-HU
  2050. [2009.07.14 05:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\icsxml
  2051. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\IME
  2052. [2009.07.14 04:36:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\inetsrv
  2053. [2009.07.14 05:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\InstallShield
  2054. [2013.07.15 16:38:34 | 000,000,000 | ---D | M] -- C:\Windows\system32\it-IT
  2055. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\ja-JP
  2056. [2013.07.15 16:38:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\ko-KR
  2057. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\LogFiles
  2058. [2009.07.14 05:20:17 | 000,000,000 | ---D | M] -- C:\Windows\system32\lt-LT
  2059. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\lv-LV
  2060. [2011.07.18 23:12:55 | 000,000,000 | ---D | M] -- C:\Windows\system32\Macromed
  2061. [2010.11.21 05:31:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\manifeststore
  2062. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\migration
  2063. [2013.07.09 18:34:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\migwiz
  2064. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\Msdtc
  2065. [2013.07.09 18:35:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\MUI
  2066. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\nb-NO
  2067. [2009.07.14 04:34:31 | 000,000,000 | ---D | M] -- C:\Windows\system32\NDF
  2068. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\NetworkList
  2069. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\nl-NL
  2070. [2012.03.27 22:25:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\NV
  2071. [2013.07.09 18:34:02 | 000,000,000 | ---D | M] -- C:\Windows\system32\oobe
  2072. [2013.07.15 16:38:34 | 000,000,000 | ---D | M] -- C:\Windows\system32\pl-PL
  2073. [2013.07.09 18:34:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\Printing_Admin_Scripts
  2074. [2013.07.15 16:38:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-BR
  2075. [2013.07.15 16:38:34 | 000,000,000 | ---D | M] -- C:\Windows\system32\pt-PT
  2076. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ras
  2077. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\Recovery
  2078. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\restore
  2079. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\ro-RO
  2080. [2012.03.27 22:24:41 | 000,000,000 | ---D | M] -- C:\Windows\system32\RTCOM
  2081. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\ru-RU
  2082. [2012.03.27 22:34:07 | 000,000,000 | ---D | M] -- C:\Windows\system32\sda
  2083. [2013.07.09 18:35:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Setup
  2084. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sk-SK
  2085. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\sl-SI
  2086. [2013.07.09 18:34:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\slmgr
  2087. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\Speech
  2088. [2013.08.07 09:02:15 | 000,000,000 | ---D | M] -- C:\Windows\system32\spool
  2089. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\spp
  2090. [2010.11.21 05:31:13 | 000,000,000 | ---D | M] -- C:\Windows\system32\sppui
  2091. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\sr-Latn-CS
  2092. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\sv-SE
  2093. [2013.07.09 18:35:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\sysprep
  2094. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks
  2095. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\th-TH
  2096. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\tr-TR
  2097. [2009.07.14 05:20:19 | 000,000,000 | ---D | M] -- C:\Windows\system32\uk-UA
  2098. [2013.07.15 16:38:20 | 000,000,000 | ---D | M] -- C:\Windows\system32\Wat
  2099. [2013.07.15 16:38:33 | 000,000,000 | ---D | M] -- C:\Windows\system32\wbem
  2100. [2013.07.09 18:34:35 | 000,000,000 | ---D | M] -- C:\Windows\system32\WCN
  2101. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\system32\wdi
  2102. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\system32\WindowsPowerShell
  2103. [2013.07.09 18:34:43 | 000,000,000 | ---D | M] -- C:\Windows\system32\winrm
  2104. [2013.07.09 18:34:36 | 000,000,000 | ---D | M] -- C:\Windows\system32\XPSViewer
  2105. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-CN
  2106. [2013.07.15 16:38:25 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-HK
  2107. [2013.07.15 16:38:24 | 000,000,000 | ---D | M] -- C:\Windows\system32\zh-TW
  2108.  
