|
Plagegeister aller Art und deren Bekämpfung: Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitereWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.02.2015, 17:35 | #1 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Hallo Leute Jetzt lese ich hier schon eine ganze Zeit mit und bin jetzt selber von einem Problem betroffen. Avira hat mir heute folgende Meldungen als Virus/Trojaner/Malware angezeigt: TR/ATR/AtRAPS.GEN TR/Dropper.Gen2 TR/Rogue.11279961 TR/Rogue.10094335 PUA/SoftPulse.aone Ich habe auch bereits danach einen Suchlauf mit Malwarebytes gemacht, aber das Programm hat nichts gefunden. Wer kann mir helfen, bzw. bei der Löschung/Entfernung behilflich sein? Über jede Hilfe wäre ich sehr dankbar! |
13.02.2015, 17:39 | #2 |
/// the machine /// TB-Ausbilder | Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
13.02.2015, 17:56 | #3 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Danke für die schnelle Hilfe!
__________________Hier FRST.TXT Teil 1: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2015 Ran by Rubinio (administrator) on RUBINIO-PC on 13-02-2015 17:46:17 Running from C:\Users\Rubinio\Downloads Loaded Profiles: Rubinio (Available profiles: Rubinio) Platform: Microsoft Windows 7 Enterprise Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Google) C:\Program Files\Google\Drive\googledrivesync.exe (Dropbox, Inc.) C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\Dropbox.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe (Google) C:\Program Files\Google\Drive\googledrivesync.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE (Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files\StarMoney 9.0\app\StarMoney.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\LogiAppBroker.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe (AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Apple Inc.) C:\Program Files\Safari\Safari.exe (Apple Inc.) C:\Program Files\Safari\Apple Application Support\WebKit2WebProcess.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [] => [X] HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2303256 2014-05-19] (Logitech, Inc.) HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X] HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-02-12] (Microsoft Corporation) HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-02-12] (Microsoft Corporation) HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [23308256 2015-01-15] (Google) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-02-12] (Microsoft Corporation) Startup: C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) BootExecute: autocheck autochk /p \??\C:autocheck autochk * sdnclean.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-830496087-3815240866-1769002787-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ SearchScopes: HKU\S-1-5-21-830496087-3815240866-1769002787-1001 -> DefaultScope {CC7CE7C7-4C62-413D-9993-135384EFEDCE} URL = https://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-830496087-3815240866-1769002787-1001 -> {CC7CE7C7-4C62-413D-9993-135384EFEDCE} URL = https://www.google.com/search?q={searchTerms} BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF user.js: detected! => C:\Users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default\user.js FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Extension: Avira Browser Safety - C:\Users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default\Extensions\abs@avira.com [2015-02-12] FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-12] FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-02-12] Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-12] CHR Extension: (Google Docs) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-12] CHR Extension: (Google Drive) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-12] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-12] CHR Extension: (YouTube) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-12] CHR Extension: (Google-Suche) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-12] CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-02-12] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-02-12] CHR Extension: (Google Tabellen) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-12] CHR Extension: (Avira Browserschutz) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-02-13] CHR Extension: (Google Wallet) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-12] CHR Extension: (Google Mail) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-12] CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 StarMoney 9.0 OnlineUpdate; C:\Program Files\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH) R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2161976 2015-02-12] (AVG Technologies) S2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [36664 2015-02-12] (AVG Technologies) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2015-02-04] (Avira Operations GmbH & Co. KG) R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [42264 2014-03-19] (Logitech, Inc.) R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [10136 2014-03-19] (Logitech, Inc.) R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28312 2014-03-19] (Logitech, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-02-13] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2015-02-04] (Avira GmbH) R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2015-01-13] (TuneUp Software) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-11-02 23:57 - 2015-11-02 23:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2015-11-02 23:56 - 2015-11-02 23:56 - 00000000 ____D () C:\Windows\CSC 2015-11-02 23:55 - 2015-11-02 23:55 - 00008192 __RSH () C:\BOOTSECT.BAK 2015-11-02 23:55 - 2010-11-20 13:40 - 00383786 __RSH () C:\bootmgr 2015-02-13 17:46 - 2015-02-13 17:46 - 00018759 _____ () C:\Users\Rubinio\Downloads\FRST.txt 2015-02-13 17:46 - 2015-02-13 17:46 - 00000000 ____D () C:\FRST 2015-02-13 17:45 - 2015-02-13 17:45 - 01125376 _____ (Farbar) C:\Users\Rubinio\Downloads\FRST.exe 2015-02-13 17:15 - 2015-02-13 17:15 - 00009353 _____ () C:\Users\Rubinio\Downloads\hijackthis.log 2015-02-13 16:44 - 2015-02-13 16:47 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 16:43 - 2015-02-13 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 16:43 - 2015-02-13 16:43 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 16:43 - 2015-02-13 16:43 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2015-02-13 16:43 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 16:43 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 16:43 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 15:20 - 2015-02-13 16:19 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2015-02-13 15:20 - 2015-02-13 15:30 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2 2015-02-13 15:20 - 2015-02-13 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2015-02-13 15:20 - 2015-02-13 15:20 - 00002131 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2015-02-13 15:20 - 2015-02-13 15:20 - 00002119 _____ () C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2015-02-13 15:20 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe 2015-02-13 15:01 - 2015-02-12 17:39 - 00036664 _____ (AVG Technologies) C:\Windows\system32\uxtuneup.dll 2015-02-13 14:56 - 2015-02-13 14:56 - 00002159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk 2015-02-13 14:56 - 2015-02-13 14:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015 2015-02-13 14:56 - 2015-02-12 17:39 - 00037176 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe 2015-02-13 14:56 - 2015-02-12 17:39 - 00025912 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll 2015-02-13 14:55 - 2015-02-13 14:55 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\AVG 2015-02-13 14:55 - 2015-02-13 14:55 - 00000000 ____D () C:\Program Files\AVG 2015-02-13 14:52 - 2015-02-13 17:43 - 524288000 _____ () C:\Users\Rubinio\Downloads\00979.part1.rar 2015-02-13 14:46 - 2015-02-13 14:52 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Usenet.nl 2015-02-13 14:46 - 2015-02-13 14:46 - 00001835 _____ () C:\Users\Rubinio\Desktop\Usenet.nl.lnk 2015-02-13 14:46 - 2015-02-13 14:46 - 00000000 ____D () C:\Users\Rubinio\Documents\Usenet.nl 2015-02-13 14:46 - 2015-02-13 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Usenet.nl 2015-02-13 14:46 - 2015-02-13 14:46 - 00000000 ____D () C:\Program Files\Usenet.nl 2015-02-13 14:45 - 2015-02-13 14:46 - 07457256 _____ ( ) C:\Users\Rubinio\Downloads\UsenetNLSetup_1.30.exe 2015-02-13 14:30 - 2015-02-13 14:45 - 00000000 ____D () C:\Users\Rubinio\Documents\UseNeXT 2015-02-13 14:30 - 2015-02-13 14:45 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\UseNeXT 2015-02-13 14:30 - 2015-02-13 14:30 - 00001803 _____ () C:\Users\Rubinio\Desktop\UseNeXT by Tangysoft.lnk 2015-02-13 14:30 - 2015-02-13 14:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT 2015-02-13 14:30 - 2015-02-13 14:30 - 00000000 ____D () C:\Program Files\UseNeXT 2015-02-13 14:24 - 2015-02-13 14:24 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Avg 2015-02-13 11:23 - 2015-02-13 11:24 - 00388608 _____ (Trend Micro Inc.) C:\Users\Rubinio\Downloads\HiJackThis204.exe 2015-02-13 11:11 - 2015-02-13 11:12 - 05343592 _____ (Tangysoft Ltd. ) C:\Users\Rubinio\Downloads\UseNeXT_freetrial_436770w.exe 2015-02-13 11:04 - 2015-02-13 11:08 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Rubinio\Downloads\mbam-setup-2.0.4.1028.exe 2015-02-13 11:03 - 2015-02-13 11:08 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Rubinio\Downloads\spybot-2.4.exe 2015-02-13 10:58 - 2015-02-13 15:03 - 00000000 ____D () C:\ProgramData\AVG 2015-02-12 19:36 - 2015-02-13 14:21 - 00000000 ____D () C:\Program Files\KMSpico 2015-02-12 19:25 - 2015-02-12 19:26 - 00454147 _____ () C:\Users\Rubinio\Downloads\Setup_ClearProg_1.6.0_Final_neu.exe 2015-02-12 19:24 - 2015-02-12 19:32 - 49950520 _____ (AVG Technologies) C:\Users\Rubinio\Downloads\avg_tuht_stf_de_2015_373_15cmp16.exe 2015-02-12 19:09 - 2015-02-12 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-02-12 19:05 - 2015-02-12 19:05 - 00880208 _____ (Google Inc.) C:\Users\Rubinio\Downloads\googledrivesync.exe 2015-02-12 19:03 - 2015-02-12 19:03 - 00000000 ____D () C:\Users\Public\Documents\Logishrd 2015-02-12 19:02 - 2015-02-12 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2015-02-12 19:02 - 2015-02-12 19:03 - 00010862 _____ () C:\Windows\LDPINST.LOG 2015-02-12 19:02 - 2015-02-12 19:03 - 00001276 _____ () C:\Windows\LkmdfCoInst.log 2015-02-12 19:02 - 2015-02-12 19:03 - 00000000 ____D () C:\ProgramData\Logishrd 2015-02-12 19:02 - 2015-02-12 19:02 - 00016400 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2015-02-12 19:01 - 2015-02-12 19:03 - 00000000 ____D () C:\Program Files\Common Files\Logishrd 2015-02-12 19:01 - 2015-02-12 19:01 - 00000000 ____D () C:\Program Files\Logitech 2015-02-12 18:54 - 2015-02-12 19:04 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Logishrd 2015-02-12 18:54 - 2015-02-12 19:03 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Logitech 2015-02-12 18:52 - 2015-02-12 18:53 - 04147600 _____ ($Co_Name Inc.) C:\Users\Rubinio\Downloads\unifying250.exe 2015-02-12 18:52 - 2015-02-12 18:53 - 04109832 _____ (Logitech Inc.) C:\Users\Rubinio\Downloads\scroll_app_smart_4.00.33.exe 2015-02-12 18:52 - 2015-02-12 18:53 - 03677488 _____ (Logitech Inc.) C:\Users\Rubinio\Downloads\SetPoint6.65.62_smart.exe 2015-02-12 18:52 - 2015-02-12 18:52 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-02-12 18:49 - 2015-02-12 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2015-02-12 18:45 - 2015-02-13 10:54 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Dropbox 2015-02-12 18:45 - 2015-02-12 18:45 - 00355464 _____ (Dropbox, Inc.) C:\Users\Rubinio\Downloads\DropboxInstaller.exe 2015-02-12 18:44 - 2015-02-12 18:44 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Avira 2015-02-12 18:43 - 2015-02-12 18:39 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-12 18:39 - 2015-02-12 18:46 - 71647536 _____ (Apple Inc.) C:\Users\Rubinio\Downloads\icloudsetup.exe 2015-02-12 18:37 - 2015-02-04 17:51 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-12 18:37 - 2015-02-04 17:51 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-12 18:37 - 2015-02-04 17:51 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-12 18:37 - 2015-02-04 17:51 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2015-02-12 18:26 - 2015-02-12 18:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-12 18:26 - 2015-02-12 18:37 - 00000000 ____D () C:\ProgramData\Avira 2015-02-12 18:26 - 2015-02-12 18:37 - 00000000 ____D () C:\Program Files\Avira 2015-02-12 18:25 - 2015-02-12 18:25 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-12 18:24 - 2015-02-13 16:49 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Apple Computer 2015-02-12 18:24 - 2015-02-13 16:49 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apple Computer 2015-02-12 18:24 - 2015-02-12 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-02-12 18:23 - 2012-10-03 16:14 - 00026840 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2015-02-12 18:22 - 2015-02-12 18:23 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB 2015-02-12 18:22 - 2015-02-12 18:23 - 00000000 ____D () C:\Program Files\iTunes 2015-02-12 18:22 - 2015-02-12 18:22 - 00000000 ____D () C:\Program Files\iPod 2015-02-12 18:21 - 2015-02-12 18:48 - 00000000 ____D () C:\Program Files\Common Files\Apple 2015-02-12 18:21 - 2015-02-12 18:21 - 00000000 ____D () C:\Program Files\Bonjour 2015-02-12 18:11 - 2015-02-12 18:19 - 108785968 _____ (Apple Inc.) C:\Users\Rubinio\Downloads\itunessetup.exe 2015-02-12 18:10 - 2015-02-12 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-02-12 18:10 - 2015-02-12 18:10 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2015-02-12 18:09 - 2015-02-12 18:09 - 00000000 ____D () C:\Windows\PCHEALTH 2015-02-12 18:09 - 2015-02-12 18:09 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2015-02-12 18:06 - 2015-02-12 18:06 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2015-02-12 18:04 - 2015-02-12 18:05 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\Rubinio\Downloads\avira_de_av_5846847356__ws.exe 2015-02-12 18:03 - 2015-02-12 18:03 - 00000000 __RHD () C:\MSOCache 2015-02-12 17:07 - 2015-02-12 17:07 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Macromedia 2015-02-12 17:07 - 2015-02-12 17:07 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat 2015-02-12 16:53 - 2015-02-12 16:53 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-02-12 16:01 - 2015-02-12 18:37 - 00093696 ___SH () C:\Users\Rubinio\Thumbs.db 2015-02-12 15:51 - 2015-02-12 17:10 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Adobe 2015-02-12 15:51 - 2015-02-12 15:51 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe 2015-02-12 15:50 - 2015-02-12 15:50 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk 2015-02-12 15:50 - 2015-02-12 15:50 - 00002180 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk 2015-02-12 15:50 - 2015-02-12 15:50 - 00002019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk 2015-02-12 15:49 - 2015-02-12 15:49 - 00000000 ____D () C:\Users\Rubinio\Tracing 2015-02-12 15:49 - 2008-07-08 23:26 - 03633413 _____ () C:\Users\Rubinio\Opa.3gp 2015-02-12 15:41 - 2015-02-12 17:09 - 00000000 ____D () C:\ProgramData\Adobe 2015-02-12 15:41 - 2015-02-12 16:53 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2015-02-12 15:41 - 2015-02-12 16:53 - 00000000 ____D () C:\Program Files\Adobe 2015-02-12 15:38 - 2015-02-13 10:53 - 00000000 ___RD () C:\Users\Rubinio\Google Drive 2015-02-12 15:38 - 2015-02-12 18:00 - 00000000 ____D () C:\Users\Rubinio\Starmoney 2015-02-12 15:38 - 2015-02-12 15:38 - 00000000 ___RD () C:\Users\Rubinio\iCloudDrive 2015-02-12 15:38 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\Postbank 2015-02-12 15:38 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\Meine Musik 2015-02-12 15:38 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\M&S 2015-02-12 15:38 - 2012-02-27 15:31 - 00000000 ____D () C:\Users\Rubinio\restore 2015-02-12 15:34 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\Ebay 2015-02-12 15:33 - 2015-02-13 10:54 - 00000000 ___RD () C:\Users\Rubinio\Dropbox 2015-02-12 15:30 - 2015-02-12 15:33 - 00000000 ____D () C:\Users\Rubinio\Desktop\Stefanie 2015-02-12 15:29 - 2015-02-12 15:29 - 00000000 ____D () C:\Users\Rubinio\Desktop\Neuer Ordner 2015-02-12 15:29 - 2015-02-12 15:29 - 00000000 ____D () C:\Users\Rubinio\Desktop\Mediapanel 2015-02-12 15:28 - 2015-02-12 15:29 - 00000000 ____D () C:\Users\Rubinio\Desktop\kalender2012 2015-02-12 15:28 - 2015-02-12 15:28 - 00000000 ____D () C:\Users\Rubinio\ChromeExtensions 2015-02-12 15:28 - 2015-02-12 15:28 - 00000000 ____D () C:\Users\Rubinio\Audible 2015-02-12 15:28 - 2015-02-12 15:28 - 00000000 ____D () C:\Users\Rubinio\AA 2015-02-12 15:25 - 2015-02-12 15:25 - 00000000 ____D () C:\ProgramData\StarMoney 9.0 2015-02-12 15:25 - 2015-02-12 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 9.0 2015-02-12 15:24 - 2015-02-12 15:24 - 00000000 ____D () C:\Program Files\Common Files\StarFinanz 2015-02-12 15:23 - 2015-02-12 16:12 - 00000000 ____D () C:\Program Files\StarMoney 9.0 2015-02-12 15:23 - 2015-02-12 15:23 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-02-12 15:13 - 2015-02-12 18:22 - 00000000 ____D () C:\ProgramData\Apple Computer 2015-02-12 15:13 - 2015-02-12 18:21 - 00000000 ____D () C:\ProgramData\Apple 2015-02-12 15:13 - 2015-02-12 15:13 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-02-12 15:13 - 2015-02-12 15:13 - 00002491 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk 2015-02-12 15:13 - 2015-02-12 15:13 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apple 2015-02-12 15:13 - 2015-02-12 15:13 - 00000000 ____D () C:\Program Files\Safari 2015-02-12 15:13 - 2015-02-12 15:13 - 00000000 ____D () C:\Program Files\Apple Software Update 2015-02-12 15:12 - 2015-02-12 15:12 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Mozilla 2015-02-12 15:12 - 2015-02-12 15:12 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Mozilla 2015-02-12 15:11 - 2015-02-12 15:26 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2015-02-12 15:11 - 2015-02-12 15:11 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-12 15:11 - 2015-02-12 15:11 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-12 15:11 - 2015-02-12 15:11 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2015-02-12 13:51 - 2015-02-12 18:12 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-02-12 13:51 - 2015-02-12 18:09 - 00000000 ____D () C:\Program Files\Microsoft Office 2015-02-12 13:51 - 2015-02-12 13:51 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Microsoft Help 2015-02-12 13:50 - 2015-02-12 14:07 - 188090912 _____ () C:\Users\Rubinio\Downloads\smoney.exe 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\WinRAR 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\Program Files\WinRAR 2015-02-12 10:50 - 2015-02-12 10:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-02-12 10:47 - 2015-02-13 16:52 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-02-12 10:47 - 2015-02-13 10:52 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-02-12 10:47 - 2015-02-12 19:09 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Google 2015-02-12 10:47 - 2015-02-12 19:09 - 00000000 ____D () C:\Program Files\Google 2015-02-12 10:46 - 2015-02-12 10:47 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Deployment 2015-02-12 10:46 - 2015-02-12 10:46 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apps\2.0 2015-02-12 10:40 - 2014-12-11 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-12 10:33 - 2015-02-12 10:36 - 00000000 ____D () C:\Windows\AutoKMS 2015-02-12 10:32 - 2015-02-12 18:26 - 00112304 _____ () C:\Users\Rubinio\AppData\Local\GDIPFONTCACHEV1.DAT 2015-02-12 10:32 - 2015-02-12 10:32 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2015-02-12 10:31 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-12 10:31 - 2014-08-29 02:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-12 10:21 - 2014-05-08 10:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2015-02-12 10:11 - 2015-02-12 10:11 - 00000000 __SHD () C:\Users\Rubinio\AppData\Local\EmieUserList 2015-02-12 10:11 - 2015-02-12 10:11 - 00000000 __SHD () C:\Users\Rubinio\AppData\Local\EmieSiteList 2015-02-12 10:11 - 2015-02-12 10:11 - 00000000 __SHD () C:\Users\Rubinio\AppData\Local\EmieBrowserModeList 2015-02-12 10:11 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-12 10:11 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-12 10:11 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2015-02-12 10:10 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2015-02-12 10:10 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-02-12 10:10 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-02-12 10:10 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2015-02-12 10:10 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2015-02-12 10:10 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2015-02-12 10:10 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2015-02-12 10:10 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-12 10:10 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2015-02-12 10:10 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2015-02-12 10:09 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-12 10:09 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-02-12 10:09 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\system32\locale.nls 2015-02-12 10:09 - 2011-03-11 06:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2015-02-12 10:09 - 2011-03-11 06:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2015-02-12 10:09 - 2011-03-11 06:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2015-02-12 10:09 - 2011-03-11 06:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2015-02-12 10:09 - 2011-03-11 06:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2015-02-12 10:09 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2015-02-12 10:09 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2015-02-12 10:09 - 2011-03-11 05:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-12 09:50 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2015-02-12 09:50 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-02-12 09:50 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2015-02-12 09:50 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2015-02-12 09:50 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2015-02-12 09:45 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2015-02-12 09:40 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-12 09:40 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-12 09:40 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-02-12 09:40 - 2015-01-12 03:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-02-12 09:40 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-12 09:40 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-12 09:40 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-12 09:40 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-12 09:40 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-12 09:40 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-12 09:40 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-12 09:40 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-12 09:40 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-12 09:40 - 2015-01-12 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-12 09:40 - 2015-01-12 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-12 09:40 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-12 09:40 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-12 09:40 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-12 09:40 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-12 09:40 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-12 09:40 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-12 09:40 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-12 09:40 - 2015-01-12 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-12 09:40 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-02-12 09:40 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-12 09:40 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-12 09:40 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-12 09:40 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-12 09:38 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-02-12 09:37 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-02-12 09:37 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2015-02-12 09:37 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2015-02-12 09:37 - 2012-02-11 06:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2015-02-12 09:37 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-12 09:36 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-12 09:07 - 2015-02-12 17:14 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Adobe 2015-02-12 08:52 - 2015-02-13 10:36 - 00158086 _____ () C:\Windows\PFRO.log 2015-02-12 02:14 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2015-02-12 02:14 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2015-02-12 02:14 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2015-02-12 02:14 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2015-02-12 02:14 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2015-02-12 02:14 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2015-02-12 02:14 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2015-02-12 02:14 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2015-02-12 02:13 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2015-02-12 02:13 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-12 02:13 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2015-02-12 02:13 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2015-02-12 02:12 - 2012-03-01 06:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2015-02-12 02:12 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2015-02-12 02:00 - 2015-02-12 18:09 - 00000000 ____D () C:\Program Files\Microsoft.NET 2015-02-12 01:55 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-02-12 01:55 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2015-02-12 01:46 - 2015-02-12 01:46 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-12 01:46 - 2015-02-12 01:46 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-12 01:46 - 2015-02-12 01:46 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-12 01:45 - 2015-02-12 01:45 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2015-02-12 01:44 - 2015-02-12 01:44 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2015-02-12 01:43 - 2015-02-12 01:43 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2015-02-12 01:42 - 2015-02-12 01:50 - 00016567 _____ () C:\Windows\IE11_main.log 2015-02-12 01:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2015-02-12 01:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2015-02-12 01:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2015-02-12 01:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2015-02-12 01:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2015-02-12 01:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2015-02-12 01:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2015-02-12 01:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2015-02-12 01:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2015-02-12 01:37 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-12 01:37 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-12 01:37 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-12 01:37 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2015-02-12 01:37 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2015-02-12 01:37 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2015-02-12 01:37 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2015-02-12 01:37 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2015-02-12 01:37 - 2014-06-03 10:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-12 01:37 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-12 01:37 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-12 01:37 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-12 01:37 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2015-02-12 01:37 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2015-02-12 01:37 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2015-02-12 01:37 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2015-02-12 01:37 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2015-02-12 01:37 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2015-02-12 01:37 - 2012-11-28 23:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2015-02-12 01:37 - 2012-04-26 05:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2015-02-12 01:37 - 2012-04-26 05:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2015-02-12 01:37 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2015-02-12 01:37 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2015-02-12 01:37 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2015-02-12 01:36 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-12 01:36 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2015-02-12 01:36 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2015-02-12 01:36 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-02-12 01:36 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-02-12 01:36 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2015-02-12 01:36 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2015-02-12 01:36 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2015-02-12 01:36 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-12 01:36 - 2012-10-03 17:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-12 01:36 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2015-02-12 01:36 - 2012-03-17 08:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2015-02-12 01:36 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2015-02-12 01:36 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2015-02-12 01:36 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2015-02-12 01:36 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2015-02-12 01:35 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-02-12 01:35 - 2014-08-23 02:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-12 01:35 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2015-02-12 01:35 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2015-02-12 01:35 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2015-02-12 01:35 