  2109. [color=#A23BEC]< %windir%\sysnative\*. >[/color]
  2110. [2011.05.16 16:04:18 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\0407
  2111. [2010.11.21 05:30:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\AdvancedInstallers
  2112. [2009.07.14 05:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ar-SA
  2113. [2009.07.14 05:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\bg-BG
  2114. [2013.07.09 18:34:24 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Boot
  2115. [2013.09.12 17:32:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\catroot
  2116. [2013.09.22 21:40:42 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\catroot2
  2117. [2011.07.18 22:21:29 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\CodeIntegrity
  2118. [2013.07.09 18:35:04 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\com
  2119. [2013.09.23 19:30:56 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\config
  2120. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\cs-CZ
  2121. [2013.07.15 16:38:26 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\da-DK
  2122. [2011.05.16 16:04:17 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\de
  2123. [2013.09.12 17:34:34 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\de-DE
  2124. [2013.07.09 18:34:24 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Dism
  2125. [2013.09.23 10:36:53 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\drivers
  2126. [2013.09.12 17:34:33 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\DriverStore
  2127. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\el-GR
  2128. [2013.07.15 16:38:26 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\en-US
  2129. [2013.07.15 16:38:26 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\es-ES
  2130. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\et-EE
  2131. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\fi-FI
  2132. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\fr-FR
  2133. [2009.07.14 07:09:04 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\FxsTmp
  2134. [2009.07.14 04:34:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\GroupPolicy
  2135. [2009.07.14 04:34:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\GroupPolicyUsers
  2136. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\he-IL
  2137. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\hr-HR
  2138. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\hu-HU
  2139. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ias
  2140. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\icsxml
  2141. [2009.07.14 05:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\IME
  2142. [2009.07.14 04:36:55 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\inetsrv
  2143. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\it-IT
  2144. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ja-JP
  2145. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ko-KR
  2146. [2013.07.30 13:58:40 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\LogFiles
  2147. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\lt-LT
  2148. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\lv-LV
  2149. [2011.10.14 14:15:45 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Macromed
  2150. [2010.11.21 05:30:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\manifeststore
  2151. [2009.07.14 06:45:42 | 000,000,000 | --SD | M] -- C:\Windows\sysnative\Microsoft
  2152. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\migration
  2153. [2013.07.09 18:34:35 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\migwiz
  2154. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Msdtc
  2155. [2013.07.09 18:35:19 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\MUI
  2156. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\nb-NO
  2157. [2013.09.11 09:22:17 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\NDF
  2158. [2009.07.14 05:20:11 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\NetworkList
  2159. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\nl-NL
  2160. [2012.03.27 22:25:26 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\NV
  2161. [2011.05.09 15:14:59 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\OEM
  2162. [2013.07.09 18:35:22 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\oobe
  2163. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pl-PL
  2164. [2013.07.09 18:34:21 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Printing_Admin_Scripts
  2165. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pt-BR
  2166. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\pt-PT
  2167. [2009.07.14 05:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ras
  2168. [2013.07.09 13:13:32 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Recovery
  2169. [2013.07.09 13:31:56 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\restore
  2170. [2009.07.14 05:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ro-RO
  2171. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\ru-RU
  2172. [2013.07.09 18:35:21 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Setup
  2173. [2009.07.14 05:20:15 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sk-SK
  2174. [2013.07.15 16:38:27 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sl-SI
  2175. [2013.07.09 18:34:24 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\slmgr
  2176. [2009.07.14 05:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\SMI
  2177. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Speech
  2178. [2009.07.14 06:53:31 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\spool
  2179. [2009.07.14 05:20:13 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\spp
  2180. [2010.11.21 05:30:26 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sppui
  2181. [2009.07.14 05:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sr-Latn-CS
  2182. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sv-SE
  2183. [2013.07.09 18:35:21 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\sysprep
  2184. [2013.09.22 22:51:24 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Tasks
  2185. [2009.07.14 05:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\th-TH
  2186. [2013.07.15 16:38:26 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\tr-TR
  2187. [2009.07.14 05:20:16 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\uk-UA
  2188. [2013.07.15 16:38:20 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\Wat
  2189. [2013.07.15 16:38:35 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wbem
  2190. [2013.07.09 18:34:24 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WCN
  2191. [2013.08.07 09:19:54 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wdi
  2192. [2009.07.14 07:09:49 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\wfp
  2193. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WinBioDatabase
  2194. [2011.05.16 16:47:32 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WinBioPlugIns
  2195. [2009.07.14 07:32:38 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\WindowsPowerShell
  2196. [2009.07.14 05:20:14 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\winevt
  2197. [2013.07.09 18:34:35 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\winrm
  2198. [2012.03.27 22:38:19 | 000,000,000 | -H-D | M] -- C:\Windows\sysnative\WLANProfiles
  2199. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-CN
  2200. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-HK
  2201. [2013.07.15 16:38:23 | 000,000,000 | ---D | M] -- C:\Windows\sysnative\zh-TW
  2202.  
  2203. [color=#A23BEC]< %Temp%\smtmp\1\*.* >[/color]
  2204.  
  2205. [color=#A23BEC]< %Temp%\smtmp\2\*.* >[/color]
  2206.  
  2207. [color=#A23BEC]< %Temp%\smtmp\3\*.* >[/color]
  2208.  
  2209. [color=#A23BEC]< %Temp%\smtmp\4\*.* >[/color]
  2210.  
  2211. [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
  2212. [2013.08.10 05:58:05 | 013,761,024 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\ieframe.dll
  2213. [2012.11.01 06:47:54 | 001,236,992 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\msxml3.dll
  2214.  