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-02-12 01:35 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2015-02-12 01:35 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2015-02-12 01:35 - 2012-07-04 22:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-02-12 01:35 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2015-02-12 01:34 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-12 01:34 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-02-12 01:34 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-02-12 01:34 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-12 01:34 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-02-12 01:34 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-02-12 01:34 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2015-02-12 01:34 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2015-02-12 01:34 - 2011-04-29 03:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2015-02-12 01:34 - 2011-04-29 03:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2015-02-12 01:34 - 2011-04-29 03:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2015-02-12 01:34 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2015-02-12 01:34 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2015-02-12 01:34 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2015-02-12 01:33 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-02-12 01:33 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-12 01:33 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2015-02-12 01:33 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2015-02-12 01:33 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2015-02-12 01:33 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2015-02-12 01:33 - 2014-02-04 03:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2015-02-12 01:33 - 2014-02-04 03:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2015-02-12 01:33 - 2014-02-04 03:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2015-02-12 01:33 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2015-02-12 01:33 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2015-02-12 01:33 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2015-02-12 01:33 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2015-02-12 01:33 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-12 01:33 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2015-02-12 01:33 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2015-02-12 01:33 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2015-02-12 01:33 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2015-02-12 01:33 - 2012-10-03 17:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-12 01:33 - 2012-10-03 16:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2015-02-12 01:33 - 2012-08-21 21:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2015-02-12 01:33 - 2011-07-09 03:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-02-12 01:33 - 2011-04-27 03:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-02-12 01:33 - 2011-04-27 03:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-02-12 01:32 - 2015-01-15 08:46 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-12 01:32 - 2015-01-15 08:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-02-12 01:32 - 2015-01-15 08:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-02-12 01:32 - 2015-01-15 08:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-02-12 01:32 - 2015-01-15 08:42 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-12 01:32 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-02-12 01:32 - 2015-01-15 08:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-02-12 01:32 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-02-12 01:32 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-12 01:32 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-02-12 01:32 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-12 01:32 - 2015-01-15 05:21 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-12 01:32 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-12 01:32 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2015-02-12 01:32 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-12 01:32 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2015-02-12 01:32 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2015-02-12 01:32 - 2014-04-05 03:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-12 01:32 - 2014-04-05 03:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-12 01:32 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-12 01:32 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2015-02-12 01:32 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2015-02-12 01:32 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2015-02-12 01:32 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2015-02-12 01:32 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2015-02-12 01:32 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2015-02-12 01:32 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2015-02-12 01:32 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2015-02-12 01:32 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2015-02-12 01:32 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2015-02-12 01:32 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-02-12 01:32 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2015-02-12 01:32 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2015-02-12 01:32 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-02-12 01:32 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-02-12 01:32 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-02-12 01:32 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-02-12 01:32 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-02-12 01:32 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2015-02-12 01:32 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2015-02-12 01:32 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2015-02-12 01:32 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2015-02-12 01:32 - 2012-08-22 18:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-02-12 01:32 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2015-02-12 01:32 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2015-02-12 01:32 - 2012-05-14 05:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-12 01:32 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2015-02-12 01:32 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2015-02-12 01:32 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2015-02-12 01:32 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2015-02-12 01:32 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2015-02-12 01:32 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2015-02-12 01:32 - 2011-03-03 06:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2015-02-12 01:32 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2015-02-12 01:32 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2015-02-12 01:32 - 2011-02-12 06:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2015-02-12 01:31 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2015-02-12 01:31 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2015-02-12 01:31 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-12 01:31 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-02-12 01:31 - 2014-05-30 07:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-02-12 01:29 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-12 01:29 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2015-02-12 01:29 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2015-02-12 01:29 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2015-02-12 01:29 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-02-12 01:29 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2015-02-12 01:29 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-12 01:29 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2015-02-12 01:27 - 2015-01-09 02:45 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-12 01:27 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-12 01:27 - 2014-07-14 02:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-12 01:27 - 2014-06-16 02:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-12 01:27 - 2014-06-16 02:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2015-02-12 01:27 - 2014-06-16 02:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2015-02-12 01:27 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2015-02-12 01:27 - 2014-01-24 03:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2015-02-12 01:27 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2015-02-12 01:27 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2015-02-12 01:27 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2015-02-12 01:27 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-12 01:27 - 2012-05-05 08:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-02-12 01:27 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2015-02-12 01:27 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2015-02-12 01:27 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2015-02-12 01:27 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2015-02-12 01:18 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2015-02-12 01:18 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2015-02-12 01:15 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-12 01:15 - 2011-05-24 11:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2015-02-12 01:14 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2015-02-12 01:04 - 2014-05-14 17:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-02-12 01:04 - 2014-05-14 17:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-02-12 01:04 - 2014-05-14 17:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-02-12 01:04 - 2014-05-14 17:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-02-12 01:04 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-02-12 01:04 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-02-12 00:51 - 2015-02-12 00:51 - 00000000 ____D () C:\Windows\system32\SPReview 2015-02-12 00:51 - 2015-02-12 00:51 - 00000000 ____D () C:\Windows\system32\EventProviders 2015-02-12 00:50 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll 2015-02-12 00:50 - 2010-11-20 13:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2015-02-12 00:50 - 2010-11-20 13:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys 2015-02-12 00:50 - 2010-11-20 13:21 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll 2015-02-12 00:50 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll 2015-02-12 00:50 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll 2015-02-12 00:50 - 2010-11-20 13:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll 2015-02-12 00:50 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2015-02-12 00:50 - 2010-11-20 13:17 - 00080896 _____ () C:\Windows\system32\RDVGHelper.exe 2015-02-12 00:50 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2015-02-12 00:50 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2015-02-12 00:50 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2015-02-12 00:49 - 2010-11-20 13:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2015-02-12 00:49 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2015-02-12 00:49 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL |
13.02.2015, 17:57 | #4 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere FRST.TXT Teil 2: Code:
ATTFilter 2015-02-12 00:49 - 2010-11-20 13:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00078208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2015-02-12 00:49 - 2010-11-20 13:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2015-02-12 00:49 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys 2015-02-12 00:49 - 2010-11-20 13:24 - 00690680 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-12 00:49 - 2010-11-20 13:24 - 00508904 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-02-12 00:49 - 2010-11-20 13:24 - 00442720 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-02-12 00:49 - 2010-11-20 13:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2015-02-12 00:49 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-02-12 00:49 - 2010-11-20 13:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01003520 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2015-02-12 00:49 - 2010-11-20 13:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL 2015-02-12 00:49 - 2010-11-20 13:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2015-02-12 00:49 - 2010-11-20 13:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00066048 _____ () C:\Windows\system32\PrintBrmUi.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\rdpsign.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qwinsta.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msg.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\quser.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\query.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2015-02-12 00:49 - 2010-11-20 13:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-02-12 00:49 - 2010-11-20 13:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2015-02-12 00:49 - 2010-11-20 13:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2015-02-12 00:49 - 2010-11-20 13:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\change.exe 2015-02-12 00:49 - 2010-11-20 13:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2015-02-12 00:49 - 2010-11-20 13:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll 2015-02-12 00:49 - 2010-11-20 13:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2015-02-12 00:49 - 2010-11-20 13:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll 2015-02-12 00:49 - 2010-11-20 13:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll 2015-02-12 00:49 - 2010-11-20 13:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll 2015-02-12 00:49 - 2010-11-20 13:03 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll 2015-02-12 00:49 - 2010-11-20 13:03 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll 2015-02-12 00:49 - 2010-11-20 13:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2015-02-12 00:49 - 2010-11-20 13:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2015-02-12 00:49 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll 2015-02-12 00:49 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL 2015-02-12 00:49 - 2010-11-20 12:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll 2015-02-12 00:49 - 2010-11-20 12:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll 2015-02-12 00:49 - 2010-11-20 12:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-02-12 00:49 - 2010-11-20 11:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys 2015-02-12 00:49 - 2010-11-20 11:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys 2015-02-12 00:49 - 2010-11-20 11:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll 2015-02-12 00:49 - 2010-11-20 11:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys 2015-02-12 00:49 - 2010-11-20 11:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll 2015-02-12 00:49 - 2010-11-20 11:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys 2015-02-12 00:49 - 2010-11-20 11:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2015-02-12 00:49 - 2010-11-20 11:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2015-02-12 00:49 - 2010-11-20 11:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2015-02-12 00:49 - 2010-11-20 11:06 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-02-12 00:49 - 2010-11-20 11:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2015-02-12 00:49 - 2010-11-20 11:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys 2015-02-12 00:49 - 2010-11-20 11:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys 2015-02-12 00:49 - 2010-11-20 10:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-02-12 00:49 - 2010-11-20 10:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys 2015-02-12 00:49 - 2010-11-20 10:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-02-12 00:49 - 2010-11-20 10:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys 2015-02-12 00:49 - 2010-11-20 10:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2015-02-12 00:49 - 2010-11-20 10:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe 2015-02-12 00:49 - 2010-11-20 10:14 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys 2015-02-12 00:49 - 2010-11-20 10:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys 2015-02-12 00:49 - 2010-11-20 09:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys 2015-02-12 00:49 - 2010-11-20 09:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys 2015-02-12 00:49 - 2010-11-20 09:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2015-02-12 00:49 - 2010-11-20 09:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2015-02-12 00:49 - 2010-11-20 09:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2015-02-12 00:49 - 2010-11-20 09:40 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-02-12 00:49 - 2010-11-20 09:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2015-02-12 00:49 - 2010-11-20 09:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys 2015-02-12 00:49 - 2010-11-20 09:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2015-02-12 00:49 - 2010-11-20 06:23 - 00053600 _____ () C:\Windows\system32\dosx.exe 2015-02-12 00:49 - 2010-11-10 02:45 - 00010429 _____ () C:\Windows\system32\ScavengeSpace.xml 2015-02-12 00:49 - 2010-11-05 03:20 - 00146852 _____ () C:\Windows\system32\systemsf.ebd 2015-02-12 00:49 - 2010-11-05 03:20 - 00105559 _____ () C:\Windows\system32\RacRules.xml 2015-02-12 00:49 - 2010-11-05 03:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll 2015-02-12 00:49 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2015-02-12 00:34 - 2015-02-12 00:34 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\NVIDIA 2015-02-12 00:34 - 2015-02-12 00:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-02-12 00:29 - 2015-02-12 00:31 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-12 00:29 - 2015-02-12 00:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_LUsbFilt_01005.Wdf 2015-02-12 00:28 - 2015-02-13 10:52 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-02-12 00:28 - 2014-08-19 22:16 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-02-12 00:28 - 2014-07-02 20:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-02-12 00:28 - 2014-07-02 18:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe 2015-02-12 00:28 - 2014-07-02 06:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin 2015-02-12 00:27 - 2015-02-12 00:29 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-02-12 00:27 - 2015-02-12 00:29 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-02-12 00:10 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-12 00:07 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-02-12 00:07 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-02-12 00:07 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-02-12 00:05 - 2015-02-12 00:05 - 00001409 _____ () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-12 00:04 - 2015-02-13 15:19 - 01733165 _____ () C:\Windows\WindowsUpdate.log 2015-02-12 00:03 - 2015-02-13 17:14 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\VirtualStore 2015-02-12 00:03 - 2015-02-12 18:36 - 00000000 ____D () C:\Users\Rubinio 2015-02-12 00:03 - 2015-02-12 00:03 - 00000020 ___SH () C:\Users\Rubinio\ntuser.ini 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\Startmenü 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\Netzwerkumgebung 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\Druckumgebung 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\AppData\Local\Verlauf 2015-02-12 00:03 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-12 00:03 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Startmenü 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\ProgramData\Startmenü 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\ProgramData\Dokumente 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 __SHD () C:\Recovery ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-11-02 23:59 - 2010-03-24 05:38 - 00003540 _____ () C:\Windows\TSSysprep.log 2015-11-02 23:56 - 2009-07-14 05:34 - 00002790 _____ () C:\Windows\DtcInstall.log 2015-11-02 23:55 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2015-11-02 23:55 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2015-02-13 13:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-02-13 11:47 - 2009-07-14 05:39 - 00025864 _____ () C:\Windows\setupact.log 2015-02-13 11:00 - 2009-07-14 05:34 - 00012192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-13 11:00 - 2009-07-14 05:34 - 00012192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-13 10:52 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-13 10:44 - 2010-03-24 05:48 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-13 10:41 - 2009-07-14 05:33 - 00434312 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-12 19:01 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-12 18:10 - 2009-07-14 10:15 - 00000000 ____D () C:\Windows\ShellNew 2015-02-12 18:07 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\System 2015-02-12 18:07 - 2009-07-14 03:04 - 00000478 _____ () C:\Windows\win.ini 2015-02-12 11:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache 2015-02-12 10:40 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE 2015-02-12 10:14 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-12 10:13 - 2009-07-14 10:03 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2015-02-12 10:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing 2015-02-12 10:00 - 2009-07-14 10:14 - 00000000 ____D () C:\Program Files\Windows Journal 2015-02-12 08:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-TW 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-HK 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-CN 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sv-SE 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-PT 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-BR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nl-NL 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nb-NO 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ko-KR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ja-JP 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\it-IT 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hu-HU 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fr-FR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fi-FI 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\el-GR 2015-02-12 01:22 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles 2015-02-12 00:58 - 2009-07-14 10:03 - 00000000 ____D () C:\Windows\de-DE 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Sidebar 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\DVD Maker 2015-02-12 00:57 - 2009-07-14 10:15 - 00000000 __SHD () C:\Windows\BitLockerDiscoveryVolumeContents 2015-02-12 00:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2015-02-12 00:53 - 2009-07-14 03:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2015-02-12 00:28 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help 2015-02-12 00:07 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore 2015-02-12 00:03 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries 2015-02-12 00:02 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default 2015-02-12 00:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Windows NT 2015-01-29 17:49 - 2010-03-24 05:46 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Some content of TEMP: ==================== C:\Users\Rubinio\AppData\Local\Temp\avgnt.exe C:\Users\Rubinio\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpikk49e.dll C:\Users\Rubinio\AppData\Local\Temp\LMkRstPt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-13 13:45 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-02-2015 Ran by Rubinio at 2015-02-13 17:47:10 Running from C:\Users\Rubinio\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat XI Pro (HKLM\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.02 - Adobe Systems) Adobe Reader XI (11.0.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Apple Application Support (32-Bit) (HKLM\...\{2FE00055-C4F3-4F7A-AEDD-E198D54CF12F}) (Version: 3.1.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{28ED482A-56DB-47D9-8D9E-990FA8CD7D3D}) (Version: 8.1.0.18 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) AVG PC TuneUp 2015 (de-DE) (Version: 15.0.1001.393 - AVG Technologies) Hidden AVG PC TuneUp 2015 (HKLM\...\AVG PC TuneUp) (Version: 15.0.1001.393 - AVG Technologies) AVG PC TuneUp 2015 (Version: 15.0.1001.393 - AVG Technologies) Hidden Avira (HKLM\...\{bd538030-07d4-4999-a525-7fafa2483f56}) (Version: 1.1.30.21727 - Avira Operations & Co. KG) Avira (Version: 1.1.30.21727 - Avira Operations & Co. KG) Hidden Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 15.0.8.624 - Avira) Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.) Dropbox (HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Dropbox) (Version: 3.2.6 - Dropbox, Inc.) Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.) Google Drive (HKLM\...\{65EACBB4-B0B8-4A5B-AE46-22DBE15C70B5}) (Version: 1.19.8406.6504 - Google, Inc.) Google Update Helper (Version: 1.3.26.9 - Google Inc.) Hidden iCloud (HKLM\...\{760BB327-3973-4608-85C8-88162E2FF3B6}) (Version: 4.0.6.28 - Apple Inc.) iTunes (HKLM\...\{B8032A6B-C4D0-4744-B75F-9DDCB56B5C6F}) (Version: 12.1.0.71 - Apple Inc.) Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech) Logitech Unifying-Software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech) Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Mozilla Firefox 35.0.1 (x86 de) (HKLM\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 35.0.1 - Mozilla) NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation) NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation) NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.) Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) StarMoney 9.0 (HKLM\...\{3DA39B49-4E2B-41B3-A15A-53D64AB2AA96}) (Version: 9.0 - Star Finanz GmbH) Usenet.nl (HKLM\...\Usenet.nl_is1) (Version: - ) UseNeXT by Tangysoft (HKLM\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.) WinRAR 5.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-830496087-3815240866-1769002787-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ==================== Restore Points ========================= 12-02-2015 15:39:09 Installed Adobe Acrobat XI Pro. 12-02-2015 17:19:02 Configured Microsoft Office Professional Plus 2013 12-02-2015 17:19:13 PROPLUSR 12-02-2015 17:40:43 Configured Microsoft Office Professional Plus 2013 12-02-2015 17:40:56 PROPLUSR 12-02-2015 17:46:33 Removed Microsoft Office Professional Plus 2013 12-02-2015 17:46:43 PROPLUSR 12-02-2015 18:03:06 Installed Microsoft Office Professional Plus 2013 12-02-2015 18:03:21 PROPLUSR 12-02-2015 18:21:59 Installed iTunes 12-02-2015 18:48:10 Installed iCloud 13-02-2015 14:24:49 AVG PC TuneUp 2015 wird installiert 13-02-2015 14:25:29 AVG PC TuneUp 2015 (de-DE) wird entfernt 13-02-2015 14:53:39 AVG PC TuneUp 2015 wird installiert ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {1D06DEF7-8326-4BA0-BFE8-BF975B32AE4E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-12] (Google Inc.) Task: {43EAF7A0-0F6D-4543-939E-00238FE2A779} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {4FF809B2-E636-449D-91DD-2EF8F6916907} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {71AF49F8-57CC-4A1F-A33C-CD1821063AFB} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {7A1BD0DC-EB0E-41E6-A7E2-D34129F9AB40} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe Task: {8FDA3631-8FB6-48A4-A841-E364FDE9CC36} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe Task: {A0B9EB84-1190-44C3-908F-229AA707FAEB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {A1006C7B-2AA9-44DD-85FD-D6BB6851D102} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2015-02-12] () Task: {B0CE0FE6-B8D6-4439-A815-D3F7E292337D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-12] (Google Inc.) Task: {D4EBA497-FAB6-488D-AB9D-DB5772FFF9CB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {E11913E3-7693-4183-9F60-8364299B92FD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {EC8D1C96-1268-4A43-9D56-D7F1EFA82A20} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============== 2015-02-12 00:28 - 2014-07-02 20:42 - 00107992 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll 2015-01-20 22:35 - 2015-01-20 22:35 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-01-20 22:35 - 2015-01-20 22:35 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2015-02-12 15:24 - 2011-01-13 10:44 - 00232800 _____ () C:\Program Files\StarMoney 9.0\ouservice\PATCHW32.dll 2012-09-23 20:43 - 2012-09-23 20:43 - 00010240 _____ () C:\Program Files\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu 2015-02-12 18:52 - 2015-02-10 22:00 - 00750080 _____ () C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2015-02-13 10:53 - 2015-02-13 10:53 - 00043008 _____ () c:\users\rubinio\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpikk49e.dll 2015-02-12 18:52 - 2015-02-10 22:00 - 00047616 _____ () C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\libEGL.dll 2015-02-12 18:52 - 2015-02-10 22:00 - 00865280 _____ () C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll 2015-02-12 18:52 - 2015-02-10 22:00 - 00200704 _____ () C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll 2015-02-13 10:52 - 2015-02-13 10:52 - 00098816 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32api.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00110080 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\pywintypes27.dll 2015-02-13 10:52 - 2015-02-13 10:52 - 00364544 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\pythoncom27.dll 2015-02-13 10:52 - 2015-02-13 10:52 - 00045568 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\_socket.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 01160704 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\_ssl.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00320512 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32com.shell.shell.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00713216 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\_hashlib.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 01175040 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._core_.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00805888 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._gdi_.