  2215. [color=#A23BEC]< %systemroot%\syswow64\*.dll /lockedfiles >[/color]
  2216.  
  2217. [color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
  2218.  
  2219. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /90 >[/color]
  2220.  
  2221. [color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
  2222.  
  2223. [color=#A23BEC]< %systemroot%\syswow64\drivers\*.sys /90 >[/color]
  2224.  
  2225. [color=#A23BEC]< %systemroot%\syswow64\drivers\*.sys /lockedfiles >[/color]
  2226.  
  2227. [color=#A23BEC]< %SYSTEMDRIVE%\*. /rp /s >[/color]
  2228.  
  2229. [color=#A23BEC]< %systemroot%\assembly\tmp\*.* /S /MD5 >[/color]
  2230.  
  2231. [color=#A23BEC]< %systemroot%\assembly\temp\*.* /S /MD5 >[/color]
  2232.  
  2233. [color=#A23BEC]< %systemroot%\assembly\GAC\*.ini >[/color]
  2234.  
  2235. [color=#A23BEC]< %systemroot%\assembly\GAC_32\*.ini >[/color]
  2236.  
  2237. [color=#A23BEC]< %systemroot%\assembly\GAC_64\*.ini >[/color]
  2238.  
  2239. [color=#A23BEC]< %SystemRoot%\assembly\GAC_MSIL\*.ini >[/color]
  2240.  
  2241. [color=#A23BEC]< wsSystemRoot|l,n,u,@;True;False;True;$,{ /fn >[/color]
  2242.  
  2243. [color=#A23BEC]< %systemdrive%\$Recycle.Bin|@;true;true;true /fp >[/color]
  2244.  
  2245. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  2246. "" = PSFactoryBuffer
  2247. [HKEY_CLASSES_ROOT\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  2248. "" = %systemroot%\system32\wbem\wbemsvc.dll -- [2009.07.14 03:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation)
  2249. "ThreadingModel" = Both
  2250.  
  2251. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  2252.  
  2253. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  2254.  
  2255. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1} /s >[/color]
  2256.  
  2257. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1} /s >[/color]
  2258. "" = MruPidlList
  2259. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
  2260. "" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  2261. "ThreadingModel" = Apartment
  2262.  
  2263. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} /s >[/color]
  2264. "" = Start Menu Pin
  2265. "ImplementsVerbs" = startpin;startunpin
  2266. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}\InProcServer32]
  2267. "" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  2268. "ThreadingModel" = Apartment
  2269.  
  2270. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} /s >[/color]
  2271. "" = PSFactoryBuffer
  2272. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32]
  2273. "" = %systemroot%\system32\wbem\wbemsvc.dll -- [2009.07.14 03:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation)
  2274. "ThreadingModel" = Both
  2275.  
  2276. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  2277. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  2278. [HKEY_CLASSES_ROOT\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  2279. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  2280. "ThreadingModel" = Free
  2281.  
  2282. [color=#A23BEC]< HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  2283. "" = ShellFolder for CD Burning
  2284. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
  2285. "" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  2286. "ThreadingModel" = Apartment
  2287. [HKEY_CLASSES_ROOT\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\MergedFolder]
  2288. "Attributes" = 0x0
  2289. "AttributeMask" = 0xffffffff
  2290. "Location" = @shell32.dll,-12591 -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
  2291. "ConflictOverlayIcon" = %SystemRoot%\system32\imageres.dll,-169 -- [2009.07.14 03:06:03 | 020,268,032 | ---- | M] (Microsoft Corporation)
  2292.  
  2293. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9} /s >[/color]
  2294.  
  2295. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F} /s >[/color]
  2296. "" = Microsoft WBEM _WbemFetchRefresherMgr Proxy Helper
  2297. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InprocServer32]
  2298. "" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
  2299. "ThreadingModel" = Free
  2300.  
  2301. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{118BEDCC-A901-4203-B4F2-ADCB957D1887} /s >[/color]
  2302.  
  2303. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{312BED3C-A901-4203-B4F2-ADCB957D1887} /s >[/color]
  2304.  
  2305. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{F12BE2CC-A901-4203-B4F2-ADCB957D1887} /s >[/color]
  2306.  
  2307. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{312BFDCE-A901-4203-B4F2-ADCB957D1887} /s >[/color]
  2308.  
  2309. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{212B3DCC-A901-4203-B4F2-ADCB957D1887} /s >[/color]
  2310.  
  2311. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{A12BEDCC-A901-4203-B4F2-ADCB957D1887} /s >[/color]
  2312.  
  2313. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{118BEDCA-A901-4203-B4F2-ADCB957D188F} /s >[/color]
  2314.  