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00811008 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._windows_.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 01062400 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._controls_.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00735232 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._misc_.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00557056 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\pysqlite2._sqlite.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00128512 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\_elementtree.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00127488 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\pyexpat.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00087552 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\_ctypes.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00119808 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32file.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00108544 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32security.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00007168 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\hashobjs_ext.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00167936 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32gui.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00018432 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32event.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00038912 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32inet.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00011264 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32crypt.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00070656 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._html2.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00027136 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\_multiprocessing.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00035840 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32process.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00686080 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\unicodedata.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00122368 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._wizard.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00024064 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32pipe.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00025600 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32pdh.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00525640 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\windows._lib_cacheinvalidation.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00010240 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\select.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00017408 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32profile.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00022528 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\win32ts.pyd 2015-02-13 10:52 - 2015-02-13 10:52 - 00078336 _____ () C:\Users\Rubinio\AppData\Local\Temp\_MEI24082\wx._animate.pyd 2015-02-12 10:50 - 2015-02-04 10:02 - 01117512 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.111\libglesv2.dll 2015-02-12 10:50 - 2015-02-04 10:02 - 00211272 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.111\libegl.dll 2015-02-12 10:50 - 2015-02-04 10:02 - 09170760 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.111\pdf.dll 2012-12-18 20:08 - 2012-12-18 20:08 - 00131072 _____ () C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Locale\de_de\PDFMaker\PDFMOutlookAddin.DEU 2012-12-18 20:08 - 2012-12-18 20:08 - 03990248 _____ () C:\Program Files\Adobe\Acrobat 11.0\PDFMaker\Common\AdobePDFMakerX.dll 2012-12-18 20:08 - 2012-12-18 20:08 - 01446912 _____ () C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Locale\de_DE\PDFMaker\AdobePDFMakerX.DEU 2012-10-01 20:32 - 2012-10-01 20:32 - 01014400 _____ () C:\Program Files\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll 2012-10-01 20:32 - 2012-10-01 20:32 - 00125056 _____ () C:\Program Files\Microsoft Office\Office15\OUTLCTL.DLL 2012-10-01 20:32 - 2012-10-01 20:32 - 00321136 _____ () C:\Program Files\Microsoft Office\Office15\msfad.dll 2015-02-12 15:11 - 2015-01-23 11:37 - 03925104 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll 2015-02-12 17:39 - 2015-02-12 17:39 - 00604984 _____ () C:\Program Files\AVG\AVG PC TuneUp\avgreplibx.dll 2015-02-12 17:39 - 2015-02-12 17:39 - 00728888 _____ () C:\Program Files\AVG\AVG PC TuneUp\tulngx.dll 2015-02-13 15:20 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-02-13 15:20 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl 2015-02-13 15:20 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2015-02-13 15:20 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll 2015-02-13 15:20 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2012-04-24 20:18 - 2012-04-24 20:18 - 00087912 _____ () C:\Program Files\Safari\Apple Application Support\zlib1.dll 2012-04-24 20:18 - 2012-04-24 20:18 - 01242472 _____ () C:\Program Files\Safari\Apple Application Support\libxml2.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) =============== (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-830496087-3815240866-1769002787-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.178.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== Accounts: ============================= Administrator (S-1-5-21-830496087-3815240866-1769002787-500 - Administrator - Disabled) Gast (S-1-5-21-830496087-3815240866-1769002787-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-830496087-3815240866-1769002787-1002 - Limited - Enabled) Rubinio (S-1-5-21-830496087-3815240866-1769002787-1001 - Administrator - Enabled) => C:\Users\Rubinio ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (02/13/2015 04:47:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mbam.exe, Version: 1.0.1.711, Zeitstempel: 0x542b53ec Name des fehlerhaften Moduls: mbam.exe, Version: 1.0.1.711, Zeitstempel: 0x542b53ec Ausnahmecode: 0xc0000005 Fehleroffset: 0x0018aae7 ID des fehlerhaften Prozesses: 0x1f0c Startzeit der fehlerhaften Anwendung: 0xmbam.exe0 Pfad der fehlerhaften Anwendung: mbam.exe1 Pfad des fehlerhaften Moduls: mbam.exe2 Berichtskennung: mbam.exe3 Error: (02/13/2015 03:15:03 PM) (Source: Outlook) (EventID: 34) (User: ) Description: Fehler beim Abrufen des Durchforstungsbereichs-Managers. Fehler=0x80070422. Error: (02/13/2015 01:50:08 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1". Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (02/13/2015 10:45:52 AM) (Source: VSS) (EventID: 12298) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden. Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet. ], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. ], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet. ]. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (02/13/2015 10:45:52 AM) (Source: VSS) (EventID: 12310) (User: ) Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten. Fehlerkontext: DeviceIoControl(\\?\Volume{eafc5e25-81b4-11e5-8721-806e6f6e6963} - 00000134,0x0053c010,00D68E28,0,00D69E30,4096,[0]). Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (02/12/2015 07:09:11 PM) (Source: Office Software Protection Platform Service) (EventID: 1014) (User: ) Description: Acquisition of End User License failed. hr=0xC004C003 Sku Id=41499869-4103-4d3b-9da6-d07df41b6e39 Error: (02/12/2015 07:09:11 PM) (Source: Office Software Protection Platform Service) (EventID: 8200) (User: ) Description: License acquisition failure details. hr=0xC004C003 Error: (02/12/2015 05:46:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm OUTLOOK.EXE, Version 15.0.4569.1503 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: e20 Startzeit: 01d046e349b45519 Endzeit: 47 Anwendungspfad: C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE Berichts-ID: a29f5fdd-b2d6-11e4-9bba-001e90ca155c Error: (02/12/2015 03:39:07 PM) (Source: MsiInstaller) (EventID: 11500) (User: Rubinio-PC) Description: Produkt: Adobe Acrobat XI Pro -- Fehler 1500. Im Augenblick wird eine weitere Installation ausgeführt. Sie müssen erst die zweite Installation abschließen, bevor Sie mit dieser Installation fortfahren können. Error: (02/12/2015 01:01:58 AM) (Source: ESENT) (EventID: 215) (User: ) Description: WinMail (2160) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde. System errors: ============= Error: (02/13/2015 03:28:32 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 03:28:31 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 03:28:31 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 03:28:31 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 03:28:27 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 03:28:26 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 03:28:26 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 03:01:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "AVG Designerweiterung" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (02/13/2015 11:07:08 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Error: (02/13/2015 11:07:08 AM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10. Microsoft Office Sessions: ========================= Error: (02/13/2015 04:47:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: mbam.exe1.0.1.711542b53ecmbam.exe1.0.1.711542b53ecc00000050018aae71f0c01d047a3e42afd30C:\Program Files\ Malwarebytes Anti-Malware \mbam.exeC:\Program Files\ Malwarebytes Anti-Malware \mbam.exea019633e-b397-11e4-8fe0-001e90ca155c Error: (02/13/2015 03:15:03 PM) (Source: Outlook) (EventID: 34) (User: ) Description: 0x80070422 Error: (02/13/2015 01:50:08 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\common files\Logishrd\sp6_uninstall\tools\64\AddBrowsers.exe Error: (02/13/2015 10:45:52 AM) (Source: VSS) (EventID: 12298) (User: ) Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet. 0x00000000, Der Vorgang wurde erfolgreich beendet. 0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist. 0x00000000, Der Vorgang wurde erfolgreich beendet. Vorgang: Asynchroner Vorgang wird ausgeführt Kontext: Aktueller Status: DoSnapshotSet Error: (02/13/2015 10:45:52 AM) (Source: VSS) (EventID: 12310) (User: ) Description: DeviceIoControl(\\?\Volume{eafc5e25-81b4-11e5-8721-806e6f6e6963} - 00000134,0x0053c010,00D68E28,0,00D69E30,4096,[0]) Vorgang: Schattenkopien werden übertragen Kontext: Ausführungskontext: System Provider Error: (02/12/2015 07:09:11 PM) (Source: Office Software Protection Platform Service) (EventID: 1014) (User: ) Description: hr=0xC004C00341499869-4103-4d3b-9da6-d07df41b6e39 Error: (02/12/2015 07:09:11 PM) (Source: Office Software Protection Platform Service) (EventID: 8200) (User: ) Description: hr=0xC004C00300010001(0x00000000, 19:09:09:165 - https://activation.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=o14) 00020001(0x00000000, 19:09:09:200) 00030001(0x00000000, 19:09:09:201 - https://activation.sls.microsoft.com) 00030002(0x00000000, 19:09:09:201 - 0) 00040001(0x00000000, 19:09:09:201 - https://activation.sls.microsoft.com) 00040002(0x00000000, 19:09:09:208 - 0, <NULL>, <NULL>, <NULL>) 00040006(0x00000000, 19:09:09:208 - 1, https://activation.sls.microsoft.com, <NULL>, <local>) 00020005(0x00000000, 19:09:09:208 - 0) 0002000C(0x00000000, 19:09:11:549 - 500) 00010002(0x8004FC01, 19:09:11:550 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C003</HRESULT><Messages><Message>103 (Activation) - [PA Product key blocked. ---> Product key blocked]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>) 00010003(0x8004FC01, 19:09:11:560) Error: (02/12/2015 05:46:13 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: OUTLOOK.EXE15.0.4569.1503e2001d046e349b4551947C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXEa29f5fdd-b2d6-11e4-9bba-001e90ca155c Error: (02/12/2015 03:39:07 PM) (Source: MsiInstaller) (EventID: 11500) (User: Rubinio-PC) Description: Produkt: Adobe Acrobat XI Pro -- Fehler 1500. Im Augenblick wird eine weitere Installation ausgeführt. Sie müssen erst die zweite Installation abschließen, bevor Sie mit dieser Installation fortfahren können.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (02/12/2015 01:01:58 AM) (Source: ESENT) (EventID: 215) (User: ) Description: WinMail2160WindowsMail0: ==================== Memory info =========================== Processor: Intel(R) Core(TM)2 Quad CPU Q9300 @ 2.50GHz Percentage of memory in use: 76% Total physical RAM: 3327.23 MB Available physical RAM: 767.46 MB Total Pagefile: 6650.71 MB Available Pagefile: 1974.1 MB Total Virtual: 2047.88 MB Available Virtual: 1879.38 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:385.45 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:465.76 GB) (Free:189.06 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 2A502A4F) Partition 1: (Active) - (Size=465.7 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: F3BC08A4) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
14.02.2015, 11:48 | #5 |
/// the machine /// TB-Ausbilder | Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere hi, Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop
Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.02.2015, 14:35 | #6 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere TDSSKILLER: Code:
ATTFilter 14:08:56.0048 0x11d0 TDSS rootkit removing tool 3.0.0.44 Jan 22 2015 08:27:04 14:09:03.0442 0x11d0 ============================================================ 14:09:03.0442 0x11d0 Current date / time: 2015/02/14 14:09:03.0442 14:09:03.0442 0x11d0 SystemInfo: 14:09:03.0442 0x11d0 14:09:03.0442 0x11d0 OS Version: 6.1.7601 ServicePack: 1.0 14:09:03.0442 0x11d0 Product type: Workstation 14:09:03.0442 0x11d0 ComputerName: RUBINIO-PC 14:09:03.0442 0x11d0 UserName: Rubinio 14:09:03.0442 0x11d0 Windows directory: C:\Windows 14:09:03.0442 0x11d0 System windows directory: C:\Windows 14:09:03.0442 0x11d0 Processor architecture: Intel x86 14:09:03.0442 0x11d0 Number of processors: 4 14:09:03.0442 0x11d0 Page size: 0x1000 14:09:03.0442 0x11d0 Boot type: Normal boot 14:09:03.0442 0x11d0 ============================================================ 14:09:05.0122 0x11d0 KLMD registered as C:\Windows\system32\drivers\63317282.sys 14:09:05.0456 0x11d0 System UUID: {45328823-6973-532D-DB7E-94406A3A264A} 14:09:06.0342 0x11d0 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0x7E2CB, SectorsPerTrack: 0xE, TracksPerCylinder: 0x87, Type 'K0', Flags 0x00000050 14:09:13.0107 0x11d0 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 14:09:13.0216 0x11d0 ============================================================ 14:09:13.0216 0x11d0 \Device\Harddisk1\DR1: 14:09:13.0221 0x11d0 MBR partitions: 14:09:13.0221 0x11d0 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353000 14:09:13.0221 0x11d0 \Device\Harddisk0\DR0: 14:09:13.0221 0x11d0 MBR partitions: 14:09:13.0221 0x11d0 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02 14:09:13.0221 0x11d0 ============================================================ 14:09:13.0253 0x11d0 C: <-> \Device\Harddisk1\DR1\Partition1 14:09:13.0278 0x11d0 D: <-> \Device\Harddisk0\DR0\Partition1 14:09:13.0278 0x11d0 ============================================================ 14:09:13.0278 0x11d0 Initialize success 14:09:13.0278 0x11d0 ============================================================ 14:10:29.0050 0x0e00 ============================================================ 14:10:29.0050 0x0e00 Scan started 14:10:29.0050 0x0e00 Mode: Manual; SigCheck; TDLFS; 14:10:29.0050 0x0e00 ============================================================ 14:10:29.0050 0x0e00 KSN ping started 14:10:31.0624 0x0e00 KSN ping finished: true 14:10:33.0075 0x0e00 ================ Scan system memory ======================== 14:10:33.0075 0x0e00 System memory - ok 14:10:33.0075 0x0e00 ================ Scan services ============================= 14:10:33.0199 0x0e00 [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 14:10:33.0371 0x0e00 1394ohci - ok 14:10:33.0402 0x0e00 [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI C:\Windows\system32\drivers\ACPI.sys 14:10:33.0433 0x0e00 ACPI - ok 14:10:33.0449 0x0e00 [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 14:10:33.0543 0x0e00 AcpiPmi - ok 14:10:33.0667 0x0e00 [ FC5B75CA6A1DA31EDD4F8D53F5540B98, CDC445F2790ADFC4C5568C40D4DA8BB95CD71991665B38AEC3D84571C99C3520 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe 14:10:33.0714 0x0e00 AdobeARMservice - ok 14:10:33.0777 0x0e00 [ 080255CDCB878813B481B8C348D47D8E, 75808821FBC732D0504795B8F85852E4C01D3B412989A1E597E1295CFF7B7A45 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 14:10:33.0808 0x0e00 AdobeFlashPlayerUpdateSvc - ok 14:10:33.0855 0x0e00 [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 14:10:33.0901 0x0e00 adp94xx - ok 14:10:33.0933 0x0e00 [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 14:10:33.0979 0x0e00 adpahci - ok 14:10:34.0011 0x0e00 [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 14:10:34.0042 0x0e00 adpu320 - ok 14:10:34.0057 0x0e00 [ 8B5EEFEEC1E6D1A72A06C526628AD161, 026CDF4C96F4D493E7BABF79A14C4B0B5ADCCEF0B081FFFA2E3B243B2414167F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 14:10:34.0151 0x0e00 AeLookupSvc - ok 14:10:34.0182 0x0e00 [ D0B388DA1D111A34366E04EB4A5DD156, 60D226F027F4025CC032CAFF73A80FAFB5FA75445654FDCF80CA8C0419C6E938 ] AFD C:\Windows\system32\drivers\afd.sys 14:10:34.0291 0x0e00 AFD - ok 14:10:34.0323 0x0e00 [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440 C:\Windows\system32\drivers\agp440.sys 14:10:34.0354 0x0e00 agp440 - ok 14:10:34.0369 0x0e00 [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys 14:10:34.0401 0x0e00 aic78xx - ok 14:10:34.0432 0x0e00 [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG C:\Windows\System32\alg.exe 14:10:34.0479 0x0e00 ALG - ok 14:10:34.0510 0x0e00 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide C:\Windows\system32\drivers\aliide.sys 14:10:34.0525 0x0e00 aliide - ok 14:10:34.0541 0x0e00 [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp C:\Windows\system32\drivers\amdagp.sys 14:10:34.0572 0x0e00 amdagp - ok 14:10:34.0588 0x0e00 [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide C:\Windows\system32\drivers\amdide.sys 14:10:34.0619 0x0e00 amdide - ok 14:10:34.0635 0x0e00 [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 14:10:34.0697 0x0e00 AmdK8 - ok 14:10:34.0697 0x0e00 [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 14:10:34.0791 0x0e00 AmdPPM - ok 14:10:34.0822 0x0e00 [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata C:\Windows\system32\drivers\amdsata.sys 14:10:34.0853 0x0e00 amdsata - ok 14:10:34.0884 0x0e00 [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 14:10:34.0931 0x0e00 amdsbs - ok 14:10:34.0947 0x0e00 [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata C:\Windows\system32\drivers\amdxata.sys 14:10:34.0993 0x0e00 amdxata - ok 14:10:35.0056 0x0e00 [ F2EDC2EA1E871928C18A63BC84A1B808, C56A8854361021E216EBF35AEF335FD45915C7623D2F61C2691A5BF1CC8BA5E1 ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe 14:10:35.0087 0x0e00 AntiVirSchedulerService - ok 14:10:35.0103 0x0e00 [ F2EDC2EA1E871928C18A63BC84A1B808, C56A8854361021E216EBF35AEF335FD45915C7623D2F61C2691A5BF1CC8BA5E1 ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe 14:10:35.0134 0x0e00 AntiVirService - ok 14:10:35.0165 0x0e00 [ AEA177F783E20150ACE5383EE368DA19, 8FA9EE27AA1F22E8B8FE33A21028CA1E0062BAA95CB132C20D55B98C03B4254F ] AppID C:\Windows\system32\drivers\appid.sys 14:10:35.0290 0x0e00 AppID - ok 14:10:35.0321 0x0e00 [ 62A9C86CB6085E20DB4823E4E97826F5, E0F840B49710022C4FB437002AD06F64B0F6B5D628B32D00F2B66765E6B97E4B ] AppIDSvc C:\Windows\System32\appidsvc.dll 14:10:35.0383 0x0e00 AppIDSvc - ok 14:10:35.0399 0x0e00 [ EACFDF31921F51C097629F1F3C9129B4, 24138755D823E69760579ECBD672421192457CDC9941B2BC499C2D34D83E86C3 ] Appinfo C:\Windows\System32\appinfo.dll 14:10:35.0446 0x0e00 Appinfo - ok 14:10:35.0539 0x0e00 [ D2B87FC03BE28CD0B33C2B5C1119FD8E, 97EB74CB7F62C0D06D45CB250E3A90657A0F107C2FC20738FF6B2C87B0240080 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 14:10:35.0586 0x0e00 Apple Mobile Device - ok 14:10:35.0664 0x0e00 [ A45D184DF6A8803DA13A0B329517A64A, C1D16B60A6D69689AE951DC3D6884ED2E233D144B3FC0B86BC1C50AAAAA01ED2 ] AppMgmt C:\Windows\System32\appmgmts.dll 14:10:35.0836 0x0e00 AppMgmt - ok 14:10:35.0851 0x0e00 [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc C:\Windows\system32\DRIVERS\arc.sys 14:10:35.0883 0x0e00 arc - ok 14:10:35.0883 0x0e00 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 14:10:35.0914 0x0e00 arcsas - ok 14:10:35.0992 0x0e00 [ 537B2948976F5D9B5767B74A63EBB395, 1A14F8B582E74AD15B612EDA5B707AA3CB0B2A107ED14572B4232EAA7383B634 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe 14:10:36.0007 0x0e00 aspnet_state - ok 14:10:36.0039 0x0e00 [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 14:10:36.0117 0x0e00 AsyncMac - ok 14:10:36.0132 0x0e00 [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi C:\Windows\system32\drivers\atapi.sys 14:10:36.0148 0x0e00 atapi - ok 14:10:36.0179 0x0e00 [ F4157B3CECF19B1C266C83AFF051C97A, 26728B59B6003EB36BC322D189254574E94790CE23637228A669FAD6ED76ECE3 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 14:10:36.0241 0x0e00 AudioEndpointBuilder - ok 14:10:36.0273 0x0e00 [ F4157B3CECF19B1C266C83AFF051C97A, 26728B59B6003EB36BC322D189254574E94790CE23637228A669FAD6ED76ECE3 ] Audiosrv C:\Windows\System32\Audiosrv.dll 14:10:36.0288 0x0e00 Audiosrv - ok 14:10:36.0304 0x0e00 [ AF5DA81B19AFA730F1E5246AD81D140A, 532951071F56896A3B5D47874C14D996C8620EA02F87D4BA21B083EC804FB166 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys 14:10:36.0351 0x0e00 avgntflt - ok 14:10:36.0366 0x0e00 [ A5674637BCA212D9FE136ADFA04C9857, 95F3632EBB041C539816D285EBE1F379D46A4187379C69D4683D9F4DECBDB80C ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys 14:10:36.0397 0x0e00 avipbb - ok 14:10:36.0429 0x0e00 [ 8E6214E8C6100222BEB6A14F9B908A7E, 268279AE0D87E4B1CC227355DF12B7E8113F8355B1D20447AA723830D706021A ] Avira.OE.ServiceHost C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe 14:10:36.0444 0x0e00 Avira.OE.ServiceHost - ok 14:10:36.0460 0x0e00 [ D8C712305F73CD34D1B344810E522728, 49A474FF6CA44E8427D7A8290B47395125B0148AF384CF2B3B1FA495A4718CBA ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys 14:10:36.0491 0x0e00 avkmgr - ok 14:10:36.0522 0x0e00 [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV C:\Windows\System32\AxInstSV.dll 14:10:36.0585 0x0e00 AxInstSV - ok 14:10:36.0616 0x0e00 [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys 14:10:36.0709 0x0e00 b06bdrv - ok 14:10:36.0741 0x0e00 [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys 14:10:36.0787 0x0e00 b57nd60x - ok 14:10:36.0834 0x0e00 [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC C:\Windows\System32\bdesvc.dll 14:10:36.0897 0x0e00 BDESVC - ok 14:10:36.0912 0x0e00 [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep C:\Windows\system32\drivers\Beep.sys 14:10:36.0943 0x0e00 Beep - ok 14:10:36.0990 0x0e00 [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE C:\Windows\System32\bfe.dll 14:10:37.0053 0x0e00 BFE - ok 14:10:37.0084 0x0e00 [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS C:\Windows\System32\qmgr.dll 14:10:37.0131 0x0e00 BITS - ok 14:10:37.0146 0x0e00 [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 14:10:37.0177 0x0e00 blbdrive - ok 14:10:37.0224 0x0e00 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A, 10F21999FF6B1D410EBF280F7F27DEACA5289739CF12F4293B614B8FC6C88DCC ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 14:10:37.0255 0x0e00 Bonjour Service - ok 14:10:37.0271 0x0e00 [ 8F2DA3028D5FCBD1A060A3DE64CD6506, E234672E9CFE1A95AD2E78E306E41E010B870221E6EBBC0E2B0BE2FA5CE0CD76 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 14:10:37.0333 0x0e00 bowser - ok 14:10:37.0349 0x0e00 [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 14:10:37.0411 0x0e00 BrFiltLo - ok 14:10:37.0411 0x0e00 [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 14:10:37.0458 0x0e00 BrFiltUp - ok 14:10:37.0474 0x0e00 [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser C:\Windows\System32\browser.dll 14:10:37.0521 0x0e00 Browser - ok 14:10:37.0536 0x0e00 [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid C:\Windows\System32\Drivers\Brserid.sys 14:10:37.0599 0x0e00 Brserid - ok 14:10:37.0614 0x0e00 [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 14:10:37.0645 0x0e00 BrSerWdm - ok 14:10:37.0661 0x0e00 [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 14:10:37.0708 0x0e00 BrUsbMdm - ok 14:10:37.0723 0x0e00 [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 14:10:37.0755 0x0e00 BrUsbSer - ok 14:10:37.0755 0x0e00 [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 14:10:37.0801 0x0e00 BTHMODEM - ok 14:10:37.0833 0x0e00 [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv C:\Windows\system32\bthserv.dll 14:10:37.0864 0x0e00 bthserv - ok 14:10:37.0879 0x0e00 [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 14:10:37.0926 0x0e00 cdfs - ok 14:10:37.0957 0x0e00 [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom C:\Windows\system32\drivers\cdrom.sys 14:10:38.0004 0x0e00 cdrom - ok 14:10:38.0035 0x0e00 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc C:\Windows\System32\certprop.dll 14:10:38.0051 0x0e00 CertPropSvc - ok 14:10:38.0082 0x0e00 [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass C:\Windows\system32\DRIVERS\circlass.sys 14:10:38.0098 0x0e00 circlass - ok 14:10:38.0129 0x0e00 [ 635181E0E9BBF16871BF5380D71DB02D, 58D5150C6F3B9F1730FFDF3A8A2ABF5FF207F9785BD66C0C1E03A0F1C223A26A ] CLFS C:\Windows\system32\CLFS.sys 14:10:38.0145 0x0e00 CLFS - ok 14:10:38.0207 0x0e00 [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 14:10:38.0238 0x0e00 clr_optimization_v2.0.50727_32 - ok 14:10:38.0269 0x0e00 [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 14:10:38.0285 0x0e00 clr_optimization_v4.0.30319_32 - ok 14:10:38.0301 0x0e00 [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 14:10:38.0347 0x0e00 CmBatt - ok 14:10:38.0363 0x0e00 [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide C:\Windows\system32\drivers\cmdide.sys 14:10:38.0394 0x0e00 cmdide - ok 14:10:38.0425 0x0e00 [ F516F1167EFBBC5ABC90687C94497869, AD650D56241533439419EA00236ABE14AB6E50B768620211D1A44047A9FA14EC ] CNG C:\Windows\system32\Drivers\cng.sys 14:10:38.0488 0x0e00 CNG - ok 14:10:38.0503 0x0e00 [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 14:10:38.0519 0x0e00 Compbatt - ok 14:10:38.0535 0x0e00 [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 14:10:38.0566 0x0e00 CompositeBus - ok 14:10:38.0581 0x0e00 COMSysApp - ok 14:10:38.0597 0x0e00 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 14:10:38.0613 0x0e00 crcdisk - ok 14:10:38.0644 0x0e00 [ 623E143F2DF17C0106A9988F5D7DC878, 9DA30262FF22FA9F1DB247CB3B4A2892D79730EF0ECC9589D399D24B4F58E565 ] CryptSvc C:\Windows\system32\cryptsvc.dll 14:10:38.0706 0x0e00 CryptSvc - ok 14:10:38.0737 0x0e00 [ 3C2177A897B4CA2788C6FB0C3FD81D4B, 98575CBD0664586E6211D02E71BDD52CBAA149A1658573550E29E74E5F7B1553 ] CSC C:\Windows\system32\drivers\csc.sys 14:10:38.0831 0x0e00 CSC - ok 14:10:38.0878 0x0e00 [ 15F93B37F6801943360D9EB42485D5D3, DD6838C6496CB15F8BB57A6596F6A64ADD9C36B09F062295699131232712B558 ] CscService C:\Windows\System32\cscsvc.dll 14:10:38.0925 0x0e00 CscService - ok 14:10:38.0940 0x0e00 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] DcomLaunch C:\Windows\system32\rpcss.dll 14:10:39.0003 0x0e00 DcomLaunch - ok 14:10:39.0018 0x0e00 [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc C:\Windows\System32\defragsvc.dll 14:10:39.0049 0x0e00 defragsvc - ok 14:10:39.0081 0x0e00 [ F024449C97EC1E464AAFFDA18593DB88, 7EF1E241892E098A472BCA14C724DFF1AACCF190954AF1C4A38B6D542CC74BD2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 14:10:39.0127 0x0e00 DfsC - ok 14:10:39.0174 0x0e00 [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp C:\Windows\system32\dhcpcore.dll 14:10:39.0205 0x0e00 Dhcp - ok 14:10:39.0237 0x0e00 [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache C:\Windows\system32\drivers\discache.sys 14:10:39.0268 0x0e00 discache - ok 14:10:39.0283 0x0e00 [ 565003F326F99802E68CA78F2A68E9FF, ABC42B24DBA4FFC411120E09278EF26AF56CCAB463B69B4BD6C530B4A07063D2 ] Disk C:\Windows\system32\DRIVERS\disk.sys 14:10:39.0299 0x0e00 Disk - ok 14:10:39.0330 0x0e00 [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache C:\Windows\System32\dnsrslvr.dll 14:10:39.0377 0x0e00 Dnscache - ok 14:10:39.0393 0x0e00 [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc C:\Windows\System32\dot3svc.dll 14:10:39.0455 0x0e00 dot3svc - ok 14:10:39.0486 0x0e00 [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS C:\Windows\system32\dps.dll 14:10:39.0533 0x0e00 DPS - ok 14:10:39.0564 0x0e00 [ B918E7C5F9BF77202F89E1A9539F2EB4, C589A37DE50BBEF22E2DAA9682EA43147F614AA1AF7DAAA942BA5FC192313A0B ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 14:10:39.0720 0x0e00 drmkaud - ok 14:10:39.0783 0x0e00 [ 3583A5A8CC2E682BFFBD4630D0FEC08B, FD0F184B358FCECAA763444B414074BEF4E871EB7527D88385519FC158435C72 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 14:10:39.0829 0x0e00 DXGKrnl - ok 14:10:39.0861 0x0e00 [ CF0A6015F437161698C5B2A0A12CF052, C23A777CF5D34C96B16A4A6197DA3F14CC2F8C56421E422BBD46617C941DBBCE ] e1express C:\Windows\system32\DRIVERS\e1e6032.sys 14:10:39.0907 0x0e00 e1express - ok 14:10:39.0923 0x0e00 [ 22EF8965101685ADD128F03A2B03CE16, 677F7B32C7A45C26F2F0DB67FFB526E9742E4B3A8BEAEA7B814CBCA2F56D6D5A ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys 14:10:39.0970 0x0e00 E1G60 - ok 14:10:40.0001 0x0e00 [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost C:\Windows\System32\eapsvc.dll 14:10:40.0048 0x0e00 EapHost - ok 14:10:40.0157 0x0e00 [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys 14:10:40.0344 0x0e00 ebdrv - ok 14:10:40.0375 0x0e00 [ BF08DE8E4FA1F143D41B3241F7FCE5F6, 4140BE0ECE0D4B8FDD413DBA120F5D7EF6F94628224320EDA2A85E50BEFDA638 ] EFS C:\Windows\System32\lsass.exe 14:10:40.0438 0x0e00 EFS - ok 14:10:40.0485 0x0e00 [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr C:\Windows\ehome\ehRecvr.exe 14:10:40.0563 0x0e00 ehRecvr - ok 14:10:40.0578 0x0e00 [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched C:\Windows\ehome\ehsched.exe 14:10:40.0609 0x0e00 ehSched - ok 14:10:40.0641 0x0e00 [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 14:10:40.0687 0x0e00 elxstor - ok 14:10:40.0703 0x0e00 [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev C:\Windows\system32\drivers\errdev.sys 14:10:40.0750 0x0e00 ErrDev - ok 14:10:40.0781 0x0e00 [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem C:\Windows\system32\es.dll 14:10:40.0828 0x0e00 EventSystem - ok 14:10:40.0828 0x0e00 [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat C:\Windows\system32\drivers\exfat.sys 14:10:40.0890 0x0e00 exfat - ok 14:10:40.0906 0x0e00 [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat C:\Windows\system32\drivers\fastfat.sys 14:10:40.0968 0x0e00 fastfat - ok 14:10:40.0999 0x0e00 [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax C:\Windows\system32\fxssvc.exe 14:10:41.0062 0x0e00 Fax - ok 14:10:41.0077 0x0e00 [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc C:\Windows\system32\DRIVERS\fdc.sys 14:10:41.0109 0x0e00 fdc - ok 14:10:41.0124 0x0e00 [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost C:\Windows\system32\fdPHost.dll 14:10:41.0155 0x0e00 fdPHost - ok 14:10:41.0171 0x0e00 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub C:\Windows\system32\fdrespub.dll 14:10:41.0218 0x0e00 FDResPub - ok 14:10:41.0233 0x0e00 [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 14:10:41.0265 0x0e00 FileInfo - ok 14:10:41.0280 0x0e00 [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 14:10:41.0327 0x0e00 Filetrace - ok 14:10:41.0327 0x0e00 [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 14:10:41.0358 0x0e00 flpydisk - ok 14:10:41.0389 0x0e00 [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 14:10:41.0421 0x0e00 FltMgr - ok 14:10:41.0467 0x0e00 [ E12C4928B32ACE04610259647F072635, B71B9C2DF45F33C4DAC88435129B08B0BCDBBE82E8C3AD0A95F00137CC8B619F ] FontCache C:\Windows\system32\FntCache.dll 14:10:41.0561 0x0e00 FontCache - ok 14:10:41.0639 0x0e00 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 14:10:41.0655 0x0e00 FontCache3.0.0.0 - ok 14:10:41.0670 0x0e00 [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 14:10:41.0701 0x0e00 FsDepends - ok 14:10:41.0733 0x0e00 [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 14:10:41.0748 0x0e00 Fs_Rec - ok 14:10:41.0779 0x0e00 [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 14:10:41.0811 0x0e00 fvevol - ok 14:10:41.0826 0x0e00 [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 14:10:41.0857 0x0e00 gagp30kx - ok 14:10:41.0873 0x0e00 [ 185ADA973B5020655CEE342059A86CBB, D3E352DFAF30761505480A4C557D980083F65EC5BD46E2656B2114D47B272A89 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 14:10:41.0904 0x0e00 GEARAspiWDM - ok 14:10:41.0951 0x0e00 [ E897EAF5ED6BA41E081060C9B447A673, A428DC68516F19C6C53A8B62E4BDB2587E70FB751B9D77700B6B147D347DA157 ] gpsvc C:\Windows\System32\gpsvc.dll 14:10:41.0998 0x0e00 gpsvc - ok 14:10:42.0045 0x0e00 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe 14:10:42.0060 0x0e00 gupdate - ok 14:10:42.0076 0x0e00 [ E1B44A75947137F4143308D566889837, EC7E883E7AF38BF3AC0AC513CFDE0186038443E9ACC7AD616EE6BD0EC09AACB9 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 14:10:42.0091 0x0e00 gupdatem - ok 14:10:42.0107 0x0e00 [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 14:10:42.0169 0x0e00 hcw85cir - ok 14:10:42.0216 0x0e00 [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 14:10:42.0247 0x0e00 HdAudAddService - ok 14:10:42.0263 0x0e00 [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 14:10:42.0294 0x0e00 HDAudBus - ok 14:10:42.0310 0x0e00 [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 14:10:42.0341 0x0e00 HidBatt - ok 14:10:42.0357 0x0e00 [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 14:10:42.0388 0x0e00 HidBth - ok 14:10:42.0403 0x0e00 [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 14:10:42.0450 0x0e00 HidIr - ok 14:10:42.0466 0x0e00 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv C:\Windows\system32\hidserv.dll 14:10:42.0497 0x0e00 hidserv - ok 14:10:42.0513 0x0e00 [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 14:10:42.0575 0x0e00 HidUsb - ok 14:10:42.0591 0x0e00 [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc C:\Windows\system32\kmsvc.dll 14:10:42.0637 0x0e00 hkmsvc - ok 14:10:42.0653 0x0e00 [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll 14:10:42.0715 0x0e00 HomeGroupListener - ok 14:10:42.0731 0x0e00 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 14:10:42.0762 0x0e00 HomeGroupProvider - ok 14:10:42.0809 0x0e00 [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 14:10:42.0840 0x0e00 HpSAMD - ok 14:10:42.0871 0x0e00 [ 871917B07A141BFF43D76D8844D48106, 30C702008D0EE57D63F74864967DD19A55A268E77E42B5B3CC73037AD51D2987 ] HTTP C:\Windows\system32\drivers\HTTP.sys 14:10:42.0918 0x0e00 HTTP - ok 14:10:42.0934 0x0e00 [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 14:10:42.0934 0x0e00 hwpolicy - ok 14:10:42.0965 0x0e00 [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 14:10:42.0996 0x0e00 i8042prt - ok 14:10:43.0043 0x0e00 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 14:10:43.0090 0x0e00 iaStorV - ok 14:10:43.0137 0x0e00 [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 14:10:43.0246 0x0e00 idsvc - ok 14:10:43.0277 0x0e00 IEEtwCollectorService - ok 14:10:43.0293 0x0e00 [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 14:10:43.0324 0x0e00 iirsp - ok 14:10:43.0371 0x0e00 [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT C:\Windows\System32\ikeext.dll 14:10:43.0417 0x0e00 IKEEXT - ok 14:10:43.0417 0x0e00 [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide C:\Windows\system32\drivers\intelide.sys 14:10:43.0449 0x0e00 intelide - ok 14:10:43.0464 0x0e00 [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 14:10:43.0480 0x0e00 intelppm - ok 14:10:43.0511 0x0e00 [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum C:\Windows\system32\ipbusenum.dll 14:10:43.0558 0x0e00 IPBusEnum - ok 14:10:43.0573 0x0e00 [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 14:10:43.0651 0x0e00 IpFilterDriver - ok 14:10:43.0683 0x0e00 [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 14:10:43.0729 0x0e00 iphlpsvc - ok 14:10:43.0761 0x0e00 [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 14:10:43.0792 0x0e00 IPMIDRV - ok 14:10:43.0807 0x0e00 [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 14:10:43.0854 0x0e00 IPNAT - ok 14:10:43.0901 0x0e00 [ 39D4F18B4D1B2C72097E74D45D36202C, 822076F946210CCFE76311341D588A5145127F41817EE2DFCDAEDFC8E581CE2B ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 14:10:43.0932 0x0e00 iPod Service - ok 14:10:43.0948 0x0e00 [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM C:\Windows\system32\drivers\irenum.sys 14:10:43.0979 0x0e00 IRENUM - ok 14:10:43.0995 0x0e00 [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp C:\Windows\system32\drivers\isapnp.sys 14:10:44.0026 0x0e00 isapnp - ok 14:10:44.0057 0x0e00 [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 14:10:44.0088 0x0e00 iScsiPrt - ok 14:10:44.0104 0x0e00 [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 14:10:44.0135 0x0e00 kbdclass - ok 14:10:44.0166 0x0e00 [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 14:10:44.0197 0x0e00 kbdhid - ok 14:10:44.0213 0x0e00 [ BF08DE8E4FA1F143D41B3241F7FCE5F6, 4140BE0ECE0D4B8FDD413DBA120F5D7EF6F94628224320EDA2A85E50BEFDA638 ] KeyIso C:\Windows\system32\lsass.exe 14:10:44.0229 0x0e00 KeyIso - ok 14:10:44.0244 0x0e00 [ EF88BAC2B489D9C46F4E41ACF0219CD0, BF0FAF51BB6D0E588E53E483EF48D8D96B33544113892CC723CDEFAE7E5FB97A ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 14:10:44.0275 0x0e00 KSecDD - ok 14:10:44.0291 0x0e00 [ 49D70660EE8266988C1F99A0297A1430, D17B7A3118DB42358DEA80D8A21C5F1B0CC33BF74F6570676D4708B36BB91FD4 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 14:10:44.0322 0x0e00 KSecPkg - ok 14:10:44.0353 0x0e00 [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm C:\Windows\system32\msdtckrm.dll 14:10:44.0416 0x0e00 KtmRm - ok 14:10:44.0447 0x0e00 [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer C:\Windows\system32\srvsvc.dll 14:10:44.0494 0x0e00 LanmanServer - ok 14:10:44.0525 0x0e00 [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 14:10:44.0556 0x0e00 LanmanWorkstation - ok 14:10:44.0619 0x0e00 [ 5CF3787D3109D8B7C0A68BDDE0F351E2, 6E942199C4B74E910B706876493E16D1C3487102CC480E8639401A34FB941D88 ] LBTServ C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe 14:10:44.0650 0x0e00 LBTServ - ok 14:10:44.0681 0x0e00 [ 6FD6EE66E95A6539B35E42A3938FFB41, DCC9B6D6C5EE43B9875386FECB2BADF34899EBDC4B180E3C02FD3F075628814E ] LEqdUsb C:\Windows\system32\Drivers\LEqdUsb.Sys 14:10:44.0697 0x0e00 LEqdUsb - ok 14:10:44.0712 0x0e00 [ 06E86870F3370B1D64882D950FC00B1A, 19E96F05748FE69EA40DF5286733B15BDEA3F2C04812D8853D70AB08DAB97BFA ] LHidEqd C:\Windows\system32\Drivers\LHidEqd.Sys 14:10:44.0728 0x0e00 LHidEqd - ok 14:10:44.0743 0x0e00 [ B9E077D03FCCD05A8829DC5E0653E60B, 4752C4D77D2E9FFE82F1151289A78EB238F434795655F392BC1B749A7B695B33 ] LHidFilt C:\Windows\system32\DRIVERS\LHidFilt.Sys 14:10:44.0775 0x0e00 LHidFilt - ok 14:10:44.0806 0x0e00 [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 14:10:44.0837 0x0e00 lltdio - ok 14:10:44.0868 0x0e00 [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc C:\Windows\System32\lltdsvc.dll 14:10:44.0899 0x0e00 lltdsvc - ok 14:10:44.0931 0x0e00 [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts C:\Windows\System32\lmhsvc.dll 14:10:44.0962 0x0e00 lmhosts - ok 14:10:44.0977 0x0e00 [ FBB88DD2236B263FF412AA7067BDFEE6, 8F6347B8CE4C5175208D45B60B04878886D955F90B37AFD33E414E795D68D8CC ] LMouFilt C:\Windows\system32\DRIVERS\LMouFilt.Sys 14:10:45.0009 0x0e00 LMouFilt - ok 14:10:45.0040 0x0e00 [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 14:10:45.0071 0x0e00 LSI_FC - ok 14:10:45.0087 0x0e00 [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 14:10:45.0118 0x0e00 LSI_SAS - ok 14:10:45.0118 0x0e00 [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 14:10:45.0133 0x0e00 LSI_SAS2 - ok 14:10:45.0149 0x0e00 [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 14:10:45.0165 0x0e00 LSI_SCSI - ok 14:10:45.0180 0x0e00 [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv C:\Windows\system32\drivers\luafv.sys 14:10:45.0211 0x0e00 luafv - ok 14:10:45.0289 0x0e00 [ EEB18645DB3CA244F09821C7D7EC8A6B, 4949C5B59197332086C35DB7D0743861B3903F89468B12C647721CB4B6C0DE96 ] LUsbFilt C:\Windows\system32\Drivers\LUsbFilt.Sys 14:10:45.0352 0x0e00 LUsbFilt - ok 14:10:45.0430 0x0e00 [ A3F4391DFDF2F9E9FE4EAD193265A5AD, A60A1A345622F4758181FB0B6EE784B0B718105FEE7B0F6FEDE5AD59FE448EE1 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 14:10:45.0445 0x0e00 MBAMProtector - ok 14:10:45.0539 0x0e00 [ 0BB29DE40C9D9529793DCDB59A43CF5B, 251001A407D32EF22F64915EEFFAAEC229073C4549BF7D9D1D4209B7D15B4681 ] MBAMScheduler C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe 14:10:45.0617 0x0e00 MBAMScheduler - ok 14:10:45.0679 0x0e00 [ 5F82D8188B370B0CF185D4AE2B9B4A0E, 549B53DD989A069E1C38347C4CEF5283DF9B428CE102799B06A20D3D8F23825F ] MBAMService C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe 14:10:45.0726 0x0e00 MBAMService - ok 14:10:45.0757 0x0e00 [ 312CD3307F600E7CD340B79B3DCB3A01, 861A6DFC53C69743129DAAFE73DECDE8D842475503E8D713E7CE5D22AC8D1370 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys 14:10:45.0789 0x0e00 MBAMWebAccessControl - ok 14:10:45.0820 0x0e00 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 14:10:45.0835 0x0e00 Mcx2Svc - ok 14:10:45.0867 0x0e00 [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 14:10:45.0882 0x0e00 megasas - ok 14:10:45.0913 0x0e00 [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 14:10:45.0929 0x0e00 MegaSR - ok 14:10:45.0945 0x0e00 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS C:\Windows\system32\mmcss.dll 14:10:45.0991 0x0e00 MMCSS - ok 14:10:46.0007 0x0e00 [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem C:\Windows\system32\drivers\modem.sys 14:10:46.0038 0x0e00 Modem - ok 14:10:46.0054 0x0e00 [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor C:\Windows\system32\DRIVERS\monitor.sys 14:10:46.0085 0x0e00 monitor - ok 14:10:46.0101 0x0e00 [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 14:10:46.0132 0x0e00 mouclass - ok 14:10:46.0147 0x0e00 [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 14:10:46.0163 0x0e00 mouhid - ok 14:10:46.0194 0x0e00 [ FC8771F45ECCCFD89684E38842539B9B, 806DDF2B4830CA866582FE74A521BB7DF26CA0E19013DAF584D3677FB48CC77A ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 14:10:46.0225 0x0e00 mountmgr - ok 14:10:46.0257 0x0e00 [ 345477F02C308B7480702767218C86A2, 98AFB5CF35BD82BA44B8F52CBC5FA3760506ADD7892C2AA1A77E8DF71FC8523F ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 14:10:46.0288 0x0e00 MozillaMaintenance - ok 14:10:46.0303 0x0e00 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio C:\Windows\system32\drivers\mpio.sys 14:10:46.0335 0x0e00 mpio - ok 14:10:46.0350 0x0e00 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 14:10:46.0413 0x0e00 mpsdrv - ok 14:10:46.0444 0x0e00 [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc C:\Windows\system32\mpssvc.dll 14:10:46.0506 0x0e00 MpsSvc - ok 14:10:46.0537 0x0e00 [ 03F899F521D2AAED1C55008F734DF252, 4E56A51476A13F5630719018037B1F63DF9ACEA1CFE782AF04E669BD696954C5 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 14:10:46.0584 0x0e00 MRxDAV - ok 14:10:46.0615 0x0e00 [ 5D16C921E3671636C0EBA3BBAAC5FD25, 5BC107B95CAFC88F51FBB9F657B99944B20627A2B618F263093D7045E4FFD65C ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 14:10:46.0678 0x0e00 mrxsmb - ok 14:10:46.0709 0x0e00 [ 6D17A4791ACA19328C685D256349FEFC, 012AA3D84EEAAF53780D06D2D11B9727DFC3441F3FAD75BC9E751FB814403668 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 14:10:46.0756 0x0e00 mrxsmb10 - ok 14:10:46.0771 0x0e00 [ B81F204D146000BE76651A50670A5E9E, 78193D0F967BE9829E53F9B500342934B4B1E1F4CEFC444382959E2061BC3B17 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 14:10:46.0787 0x0e00 mrxsmb20 - ok 14:10:46.0803 0x0e00 [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci C:\Windows\system32\drivers\msahci.sys 14:10:46.0818 0x0e00 msahci - ok 14:10:46.0834 0x0e00 [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm C:\Windows\system32\drivers\msdsm.sys 14:10:46.0865 0x0e00 msdsm - ok 14:10:46.0881 0x0e00 [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC C:\Windows\System32\msdtc.exe 14:10:46.0897 0x0e00 MSDTC - ok 14:10:46.0928 0x0e00 [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs C:\Windows\system32\drivers\Msfs.sys 14:10:46.0975 0x0e00 Msfs - ok 14:10:46.0975 0x0e00 [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 14:10:47.0021 0x0e00 mshidkmdf - ok 14:10:47.0037 0x0e00 [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 14:10:47.0068 0x0e00 msisadrv - ok 14:10:47.0099 0x0e00 [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI C:\Windows\system32\iscsiexe.dll 14:10:47.0146 0x0e00 MSiSCSI - ok 14:10:47.0146 0x0e00 msiserver - ok 14:10:47.0177 0x0e00 [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 14:10:47.0209 0x0e00 MSKSSRV - ok 14:10:47.0224 0x0e00 [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 14:10:47.0271 0x0e00 MSPCLOCK - ok 14:10:47.0287 0x0e00 [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 14:10:47.0302 0x0e00 MSPQM - ok 14:10:47.0318 0x0e00 [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 14:10:47.0349 0x0e00 MsRPC - ok 14:10:47.0365 0x0e00 [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 14:10:47.0380 0x0e00 mssmbios - ok 14:10:47.0380 0x0e00 [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 14:10:47.0411 0x0e00 MSTEE - ok 14:10:47.0427 0x0e00 [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 14:10:47.0458 0x0e00 MTConfig - ok 14:10:47.0474 0x0e00 [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup C:\Windows\system32\Drivers\mup.sys 14:10:47.0505 0x0e00 Mup - ok 14:10:47.0536 0x0e00 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent C:\Windows\system32\qagentRT.dll 14:10:47.0583 0x0e00 napagent - ok 14:10:47.0739 0x0e00 [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 14:10:47.0833 0x0e00 NativeWifiP - ok 14:10:47.0864 0x0e00 [ 8C9C922D71F1CD4DEF73F186416B7896, 15FF43CD90C7913F83B35F2E7986561584588E8A45196EBD965C3A355836A9C7 ] NDIS C:\Windows\system32\drivers\ndis.sys 14:10:47.0911 0x0e00 NDIS - ok 14:10:47.0942 0x0e00 [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 14:10:47.0973 0x0e00 NdisCap - ok 14:10:47.0989 0x0e00 [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 14:10:48.0035 0x0e00 NdisTapi - ok 14:10:48.0051 0x0e00 [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 14:10:48.0098 0x0e00 Ndisuio - ok 14:10:48.0113 0x0e00 [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 14:10:48.0160 0x0e00 NdisWan - ok 14:10:48.0176 0x0e00 [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 14:10:48.0223 0x0e00 NDProxy - ok 14:10:48.0238 0x0e00 [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 14:10:48.0285 0x0e00 NetBIOS - ok 14:10:48.0316 0x0e00 [ 280122DDCF04B378EDD1AD54D71C1E54, F98B2ADE34F7E67C7C06C1D0FFB80ECBC353D044D4B4784CD952910345DC2ED0 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 14:10:48.0347 0x0e00 NetBT - ok 14:10:48.0363 0x0e00 [ BF08DE8E4FA1F143D41B3241F7FCE5F6, 4140BE0ECE0D4B8FDD413DBA120F5D7EF6F94628224320EDA2A85E50BEFDA638 ] Netlogon C:\Windows\system32\lsass.exe 14:10:48.0379 0x0e00 Netlogon - ok 14:10:48.0394 0x0e00 [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman C:\Windows\System32\netman.dll 14:10:48.0441 0x0e00 Netman - ok 14:10:48.0457 0x0e00 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 14:10:48.0488 0x0e00 NetMsmqActivator - ok 14:10:48.0519 0x0e00 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 14:10:48.0535 0x0e00 NetPipeActivator - ok 14:10:48.0566 0x0e00 [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm C:\Windows\System32\netprofm.dll 14:10:48.0597 0x0e00 netprofm - ok 14:10:48.0613 0x0e00 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 14:10:48.0644 0x0e00 NetTcpActivator - ok 14:10:48.0644 0x0e00 [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 14:10:48.0659 0x0e00 NetTcpPortSharing - ok 14:10:48.0706 0x0e00 [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 14:10:48.0737 0x0e00 nfrd960 - ok 14:10:48.0753 0x0e00 [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc C:\Windows\System32\nlasvc.dll 14:10:48.0800 0x0e00 NlaSvc - ok 14:10:48.0815 0x0e00 [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs C:\Windows\system32\drivers\Npfs.sys 14:10:48.0862 0x0e00 Npfs - ok 14:10:48.0878 0x0e00 [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi C:\Windows\system32\nsisvc.dll 14:10:48.0893 0x0e00 nsi - ok 14:10:48.0909 0x0e00 [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 14:10:48.0940 0x0e00 nsiproxy - ok 14:10:48.0987 0x0e00 [ C8DFF8D07755A66C7A4A738930F0FEAC, A2CC58312CE57988ABD976155BE91F558DCEC4C23481C6FBE64B361D511A36EA ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 14:10:49.0081 0x0e00 Ntfs - ok 14:10:49.0096 0x0e00 [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null C:\Windows\system32\drivers\Null.sys 14:10:49.0143 0x0e00 Null - ok 14:10:49.0455 0x0e00 [ 1E3D32DDBE6BBDC0843432BAD599069F, 908893652F953C01E3FFEA19E76154B6246277720B088A61086A9B336B3EC6AD ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys 14:10:49.0814 0x0e00 nvlddmkm - ok 14:10:49.0861 0x0e00 [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid C:\Windows\system32\drivers\nvraid.sys 14:10:49.0892 0x0e00 nvraid - ok 14:10:49.0907 0x0e00 [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor C:\Windows\system32\drivers\nvstor.sys 14:10:49.0954 0x0e00 nvstor - ok 14:10:50.0001 0x0e00 [ 5004DAF6A37C5C73FFCF4D3935A6FE87, 52F2149383EC41B18310801FD07C1363EE81C5D1F2B0206460FC7922C00D7A15 ] nvsvc C:\Windows\system32\nvvsvc.exe 14:10:50.0048 0x0e00 nvsvc - ok 14:10:50.0063 0x0e00 [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 14:10:50.0095 0x0e00 nv_agp - ok 14:10:50.0110 0x0e00 [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 14:10:50.0126 0x0e00 ohci1394 - ok 14:10:50.0204 0x0e00 [ 2B8E4C792BED0E5882702720BC528AE5, 6D7CB027BC6014CB268C49B46049CDFF3BA94D07102A65BD053335A28E83D125 ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 14:10:50.0235 0x0e00 ose - ok 14:10:50.0422 0x0e00 [ EE5756BDA5BE5891270E0CC6CEC44096, EA18073EEE0F461B14C539D49A7DD91D33AB0C503236F67F70A000835FAAC890 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 14:10:50.0594 0x0e00 osppsvc - ok 14:10:50.0625 0x0e00 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 14:10:50.0703 0x0e00 p2pimsvc - ok 14:10:50.0719 0x0e00 [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc C:\Windows\system32\p2psvc.dll 14:10:50.0734 0x0e00 p2psvc - ok 14:10:50.0765 0x0e00 [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport C:\Windows\system32\DRIVERS\parport.sys 14:10:50.0797 0x0e00 Parport - ok 14:10:50.0812 0x0e00 [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr C:\Windows\system32\drivers\partmgr.sys 14:10:50.0843 0x0e00 partmgr - ok 14:10:50.0859 0x0e00 [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys 14:10:50.0875 0x0e00 Parvdm - ok 14:10:50.0890 0x0e00 [ 358AB7956D3160000726574083DFC8A6, 6CAFD4D1B8AB8C1D167ADC018985DDAB5AC2CBFFB3434FE6390F14AF50C19025 ] PcaSvc C:\Windows\System32\pcasvc.dll 14:10:50.0953 0x0e00 PcaSvc - ok 14:10:50.0968 0x0e00 [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci C:\Windows\system32\drivers\pci.sys 14:10:50.0984 0x0e00 pci - ok 14:10:50.0999 0x0e00 [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide C:\Windows\system32\drivers\pciide.sys 14:10:51.0031 0x0e00 pciide - ok 14:10:51.0062 0x0e00 [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 14:10:51.0093 0x0e00 pcmcia - ok 14:10:51.0109 0x0e00 [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw C:\Windows\system32\drivers\pcw.sys 14:10:51.0124 0x0e00 pcw - ok 14:10:51.0155 0x0e00 [ 9E0104BA49F4E6973749A02BF41344ED, B32F39F38DB48D77FBA884DEE34112BAB81CCEF5DD2EAAA12D9589D73D2BB116 ] PEAUTH C:\Windows\system32\drivers\peauth.sys 14:10:51.0249 0x0e00 PEAUTH - ok 14:10:51.0296 0x0e00 [ AF4D64D2A57B9772CF3801950B8058A6, C9C493A3775E6E1660CE5DF75DA574D0C04245FB88CF41B96217A725359C350D ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll 14:10:51.0358 0x0e00 PeerDistSvc - ok 14:10:51.0421 0x0e00 [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla C:\Windows\system32\pla.dll 14:10:51.0514 0x0e00 pla - ok 14:10:51.0545 0x0e00 [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay C:\Windows\system32\umpnpmgr.dll 14:10:51.0608 0x0e00 PlugPlay - ok 14:10:51.0623 0x0e00 [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 14:10:51.0639 0x0e00 PNRPAutoReg - ok 14:10:51.0670 0x0e00 [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 14:10:51.0686 0x0e00 PNRPsvc - ok 14:10:51.0717 0x0e00 [ 53946B69BA0836BD95B03759530C81EC, 7F14A34635354CCA0F5342C8D9DF5A6AA1B94F6A508BD8834029E9BACF252920 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 14:10:51.0779 0x0e00 PolicyAgent - ok 14:10:51.0795 0x0e00 [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power C:\Windows\system32\umpo.dll 14:10:51.0811 0x0e00 Power - ok 14:10:51.0842 0x0e00 [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 14:10:51.0889 0x0e00 PptpMiniport - ok 14:10:51.0904 0x0e00 [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor C:\Windows\system32\DRIVERS\processr.sys 14:10:51.0935 0x0e00 Processor - ok 14:10:51.0951 0x0e00 [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc C:\Windows\system32\profsvc.dll 14:10:52.0013 0x0e00 ProfSvc - ok 14:10:52.0029 0x0e00 [ BF08DE8E4FA1F143D41B3241F7FCE5F6, 4140BE0ECE0D4B8FDD413DBA120F5D7EF6F94628224320EDA2A85E50BEFDA638 ] ProtectedStorage C:\Windows\system32\lsass.exe 14:10:52.0029 0x0e00 ProtectedStorage - ok 14:10:52.0076 0x0e00 [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched C:\Windows\system32\DRIVERS\pacer.sys 14:10:52.0107 0x0e00 Psched - ok 14:10:52.0154 0x0e00 [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 14:10:52.0279 0x0e00 ql2300 - ok 14:10:52.0294 0x0e00 [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 14:10:52.0325 0x0e00 ql40xx - ok 14:10:52.0357 0x0e00 [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE C:\Windows\system32\qwave.dll 14:10:52.0403 0x0e00 QWAVE - ok 14:10:52.0419 0x0e00 [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 14:10:52.0450 0x0e00 QWAVEdrv - ok 14:10:52.0466 0x0e00 [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 14:10:52.0513 0x0e00 RasAcd - ok 14:10:52.0544 0x0e00 [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 14:10:52.0591 0x0e00 RasAgileVpn - ok 14:10:52.0606 0x0e00 [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto C:\Windows\System32\rasauto.dll 14:10:52.0653 0x0e00 RasAuto - ok 14:10:52.0669 0x0e00 [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 14:10:52.0715 0x0e00 Rasl2tp - ok 14:10:52.0747 0x0e00 [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan C:\Windows\System32\rasmans.dll 14:10:52.0793 0x0e00 RasMan - ok 14:10:52.0809 0x0e00 [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 14:10:52.0871 0x0e00 RasPppoe - ok 14:10:52.0903 0x0e00 [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 14:10:52.0934 0x0e00 RasSstp - ok 14:10:52.0949 0x0e00 [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 14:10:53.0012 0x0e00 rdbss - ok 14:10:53.0027 0x0e00 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 14:10:53.0059 0x0e00 rdpbus - ok 14:10:53.0074 0x0e00 [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 14:10:53.0105 0x0e00 RDPCDD - ok 14:10:53.0137 0x0e00 [ B973FCFC50DC1434E1970A146F7E3885, BE797E5F5AE34D37F8DA1134CE94DD14DBE36D2BC405B97E992E2257848B7CA9 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys 14:10:53.0199 0x0e00 RDPDR - ok 14:10:53.0230 0x0e00 [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 14:10:53.0261 0x0e00 RDPENCDD - ok 14:10:53.0277 0x0e00 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 14:10:53.0308 0x0e00 RDPREFMP - ok 14:10:53.0355 0x0e00 [ 65375DF758CA1872AB7EBBBA457FD5E6, 8AC7681F51277E799C22FF95FA0B833E9E260D37C0416319FF05B66FB3948005 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 14:10:53.0402 0x0e00 RdpVideoMiniport - ok 14:10:53.0433 0x0e00 [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 14:10:53.0480 0x0e00 RDPWD - ok 14:10:53.0527 0x0e00 [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 14:10:53.0558 0x0e00 rdyboost - ok 14:10:53.0589 0x0e00 [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess C:\Windows\System32\mprdim.dll 14:10:53.0605 0x0e00 RemoteAccess - ok 14:10:53.0636 0x0e00 [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry C:\Windows\system32\regsvc.dll 14:10:53.0667 0x0e00 RemoteRegistry - ok 14:10:53.0683 0x0e00 [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 14:10:53.0729 0x0e00 RpcEptMapper - ok 14:10:53.0745 0x0e00 [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator C:\Windows\system32\locator.exe 14:10:53.0761 0x0e00 RpcLocator - ok 14:10:53.0792 0x0e00 [ 7660F01D3B38ACA1747E397D21D790AF, 04611B43705C064C2A8331F6D3F8E4530295694AE2C3E3EC3F62CFF4A5EFA88D ] RpcSs C:\Windows\system32\rpcss.dll 14:10:53.0823 0x0e00 RpcSs - ok 14:10:53.0870 0x0e00 [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 14:10:53.0917 0x0e00 rspndr - ok 14:10:53.0932 0x0e00 [ 7FA7F2E249A5DCBB7970630E15E1F482, 9633B193F3FDA67BC551C6DCA4788AB83E9F45F77763EE579D02FE5D6B80DEDF ] s3cap C:\Windows\system32\drivers\vms3cap.sys 14:10:54.0010 0x0e00 s3cap - ok 14:10:54.0010 0x0e00 [ BF08DE8E4FA1F143D41B3241F7FCE5F6, 4140BE0ECE0D4B8FDD413DBA120F5D7EF6F94628224320EDA2A85E50BEFDA638 ] SamSs C:\Windows\system32\lsass.exe 14:10:54.0026 0x0e00 SamSs - ok 14:10:54.0041 0x0e00 [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 14:10:54.0073 0x0e00 sbp2port - ok 14:10:54.0088 0x0e00 [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr C:\Windows\System32\SCardSvr.dll 14:10:54.0135 0x0e00 SCardSvr - ok 14:10:54.0151 0x0e00 [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 14:10:54.0182 0x0e00 scfilter - ok 14:10:54.0244 0x0e00 [ A04BB13F8A72F8B6E8B4071723E4E336, E63287FF71C39CBF64C3347C455324C8437F9CF398153E269543588B65389502 ] Schedule C:\Windows\system32\schedsvc.dll 14:10:54.0291 0x0e00 Schedule - ok 14:10:54.0307 0x0e00 [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc C:\Windows\System32\certprop.dll 14:10:54.0322 0x0e00 SCPolicySvc - ok 14:10:54.0353 0x0e00 [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC C:\Windows\System32\SDRSVC.dll 14:10:54.0400 0x0e00 SDRSVC - ok 14:10:54.0478 0x0e00 [ D777F1417D9BB9F66CD9D9C3B61F730F, 0CBD830EB9D2B0F1946131F20907793B2D68A3BCEEC3EA5416972149F73DC815 ] SDScannerService C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe 14:10:54.0556 0x0e00 SDScannerService - ok 14:10:54.0619 0x0e00 [ 68D6C7F99BC73B88954D844FCCBEB2A0, F746861B103C8BE8EA234B9FCFBBDD2412C79FB65F2F1E0F5E6EBC0B34905FF1 ] SDUpdateService C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe 14:10:54.0775 0x0e00 SDUpdateService - ok 14:10:54.0806 0x0e00 [ 9B9B368A8FF5CAF91D7A333CF62CD2CC, A4AE7FFBBAF983BFDE15B521ED162CBC4E6FC85BCDB200C75D45878B3FFDFA68 ] SDWSCService C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe 14:10:54.0821 0x0e00 SDWSCService - ok 14:10:54.0837 0x0e00 [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv C:\Windows\system32\drivers\secdrv.sys 14:10:54.0868 0x0e00 secdrv - ok 14:10:54.0899 0x0e00 [ A59B3A4442C52060CC7A85293AA3546F, 1776D6DEE51991149265AAF39E17065E301C5FA1FF4068653DC0010B9B27185D ] seclogon C:\Windows\system32\seclogon.dll 14:10:54.0946 0x0e00 seclogon - ok 14:10:54.0946 0x0e00 [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS C:\Windows\System32\sens.dll 14:10:54.0977 0x0e00 SENS - ok 14:10:55.0009 0x0e00 [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc C:\Windows\system32\sensrsvc.dll 14:10:55.0071 0x0e00 SensrSvc - ok 14:10:55.0087 0x0e00 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 14:10:55.0102 0x0e00 Serenum - ok 14:10:55.0118 0x0e00 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial C:\Windows\system32\DRIVERS\serial.sys 14:10:55.0149 0x0e00 Serial - ok 14:10:55.0165 0x0e00 [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 14:10:55.0180 0x0e00 sermouse - ok 14:10:55.0212 0x0e00 [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv C:\Windows\system32\sessenv.dll 14:10:55.0274 0x0e00 SessionEnv - ok 14:10:55.0305 0x0e00 [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 14:10:55.0336 0x0e00 sffdisk - ok 14:10:55.0336 0x0e00 [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 14:10:55.0368 0x0e00 sffp_mmc - ok 14:10:55.0368 0x0e00 [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 14:10:55.0399 0x0e00 sffp_sd - ok 14:10:55.0414 0x0e00 [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 14:10:55.0461 0x0e00 sfloppy - ok 