  2315. [color=#A23BEC]< HKEY_CLASSES_ROOT\CLSID\{118BEDCA-A901-4203-B4F2-ADCB957D188B} /s >[/color]
  2316.  
  2317. [color=#A23BEC]< HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers /s >[/color]
  2318. [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem]
  2319. "" = {217FC9C0-3AEA-1069-A2DB-08002B30309D}
  2320. [HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing]
  2321. "" = {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
  2322.  
  2323. [color=#A23BEC]< HKEY_CURRENT_USER\Software\Classes\Directory\shellex\CopyHookHandlers /s >[/color]
  2324.  
  2325. [color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers /s >[/color]
  2326. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\FileSystem]
  2327. "" = {217FC9C0-3AEA-1069-A2DB-08002B30309D}
  2328. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\Sharing]
  2329. "" = {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
  2330.  
  2331. [color=#A23BEC]< HKEY_CURRENT_USER\Software\MSOLoad /s >[/color]
  2332.  
  2333. [color=#A23BEC]< type C:\WINDOWS\system.ini >> test.txt /c >[/color]
  2334. ; for 16-bit app support
  2335. [386Enh]
  2336. woafont=dosapp.fon
  2337. EGA80WOA.FON=EGA80WOA.FON
  2338. EGA40WOA.FON=EGA40WOA.FON
  2339. CGA80WOA.FON=CGA80WOA.FON
  2340. CGA40WOA.FON=CGA40WOA.FON
  2341. [drivers]
  2342. wave=mmdrv.dll
  2343. timer=timer.drv
  2344. [mci]
  2345.  
  2346. [color=#A23BEC]< bcdedit /enum all /v >C:\boot.txt /c >[/color]
  2347.  
  2348. [color=#A23BEC]< type c:\diskreport.txt /c >[/color]
  2349. Microsoft DiskPart-Version 6.1.7601
  2350. Copyright (C) 1999-2008 Microsoft Corporation.
  2351. Auf Computer: TANJA-LAPTOP
  2352. Volume ### Bst Bezeichnung DS Typ GrӇe Status Info
  2353. ---------- --- ----------- ----- ---------- ------- --------- --------
  2354. Volume 0 F DVD-ROM 0 B Kein Medi
  2355. Volume 1 NTFS Partition 100 MB Fehlerfre System
  2356. Volume 2 C Boot NTFS Partition 414 GB Fehlerfre Startpar
  2357. Volume 3 E Recover NTFS Partition 50 GB Fehlerfre
  2358. Volume 4 D Data NTFS Partition 465 GB Fehlerfre
  2359.  
  2360. [color=#A23BEC]< MD5 for: AFD.SYS >[/color]
  2361. [2011.12.28 05:59:24 | 000,498,688 | ---- | M] (Microsoft Corporation) MD5=1C7857B62DE5994A75B054A9FD4C3825 -- C:\Windows\SysNative\drivers\afd.sys
  2362. [2011.12.28 05:59:24 | 000,498,688 | ---- | M] (Microsoft Corporation) MD5=1C7857B62DE5994A75B054A9FD4C3825 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17752_none_35e10b89752ee0f5\afd.sys
  2363. [2011.12.28 06:01:36 | 000,498,176 | ---- | M] (Microsoft Corporation) MD5=36A14FD1A23F57046361733B792CA8DB -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21887_none_364f3a028e605345\afd.sys
  2364. [2010.11.21 05:24:08 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=D31DC7A16DEA4A9BAF179F3D6FBDB38C -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991\afd.sys
  2365. [2011.04.25 04:34:03 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=D5B031C308A409A0A576BFF4CF083D30 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_3618198975057170\afd.sys
  2366. [2011.04.25 05:09:35 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=F4AD06143EAC303F55D0E86C40802976 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_3695e61e8e2c13d4\afd.sys
  2367.  
  2368. [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
  2369. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
  2370. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_552ea5111ec825a6\atapi.sys
  2371. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
  2372. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
  2373. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys
  2374. [2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys
  2375.  
  2376. [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
  2377. [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
  2378. [2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
  2379. [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
  2380. [2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
  2381.  
  2382. [color=#A23BEC]< MD5 for: CSC.SYS >[/color]
  2383. [2010.11.21 05:24:41 | 000,514,560 | ---- | M] (Microsoft Corporation) MD5=54DA3DFD29ED9F1619B6F53F3CE55E49 -- C:\Windows\winsxs\amd64_microsoft-windows-offlinefiles-core_31bf3856ad364e35_6.1.7601.17514_none_fc6e4e567286d457\csc.sys
  2384.  