14:10:55.0508 0x0e00 [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess C:\Windows\System32\ipnathlp.dll 14:10:55.0555 0x0e00 SharedAccess - ok 14:10:55.0586 0x0e00 [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll 14:10:55.0633 0x0e00 ShellHWDetection - ok 14:10:55.0648 0x0e00 [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp C:\Windows\system32\drivers\sisagp.sys 14:10:55.0680 0x0e00 sisagp - ok 14:10:55.0711 0x0e00 [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 14:10:55.0726 0x0e00 SiSRaid2 - ok 14:10:55.0726 0x0e00 [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 14:10:55.0758 0x0e00 SiSRaid4 - ok 14:10:55.0773 0x0e00 [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb C:\Windows\system32\DRIVERS\smb.sys 14:10:55.0820 0x0e00 Smb - ok 14:10:55.0851 0x0e00 [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP C:\Windows\System32\snmptrap.exe 14:10:55.0867 0x0e00 SNMPTRAP - ok 14:10:55.0898 0x0e00 [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr C:\Windows\system32\drivers\spldr.sys 14:10:55.0914 0x0e00 spldr - ok 14:10:55.0945 0x0e00 [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler C:\Windows\System32\spoolsv.exe 14:10:56.0007 0x0e00 Spooler - ok 14:10:56.0132 0x0e00 [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc C:\Windows\system32\sppsvc.exe 14:10:56.0257 0x0e00 sppsvc - ok 14:10:56.0288 0x0e00 [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify C:\Windows\system32\sppuinotify.dll 14:10:56.0319 0x0e00 sppuinotify - ok 14:10:56.0350 0x0e00 [ E4C2764065D66EA1D2D3EBC28FE99C46, 043AEF06A23069DD17675955C834690A5FD8F1948A05B3969F977E823C4E25F5 ] srv C:\Windows\system32\DRIVERS\srv.sys 14:10:56.0444 0x0e00 srv - ok 14:10:56.0475 0x0e00 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB, 4DF31206DF8F33C2975E23C7257ED930C4EDA8BC4E246D8FDA130BB583083ED0 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 14:10:56.0522 0x0e00 srv2 - ok 14:10:56.0538 0x0e00 [ BE6BD660CAA6F291AE06A718A4FA8ABC, CD38939CFBA80B882D38099194FC1EBAE15A9D27A4D941DD03C55EC745E52E59 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 14:10:56.0569 0x0e00 srvnet - ok 14:10:56.0600 0x0e00 [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 14:10:56.0631 0x0e00 SSDPSRV - ok 14:10:56.0662 0x0e00 [ A36EE93698802CD899F98BFD553D8185, 224CFED921EA230FF8025D259E34968FD2C0FD34BB3A918FB4B9B8BA42BEA5D3 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys 14:10:56.0694 0x0e00 ssmdrv - ok 14:10:56.0709 0x0e00 [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc C:\Windows\system32\sstpsvc.dll 14:10:56.0740 0x0e00 SstpSvc - ok 14:10:56.0803 0x0e00 [ 3BF022F8064A83A23DF90971DD78CA83, 85754DF1C6DE745ADF9A0BAB1948AFF2CA16C4569128DA90AF610D199E621BF4 ] StarMoney 9.0 OnlineUpdate C:\Program Files\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe 14:10:56.0865 0x0e00 StarMoney 9.0 OnlineUpdate - ok 14:10:56.0928 0x0e00 [ 5DA84663B5DC64AF9D5E944D809A6099, C5D427F019081BF93C08391845E7B22A9AFCE7D3A6E6F8EA1F36566F05F9843E ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 14:10:56.0974 0x0e00 Stereo Service - ok 14:10:57.0006 0x0e00 [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 14:10:57.0037 0x0e00 stexstor - ok 14:10:57.0068 0x0e00 [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc C:\Windows\System32\wiaservc.dll 14:10:57.0115 0x0e00 StiSvc - ok 14:10:57.0146 0x0e00 [ 472AF0311073DCECEAA8FA18BA2BDF89, 089414057EB2047E42C96C1ACE79D509967461DC5A4D2836F63C04268637A3FC ] storflt C:\Windows\system32\drivers\vmstorfl.sys 14:10:57.0177 0x0e00 storflt - ok 14:10:57.0193 0x0e00 [ 0BF669F0A910BEDA4A32258D363AF2A5, 83EEBACDE4F69A2866B69CAA633F5C8B3CB01D88CEDB01B6EA5988E0A25CEE47 ] StorSvc C:\Windows\system32\storsvc.dll 14:10:57.0240 0x0e00 StorSvc - ok 14:10:57.0255 0x0e00 [ DCAFFD62259E0BDB433DD67B5BB37619, CBD12FF9BBF33D18B0F3D322B12EC62E7DF3BF45C6AD43D2E91FF4C4762E05D0 ] storvsc C:\Windows\system32\drivers\storvsc.sys 14:10:57.0286 0x0e00 storvsc - ok 14:10:57.0302 0x0e00 [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum C:\Windows\system32\drivers\swenum.sys 14:10:57.0318 0x0e00 swenum - ok 14:10:57.0349 0x0e00 [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv C:\Windows\System32\swprv.dll 14:10:57.0411 0x0e00 swprv - ok 14:10:57.0411 0x0e00 Synth3dVsc - ok 14:10:57.0458 0x0e00 [ 36650D618CA34C9D357DFD3D89B2C56F, 7C3774E53DCF32CB3A4B3504E32D2A651E18467FA0A6AC4C7993C696741B704B ] SysMain C:\Windows\system32\sysmain.dll 14:10:57.0520 0x0e00 SysMain - ok 14:10:57.0552 0x0e00 [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll 14:10:57.0567 0x0e00 TabletInputService - ok 14:10:57.0598 0x0e00 [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv C:\Windows\System32\tapisrv.dll 14:10:57.0645 0x0e00 TapiSrv - ok 14:10:57.0661 0x0e00 [ B799D9FDB26111737F58288D8DC172D9, 409A60819A4305699E2E492A6190637FAAEBD19E745A5DB2A5D6977106C86591 ] TBS C:\Windows\System32\tbssvc.dll 14:10:57.0708 0x0e00 TBS - ok 14:10:57.0754 0x0e00 [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 14:10:57.0879 0x0e00 Tcpip - ok 14:10:57.0942 0x0e00 [ 5579DD18546999F5D0EC39D018726C6B, 82432BACEE75C34F21222D9CC1607223C2940947118A63DB239777A4B1442AD3 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 14:10:57.0973 0x0e00 TCPIP6 - ok 14:10:58.0004 0x0e00 [ 3EEBD3BD93DA46A26E89893C7AB2FF3B, 2C7204DCD2BCBC6A250FF0F6477616F327AF41FDB7CABE69E5C357361009FB4E ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 14:10:58.0020 0x0e00 tcpipreg - ok 14:10:58.0051 0x0e00 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 14:10:58.0098 0x0e00 TDPIPE - ok 14:10:58.0113 0x0e00 [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 14:10:58.0144 0x0e00 TDTCP - ok 14:10:58.0160 0x0e00 [ 7FE680A3DFA421C4A8E4879AE4C5AAB0, A4C64E155AB2843823CD3586756BA7681CFDEA50812095468221503BBAD30DCD ] tdx C:\Windows\system32\DRIVERS\tdx.sys 14:10:58.0222 0x0e00 tdx - ok 14:10:58.0238 0x0e00 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD C:\Windows\system32\drivers\termdd.sys 14:10:58.0269 0x0e00 TermDD - ok 14:10:58.0316 0x0e00 [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService C:\Windows\System32\termsrv.dll 14:10:58.0378 0x0e00 TermService - ok 14:10:58.0410 0x0e00 [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes C:\Windows\system32\themeservice.dll 14:10:58.0441 0x0e00 Themes - ok 14:10:58.0456 0x0e00 [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER C:\Windows\system32\mmcss.dll 14:10:58.0472 0x0e00 THREADORDER - ok 14:10:58.0488 0x0e00 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks C:\Windows\System32\trkwks.dll 14:10:58.0519 0x0e00 TrkWks - ok 14:10:58.0550 0x0e00 [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 14:10:58.0581 0x0e00 TrustedInstaller - ok 14:10:58.0612 0x0e00 [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 14:10:58.0628 0x0e00 tssecsrv - ok 14:10:58.0659 0x0e00 [ C6A5FBD4977305E1FA23E02C042DB463, A6EB5E4B8051A258D40A385609E930318EAA3494C8466F48542B806FE6A7C47A ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 14:10:58.0690 0x0e00 TsUsbFlt - ok 14:10:58.0690 0x0e00 tsusbhub - ok 14:10:58.0815 0x0e00 [ 0374C25E4893C17E9FF4BF8DB09F0F48, C4EE073181A7D0F060154A28A310C4E939E99016658145560BD4B74B20792FA0 ] TuneUp.UtilitiesSvc C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe 14:10:58.0893 0x0e00 TuneUp.UtilitiesSvc - ok 14:10:58.0924 0x0e00 [ E5049C43601473B5A909058596111229, 96CFE481F767C66FA2877594384086C1BE8B2BADBF12DBF4CB72CF73898D0876 ] TuneUpUtilitiesDrv C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys 14:10:58.0940 0x0e00 TuneUpUtilitiesDrv - ok 14:10:58.0971 0x0e00 [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 14:10:59.0065 0x0e00 tunnel - ok 14:10:59.0080 0x0e00 [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 14:10:59.0112 0x0e00 uagp35 - ok 14:10:59.0143 0x0e00 [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 14:10:59.0190 0x0e00 udfs - ok 14:10:59.0205 0x0e00 [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect C:\Windows\system32\UI0Detect.exe 14:10:59.0252 0x0e00 UI0Detect - ok 14:10:59.0268 0x0e00 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 14:10:59.0283 0x0e00 uliagpkx - ok 14:10:59.0314 0x0e00 [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus C:\Windows\system32\drivers\umbus.sys 14:10:59.0346 0x0e00 umbus - ok 14:10:59.0377 0x0e00 [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 14:10:59.0392 0x0e00 UmPass - ok 14:10:59.0408 0x0e00 [ 409994A8EACEEE4E328749C0353527A0, FFC57B647147DE2957A7DE4B330CC534DE7AC892A2FCE3BB164F7A516CAB1B56 ] UmRdpService C:\Windows\System32\umrdp.dll 14:10:59.0439 0x0e00 UmRdpService - ok 14:10:59.0470 0x0e00 [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost C:\Windows\System32\upnphost.dll 14:10:59.0517 0x0e00 upnphost - ok 14:10:59.0564 0x0e00 [ EC1C23779BB41A8B2AB2AA6FCE308BDE, D027A2B472CAE97AECB16F69BE52E06CB61E1C61AE196C22662050B711C1C72D ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys 14:10:59.0626 0x0e00 USBAAPL - ok 14:10:59.0658 0x0e00 [ 0803FBA9FE829D61AE26EC0BCC910C46, 30D00E2C7DFC630C99C1599587D4F9C272BC30D444E07C961AA05BF84587806B ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 14:10:59.0704 0x0e00 usbccgp - ok 14:10:59.0736 0x0e00 [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir C:\Windows\system32\drivers\usbcir.sys 14:10:59.0782 0x0e00 usbcir - ok 14:10:59.0798 0x0e00 [ D40855F89B69305140BBD7E9A3BA2DA6, 745DC6D770666F6B19C2B6AA89C21D1A314732E291453BFA2367F9AF86F97C3C ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 14:10:59.0829 0x0e00 usbehci - ok 14:10:59.0845 0x0e00 [ EDF2DF71C4F1E13A6AC75F5224DE655A, 1764D155C6B99201774B57195349304259232A12868ECFC2069CA49443EBDC2C ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 14:10:59.0892 0x0e00 usbhub - ok 14:10:59.0907 0x0e00 [ 9828C8D14CC2676421778F0DE638CF97, 479A28211FFB85190A01FAB0283B927588805D2C0CDB03F85F8F814B88E4F453 ] usbohci C:\Windows\system32\drivers\usbohci.sys 14:10:59.0938 0x0e00 usbohci - ok 14:10:59.0954 0x0e00 [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 14:11:00.0001 0x0e00 usbprint - ok 14:11:00.0016 0x0e00 [ F991AB9CC6B908DB552166768176896A, AD8E7A16B23B244B7F834622D4E38B5844193C6E31EF96F61E0E2EA16C945026 ] USBSTOR C:\Windows\system32\drivers\USBSTOR.SYS 14:11:00.0063 0x0e00 USBSTOR - ok 14:11:00.0079 0x0e00 [ 800AABFD625EEFF899F7E5496BDE37AB, 3EB7ED07760CB348FCA9A06C2B838EF79B51A83C5F70A9C9EAAEAE54480067E2 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 14:11:00.0126 0x0e00 usbuhci - ok 14:11:00.0141 0x0e00 [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms C:\Windows\System32\uxsms.dll 14:11:00.0172 0x0e00 UxSms - ok 14:11:00.0204 0x0e00 [ 8247E12200B6FA11A87BCD8CEADD4D5E, 191FA4B712E872B087BB917B9E571010E459084410D681551C28F785EB42FDAA ] UxTuneUp C:\Windows\System32\uxtuneup.dll 14:11:00.0235 0x0e00 UxTuneUp - ok 14:11:00.0250 0x0e00 [ BF08DE8E4FA1F143D41B3241F7FCE5F6, 4140BE0ECE0D4B8FDD413DBA120F5D7EF6F94628224320EDA2A85E50BEFDA638 ] VaultSvc C:\Windows\system32\lsass.exe 14:11:00.0266 0x0e00 VaultSvc - ok 14:11:00.0282 0x0e00 [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 14:11:00.0313 0x0e00 vdrvroot - ok 14:11:00.0344 0x0e00 [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds C:\Windows\System32\vds.exe 14:11:00.0406 0x0e00 vds - ok 14:11:00.0422 0x0e00 [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 14:11:00.0453 0x0e00 vga - ok 14:11:00.0469 0x0e00 [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave C:\Windows\System32\drivers\vga.sys 14:11:00.0500 0x0e00 VgaSave - ok 14:11:00.0500 0x0e00 VGPU - ok 14:11:00.0531 0x0e00 [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 14:11:00.0547 0x0e00 vhdmp - ok 14:11:00.0578 0x0e00 [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp C:\Windows\system32\drivers\viaagp.sys 14:11:00.0609 0x0e00 viaagp - ok 14:11:00.0609 0x0e00 [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys 14:11:00.0656 0x0e00 ViaC7 - ok 14:11:00.0672 0x0e00 [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide C:\Windows\system32\drivers\viaide.sys 14:11:00.0734 0x0e00 viaide - ok 14:11:00.0765 0x0e00 [ C2F2911156FDC7817C52829C86DA494E, FE499F189B5016FCE0018AA3DE3970B72275B7B15F3D4D608117F6DDEC6B90DC ] vmbus C:\Windows\system32\drivers\vmbus.sys 14:11:00.0828 0x0e00 vmbus - ok 14:11:00.0828 0x0e00 [ D4D77455211E204F370D08F4963063CE, 2018B2A84C73E0834200A594C02A9D28C74906F126DAD3CCDDFC9CD9A61669E2 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys 14:11:00.0874 0x0e00 VMBusHID - ok 14:11:00.0874 0x0e00 [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr C:\Windows\system32\drivers\volmgr.sys 14:11:00.0906 0x0e00 volmgr - ok 14:11:00.0937 0x0e00 [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 14:11:00.0968 0x0e00 volmgrx - ok 14:11:00.0984 0x0e00 [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap C:\Windows\system32\drivers\volsnap.sys 14:11:01.0077 0x0e00 volsnap - ok 14:11:01.0108 0x0e00 [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 14:11:01.0140 0x0e00 vsmraid - ok 14:11:01.0202 0x0e00 [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS C:\Windows\system32\vssvc.exe 14:11:01.0264 0x0e00 VSS - ok 14:11:01.0264 0x0e00 [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys 14:11:01.0311 0x0e00 vwifibus - ok 14:11:01.0342 0x0e00 [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time C:\Windows\system32\w32time.dll 14:11:01.0405 0x0e00 W32Time - ok 14:11:01.0436 0x0e00 [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 14:11:01.0467 0x0e00 WacomPen - ok 14:11:01.0483 0x0e00 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 14:11:01.0514 0x0e00 WANARP - ok 14:11:01.0514 0x0e00 [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 14:11:01.0545 0x0e00 Wanarpv6 - ok 14:11:01.0576 0x0e00 [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine C:\Windows\system32\wbengine.exe 14:11:01.0826 0x0e00 wbengine - ok 14:11:01.0873 0x0e00 [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 14:11:01.0920 0x0e00 WbioSrvc - ok 14:11:01.0951 0x0e00 [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc C:\Windows\System32\wcncsvc.dll 14:11:01.0998 0x0e00 wcncsvc - ok 14:11:02.0013 0x0e00 [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 14:11:02.0060 0x0e00 WcsPlugInService - ok 14:11:02.0076 0x0e00 [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd C:\Windows\system32\DRIVERS\wd.sys 14:11:02.0107 0x0e00 Wd - ok 14:11:02.0138 0x0e00 [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 14:11:02.0185 0x0e00 Wdf01000 - ok 14:11:02.0216 0x0e00 [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost C:\Windows\system32\wdi.dll 14:11:02.0263 0x0e00 WdiServiceHost - ok 14:11:02.0263 0x0e00 [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost C:\Windows\system32\wdi.dll 14:11:02.0278 0x0e00 WdiSystemHost - ok 14:11:02.0294 0x0e00 [ 75E8EBD7040CE238684333F97014762A, 2CA0B267FBAEB303D1F8B639D733DC0DE17BA1276CC9096035B4F2BBBED3EF7F ] WebClient C:\Windows\System32\webclnt.dll 14:11:02.0341 0x0e00 WebClient - ok 14:11:02.0372 0x0e00 [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc C:\Windows\system32\wecsvc.dll 14:11:02.0403 0x0e00 Wecsvc - ok 14:11:02.0419 0x0e00 [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport C:\Windows\System32\wercplsupport.dll 14:11:02.0466 0x0e00 wercplsupport - ok 14:11:02.0497 0x0e00 [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc C:\Windows\System32\WerSvc.dll 14:11:02.0528 0x0e00 WerSvc - ok 14:11:02.0544 0x0e00 [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 14:11:02.0575 0x0e00 WfpLwf - ok 14:11:02.0590 0x0e00 [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount C:\Windows\system32\drivers\wimmount.sys 14:11:02.0606 0x0e00 WIMMount - ok 14:11:02.0668 0x0e00 [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll 14:11:02.0731 0x0e00 WinDefend - ok 14:11:02.0746 0x0e00 WinHttpAutoProxySvc - ok 14:11:02.0793 0x0e00 [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 14:11:02.0840 0x0e00 Winmgmt - ok 14:11:02.0887 0x0e00 [ 1DE9BD23AFA36150586C732D876D9B74, 32CF2C8EC18CFDA677AB72A182EB4B839DCC72BFCD6CA309BE2F434991CAE973 ] WinRM C:\Windows\system32\WsmSvc.dll 14:11:02.0965 0x0e00 WinRM - ok 14:11:03.0012 0x0e00 [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc C:\Windows\System32\wlansvc.dll 14:11:03.0074 0x0e00 Wlansvc - ok 14:11:03.0090 0x0e00 [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 14:11:03.0121 0x0e00 WmiAcpi - ok 14:11:03.0152 0x0e00 [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 14:11:03.0183 0x0e00 wmiApSrv - ok 14:11:03.0246 0x0e00 [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe 14:11:03.0324 0x0e00 WMPNetworkSvc - ok 14:11:03.0339 0x0e00 [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc C:\Windows\System32\wpcsvc.dll 14:11:03.0370 0x0e00 WPCSvc - ok 14:11:03.0402 0x0e00 [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 14:11:03.0433 0x0e00 WPDBusEnum - ok 14:11:03.0448 0x0e00 [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 14:11:03.0495 0x0e00 ws2ifsl - ok 14:11:03.0511 0x0e00 [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc C:\Windows\System32\wscsvc.dll 14:11:03.0526 0x0e00 wscsvc - ok 14:11:03.0542 0x0e00 WSearch - ok 14:11:03.0604 0x0e00 [ D9B0134913E5EF007AF82A418C503322, 7418DD28C8E968674382F8352AAFFC4DE77887E2B71B8844D615F19432B4C55A ] wuauserv C:\Windows\system32\wuaueng.dll 14:11:03.0682 0x0e00 wuauserv - ok 14:11:03.0714 0x0e00 [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 14:11:03.0776 0x0e00 WudfPf - ok 14:11:03.0807 0x0e00 [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 14:11:03.0870 0x0e00 WUDFRd - ok 14:11:03.0885 0x0e00 [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc C:\Windows\System32\WUDFSvc.dll 14:11:03.0916 0x0e00 wudfsvc - ok 14:11:03.0932 0x0e00 [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc C:\Windows\System32\wwansvc.dll 14:11:03.0994 0x0e00 WwanSvc - ok 14:11:04.0010 0x0e00 ================ Scan global =============================== 14:11:04.0026 0x0e00 [ DAB748AE0439955ED2FA22357533DDDB, 73EDD402C7479DDCE1998D0C7E99E1EC2974F64EFC33A851439CC85D09EDCDF9 ] C:\Windows\system32\basesrv.dll 14:11:04.0057 0x0e00 [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll 14:11:04.0072 0x0e00 [ 51BB04243DF6196C06E125898127E397, E1B6C83FC6E455F6806185027C5B56F8BA9ECDF1CD69E97301EC0291F0D3466E ] C:\Windows\system32\winsrv.dll 14:11:04.0088 0x0e00 [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll 14:11:04.0104 0x0e00 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6, D7BC4ED605B32274B45328FD9914FB0E7B90D869A38F0E6F94FB1BF4E9E2B407 ] C:\Windows\system32\services.exe 14:11:04.0119 0x0e00 [ Global ] - ok 14:11:04.0119 0x0e00 ================ Scan MBR ================================== 14:11:04.0119 0x0e00 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1 14:11:04.0353 0x0e00 \Device\Harddisk1\DR1 - ok 14:11:04.0353 0x0e00 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0 14:11:04.0400 0x0e00 \Device\Harddisk0\DR0 - ok 14:11:04.0400 0x0e00 ================ Scan VBR ================================== 14:11:04.0400 0x0e00 [ 88CDB96E3F45F17E7D39DA49F6E2CA70 ] \Device\Harddisk1\DR1\Partition1 14:11:04.0416 0x0e00 \Device\Harddisk1\DR1\Partition1 - ok 14:11:04.0416 0x0e00 [ 97913D5BF4EE25DCD6CF78AB59AF3636 ] \Device\Harddisk0\DR0\Partition1 14:11:04.0416 0x0e00 \Device\Harddisk0\DR0\Partition1 - ok 14:11:04.0416 0x0e00 ================ Scan generic autorun ====================== 14:11:04.0494 0x0e00 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe 14:11:04.0556 0x0e00 Sidebar - ok 14:11:04.0587 0x0e00 [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe 14:11:04.0618 0x0e00 mctadmin - ok 14:11:04.0665 0x0e00 [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe 14:11:04.0696 0x0e00 Sidebar - ok 14:11:04.0712 0x0e00 [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe 14:11:04.0728 0x0e00 mctadmin - ok 14:11:04.0759 0x0e00 GoogleDriveSync - ok 14:11:04.0774 0x0e00 Waiting for KSN requests completion. In queue: 60 14:11:05.0788 0x0e00 Waiting for KSN requests completion. In queue: 60 14:11:06.0802 0x0e00 Waiting for KSN requests completion. In queue: 60 14:11:07.0926 0x0e00 AV detected via SS2: Avira Desktop, C:\Program Files\Avira\AntiVir Desktop\wsctool.exe ( 15.0.8.538 ), 0x41000 ( enabled : updated ) 14:11:07.0941 0x0e00 Win FW state via NFP2: enabled 14:11:10.0765 0x0e00 ============================================================ 14:11:10.0765 0x0e00 Scan finished 14:11:10.0765 0x0e00 ============================================================ 14:11:10.0765 0x1078 Detected object count: 0 14:11:10.0765 0x1078 Actual detected object count: 0 Code:
ATTFilter --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.08.3.1004 (c) Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x86 Account is Administrative Internet Explorer version: 11.0.9600.17633 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED CPU speed: 2.493000 GHz Memory total: 3488858112, free: 1565167616 --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.08.3.1004 (c) Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x86 Account is Administrative Internet Explorer version: 11.0.9600.17633 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED CPU speed: 2.493000 GHz Memory total: 3488858112, free: 1527513088 Downloaded database version: v2015.02.14.02 Downloaded database version: v2015.02.03.01 Downloaded database version: v2014.12.06.01 ======================================= ------------ Kernel report ------------ 02/14/2015 14:15:46 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\halmacpi.dll \SystemRoot\system32\kdcom.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\system32\PSHED.dll \SystemRoot\system32\BOOTVID.dll \SystemRoot\system32\CLFS.SYS \SystemRoot\system32\CI.dll \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\system32\drivers\ACPI.sys \SystemRoot\system32\drivers\WMILIB.SYS \SystemRoot\system32\drivers\msisadrv.sys \SystemRoot\system32\drivers\pci.sys \SystemRoot\system32\drivers\vdrvroot.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\system32\DRIVERS\compbatt.sys \SystemRoot\system32\DRIVERS\BATTC.SYS \SystemRoot\system32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\system32\drivers\pciide.sys \SystemRoot\system32\drivers\PCIIDEX.SYS \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\system32\drivers\vmbus.sys \SystemRoot\system32\drivers\winhv.sys \SystemRoot\system32\drivers\atapi.sys \SystemRoot\system32\drivers\ataport.SYS \SystemRoot\system32\drivers\amdxata.sys \SystemRoot\system32\drivers\fltmgr.sys \SystemRoot\system32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Ntfs.sys \SystemRoot\System32\Drivers\msrpc.sys \SystemRoot\System32\Drivers\ksecdd.sys \SystemRoot\System32\Drivers\cng.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\system32\drivers\ndis.sys \SystemRoot\system32\drivers\NETIO.SYS \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\system32\drivers\vmstorfl.sys \SystemRoot\system32\drivers\volsnap.sys \SystemRoot\System32\Drivers\spldr.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\System32\drivers\hwpolicy.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\system32\DRIVERS\disk.sys \SystemRoot\system32\DRIVERS\CLASSPNP.SYS \SystemRoot\system32\drivers\cdrom.sys \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\vga.sys \SystemRoot\System32\drivers\VIDEOPRT.SYS \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\DRIVERS\RDPCDD.sys \SystemRoot\system32\drivers\rdpencdd.sys \SystemRoot\system32\drivers\rdprefmp.sys \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \SystemRoot\system32\drivers\afd.sys \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\DRIVERS\wfplwf.sys \SystemRoot\system32\DRIVERS\pacer.sys \SystemRoot\system32\DRIVERS\netbios.sys \SystemRoot\system32\DRIVERS\serial.sys \SystemRoot\system32\DRIVERS\wanarp.sys \SystemRoot\system32\drivers\termdd.sys \SystemRoot\system32\DRIVERS\ssmdrv.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\system32\drivers\mssmbios.sys \SystemRoot\System32\drivers\discache.sys \SystemRoot\system32\drivers\csc.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\DRIVERS\blbdrive.sys \SystemRoot\system32\DRIVERS\avkmgr.sys \SystemRoot\system32\DRIVERS\avipbb.sys \SystemRoot\system32\DRIVERS\tunnel.sys \SystemRoot\system32\DRIVERS\intelppm.sys \SystemRoot\system32\DRIVERS\nvlddmkm.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\dxgmms1.sys \SystemRoot\system32\DRIVERS\e1e6032.sys \SystemRoot\system32\DRIVERS\usbuhci.sys \SystemRoot\system32\DRIVERS\USBPORT.SYS \SystemRoot\system32\DRIVERS\usbehci.sys \SystemRoot\system32\drivers\HDAudBus.sys \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys \SystemRoot\system32\DRIVERS\fdc.sys \SystemRoot\system32\DRIVERS\serenum.sys \SystemRoot\system32\drivers\CompositeBus.sys \SystemRoot\system32\DRIVERS\AgileVpn.sys \SystemRoot\system32\DRIVERS\rasl2tp.sys \SystemRoot\system32\DRIVERS\ndistapi.sys \SystemRoot\system32\DRIVERS\ndiswan.sys \SystemRoot\system32\DRIVERS\raspppoe.sys \SystemRoot\system32\DRIVERS\raspptp.sys \SystemRoot\system32\DRIVERS\rassstp.sys \SystemRoot\system32\DRIVERS\rdpbus.sys \SystemRoot\system32\DRIVERS\kbdclass.sys \SystemRoot\system32\DRIVERS\mouclass.sys \SystemRoot\system32\drivers\swenum.sys \SystemRoot\system32\drivers\ks.sys \SystemRoot\system32\drivers\umbus.sys \SystemRoot\system32\DRIVERS\usbhub.sys \SystemRoot\system32\DRIVERS\flpydisk.sys \SystemRoot\System32\Drivers\NDProxy.SYS \SystemRoot\system32\drivers\HdAudio.sys \SystemRoot\system32\drivers\portcls.sys \SystemRoot\system32\drivers\drmk.sys \SystemRoot\system32\drivers\USBSTOR.SYS \SystemRoot\system32\drivers\USBD.SYS \SystemRoot\system32\DRIVERS\usbccgp.sys \SystemRoot\system32\DRIVERS\hidusb.sys \SystemRoot\system32\DRIVERS\HIDCLASS.SYS \SystemRoot\system32\DRIVERS\HIDPARSE.SYS \SystemRoot\System32\win32k.sys \SystemRoot\System32\drivers\Dxapi.sys \SystemRoot\System32\Drivers\LEqdUsb.Sys \SystemRoot\System32\Drivers\LUsbFilt.Sys \SystemRoot\system32\DRIVERS\kbdhid.sys \SystemRoot\system32\DRIVERS\mouhid.sys \SystemRoot\system32\DRIVERS\LHidFilt.Sys \SystemRoot\system32\DRIVERS\LMouFilt.Sys \SystemRoot\System32\Drivers\LHidEqd.Sys \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\Drivers\dump_dumpata.sys \SystemRoot\System32\Drivers\dump_atapi.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\system32\DRIVERS\monitor.sys \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\DRIVERS\avgntflt.sys \??\C:\Windows\system32\drivers\mbam.sys \SystemRoot\system32\drivers\WudfPf.sys \SystemRoot\system32\DRIVERS\lltdio.sys \SystemRoot\system32\DRIVERS\rspndr.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\Drivers\secdrv.SYS \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\System32\Drivers\fastfat.SYS \SystemRoot\System32\DRIVERS\srv.sys \??\C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys \SystemRoot\system32\DRIVERS\WUDFRd.sys \SystemRoot\system32\DRIVERS\asyncmac.sys \??\C:\Windows\system32\drivers\mbamchameleon.sys \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys \Windows\System32\ntdll.dll \Windows\System32\smss.exe \Windows\System32\apisetschema.dll ----------- End ----------- Done! Scan started Database versions: main: v2015.02.14.02 rootkit: v2015.02.03.01 <<<2>>> Physical Sector Size: 512 Drive: 1, DevicePointer: 0xffffffff862b77b8, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffffff862b8020, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffffff862b77b8, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\ DevicePointer: 0xffffffff85d7db10, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xffffffff85dcf908, DeviceName: \Device\Ide\IdeDeviceP2T0L0-2\, DriverName: \Driver\atapi\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\Disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes <<<2>>> <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers... Done! Physical Sector Size: 512 Drive: 0, DevicePointer: 0xffffffff862b7030, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffffff862b7d10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffffff862b7030, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ DevicePointer: 0xffffffff85d49918, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xffffffff86177030, DeviceName: \Device\Ide\IdeDeviceP3T0L0-3\, DriverName: \Driver\atapi\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 Drive 0 Scanning MBR on drive 0... Inspecting partition table: MBR Signature: 55AA Disk Signature: F3BC08A4 Partition information: Partition 0 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 63 Numsec = 976768002 Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Disk Size: 500107862016 bytes Sector size: 512 bytes Done! Drive 1 This is a System drive Scanning MBR on drive 1... Inspecting partition table: MBR Signature: 55AA Disk Signature: 2A502A4F Partition information: Partition 0 type is Primary (0x7) Partition is ACTIVE. Partition starts at LBA: 206848 Numsec = 976564224 Partition file system is NTFS Partition is bootable Partition 1 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 2 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Disk Size: 500107862016 bytes Sector size: 512 bytes Done! Physical Sector Size: 0 Drive: 2, DevicePointer: 0xffffffff868b0430, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffffff868b0d10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffffff868b0430, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\Disk\ DevicePointer: 0xffffffff868276d0, DeviceName: \Device\0000006b\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 3, DevicePointer: 0xffffffff8724c030, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffffff867d2860, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffffff8724c030, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\Disk\ DevicePointer: 0xffffffff8681f6e8, DeviceName: \Device\0000006c\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 4, DevicePointer: 0xffffffff8724cac8, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffffff867d6d10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffffff8724cac8, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\Disk\ DevicePointer: 0xffffffff86825ca8, DeviceName: \Device\0000006d\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Physical Sector Size: 0 Drive: 5, DevicePointer: 0xffffffff8724b030, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xffffffff86e18b10, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xffffffff8724b030, DeviceName: \Device\Harddisk5\DR5\, DriverName: \Driver\Disk\ DevicePointer: 0xffffffff868b0998, DeviceName: \Device\0000006e\, DriverName: \Driver\USBSTOR\ ------------ End ---------- Scan finished ======================================= Removal queue found; removal started Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-1-0-206848-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-1-r.mbam... Removal finished ======================================= |
15.02.2015, 08:27 | #7 |
/// the machine /// TB-Ausbilder | Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
15.02.2015, 15:36 | #8 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Combofix.txt Code:
ATTFilter ComboFix 15-02-13.02 - Rubinio 15.02.2015 15:07:57.1.4 - x86 Microsoft Windows 7 Enterprise 6.1.7601.1.1252.49.1031.18.3071.425 [GMT 1:00] ausgeführt von:: c:\users\Rubinio\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859} SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Rubinio\AppData\Local\Temp\_MEI26602\_ctypes.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\_elementtree.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\_hashlib.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\_multiprocessing.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\_socket.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\_ssl.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\hashobjs_ext.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\pyexpat.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\pysqlite2._sqlite.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\python27.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\pythoncom27.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\PyWinTypes27.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\select.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\unicodedata.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32api.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32com.shell.shell.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32crypt.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32event.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32file.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32gui.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32inet.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32pdh.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32pipe.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32process.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32profile.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32security.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\win32ts.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\windows._lib_cacheinvalidation.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._animate.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._controls_.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._core_.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._gdi_.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._html2.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._misc_.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._windows_.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wx._wizard.pyd c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wxbase294u_net_vc90.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wxbase294u_vc90.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wxmsw294u_adv_vc90.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wxmsw294u_core_vc90.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wxmsw294u_html_vc90.dll c:\users\Rubinio\AppData\Local\Temp\_MEI26602\wxmsw294u_webview_vc90.dll c:\users\Rubinio\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll c:\windows\system32\AdobePDF.dll c:\windows\wininit.ini . . ((((((((((((((((((((((( Dateien erstellt von 2015-01-15 bis 2015-02-15 )))))))))))))))))))))))))))))) . . 2015-11-02 22:55 . 2015-02-12 00:01 -------- d-----w- C:\Boot 2015-02-15 14:19 . 2015-02-15 14:19 -------- d-----w- c:\users\Default\AppData\Local\temp 2015-02-14 22:27 . 2015-02-14 22:27 -------- d-----w- c:\program files\WinToUSB 2015-02-14 21:52 . 2015-02-14 21:52 -------- d-----w- c:\program files\ImgBurn 2015-02-14 19:03 . 2010-05-26 10:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll 2015-02-14 19:03 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll 2015-02-14 19:03 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll 2015-02-14 19:03 . 2014-07-25 14:01 1291280 ----a-w- c:\windows\system32\nvspbridge.dll 2015-02-14 19:03 . 2014-07-25 14:01 1126480 ----a-w- c:\windows\system32\nvspcap.dll 2015-02-14 19:02 . 2015-02-14 19:02 -------- d-----w- c:\program files\AGEIA Technologies 2015-02-14 19:02 . 2014-07-02 17:39 609240 ----a-w- c:\windows\system32\nvStreaming.exe 2015-02-14 18:57 . 2014-03-31 16:42 34080 ----a-w- c:\windows\system32\drivers\nvvad32v.sys 2015-02-14 18:57 . 2014-03-31 16:42 34760 ----a-w- c:\windows\system32\nvaudcap32v.dll 2015-02-14 18:54 . 2015-02-14 18:54 -------- d-----w- C:\NVIDIA 2015-02-14 13:15 . 2015-02-14 13:33 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable) 2015-02-14 13:01 . 2015-02-14 13:01 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2015-02-14 13:01 . 2015-02-14 13:01 701616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2015-02-14 13:01 . 2015-02-14 13:01 -------- d-----w- c:\windows\system32\Macromed 2015-02-13 20:36 . 2015-02-13 20:36 -------- d-----w- c:\program files\ClearProg 2015-02-13 16:46 . 2015-02-14 09:46 -------- d-----w- C:\FRST 2015-02-13 15:44 . 2015-02-14 13:15 119512 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2015-02-13 15:43 . 2015-02-14 13:14 82648 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2015-02-13 15:43 . 2015-02-13 15:43 -------- d-----w- c:\program files\ Malwarebytes Anti-Malware 2015-02-13 15:43 . 2015-02-13 15:43 -------- d-----w- c:\programdata\Malwarebytes 2015-02-13 15:43 . 2014-11-21 05:14 51928 ----a-w- c:\windows\system32\drivers\mwac.sys 2015-02-13 15:43 . 2014-11-21 05:14 23256 ----a-w- c:\windows\system32\drivers\mbam.sys 2015-02-13 14:20 . 2015-02-15 13:48 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2015-02-13 14:20 . 2015-02-15 13:50 -------- d-----w- c:\program files\Spybot - Search & Destroy 2 2015-02-13 13:56 . 2015-02-12 16:39 25912 ----a-w- c:\windows\system32\authuitu.dll 2015-02-13 13:55 . 2015-02-13 13:55 -------- d-----w- c:\program files\AVG 2015-02-13 13:46 . 2015-02-13 13:46 -------- d-----w- c:\program files\Usenet.nl 2015-02-13 13:30 . 2015-02-13 13:30 -------- d-----w- c:\program files\UseNeXT 2015-02-13 09:58 . 2015-02-13 09:58 -------- d--h--w- c:\programdata\Common Files 2015-02-13 09:58 . 2015-02-13 14:03 -------- d-----w- c:\programdata\AVG 2015-02-12 18:36 . 2015-02-13 13:21 -------- d-----w- c:\program files\KMSpico 2015-02-12 18:02 . 2015-02-12 18:02 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys 2015-02-12 18:02 . 2015-02-12 18:03 -------- d-----w- c:\programdata\Logishrd 2015-02-12 18:01 . 2015-02-12 18:01 -------- d-----w- c:\program files\Logitech 2015-02-12 18:01 . 2015-02-12 18:03 -------- d-----w- c:\program files\Common Files\Logishrd 2015-02-12 17:43 . 2015-02-12 17:39 37896 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2015-02-12 17:37 . 2015-02-04 16:51 37352 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2015-02-12 17:37 . 2015-02-04 16:51 136216 ----a-w- c:\windows\system32\drivers\avipbb.sys 2015-02-12 17:37 . 2015-02-04 16:51 105864 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2015-02-12 17:26 . 2015-02-12 17:37 -------- d-----w- c:\programdata\Avira 2015-02-12 17:26 . 2015-02-12 17:37 -------- d-----w- c:\program files\Avira 2015-02-12 17:25 . 2015-02-12 17:25 -------- d-----w- c:\programdata\Package Cache 2015-02-12 17:23 . 2015-02-12 17:23 -------- dc----w- c:\windows\system32\DRVSTORE 2015-02-12 17:23 . 2012-10-03 15:14 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2015-02-12 17:22 . 2015-02-12 17:22 -------- d-----w- c:\program files\iPod 2015-02-12 17:22 . 2015-02-12 17:23 -------- d-----w- c:\programdata\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB 2015-02-12 17:22 . 2015-02-12 17:23 -------- d-----w- c:\program files\iTunes 2015-02-12 17:21 . 2015-02-12 17:21 -------- d-----w- c:\program files\Bonjour 2015-02-12 17:21 . 2015-02-12 17:48 -------- d-----w- c:\program files\Common Files\Apple 2015-02-12 17:09 . 2015-02-12 17:09 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft 2015-02-12 17:09 . 2015-02-12 17:09 -------- d-----w- c:\program files\Microsoft SQL Server 2015-02-12 17:09 . 2015-02-12 17:09 -------- d-----w- c:\windows\PCHEALTH 2015-02-12 17:06 . 2015-02-12 17:06 -------- d-----w- c:\program files\Microsoft Analysis Services 2015-02-12 17:03 . 2015-02-12 17:03 -------- d-----r- C:\MSOCache 2015-02-12 14:51 . 2015-02-12 14:51 -------- d-----w- c:\programdata\regid.1986-12.com.adobe 2015-02-12 14:41 . 2015-02-12 15:53 -------- d-----w- c:\program files\Common Files\Adobe 2015-02-12 14:25 . 2015-02-12 14:25 -------- d-----w- c:\programdata\StarMoney 9.0 2015-02-12 14:24 . 2015-02-12 14:24 -------- d-----w- c:\program files\Common Files\StarFinanz 2015-02-12 14:23 . 2015-02-14 14:30 -------- d-----w- c:\program files\StarMoney 9.0 2015-02-12 14:23 . 2015-02-12 14:23 -------- d--h--w- c:\program files\InstallShield Installation Information 2015-02-12 14:13 . 2015-02-12 17:22 -------- d-----w- c:\programdata\Apple Computer 2015-02-12 14:13 . 2015-02-12 14:13 -------- d-----w- c:\program files\Safari 2015-02-12 14:13 . 2015-02-12 17:21 -------- d-----w- c:\programdata\Apple 2015-02-12 14:13 . 2015-02-12 14:13 -------- d-----w- c:\program files\Apple Software Update 2015-02-12 14:11 . 2015-02-12 14:11 -------- d-----w- c:\program files\Mozilla Maintenance Service 2015-02-12 12:51 . 2015-02-12 17:12 -------- d-----w- c:\programdata\Microsoft Help 2015-02-12 09:47 . 2015-02-12 18:09 -------- d-----w- c:\program files\Google 2015-02-12 09:33 . 2015-02-12 09:36 -------- d-----w- c:\windows\AutoKMS 2015-02-12 09:32 . 2015-02-12 09:32 -------- d-----w- c:\programdata\Microsoft Toolkit 2015-02-12 09:31 . 2014-08-29 01:44 2744320 ----a-w- c:\windows\system32\rdpcorets.dll 2015-02-12 09:31 . 2014-09-05 01:52 5703168 ----a-w- c:\windows\system32\mstscax.dll 2015-02-12 09:21 . 2014-05-08 09:06 13824 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll 2015-02-12 09:11 . 2012-08-23 14:44 14848 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys 2015-02-12 09:11 . 2012-08-23 14:48 221184 ----a-w- c:\windows\system32\rdpudd.dll 2015-02-12 09:11 . 2012-08-23 11:12 192000 ----a-w- c:\windows\system32\rdpendp_winip.dll 2015-02-12 09:10 . 2013-10-02 00:42 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys 2015-02-12 09:10 . 2013-10-02 00:14 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll 2015-02-12 09:10 . 2013-10-01 23:08 855552 ----a-w- c:\windows\system32\rdvidcrl.dll 2015-02-12 09:10 . 2013-10-01 22:34 1068544 ----a-w- c:\windows\system32\mstsc.exe 2015-02-12 08:50 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\system32\mf.dll 2015-02-12 08:50 . 2014-07-07 01:40 103424 ----a-w- c:\windows\system32\mfps.dll 2015-02-12 08:50 . 2014-07-07 01:39 50176 ----a-w- c:\windows\system32\rrinstaller.exe 2015-02-12 08:50 . 2014-07-07 01:39 23040 ----a-w- c:\windows\system32\mfpmp.exe 2015-02-12 08:50 . 2014-07-07 01:37 2048 ----a-w- c:\windows\system32\mferror.dll 2015-02-12 08:45 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2015-02-12 08:38 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\system32\DWrite.dll 2015-02-12 08:37 . 2015-01-10 06:27 248832 ----a-w- c:\windows\system32\schannel.dll 2015-02-12 08:37 . 2015-01-10 06:27 221184 ----a-w- c:\windows\system32\ncrypt.dll 2015-02-12 08:37 . 2015-01-10 06:27 259584 ----a-w- c:\windows\system32\msv1_0.dll 2015-02-12 08:37 . 2015-01-10 06:27 550912 ----a-w- c:\windows\system32\kerberos.dll 2015-02-12 08:37 . 2015-01-10 06:27 17408 ----a-w- c:\windows\system32\credssp.dll 2015-02-12 08:37 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\system32\d3d10warp.dll 2015-02-12 08:37 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\explorer.exe 2015-02-12 08:37 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\system32\d2d1.dll 2015-02-12 07:58 . 2015-02-12 07:58 -------- d-----w- c:\windows\system32\wbem\en-US 2015-02-12 01:52 . 2014-12-15 03:13 9054624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{03D99AF9-B63B-4D2F-B6A8-4208F9668CD1}\mpengine.dll 2015-02-12 01:14 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2015-02-12 01:14 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2015-02-12 01:13 . 2014-03-09 21:47 99480 ----a-w- c:\windows\system32\infocardapi.dll 2015-02-12 01:13 . 2014-06-30 22:14 8856 ----a-w- c:\windows\system32\icardres.dll 2015-02-12 01:13 . 2014-03-09 21:47 619672 ----a-w- c:\windows\system32\icardagt.exe 2015-02-12 01:12 . 2012-03-01 05:46 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2015-02-12 01:00 . 2015-02-12 17:09 -------- d-----w- c:\program files\Microsoft.NET 2015-02-12 01:00 . 2015-02-12 01:00 -------- d-----w- c:\windows\Migration 2015-02-12 00:59 . 2015-02-14 21:50 -------- d-sh--w- c:\windows\Installer 2015-02-12 00:55 . 2013-05-10 03:48 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2015-02-12 00:44 . 2015-02-12 00:44 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2015-02-12 00:43 . 2015-02-12 00:43 1505280 ----a-w- c:\windows\system32\d3d11.dll 2015-02-12 00:38 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll 2015-02-12 00:38 . 2013-12-04 02:03 87040 ----a-w- c:\windows\system32\secproc_ssp.dll 2015-02-12 00:38 . 2013-12-04 02:03 423936 ----a-w- c:\windows\system32\secproc_isv.dll 2015-02-12 00:38 . 2013-12-04 02:03 428032 ----a-w- c:\windows\system32\secproc.dll 2015-02-12 00:38 . 2013-12-04 02:02 390144 ----a-w- c:\windows\system32\msdrm.dll 2015-02-12 00:38 . 2013-12-04 01:54 510976 ----a-w- c:\windows\system32\RMActivate_ssp.exe 2015-02-12 00:38 . 2013-12-04 01:54 594944 ----a-w- c:\windows\system32\RMActivate_isv.exe 2015-02-12 00:38 . 2013-12-04 01:54 572416 ----a-w- c:\windows\system32\RMActivate.exe 2015-02-12 00:38 . 2013-12-04 01:54 508928 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe 2015-02-12 00:35 . 2014-06-18 22:23 81560 ----a-w- c:\windows\system32\mscories.dll 2015-02-12 00:35 . 2014-06-18 22:23 156824 ----a-w- c:\windows\system32\mscorier.dll 2015-02-12 00:35 . 2014-06-18 22:23 1131664 ----a-w- c:\windows\system32\dfshim.dll 2015-02-12 00:35 . 2012-07-04 21:14 41984 ----a-w- c:\windows\system32\browcli.dll . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2015-02-12 16:39 . 2015-02-13 13:56 37176 ----a-w- c:\windows\system32\TURegOpt.exe 2015-02-12 16:39 . 2015-02-13 14:01 36664 ----a-w- c:\windows\system32\uxtuneup.dll 2015-02-12 00:46 . 2015-02-12 00:46 62464 ----a-w- c:\windows\system32\tdc.ocx 2015-02-12 00:46 . 2015-02-12 00:46 139264 ----a-w- c:\windows\system32\wextract.exe 2015-02-12 00:46 . 2015-02-12 00:46 69632 ----a-w- c:\windows\system32\smss.exe 2015-02-12 00:46 . 2015-02-12 00:46 619520 ----a-w- c:\windows\system32\tdh.dll 2015-02-12 00:45 . 2015-02-12 00:45 49152 ----a-w- c:\windows\system32\taskhost.exe 2015-02-12 00:44 . 2015-02-12 00:44 364544 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2015-02-12 00:44 . 2015-02-12 00:44 207872 ----a-w- c:\windows\system32\WindowsCodecsExt.dll 2015-02-12 00:44 . 2015-02-12 00:44 187392 ----a-w- c:\windows\system32\UIAnimation.dll 2015-02-12 00:44 . 2015-02-12 00:44 1158144 ----a-w- c:\windows\system32\XpsPrint.dll 2015-02-11 23:53 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll 2015-01-15 07:43 . 2015-02-12 00:32 15872 ----a-w- c:\windows\system32\sspisrv.dll 2015-01-15 07:43 . 2015-02-12 00:32 100352 ----a-w- c:\windows\system32\sspicli.dll 2015-01-13 02:49 . 2015-02-12 08:36 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll 2015-01-12 02:08 . 2015-02-12 08:40 503296 ----a-w- c:\windows\system32\vbscript.dll 2015-01-12 01:00 . 2015-02-12 08:40 1888256 ----a-w- c:\windows\system32\wininet.dll 2015-01-10 06:27 . 2015-02-12 08:37 172032 ----a-w- c:\windows\system32\wdigest.dll 2015-01-10 06:27 . 2015-02-12 08:37 65536 ----a-w- c:\windows\system32\TSpkg.dll 2015-01-09 02:48 . 2015-02-12 00:33 76800 ----a-w- c:\windows\system32\wdi.dll 2015-01-09 01:45 . 2015-02-12 00:27 2380288 ----a-w- c:\windows\system32\win32k.sys 2014-12-22 23:50 . 2010-03-24 04:47 249488 ------w- c:\windows\system32\MpSigStub.exe 2014-12-11 17:47 . 2015-02-12 09:40 74240 ----a-w- c:\windows\system32\TSWbPrxy.exe . . ------- Sigcheck ------- Note: Unsigned files aren't necessarily malware. . [7] 2009-07-14 . 8A4883F5E7AC37444F23279239553878 . 398336 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_f4050b883d2c3c08\regedit.exe . c:\windows\regedit.exe ... Fehlt !! . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2012-10-01 19:33 1720976 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2012-10-01 19:33 1720976 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2012-10-01 19:33 1720976 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"] @="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"] @="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"] @="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"] @="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}] 2015-02-11 01:12 152544 ----a-w- c:\users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 2015-01-15 15:59 577864 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2015-01-15 15:59 577864 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}] 2015-01-15 15:59 577864 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}] 2015-01-15 15:59 577864 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 2015-01-15 15:59 577864 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate] @="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}" [HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}] 2012-01-04 08:58 442880 ----a-w- c:\windows\System32\ntshrui.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2015-01-15 23308256] "iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-11-21 43816] "ApplePhotoStreams"="c:\program files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816] "iCloudDrive"="c:\program files\Common Files\Apple\Internet Services\iCloudDrive.exe" [2014-11-21 43816] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Avira Systray"="c:\program files\Avira\My Avira\Avira.OE.Systray.exe" [2015-01-19 126712] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2015-02-04 703280] "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2014-05-19 2303256] "NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-07-25 2403104] "ShadowPlay"="c:\windows\system32\nvspcap.dll" [2014-07-25 1126480] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2015-02-11 280576] . c:\users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ ClearProg.lnk - c:\program files\ClearProg\ClearProg.exe /IECO/IECA/IEV/IEU/IEAC/OPCO/OPCA/OPV/OPU/OPD/NNCO/NNCA/NNV/NNU/NND/NNAC/Recycle/Tmp/STmp/Run/Docs/OS/FF/FPC/NDRIVE/LKEY/ZA/Access/Excel/FP/PP/Word/PB/LU/MP/Real/PE/PAINT/AR/WP/GR/GTB/OO/WZ/PAV/PLI [2009-6-27 178176] Dropbox.lnk - c:\users\Rubinio\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-2-12 42555824] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn] 2014-03-24 22:50 64280 ----a-w- c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Microsoft Task Planning"=c:\programdata\Microsoft\Windows\Caches\taskengcon.exe . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" "AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" "Logitech Download Assistant"=c:\windows\system32\rundll32.exe c:\windows\System32\LogiLDA.dll,LogiFetch "NvBackend"="c:\program files\NVIDIA Corporation\Update Core\NvBackend.exe" "SDTray"="c:\program files\Spybot - Search & Destroy 2\SDTray.exe" . R2 MBAMService;MBAMService;c:\program files\ Malwarebytes Anti-Malware \mbamservice.exe [2014-11-21 969016] R2 StarMoney 9.0 OnlineUpdate;StarMoney 9.0 OnlineUpdate;c:\program files\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [2014-07-04 697488] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-01-12 102912] R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-11-21 51928] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R4 MBAMScheduler;MBAMScheduler;c:\program files\ Malwarebytes Anti-Malware \mbamscheduler.exe [2014-11-21 1871160] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2015-02-04 37352] S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2015-02-04 432888] S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files\Avira\My Avira\Avira.OE.ServiceHost.exe [2015-01-19 182520] S2 NvNetworkService;NVIDIA Network Service;c:\program files\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 17536800] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 413128] S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2015-02-12 2161976] S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\Drivers\LEqdUsb.Sys [2014-03-19 42264] S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\Drivers\LHidEqd.Sys [2014-03-19 10136] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-11-21 23256] S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-25 19232] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad32v.sys [2014-03-31 34080] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [2015-01-13 12320] . . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalSystemNetworkRestricted homegrouplistener StorSvc . . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService WdiServiceHost sppuinotify FontCache . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetworkService lanmanworkstation . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted BthHFSrv homegroupprovider . . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2015-02-12 09:50 1086280 ----a-w- c:\program files\Google\Chrome\Application\40.0.2214.111\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2015-02-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-14 13:01] . 2015-02-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2015-02-12 09:47] . 2015-02-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2015-02-12 09:47] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.google.de/ uInternet Settings,ProxyOverride = *.local uInternet Settings,ProxyServer = localhost:8080 IE: An OneNote s&enden - c:\progra~1\MICROS~1\Office15\ONBttnIE.dll/105 IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~1\Office15\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.178.1 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL FF - ProfilePath - c:\users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default\ FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: content.notify.interval - 600000 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.switch.threshold - 600000 . . ************************************************************************** Scanne versteckte Prozesse... . Scanne versteckte Autostarteinträge... . Scanne versteckte Dateien... . . ************************************************************************** . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\windows\system32\nvvsvc.exe c:\program files\NVIDIA Corporation\Display\nvxdsync.exe c:\windows\system32\nvvsvc.exe c:\windows\system32\taskhost.exe c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files\Avira\AntiVir Desktop\avguard.exe c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe c:\program files\NVIDIA Corporation\Display\nvtray.exe c:\program files\Avira\AntiVir Desktop\avshadow.exe c:\windows\System32\rundll32.exe c:\windows\system32\conhost.exe c:\windows\system32\conhost.exe c:\windows\System32\WUDFHost.exe c:\windows\system32\conhost.exe c:\program files\ClearProg\ClearProg.exe c:\users\Rubinio\AppData\Roaming\Dropbox\bin\Dropbox.exe c:\program files\Windows Media Player\wmpnetwk.exe c:\program files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe c:\program files\Adobe\Reader 11.0\Reader\Reader_sl.exe c:\program files\Adobe\Acrobat 11.0\Acrobat\Acrobat_sl.exe . ************************************************************************** . Zeit der Fertigstellung: 2015-02-15 15:33:18 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2015-02-15 14:32 . Nach Suchlauf: 13 Verzeichnis(se), 415.157.583.872 Bytes frei . - - End Of File - - 6493AB975CDB328E9C73A70C96549886 |
15.02.2015, 19:34 | #9 |
/// the machine /// TB-Ausbilder | Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.02.2015, 11:15 | #10 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Vielen Dank! Dann fange ich mal an. mbam.xt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 16.02.2015 Suchlauf-Zeit: 10:39:25 Logdatei: mbam.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2015.02.16.03 Rootkit Datenbank: v2015.02.03.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x86 Dateisystem: NTFS Benutzer: Rubinio Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 322964 Verstrichene Zeit: 11 Min, 18 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 0 (Keine schädliche Elemente erkannt) Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v4.110 - Bericht erstellt 16/02/2015 um 10:56:14 # Aktualisiert 05/02/2015 von Xplode # Datenbank : 2015-02-14.2 [Server] # Betriebssystem : Windows 7 Enterprise Service Pack 1 (x86) # Benutzername : Rubinio - RUBINIO-PC # Gestarted von : C:\Users\Rubinio\Desktop\AdwCleaner_4.110.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Datei Gelöscht : C:\Users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default\user.js ***** [ Geplante Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\OCS Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - localhost:8080 ***** [ Internetbrowser ] ***** -\\ Internet Explorer v11.0.9600.17631 -\\ Mozilla Firefox v35.0.1 (x86 de) -\\ Google Chrome v40.0.2214.111 [C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms} ************************* AdwCleaner[R0].txt - [1343 Bytes] - [16/02/2015 10:52:25] AdwCleaner[S0].txt - [1265 Bytes] - [16/02/2015 10:56:14] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1324 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.4.2 (02.02.2015:1) OS: Windows 7 Enterprise x86 Ran by Rubinio on 16.02.2015 at 11:02:38,85 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 16.02.2015 at 11:05:06,52 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Teil 1: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-02-2015 Ran by Rubinio (administrator) on RUBINIO-PC on 16-02-2015 11:08:12 Running from C:\Users\Rubinio\Desktop Loaded Profiles: Rubinio (Available profiles: Rubinio) Platform: Microsoft Windows 7 Enterprise Service Pack 1 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe (Google) C:\Program Files\Google\Drive\googledrivesync.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Google) C:\Program Files\Google\Drive\googledrivesync.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Dropbox, Inc.) C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\Dropbox.