  2385. [color=#A23BEC]< MD5 for: DFSC.SYS >[/color]
  2386. [2010.11.21 05:24:32 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9BB2EF44EAA163B29C4A4587887A0FE4 -- C:\Windows\SysNative\drivers\dfsc.sys
  2387. [2010.11.21 05:24:32 | 000,102,400 | ---- | M] (Microsoft Corporation) MD5=9BB2EF44EAA163B29C4A4587887A0FE4 -- C:\Windows\winsxs\amd64_microsoft-windows-dfsclient_31bf3856ad364e35_6.1.7601.17514_none_e5c0334cfcbb6f1f\dfsc.sys
  2388.  
  2389. [color=#A23BEC]< MD5 for: DISK.SYS >[/color]
  2390. [2009.07.14 03:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\drivers\disk.sys
  2391. [2009.07.14 03:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\SysNative\DriverStore\FileRepository\disk.inf_amd64_neutral_10ce25bbc5a9cc43\disk.sys
  2392. [2009.07.14 03:47:48 | 000,073,280 | ---- | M] (Microsoft Corporation) MD5=9819EEE8B5EA3784EC4AF3B137A5244C -- C:\Windows\winsxs\amd64_disk.inf_31bf3856ad364e35_6.1.7600.16385_none_55bb738b8ddd8a01\disk.sys
  2393.  
  2394. [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
  2395. [2011.02.26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
  2396. [2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
  2397. [2011.02.25 08:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
  2398. [2011.02.26 08:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
  2399. [2010.11.21 05:24:25 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
  2400. [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
  2401. [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
  2402. [2010.11.21 05:24:11 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
  2403.  
  2404. [color=#A23BEC]< MD5 for: FASTFAT.SYS >[/color]
  2405. [2009.07.14 01:23:29 | 000,204,800 | ---- | M] (Microsoft Corporation) MD5=0ADC83218B66A6DB380C330836F3E36D -- C:\Windows\SysNative\drivers\fastfat.sys
  2406. [2009.07.14 01:23:29 | 000,204,800 | ---- | M] (Microsoft Corporation) MD5=0ADC83218B66A6DB380C330836F3E36D -- C:\Windows\winsxs\amd64_microsoft-windows-fat_31bf3856ad364e35_6.1.7600.16385_none_0aa81d2771152f86\fastfat.sys
  2407.  
  2408. [color=#A23BEC]< MD5 for: I8042PRT.SYS >[/color]
  2409. [2009.07.14 01:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\drivers\i8042prt.sys
  2410. [2009.07.14 01:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\i8042prt.sys
  2411. [2009.07.14 01:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\i8042prt.sys
  2412. [2009.07.14 01:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_f5747347ef9876bf\i8042prt.sys
  2413. [2009.07.14 01:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\i8042prt.sys
  2414.  
  2415. [color=#A23BEC]< MD5 for: IASTOR.SYS >[/color]
  2416. [2012.02.02 01:16:40 | 000,568,600 | ---- | M] (Intel Corporation) MD5=D1753C06EE17E29352B065EACF3F10D0 -- C:\Windows\SysNative\drivers\iaStor.sys
  2417. [2012.02.02 01:16:40 | 000,568,600 | ---- | M] (Intel Corporation) MD5=D1753C06EE17E29352B065EACF3F10D0 -- C:\Windows\SysNative\DriverStore\FileRepository\iaahci.inf_amd64_neutral_4b6764daf5ce9174\iaStor.sys
  2418.  
  2419. [color=#A23BEC]< MD5 for: KBDCLASS.SYS >[/color]
  2420. [2009.07.14 03:48:04 | 000,050,768 | ---- | M] (Microsoft Corporation) MD5=BC02336F1CBA7DCC7D1213BB588A68A5 -- C:\Windows\SysNative\drivers\kbdclass.sys
  2421. [2009.07.14 03:48:04 | 000,050,768 | ---- | M] (Microsoft Corporation) MD5=BC02336F1CBA7DCC7D1213BB588A68A5 -- C:\Windows\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\kbdclass.sys
  2422. [2009.07.14 03:48:04 | 000,050,768 | ---- | M] (Microsoft Corporation) MD5=BC02336F1CBA7DCC7D1213BB588A68A5 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_f5747347ef9876bf\kbdclass.sys
  2423.  
  2424. [color=#A23BEC]< MD5 for: KBDHID.SYS >[/color]
  2425. [2010.11.21 05:23:47 | 000,033,280 | ---- | M] (Microsoft Corporation) MD5=0705EFF5B42A9DB58548EEC3B26BB484 -- C:\Windows\SysNative\drivers\kbdhid.sys
  2426. [2010.11.21 05:23:47 | 000,033,280 | ---- | M] (Microsoft Corporation) MD5=0705EFF5B42A9DB58548EEC3B26BB484 -- C:\Windows\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\kbdhid.sys
  2427. [2010.11.21 05:23:47 | 000,033,280 | ---- | M] (Microsoft Corporation) MD5=0705EFF5B42A9DB58548EEC3B26BB484 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_f5747347ef9876bf\kbdhid.sys
  2428.  