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (AVG Technologies) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [703280 2015-02-04] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2303256 2014-05-19] (Logitech, Inc.) HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [23308256 2015-01-15] (Google) HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2015-02-12] (Microsoft Corporation) Startup: C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ClearProg.lnk ShortcutTarget: ClearProg.lnk -> C:\Program Files\ClearProg\ClearProg.exe (privat) Startup: C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Rubinio\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [GDriveBlacklistedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSharedEditOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSharedViewOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSyncedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ShellIconOverlayIdentifiers: [GDriveSyncingOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-830496087-3815240866-1769002787-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-830496087-3815240866-1769002787-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-830496087-3815240866-1769002787-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-830496087-3815240866-1769002787-1001 -> {CC7CE7C7-4C62-413D-9993-135384EFEDCE} URL = https://www.google.com/search?q={searchTerms} BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Extension: Avira Browser Safety - C:\Users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default\Extensions\abs@avira.com [2015-02-12] FF Extension: Adblock Plus - C:\Users\Rubinio\AppData\Roaming\Mozilla\Firefox\Profiles\v5rhoxu3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-13] FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-12] FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-02-12] Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.de/" CHR Profile: C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-12] CHR Extension: (Google Docs) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-12] CHR Extension: (Google Drive) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-12] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2015-02-12] CHR Extension: (YouTube) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-12] CHR Extension: (Google-Suche) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-12] CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-02-12] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-02-12] CHR Extension: (Google Tabellen) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-12] CHR Extension: (Avira Browserschutz) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-02-13] CHR Extension: (AdBlock) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-14] CHR Extension: (Google Wallet) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-12] CHR Extension: (Google Mail) - C:\Users\Rubinio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-12] CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2012-09-23] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path CHR HKU\S-1-5-21-830496087-3815240866-1769002787-1001\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [432888 2015-02-04] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [17536800 2014-07-25] (NVIDIA Corporation) S2 StarMoney 9.0 OnlineUpdate; C:\Program Files\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH) R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2161976 2015-02-12] (AVG Technologies) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [36664 2015-02-12] (AVG Technologies) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105864 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2015-02-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2015-02-04] (Avira Operations GmbH & Co. KG) R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [42264 2014-03-19] (Logitech, Inc.) R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [10136 2014-03-19] (Logitech, Inc.) R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28312 2014-03-19] (Logitech, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-02-16] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-07-25] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation) R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2015-02-04] (Avira GmbH) R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2015-01-13] (TuneUp Software) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-11-02 23:57 - 2015-11-02 23:57 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2015-11-02 23:56 - 2015-11-02 23:56 - 00000000 ____D () C:\Windows\CSC 2015-11-02 23:55 - 2015-11-02 23:55 - 00008192 __RSH () C:\BOOTSECT.BAK 2015-11-02 23:55 - 2010-11-20 13:40 - 00383786 __RSH () C:\bootmgr 2015-02-16 11:08 - 2015-02-16 11:08 - 00019097 _____ () C:\Users\Rubinio\Desktop\FRST.txt 2015-02-16 11:07 - 2015-02-16 11:07 - 01125888 _____ (Farbar) C:\Users\Rubinio\Desktop\FRST.exe 2015-02-16 11:07 - 2015-02-16 11:07 - 00000000 ____D () C:\Users\Rubinio\Desktop\FRST-OlderVersion 2015-02-16 11:05 - 2015-02-16 11:05 - 00000625 _____ () C:\Users\Rubinio\Desktop\JRT.txt 2015-02-16 11:01 - 2015-02-16 10:56 - 00001404 _____ () C:\Users\Rubinio\Desktop\AdwCleaner[S0].txt 2015-02-16 10:52 - 2015-02-16 10:56 - 00000000 ____D () C:\AdwCleaner 2015-02-16 10:51 - 2015-02-16 10:51 - 00001203 _____ () C:\Users\Rubinio\Desktop\mbam.txt 2015-02-16 10:36 - 2015-02-16 10:36 - 01388274 _____ (Thisisu) C:\Users\Rubinio\Desktop\JRT.exe 2015-02-16 10:35 - 2015-02-16 10:36 - 02112512 _____ () C:\Users\Rubinio\Desktop\AdwCleaner_4.110.exe 2015-02-15 19:40 - 2015-02-15 19:40 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Registry Toolkit 2015-02-15 19:36 - 2015-02-15 19:38 - 00000000 ____D () C:\Program Files\Registrar Registry Manager 2015-02-15 19:35 - 2015-02-15 19:35 - 04968008 _____ (Resplendence Software Projects Sp. ) C:\Users\Rubinio\Downloads\RegistrarHomeV7.60.exe 2015-02-15 18:30 - 2015-02-15 19:12 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0 2015-02-15 15:52 - 2015-02-15 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClearProg 2015-02-15 15:05 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2015-02-15 15:05 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2015-02-15 15:05 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-02-15 15:05 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-02-15 15:05 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-02-15 15:05 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2015-02-15 15:05 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2015-02-15 15:05 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2015-02-15 14:47 - 2015-02-15 15:33 - 00000000 ____D () C:\Qoobox 2015-02-15 14:47 - 2015-02-15 15:29 - 00000000 ____D () C:\Windows\erdnt 2015-02-15 14:43 - 2015-02-15 14:43 - 05611771 ____R (Swearware) C:\Users\Rubinio\Downloads\ComboFix.exe 2015-02-14 23:27 - 2015-02-15 15:43 - 00000000 ____D () C:\Program Files\WinToUSB 2015-02-14 22:53 - 2015-02-14 23:49 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\ImgBurn 2015-02-14 22:52 - 2015-02-14 22:52 - 00001823 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk 2015-02-14 22:52 - 2015-02-14 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn 2015-02-14 22:52 - 2015-02-14 22:52 - 00000000 ____D () C:\Program Files\ImgBurn 2015-02-14 22:50 - 2015-02-14 22:50 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool 2015-02-14 22:50 - 2015-02-14 22:50 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apps\Windows 7 USB DVD Download Tool 2015-02-14 20:03 - 2015-02-15 14:35 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\NVIDIA Corporation 2015-02-14 20:03 - 2015-02-15 00:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-02-14 20:03 - 2014-07-25 15:01 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll 2015-02-14 20:03 - 2014-07-25 15:01 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll 2015-02-14 20:03 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2015-02-14 20:03 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2015-02-14 20:03 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2015-02-14 20:02 - 2015-02-14 20:02 - 00000000 ____D () C:\Program Files\AGEIA Technologies 2015-02-14 20:02 - 2014-07-02 18:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe 2015-02-14 19:57 - 2014-03-31 17:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll 2015-02-14 19:57 - 2014-03-31 17:42 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys 2015-02-14 19:54 - 2015-02-14 19:54 - 00000000 ____D () C:\NVIDIA 2015-02-14 19:35 - 2015-02-14 19:53 - 218685256 _____ (NVIDIA Corporation) C:\Users\Rubinio\Downloads\340.52-desktop-win8-win7-winvista-32bit-international-whql.exe 2015-02-14 15:25 - 2015-02-14 15:25 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apple Inc 2015-02-14 15:17 - 2015-02-16 11:00 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\5CF4A954-89A2-4EEF-BD27-EDBA35A18DF1.aplzod 2015-02-14 15:04 - 2015-02-14 15:04 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Macromedia 2015-02-14 14:15 - 2015-02-15 16:22 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-02-14 14:13 - 2015-02-14 14:33 - 00000000 ____D () C:\Users\Rubinio\Downloads\mbar 2015-02-14 14:01 - 2015-02-15 19:13 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-02-14 14:01 - 2015-02-14 14:01 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-02-14 14:01 - 2015-02-14 14:01 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-02-14 14:01 - 2015-02-14 14:01 - 00000000 ____D () C:\Windows\system32\Macromed 2015-02-14 11:53 - 2015-02-14 11:54 - 16466552 _____ (Malwarebytes Corp.) C:\Users\Rubinio\Downloads\mbar-1.08.3.1004.exe 2015-02-14 11:51 - 2015-02-14 11:52 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Rubinio\Downloads\tdsskiller.exe 2015-02-14 10:29 - 2015-02-14 10:29 - 00000000 _____ () C:\Windows\setuperr.log 2015-02-13 21:36 - 2015-02-15 15:52 - 00000000 ____D () C:\Program Files\ClearProg 2015-02-13 18:34 - 2015-02-13 18:42 - 79407448 _____ (Logitech Inc.) C:\Users\Rubinio\Downloads\SetPoint6.65.62_32.exe 2015-02-13 17:47 - 2015-02-13 17:48 - 00031522 _____ () C:\Users\Rubinio\Downloads\Addition.txt 2015-02-13 17:46 - 2015-02-16 11:08 - 00000000 ____D () C:\FRST 2015-02-13 17:46 - 2015-02-13 17:48 - 00171337 _____ () C:\Users\Rubinio\Downloads\FRST.txt 2015-02-13 17:45 - 2015-02-13 17:45 - 01125376 _____ (Farbar) C:\Users\Rubinio\Downloads\FRST.exe 2015-02-13 17:15 - 2015-02-13 17:15 - 00009353 _____ () C:\Users\Rubinio\Downloads\hijackthis.log 2015-02-13 16:44 - 2015-02-16 10:39 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-02-13 16:43 - 2015-02-14 14:14 - 00082648 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-02-13 16:43 - 2015-02-13 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-02-13 16:43 - 2015-02-13 16:43 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-02-13 16:43 - 2015-02-13 16:43 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2015-02-13 16:43 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-02-13 16:43 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-02-13 15:20 - 2015-02-15 14:50 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2 2015-02-13 15:20 - 2015-02-15 14:48 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2015-02-13 15:01 - 2015-02-12 17:39 - 00036664 _____ (AVG Technologies) C:\Windows\system32\uxtuneup.dll 2015-02-13 14:56 - 2015-02-13 14:56 - 00002159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015.lnk 2015-02-13 14:56 - 2015-02-13 14:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp 2015 2015-02-13 14:56 - 2015-02-12 17:39 - 00037176 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe 2015-02-13 14:56 - 2015-02-12 17:39 - 00025912 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll 2015-02-13 14:55 - 2015-02-13 14:55 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\AVG 2015-02-13 14:55 - 2015-02-13 14:55 - 00000000 ____D () C:\Program Files\AVG 2015-02-13 14:46 - 2015-02-13 14:52 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Usenet.nl 2015-02-13 14:46 - 2015-02-13 14:46 - 00000000 ____D () C:\Users\Rubinio\Documents\Usenet.nl 2015-02-13 14:46 - 2015-02-13 14:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Usenet.nl 2015-02-13 14:46 - 2015-02-13 14:46 - 00000000 ____D () C:\Program Files\Usenet.nl 2015-02-13 14:45 - 2015-02-13 14:46 - 07457256 _____ ( ) C:\Users\Rubinio\Downloads\UsenetNLSetup_1.30.exe 2015-02-13 14:30 - 2015-02-15 17:18 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\UseNeXT 2015-02-13 14:30 - 2015-02-15 17:15 - 00000000 ____D () C:\Users\Rubinio\Documents\UseNeXT 2015-02-13 14:30 - 2015-02-15 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UseNeXT 2015-02-13 14:30 - 2015-02-15 17:15 - 00000000 ____D () C:\Program Files\UseNeXT 2015-02-13 14:24 - 2015-02-13 14:24 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Avg 2015-02-13 11:23 - 2015-02-13 11:24 - 00388608 _____ (Trend Micro Inc.) C:\Users\Rubinio\Downloads\HiJackThis204.exe 2015-02-13 11:11 - 2015-02-13 11:12 - 05343592 _____ (Tangysoft Ltd. ) C:\Users\Rubinio\Downloads\UseNeXT_freetrial_436770w.exe 2015-02-13 11:04 - 2015-02-13 11:08 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Rubinio\Downloads\mbam-setup-2.0.4.1028.exe 2015-02-13 11:03 - 2015-02-13 11:08 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Rubinio\Downloads\spybot-2.4.exe 2015-02-13 10:58 - 2015-02-13 15:03 - 00000000 ____D () C:\ProgramData\AVG 2015-02-12 19:36 - 2015-02-13 14:21 - 00000000 ____D () C:\Program Files\KMSpico 2015-02-12 19:25 - 2015-02-12 19:26 - 00454147 _____ () C:\Users\Rubinio\Downloads\Setup_ClearProg_1.6.0_Final_neu.exe 2015-02-12 19:24 - 2015-02-12 19:32 - 49950520 _____ (AVG Technologies) C:\Users\Rubinio\Downloads\avg_tuht_stf_de_2015_373_15cmp16.exe 2015-02-12 19:09 - 2015-02-12 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2015-02-12 19:05 - 2015-02-12 19:05 - 00880208 _____ (Google Inc.) C:\Users\Rubinio\Downloads\googledrivesync.exe 2015-02-12 19:03 - 2015-02-12 19:03 - 00000000 ____D () C:\Users\Public\Documents\Logishrd 2015-02-12 19:02 - 2015-02-12 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2015-02-12 19:02 - 2015-02-12 19:03 - 00010862 _____ () C:\Windows\LDPINST.LOG 2015-02-12 19:02 - 2015-02-12 19:03 - 00001276 _____ () C:\Windows\LkmdfCoInst.log 2015-02-12 19:02 - 2015-02-12 19:03 - 00000000 ____D () C:\ProgramData\Logishrd 2015-02-12 19:02 - 2015-02-12 19:02 - 00016400 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2015-02-12 19:01 - 2015-02-12 19:03 - 00000000 ____D () C:\Program Files\Common Files\Logishrd 2015-02-12 19:01 - 2015-02-12 19:01 - 00000000 ____D () C:\Program Files\Logitech 2015-02-12 18:54 - 2015-02-12 19:04 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Logishrd 2015-02-12 18:54 - 2015-02-12 19:03 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Logitech 2015-02-12 18:52 - 2015-02-12 18:53 - 04147600 _____ ($Co_Name Inc.) C:\Users\Rubinio\Downloads\unifying250.exe 2015-02-12 18:52 - 2015-02-12 18:53 - 04109832 _____ (Logitech Inc.) C:\Users\Rubinio\Downloads\scroll_app_smart_4.00.33.exe 2015-02-12 18:52 - 2015-02-12 18:53 - 03677488 _____ (Logitech Inc.) C:\Users\Rubinio\Downloads\SetPoint6.65.62_smart.exe 2015-02-12 18:52 - 2015-02-12 18:52 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-02-12 18:49 - 2015-02-12 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2015-02-12 18:45 - 2015-02-16 10:59 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Dropbox 2015-02-12 18:45 - 2015-02-12 18:45 - 00355464 _____ (Dropbox, Inc.) C:\Users\Rubinio\Downloads\DropboxInstaller.exe 2015-02-12 18:44 - 2015-02-12 18:44 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Avira 2015-02-12 18:43 - 2015-02-12 18:39 - 00037896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2015-02-12 18:39 - 2015-02-12 18:46 - 71647536 _____ (Apple Inc.) C:\Users\Rubinio\Downloads\icloudsetup.exe 2015-02-12 18:37 - 2015-02-04 17:51 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2015-02-12 18:37 - 2015-02-04 17:51 - 00105864 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2015-02-12 18:37 - 2015-02-04 17:51 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2015-02-12 18:37 - 2015-02-04 17:51 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys 2015-02-12 18:26 - 2015-02-15 18:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-02-12 18:26 - 2015-02-12 18:37 - 00000000 ____D () C:\ProgramData\Avira 2015-02-12 18:26 - 2015-02-12 18:37 - 00000000 ____D () C:\Program Files\Avira 2015-02-12 18:25 - 2015-02-12 18:25 - 00000000 ____D () C:\ProgramData\Package Cache 2015-02-12 18:24 - 2015-02-14 15:25 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Apple Computer 2015-02-12 18:24 - 2015-02-14 15:11 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apple Computer 2015-02-12 18:24 - 2015-02-12 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-02-12 18:23 - 2012-10-03 16:14 - 00026840 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2015-02-12 18:22 - 2015-02-12 18:23 - 00000000 ____D () C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB 2015-02-12 18:22 - 2015-02-12 18:23 - 00000000 ____D () C:\Program Files\iTunes 2015-02-12 18:22 - 2015-02-12 18:22 - 00000000 ____D () C:\Program Files\iPod 2015-02-12 18:21 - 2015-02-12 18:48 - 00000000 ____D () C:\Program Files\Common Files\Apple 2015-02-12 18:21 - 2015-02-12 18:21 - 00000000 ____D () C:\Program Files\Bonjour 2015-02-12 18:11 - 2015-02-12 18:19 - 108785968 _____ (Apple Inc.) C:\Users\Rubinio\Downloads\itunessetup.exe 2015-02-12 18:10 - 2015-02-12 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2015-02-12 18:10 - 2015-02-12 18:10 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER 2015-02-12 18:09 - 2015-02-12 18:09 - 00000000 ____D () C:\Windows\PCHEALTH 2015-02-12 18:09 - 2015-02-12 18:09 - 00000000 ____D () C:\Program Files\Microsoft SQL Server 2015-02-12 18:06 - 2015-02-12 18:06 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services 2015-02-12 18:04 - 2015-02-12 18:05 - 04515896 _____ (Avira Operations & Co. KG) C:\Users\Rubinio\Downloads\avira_de_av_5846847356__ws.exe 2015-02-12 18:03 - 2015-02-12 18:03 - 00000000 ___RD () C:\MSOCache 2015-02-12 17:07 - 2015-02-12 17:07 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Macromedia 2015-02-12 17:07 - 2015-02-12 17:07 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat 2015-02-12 16:53 - 2015-02-12 16:53 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-02-12 16:01 - 2015-02-15 18:17 - 00093696 ___SH () C:\Users\Rubinio\Thumbs.db 2015-02-12 15:51 - 2015-02-14 14:01 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Adobe 2015-02-12 15:51 - 2015-02-12 15:51 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe 2015-02-12 15:50 - 2015-02-12 15:50 - 00002453 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat XI Pro.lnk 2015-02-12 15:50 - 2015-02-12 15:50 - 00002180 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe FormsCentral.lnk 2015-02-12 15:50 - 2015-02-12 15:50 - 00002019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller XI.lnk 2015-02-12 15:49 - 2015-02-12 15:49 - 00000000 ____D () C:\Users\Rubinio\Tracing 2015-02-12 15:49 - 2008-07-08 23:26 - 03633413 _____ () C:\Users\Rubinio\Opa.3gp 2015-02-12 15:41 - 2015-02-12 17:09 - 00000000 ____D () C:\ProgramData\Adobe 2015-02-12 15:41 - 2015-02-12 16:53 - 00000000 ____D () C:\Program Files\Common Files\Adobe 2015-02-12 15:41 - 2015-02-12 16:53 - 00000000 ____D () C:\Program Files\Adobe 2015-02-12 15:38 - 2015-02-16 10:58 - 00000000 ___RD () C:\Users\Rubinio\iCloudDrive 2015-02-12 15:38 - 2015-02-16 10:57 - 00000000 ___RD () C:\Users\Rubinio\Google Drive 2015-02-12 15:38 - 2015-02-12 18:00 - 00000000 ____D () C:\Users\Rubinio\Starmoney 2015-02-12 15:38 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\Postbank 2015-02-12 15:38 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\Meine Musik 2015-02-12 15:38 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\M&S 2015-02-12 15:38 - 2012-02-27 15:31 - 00000000 ____D () C:\Users\Rubinio\restore 2015-02-12 15:34 - 2015-02-12 15:38 - 00000000 ____D () C:\Users\Rubinio\Ebay 2015-02-12 15:33 - 2015-02-16 10:59 - 00000000 ___RD () C:\Users\Rubinio\Dropbox 2015-02-12 15:30 - 2015-02-12 15:33 - 00000000 ____D () C:\Users\Rubinio\Desktop\Stefanie 2015-02-12 15:29 - 2015-02-12 15:29 - 00000000 ____D () C:\Users\Rubinio\Desktop\Neuer Ordner 2015-02-12 15:29 - 2015-02-12 15:29 - 00000000 ____D () C:\Users\Rubinio\Desktop\Mediapanel 2015-02-12 15:28 - 2015-02-12 15:29 - 00000000 ____D () C:\Users\Rubinio\Desktop\kalender2012 2015-02-12 15:28 - 2015-02-12 15:28 - 00000000 ____D () C:\Users\Rubinio\ChromeExtensions 2015-02-12 15:28 - 2015-02-12 15:28 - 00000000 ____D () C:\Users\Rubinio\Audible 2015-02-12 15:28 - 2015-02-12 15:28 - 00000000 ____D () C:\Users\Rubinio\AA 2015-02-12 15:25 - 2015-02-12 15:25 - 00000000 ____D () C:\ProgramData\StarMoney 9.0 2015-02-12 15:25 - 2015-02-12 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 9.0 2015-02-12 15:24 - 2015-02-12 15:24 - 00000000 ____D () C:\Program Files\Common Files\StarFinanz 2015-02-12 15:23 - 2015-02-14 15:30 - 00000000 ____D () C:\Program Files\StarMoney 9.0 2015-02-12 15:23 - 2015-02-12 15:23 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-02-12 15:13 - 2015-02-12 18:22 - 00000000 ____D () C:\ProgramData\Apple Computer 2015-02-12 15:13 - 2015-02-12 18:21 - 00000000 ____D () C:\ProgramData\Apple 2015-02-12 15:13 - 2015-02-12 15:13 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-02-12 15:13 - 2015-02-12 15:13 - 00002491 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk 2015-02-12 15:13 - 2015-02-12 15:13 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apple 2015-02-12 15:13 - 2015-02-12 15:13 - 00000000 ____D () C:\Program Files\Safari 2015-02-12 15:13 - 2015-02-12 15:13 - 00000000 ____D () C:\Program Files\Apple Software Update 2015-02-12 15:12 - 2015-02-12 15:12 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Mozilla 2015-02-12 15:12 - 2015-02-12 15:12 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Mozilla 2015-02-12 15:11 - 2015-02-12 15:26 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2015-02-12 15:11 - 2015-02-12 15:11 - 00001117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2015-02-12 15:11 - 2015-02-12 15:11 - 00000000 ____D () C:\ProgramData\Mozilla 2015-02-12 15:11 - 2015-02-12 15:11 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2015-02-12 13:51 - 2015-02-12 18:12 - 00000000 ____D () C:\ProgramData\Microsoft Help 2015-02-12 13:51 - 2015-02-12 18:09 - 00000000 ____D () C:\Program Files\Microsoft Office 2015-02-12 13:51 - 2015-02-12 13:51 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Microsoft Help 2015-02-12 13:50 - 2015-02-12 14:07 - 188090912 _____ () C:\Users\Rubinio\Downloads\smoney.exe 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\WinRAR 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-02-12 13:46 - 2015-02-12 13:46 - 00000000 ____D () C:\Program Files\WinRAR 2015-02-12 10:50 - 2015-02-12 10:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-02-12 10:47 - 2015-02-16 10:57 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-02-12 10:47 - 2015-02-16 10:52 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-02-12 10:47 - 2015-02-12 19:09 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Google 2015-02-12 10:47 - 2015-02-12 19:09 - 00000000 ____D () C:\Program Files\Google 2015-02-12 10:46 - 2015-02-12 10:47 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Deployment 2015-02-12 10:46 - 2015-02-12 10:46 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\Apps\2.0 2015-02-12 10:40 - 2014-12-11 18:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2015-02-12 10:33 - 2015-02-12 10:36 - 00000000 ____D () C:\Windows\AutoKMS 2015-02-12 10:32 - 2015-02-12 18:26 - 00112304 _____ () C:\Users\Rubinio\AppData\Local\GDIPFONTCACHEV1.DAT 2015-02-12 10:32 - 2015-02-12 10:32 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit 2015-02-12 10:31 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2015-02-12 10:31 - 2014-08-29 02:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2015-02-12 10:21 - 2014-05-08 10:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2015-02-12 10:11 - 2015-02-12 10:11 - 00000000 __SHD () C:\Users\Rubinio\AppData\Local\EmieUserList 2015-02-12 10:11 - 2015-02-12 10:11 - 00000000 __SHD () C:\Users\Rubinio\AppData\Local\EmieSiteList 2015-02-12 10:11 - 2015-02-12 10:11 - 00000000 __SHD () C:\Users\Rubinio\AppData\Local\EmieBrowserModeList 2015-02-12 10:11 - 2012-08-23 15:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2015-02-12 10:11 - 2012-08-23 15:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-02-12 10:11 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll 2015-02-12 10:10 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2015-02-12 10:10 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-02-12 10:10 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-02-12 10:10 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2015-02-12 10:10 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2015-02-12 10:10 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2015-02-12 10:10 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2015-02-12 10:10 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2015-02-12 10:10 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2015-02-12 10:10 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2015-02-12 10:09 - 2015-01-23 04:43 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-02-12 10:09 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2015-02-12 10:09 - 2014-07-09 02:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2015-02-12 10:09 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\system32\locale.nls 2015-02-12 10:09 - 2011-03-11 06:39 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys 2015-02-12 10:09 - 2011-03-11 06:39 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys 2015-02-12 10:09 - 2011-03-11 06:38 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys 2015-02-12 10:09 - 2011-03-11 06:38 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys 2015-02-12 10:09 - 2011-03-11 06:38 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys 2015-02-12 10:09 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2015-02-12 10:09 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe 2015-02-12 10:09 - 2011-03-11 05:01 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2015-02-12 09:50 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2015-02-12 09:50 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2015-02-12 09:50 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2015-02-12 09:50 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2015-02-12 09:50 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2015-02-12 09:45 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2015-02-12 09:40 - 2015-01-14 06:09 - 00342712 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-02-12 09:40 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-02-12 09:40 - 2015-01-12 03:21 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-02-12 09:40 - 2015-01-12 03:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-02-12 09:40 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-02-12 09:40 - 2015-01-12 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-02-12 09:40 - 2015-01-12 03:07 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-02-12 09:40 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-02-12 09:40 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-02-12 09:40 - 2015-01-12 03:00 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-02-12 09:40 - 2015-01-12 02:59 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-02-12 09:40 - 2015-01-12 02:57 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-02-12 09:40 - 2015-01-12 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-02-12 09:40 - 2015-01-12 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-02-12 09:40 - 2015-01-12 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-02-12 09:40 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-02-12 09:40 - 2015-01-12 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-02-12 09:40 - 2015-01-12 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-02-12 09:40 - 2015-01-12 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-02-12 09:40 - 2015-01-12 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-02-12 09:40 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-02-12 09:40 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-02-12 09:40 - 2015-01-12 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-02-12 09:40 - 2015-01-12 02:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-02-12 09:40 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-02-12 09:40 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-02-12 09:40 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-02-12 09:40 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-02-12 09:38 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-02-12 09:37 - 2015-01-10 07:27 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-02-12 09:37 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2015-02-12 09:37 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2015-02-12 09:37 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2015-02-12 09:37 - 2012-02-11 06:37 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe 2015-02-12 09:37 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2015-02-12 09:36 - 2015-01-13 03:49 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2015-02-12 09:07 - 2015-02-12 17:14 - 00000000 ____D () C:\Users\Rubinio\AppData\Roaming\Adobe 2015-02-12 08:52 - 2015-02-15 18:25 - 00164666 _____ () C:\Windows\PFRO.log 2015-02-12 02:14 - 2012-07-26 04:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2015-02-12 02:14 - 2012-07-26 04:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2015-02-12 02:14 - 2012-07-26 04:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2015-02-12 02:14 - 2012-07-26 04:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2015-02-12 02:14 - 2012-07-26 04:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2015-02-12 02:14 - 2012-07-26 03:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2015-02-12 02:14 - 2012-07-26 03:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2015-02-12 02:14 - 2012-06-02 15:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2015-02-12 02:13 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2015-02-12 02:13 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2015-02-12 02:13 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2015-02-12 02:13 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2015-02-12 02:12 - 2012-03-01 06:46 - 00019824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys 2015-02-12 02:12 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll 2015-02-12 02:00 - 2015-02-12 18:09 - 00000000 ____D () C:\Program Files\Microsoft.NET 2015-02-12 01:55 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-02-12 01:55 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2015-02-12 01:46 - 2015-02-12 01:46 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-02-12 01:46 - 2015-02-12 01:46 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2015-02-12 01:46 - 2015-02-12 01:46 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2015-02-12 01:46 - 2015-02-12 01:46 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2015-02-12 01:46 - 2015-02-12 01:46 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2015-02-12 01:45 - 2015-02-12 01:45 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe 2015-02-12 01:44 - 2015-02-12 01:44 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2015-02-12 01:44 - 2015-02-12 01:44 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2015-02-12 01:43 - 2015-02-12 01:43 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2015-02-12 01:42 - 2015-02-12 01:50 - 00016567 _____ () C:\Windows\IE11_main.log 2015-02-12 01:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2015-02-12 01:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2015-02-12 01:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2015-02-12 01:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2015-02-12 01:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2015-02-12 01:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2015-02-12 01:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2015-02-12 01:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2015-02-12 01:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2015-02-12 01:37 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-02-12 01:37 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2015-02-12 01:37 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2015-02-12 01:37 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2015-02-12 01:37 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2015-02-12 01:37 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2015-02-12 01:37 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2015-02-12 01:37 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2015-02-12 01:37 - 2014-06-03 10:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2015-02-12 01:37 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2015-02-12 01:37 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2015-02-12 01:37 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2015-02-12 01:37 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2015-02-12 01:37 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2015-02-12 01:37 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe 2015-02-12 01:37 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll 2015-02-12 01:37 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2015-02-12 01:37 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll 2015-02-12 01:37 - 2012-11-28 23:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf 2015-02-12 01:37 - 2012-04-26 05:45 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2015-02-12 01:37 - 2012-04-26 05:41 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2015-02-12 01:37 - 2012-01-04 09:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll 2015-02-12 01:37 - 2011-12-30 06:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2015-02-12 01:37 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2015-02-12 01:36 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-02-12 01:36 