  2429. [color=#A23BEC]< MD5 for: LSASS.EXE >[/color]
  2430. [2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
  2431. [2011.11.17 08:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
  2432. [2012.06.04 09:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
  2433. [2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
  2434. [2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
  2435. [2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
  2436.  
  2437. [color=#A23BEC]< MD5 for: MOUCLASS.SYS >[/color]
  2438. [2009.07.14 03:48:27 | 000,049,216 | ---- | M] (Microsoft Corporation) MD5=7D27EA49F3C1F687D357E77A470AEA99 -- C:\Windows\SysNative\drivers\mouclass.sys
  2439. [2009.07.14 03:48:27 | 000,049,216 | ---- | M] (Microsoft Corporation) MD5=7D27EA49F3C1F687D357E77A470AEA99 -- C:\Windows\SysNative\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\mouclass.sys
  2440. [2009.07.14 03:48:27 | 000,049,216 | ---- | M] (Microsoft Corporation) MD5=7D27EA49F3C1F687D357E77A470AEA99 -- C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\mouclass.sys
  2441.  
  2442. [color=#A23BEC]< MD5 for: MOUHID.SYS >[/color]
  2443. [2009.07.14 02:00:20 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D3BF052C40B0C4166D9FD86A4288C1E6 -- C:\Windows\SysNative\drivers\mouhid.sys
  2444. [2009.07.14 02:00:20 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D3BF052C40B0C4166D9FD86A4288C1E6 -- C:\Windows\SysNative\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\mouhid.sys
  2445. [2009.07.14 02:00:20 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D3BF052C40B0C4166D9FD86A4288C1E6 -- C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\mouhid.sys
  2446.  
  2447. [color=#A23BEC]< MD5 for: NETBT.SYS >[/color]
  2448. [2010.11.21 05:23:51 | 000,261,632 | ---- | M] (Microsoft Corporation) MD5=09594D1089C523423B32A4229263F068 -- C:\Windows\SysNative\drivers\netbt.sys
  2449. [2010.11.21 05:23:51 | 000,261,632 | ---- | M] (Microsoft Corporation) MD5=09594D1089C523423B32A4229263F068 -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_be8acdd10de3b1a6\netbt.sys
  2450.  
  2451. [color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
  2452. [2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
  2453. [2010.11.21 05:24:01 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
  2454. [2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
  2455. [2010.11.21 05:24:09 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
  2456.  
  2457. [color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
  2458. [2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
  2459. [2010.11.21 05:23:54 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
  2460. [2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
  2461. [2010.11.21 05:24:32 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
  2462.  
  2463. [color=#A23BEC]< MD5 for: SERIAL.SYS >[/color]
  2464. [2009.07.14 02:00:40 | 000,094,208 | ---- | M] (Microsoft Corporation) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\SysNative\drivers\serial.sys
  2465. [2009.07.14 02:00:40 | 000,094,208 | ---- | M] (Microsoft Corporation) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\SysNative\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
  2466. [2009.07.14 02:00:40 | 000,094,208 | ---- | M] (Microsoft Corporation) MD5=C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 -- C:\Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
  2467.  
  2468. [color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
  2469. [2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\SysNative\services.exe
  2470. [2009.07.14 03:39:37 | 000,328,704 | ---- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB -- C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
  2471.  
  2472. [color=#A23BEC]< MD5 for: SPLDR.SYS >[/color]
  2473. [2009.07.14 03:45:55 | 000,019,008 | ---- | M] (Microsoft Corporation) MD5=B9E31E5CACDFE584F34F730A677803F9 -- C:\Windows\SysNative\drivers\spldr.sys
  2474. [2009.07.14 03:45:55 | 000,019,008 | ---- | M] (Microsoft Corporation) MD5=B9E31E5CACDFE584F34F730A677803F9 -- C:\Windows\winsxs\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59\spldr.sys
  2475.  
  2476. [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
  2477. [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
  2478. [2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
  2479. [2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
  2480. [2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
  2481. [2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
  2482.  
  2483. [color=#A23BEC]< MD5 for: TCPIP.SYS >[/color]
  2484. [2012.10.03 19:56:54 | 001,914,248 | ---- | M] (Microsoft Corporation) MD5=37608401DFDB388CAF66917F6B2D6FB0 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17964_none_110e0fbd7d2e4b88\tcpip.sys
  2485. [2011.09.29 19:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
  2486. [2013.05.08 08:14:42 | 001,900,392 | ---- | M] (Microsoft Corporation) MD5=3E94650745D4DAB67E161F5F32CEA597 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22319_none_11d29984961f0be0\tcpip.sys
  2487. [2010.11.21 05:24:08 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
  2488. [2011.04.25 07:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
  2489. [2013.05.08 08:39:01 | 001,910,632 | ---- | M] (Microsoft Corporation) MD5=9849EA3843A2ADBDD1497E97A85D8CAE -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18148_none_11278ac57d1aa96b\tcpip.sys
  2490. [2011.06.21 08:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
  2491. [2013.07.06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
  2492. [2011.04.25 08:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
  2493. [2012.10.03 19:44:29 | 001,902,472 | ---- | M] (Microsoft Corporation) MD5=D5707FC2300AA5B04B7BFE86D40C0133 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22124_none_11c2c45a962baed0\tcpip.sys
  2494. [2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\SysNative\drivers\tcpip.sys
  2495. [2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys
  2496. [2011.06.21 08:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
  2497. [2011.09.29 18:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys
  2498.  
  2499. [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
  2500. [2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
  2501. [2010.11.21 05:23:55 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
  2502. [2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
  2503. [2010.11.21 05:24:28 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
  2504.  
  2505. [color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
  2506. [2010.11.21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\drivers\volsnap.sys
  2507. [2010.11.21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_df8bea40ac96ca21\volsnap.sys
  2508. [2010.11.21 05:23:47 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_73dcbcf012b4850e\volsnap.sys
  2509.  
  2510. [color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
  2511. [2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
  2512. [2009.07.14 03:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
  2513. [2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
  2514. [2009.07.14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
  2515.  
  2516. [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
  2517. [2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
  2518. [2010.11.21 05:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
  2519. [2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
  2520.  
  2521. [color=#E56717]========== Files - Unicode (All) ==========[/color]
  2522. [2013.09.23 19:21:46 | 098,685,961 | ---- | M] ()(C:\Windows\SysWow64\???f) -- C:\Windows\SysWow64\哴⢪腤f
  2523. [2013.09.23 19:21:46 | 000,000,000 | ---- | C] ()(C:\Windows\SysWow64\???f) -- C:\Windows\SysWow64\哴⢪腤f
  2524.  
  2525. [color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color]
  2526. [C:\Documents and Settings] -> C:\Users -> Junction
  2527. [C:\ProgramData\Application Data] -> C:\ProgramData -> Junction
  2528. [C:\ProgramData\Desktop] -> C:\Users\Public\Desktop -> Junction
  2529. [C:\ProgramData\Documents] -> C:\Users\Public\Documents -> Junction
  2530. [C:\ProgramData\Favorites] -> C:\Users\Public\Favorites -> Junction
  2531. [C:\ProgramData\Start Menu] -> C:\ProgramData\Microsoft\Windows\Start Menu -> Junction
  2532. [C:\ProgramData\Templates] -> C:\ProgramData\Microsoft\Windows\Templates -> Junction
  2533. [C:\Users\All Users\Application Data] -> C:\ProgramData -> Junction
  2534. [C:\Users\All Users\Desktop] -> C:\Users\Public\Desktop -> Junction
  2535. [C:\Users\All Users\Documents] -> C:\Users\Public\Documents -> Junction
  2536. [C:\Users\All Users\Favorites] -> C:\Users\Public\Favorites -> Junction
  2537. [C:\Users\All Users\Start Menu] -> C:\ProgramData\Microsoft\Windows\Start Menu -> Junction
  2538. [C:\Users\All Users\Templates] -> C:\ProgramData\Microsoft\Windows\Templates -> Junction
  2539. [C:\Users\All Users] -> -> Unknown point type
  2540. [C:\Users\Default User] -> C:\Users\Default -> Junction
  2541. [C:\Users\Default\AppData\Local\Application Data] -> C:\Users\Default\AppData\Local -> Junction
  2542. [C:\Users\Default\AppData\Local\History] -> C:\Users\Default\AppData\Local\Microsoft\Windows\History -> Junction
  2543. [C:\Users\Default\AppData\Local\Temporary Internet Files] -> C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files -> Junction
  2544. [C:\Users\Default\Application Data] -> C:\Users\Default\AppData\Roaming -> Junction
  2545. [C:\Users\Default\Cookies] -> C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies -> Junction
  2546. [C:\Users\Default\Documents\My Music] -> C:\Users\Default\Music -> Junction
  2547. [C:\Users\Default\Documents\My Pictures] -> C:\Users\Default\Pictures -> Junction
  2548. [C:\Users\Default\Documents\My Videos] -> C:\Users\Default\Videos -> Junction
  2549. [C:\Users\Default\Local Settings] -> C:\Users\Default\AppData\Local -> Junction
  2550. [C:\Users\Default\My Documents] -> C:\Users\Default\Documents -> Junction
  2551. [C:\Users\Default\NetHood] -> C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts -> Junction
  2552. [C:\Users\Default\PrintHood] -> C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -> Junction
  2553. [C:\Users\Default\Recent] -> C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent -> Junction
  2554. [C:\Users\Default\SendTo] -> C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo -> Junction
  2555. [C:\Users\Default\Start Menu] -> C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction
  2556. [C:\Users\Default\Templates] -> C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates -> Junction
  2557. [C:\Users\Public\Documents\My Music] -> C:\Users\Public\Music -> Junction
  2558. [C:\Users\Public\Documents\My Pictures] -> C:\Users\Public\Pictures -> Junction
  2559. [C:\Users\Public\Documents\My Videos] -> C:\Users\Public\Videos -> Junction
  2560. [C:\Users\Tanja\Anwendungsdaten] -> C:\Users\Tanja\AppData\Roaming -> Junction
  2561. [C:\Users\Tanja\AppData\Local\Anwendungsdaten] -> C:\Users\Tanja\AppData\Local -> Junction
  2562. [C:\Users\Tanja\AppData\Local\Temporary Internet Files] -> C:\Users\Tanja\AppData\Local\Microsoft\Windows\Temporary Internet Files -> Junction
  2563. [C:\Users\Tanja\AppData\Local\Verlauf] -> C:\Users\Tanja\AppData\Local\Microsoft\Windows\History -> Junction
  2564. [C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programme] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs -> Junction
  2565. [C:\Users\Tanja\Cookies] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Cookies -> Junction
  2566. [C:\Users\Tanja\Documents\Eigene Bilder] -> C:\Users\Tanja\Pictures -> Junction
  2567. [C:\Users\Tanja\Documents\Eigene Musik] -> C:\Users\Tanja\Music -> Junction
  2568. [C:\Users\Tanja\Documents\Eigene Videos] -> C:\Users\Tanja\Videos -> Junction
  2569. [C:\Users\Tanja\Druckumgebung] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -> Junction
  2570. [C:\Users\Tanja\Eigene Dateien] -> C:\Users\Tanja\Documents -> Junction
  2571. [C:\Users\Tanja\Lokale Einstellungen] -> C:\Users\Tanja\AppData\Local -> Junction
  2572. [C:\Users\Tanja\Netzwerkumgebung] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Network Shortcuts -> Junction
  2573. [C:\Users\Tanja\Recent] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Recent -> Junction
  2574. [C:\Users\Tanja\SendTo] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\SendTo -> Junction
  2575. [C:\Users\Tanja\Startmenü] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction
  2576. [C:\Users\Tanja\Vorlagen] -> C:\Users\Tanja\AppData\Roaming\Microsoft\Windows\Templates -> Junction
  2577. [C:\Users\UpdatusUser\AppData\Local\Application Data] -> C:\Users\UpdatusUser\AppData\Local -> Junction
  2578. [C:\Users\UpdatusUser\AppData\Local\History] -> C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\History -> Junction
  2579. [C:\Users\UpdatusUser\AppData\Local\Temporary Internet Files] -> C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files -> Junction
  2580. [C:\Users\UpdatusUser\Application Data] -> C:\Users\UpdatusUser\AppData\Roaming -> Junction
  2581. [C:\Users\UpdatusUser\Cookies] -> C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Cookies -> Junction
  2582. [C:\Users\UpdatusUser\Documents\My Music] -> C:\Users\UpdatusUser\Music -> Junction
  2583. [C:\Users\UpdatusUser\Documents\My Pictures] -> C:\Users\UpdatusUser\Pictures -> Junction
  2584. [C:\Users\UpdatusUser\Documents\My Videos] -> C:\Users\UpdatusUser\Videos -> Junction
  2585. [C:\Users\UpdatusUser\Local Settings] -> C:\Users\UpdatusUser\AppData\Local -> Junction
  2586. [C:\Users\UpdatusUser\My Documents] -> C:\Users\UpdatusUser\Documents -> Junction
  2587. [C:\Users\UpdatusUser\NetHood] -> C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts -> Junction
  2588. [C:\Users\UpdatusUser\PrintHood] -> C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -> Junction
  2589. [C:\Users\UpdatusUser\Recent] -> C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Recent -> Junction
  2590. [C:\Users\UpdatusUser\SendTo] -> C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\SendTo -> Junction
  2591. [C:\Users\UpdatusUser\Start Menu] -> C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction
  2592. [C:\Users\UpdatusUser\Templates] -> C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Templates -> Junction
  2593.  
  2594. < End of report >
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!