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2015-02-12 01:36 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2015-02-12 01:36 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2015-02-12 01:36 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-02-12 01:36 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-02-12 01:36 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-02-12 01:36 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll 2015-02-12 01:36 - 2013-03-19 04:33 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll 2015-02-12 01:36 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll 2015-02-12 01:36 - 2012-10-03 17:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-02-12 01:36 - 2012-10-03 17:42 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-02-12 01:36 - 2012-09-25 23:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll 2015-02-12 01:36 - 2012-03-17 08:27 - 00056176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys 2015-02-12 01:36 - 2011-05-04 05:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2015-02-12 01:36 - 2011-05-04 05:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2015-02-12 01:36 - 2011-05-04 05:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2015-02-12 01:36 - 2011-05-04 05:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2015-02-12 01:36 - 2011-05-04 05:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2015-02-12 01:35 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-02-12 01:35 - 2014-08-23 02:46 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2015-02-12 01:35 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2015-02-12 01:35 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2015-02-12 01:35 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2015-02-12 01:35 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-02-12 01:35 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2015-02-12 01:35 - 2012-07-04 22:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll 2015-02-12 01:35 - 2012-07-04 22:14 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll 2015-02-12 01:35 - 2012-07-04 22:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll 2015-02-12 01:34 - 2014-12-12 06:07 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2015-02-12 01:34 - 2014-07-07 02:40 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2015-02-12 01:34 - 2014-07-07 02:40 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2015-02-12 01:34 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2015-02-12 01:34 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2015-02-12 01:34 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2015-02-12 01:34 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2015-02-12 01:34 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2015-02-12 01:34 - 2011-04-29 03:46 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2015-02-12 01:34 - 2011-04-29 03:46 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2015-02-12 01:34 - 2011-04-29 03:46 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2015-02-12 01:34 - 2010-12-23 06:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll 2015-02-12 01:34 - 2010-12-23 06:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2015-02-12 01:34 - 2010-12-23 06:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2015-02-12 01:33 - 2015-01-14 06:44 - 03972544 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2015-02-12 01:33 - 2015-01-14 06:44 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-02-12 01:33 - 2015-01-09 03:48 - 00635904 _____ (Microsoft Corporation) C:\Windows\system32\perftrack.dll 2015-02-12 01:33 - 2015-01-09 03:48 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\wdi.dll 2015-02-12 01:33 - 2015-01-09 03:48 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\powertracker.dll 2015-02-12 01:33 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2015-02-12 01:33 - 2014-02-04 03:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2015-02-12 01:33 - 2014-02-04 03:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2015-02-12 01:33 - 2014-02-04 03:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2015-02-12 01:33 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2015-02-12 01:33 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2015-02-12 01:33 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2015-02-12 01:33 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2015-02-12 01:33 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll 2015-02-12 01:33 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll 2015-02-12 01:33 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs 2015-02-12 01:33 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs 2015-02-12 01:33 - 2012-10-03 17:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll 2015-02-12 01:33 - 2012-10-03 17:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll 2015-02-12 01:33 - 2012-10-03 17:40 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll 2015-02-12 01:33 - 2012-10-03 16:21 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys 2015-02-12 01:33 - 2012-08-21 21:12 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe 2015-02-12 01:33 - 2011-07-09 03:30 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2015-02-12 01:33 - 2011-04-27 03:17 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2015-02-12 01:33 - 2011-04-27 03:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2015-02-12 01:32 - 2015-01-15 08:46 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-02-12 01:32 - 2015-01-15 08:46 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-02-12 01:32 - 2015-01-15 08:43 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-02-12 01:32 - 2015-01-15 08:43 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-02-12 01:32 - 2015-01-15 08:42 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-02-12 01:32 - 2015-01-15 08:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-02-12 01:32 - 2015-01-15 08:42 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-02-12 01:32 - 2015-01-15 08:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-02-12 01:32 - 2015-01-15 08:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-02-12 01:32 - 2015-01-15 08:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-02-12 01:32 - 2015-01-15 08:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-02-12 01:32 - 2015-01-15 05:21 - 00369968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2015-02-12 01:32 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-02-12 01:32 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2015-02-12 01:32 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2015-02-12 01:32 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2015-02-12 01:32 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2015-02-12 01:32 - 2014-04-05 03:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2015-02-12 01:32 - 2014-04-05 03:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2015-02-12 01:32 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2015-02-12 01:32 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2015-02-12 01:32 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2015-02-12 01:32 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2015-02-12 01:32 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2015-02-12 01:32 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2015-02-12 01:32 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2015-02-12 01:32 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2015-02-12 01:32 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys 2015-02-12 01:32 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2015-02-12 01:32 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2015-02-12 01:32 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2015-02-12 01:32 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2015-02-12 01:32 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2015-02-12 01:32 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-02-12 01:32 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-02-12 01:32 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-02-12 01:32 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-02-12 01:32 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-02-12 01:32 - 2013-02-12 04:32 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys 2015-02-12 01:32 - 2013-01-24 05:47 - 00196328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2015-02-12 01:32 - 2012-10-09 18:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2015-02-12 01:32 - 2012-10-09 18:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll 2015-02-12 01:32 - 2012-08-22 18:16 - 00712048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2015-02-12 01:32 - 2012-07-04 20:45 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys 2015-02-12 01:32 - 2012-06-06 06:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2015-02-12 01:32 - 2012-05-14 05:33 - 00769024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2015-02-12 01:32 - 2011-12-16 08:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll 2015-02-12 01:32 - 2011-08-27 05:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll 2015-02-12 01:32 - 2011-08-17 05:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll 2015-02-12 01:32 - 2011-08-17 05:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax 2015-02-12 01:32 - 2011-06-15 09:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll 2015-02-12 01:32 - 2011-06-15 09:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll 2015-02-12 01:32 - 2011-03-03 06:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll 2015-02-12 01:32 - 2011-03-03 06:38 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll 2015-02-12 01:32 - 2011-03-03 06:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe 2015-02-12 01:32 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2015-02-12 01:32 - 2011-02-12 06:35 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe 2015-02-12 01:31 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2015-02-12 01:31 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2015-02-12 01:31 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-02-12 01:31 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-02-12 01:31 - 2014-05-30 07:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2015-02-12 01:29 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll 2015-02-12 01:29 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2015-02-12 01:29 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2015-02-12 01:29 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2015-02-12 01:29 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2015-02-12 01:29 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-02-12 01:29 - 2011-10-15 06:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2015-02-12 01:29 - 2011-05-03 05:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2015-02-12 01:29 - 2011-02-18 06:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe 2015-02-12 01:27 - 2015-01-09 02:45 - 02380288 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-02-12 01:27 - 2014-11-26 04:32 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2015-02-12 01:27 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2015-02-12 01:27 - 2014-07-14 02:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2015-02-12 01:27 - 2014-06-16 02:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2015-02-12 01:27 - 2014-06-16 02:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2015-02-12 01:27 - 2014-06-16 02:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll 2015-02-12 01:27 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2015-02-12 01:27 - 2014-01-24 03:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2015-02-12 01:27 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2015-02-12 01:27 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2015-02-12 01:27 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2015-02-12 01:27 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2015-02-12 01:27 - 2012-05-05 08:46 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-02-12 01:27 - 2011-10-26 05:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2015-02-12 01:27 - 2011-06-16 05:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll 2015-02-12 01:27 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll 2015-02-12 01:27 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll 2015-02-12 01:18 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2015-02-12 01:18 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2015-02-12 01:15 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll 2015-02-12 01:15 - 2011-05-24 11:44 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2015-02-12 01:14 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2015-02-12 01:14 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2015-02-12 01:04 - 2014-05-14 17:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-02-12 01:04 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-02-12 01:04 - 2014-05-14 17:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-02-12 01:04 - 2014-05-14 17:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-02-12 01:04 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-02-12 01:04 - 2014-05-14 17:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-02-12 01:04 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-02-12 01:04 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-02-12 01:04 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-02-12 00:51 - 2015-02-12 00:51 - 00000000 ____D () C:\Windows\system32\SPReview 2015-02-12 00:51 - 2015-02-12 00:51 - 00000000 ____D () C:\Windows\system32\EventProviders 2015-02-12 00:50 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll 2015-02-12 00:50 - 2010-11-20 13:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll 2015-02-12 00:50 - 2010-11-20 13:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys 2015-02-12 00:50 - 2010-11-20 13:21 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll 2015-02-12 00:50 - 2010-11-20 13:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll 2015-02-12 00:50 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll 2015-02-12 00:50 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll 2015-02-12 00:50 - 2010-11-20 13:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll 2015-02-12 00:50 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll 2015-02-12 00:50 - 2010-11-20 13:17 - 00080896 _____ () C:\Windows\system32\RDVGHelper.exe 2015-02-12 00:50 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll 2015-02-12 00:50 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe 2015-02-12 00:50 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll 2015-02-12 00:49 - 2010-11-20 13:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe 2015-02-12 00:49 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL 2015-02-12 00:49 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL 2015-02-12 00:49 - 2010-11-20 13:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00078208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys 2015-02-12 00:49 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys 2015-02-12 00:49 - 2010-11-20 13:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2015-02-12 00:49 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll 2015-02-12 00:49 - 2010-11-20 13:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys 2015-02-12 00:49 - 2010-11-20 13:24 - 00690680 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll 2015-02-12 00:49 - 2010-11-20 13:24 - 00508904 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2015-02-12 00:49 - 2010-11-20 13:24 - 00442720 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2015-02-12 00:49 - 2010-11-20 13:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll 2015-02-12 00:49 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) |
16.02.2015, 11:17 | #11 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere FRST Log neu Teil 2: Code:
ATTFilter C:\Windows\system32\wlangpui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\wbemcomn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL 2015-02-12 00:49 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\TRAPI.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shgina.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\schedcli.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wshirda.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\shunimpl.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\riched32.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\rdpcfgex.dll 2015-02-12 00:49 - 2010-11-20 13:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-02-12 00:49 - 2010-11-20 13:21 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\nci.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\olethk32.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\QCLIPROV.DLL 2015-02-12 00:49 - 2010-11-20 13:20 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\napdsnap.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\pdhui.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\PrintIsolationProxy.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\profprov.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\netutils.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\perfts.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\nrpsrv.dll 2015-02-12 00:49 - 2010-11-20 13:20 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 01066496 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00856576 _____ (Microsoft Corporation) C:\Windows\system32\FirewallControlPanel.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00828928 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00592384 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\FXSTIFF.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\localsec.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\msdri.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\mspbda.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00320512 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\hgcpl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\iprtrmgr.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\mprddm.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00266752 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\MSAC3ENC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\iTVData.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mstask.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\framedyn.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\ListSvc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\msorcl32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\MFPlay.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\fvecpl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\itircl.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\ifsutil.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\logoncli.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\migisol.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\fphc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00093696 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\fms.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00082944 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\KMSVC.DLL 2015-02-12 00:49 - 2010-11-20 13:19 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\Mcx2Svc.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\inetmib1.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\luainstall.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\FXSMON.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\msdmo.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\HotStartUserAgent.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\lsmproxy.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\muifontsetup.dll 2015-02-12 00:49 - 2010-11-20 13:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 03727872 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01400320 _____ (Microsoft Corporation) C:\Windows\system32\DxpTaskSync.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\DiagCpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01040384 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 01003520 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00743424 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\dsuiext.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00665600 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00537600 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenterCPL.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2015-02-12 00:49 - 2010-11-20 13:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCenter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\AdmTmpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\biocpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00418816 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00402944 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00399872 _____ (Microsoft Corporation) C:\Windows\system32\DXP.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00333824 _____ (Microsoft Corporation) C:\Windows\system32\dot3ui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\azroleui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\dpx.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\audiodev.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\defaultlocationcpl.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingFolder.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00205312 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\activeds.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\dskquoui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\adsldp.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cfgmgr32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\bcdsrv.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\CscMig.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\dnscmmc.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00094208 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\AxInstSv.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\cabinet.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\amstream.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\cca.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\CertPolEng.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acppage.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\basesrv.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dsauth.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\AzSqlExt.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\elsTrans.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\bitsperf.dll 2015-02-12 00:49 - 2010-11-20 13:18 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\C_ISCII.DLL 2015-02-12 00:49 - 2010-11-20 13:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll 2015-02-12 00:49 - 2010-11-20 13:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 01131008 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\dfrgui.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\nltest.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\slui.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\msconfig.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\taskmgr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\recdisc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\RelPost.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\schtasks.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\perfmon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\iscsicli.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\MdSched.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00113152 _____ (Microsoft Corporation) C:\Windows\system32\setupugc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\mobsync.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00098816 _____ (Microsoft) C:\Windows\system32\Robocopy.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\isoburn.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\cmstp.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\tabcal.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\MuiUnattend.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\w32tm.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00066048 _____ () C:\Windows\system32\PrintBrmUi.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\manage-bde.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\lpremove.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\djoin.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\repair-bde.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\rdpsign.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\MultiDigiMon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\takeown.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\runonce.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tzutil.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\unlodctr.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\userinit.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\qwinsta.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netiougc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\netcfg.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\qprocess.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msg.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\quser.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\tskill.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\tsdiscon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\ReAgentc.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\tscon.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\qappsrv.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\logoff.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\shadow.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\rwinsta.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\reset.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\query.exe 2015-02-12 00:49 - 2010-11-20 13:17 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\LogonUI.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00905216 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\Bubbles.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00649216 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\TabletPC.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00516096 _____ (Microsoft Corporation) C:\Windows\system32\main.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2015-02-12 00:49 - 2010-11-20 13:16 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00326656 _____ (Microsoft Corporation) C:\Windows\system32\sysdm.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2015-02-12 00:49 - 2010-11-20 13:16 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00293888 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp 2015-02-12 00:49 - 2010-11-20 13:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\Mystify.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\Ribbons.scr 2015-02-12 00:49 - 2010-11-20 13:16 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\bitsadmin.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv 2015-02-12 00:49 - 2010-11-20 13:16 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\desk.cpl 2015-02-12 00:49 - 2010-11-20 13:16 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\BdeHdCfg.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\kstvtune.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\WSTPager.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00065024 _____ (Microsoft Corporation) C:\Windows\bfsvc.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ksxbar.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\g711codc.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\vbisurf.ax 2015-02-12 00:49 - 2010-11-20 13:16 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\chgport.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\chglogon.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\chgusr.exe 2015-02-12 00:49 - 2010-11-20 13:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\change.exe 2015-02-12 00:49 - 2010-11-20 13:07 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2015-02-12 00:49 - 2010-11-20 13:07 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwizres.dll 2015-02-12 00:49 - 2010-11-20 13:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2015-02-12 00:49 - 2010-11-20 13:05 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\RDPENCDD.dll 2015-02-12 00:49 - 2010-11-20 13:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\pifmgr.dll 2015-02-12 00:49 - 2010-11-20 13:03 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\vmicres.dll 2015-02-12 00:49 - 2010-11-20 13:03 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\vmbusres.dll 2015-02-12 00:49 - 2010-11-20 13:03 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\vmstorfltres.dll 2015-02-12 00:49 - 2010-11-20 13:00 - 01027584 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME 2015-02-12 00:49 - 2010-11-20 13:00 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime 2015-02-12 00:49 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDSG.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdlk41a.dll 2015-02-12 00:49 - 2010-11-20 13:00 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDCZ1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUQ.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDTUF.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDSF.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDPO.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDNEPR.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGR1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDGKL.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUS.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDUGHR1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTURME.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAJIK.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMON.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDMAORI.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDLT1.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBULG.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBLR.DLL 2015-02-12 00:49 - 2010-11-20 13:00 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDGEO.DLL 2015-02-12 00:49 - 2010-11-20 12:57 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\dpnaddr.dll 2015-02-12 00:49 - 2010-11-20 12:56 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\BlbEvents.dll 2015-02-12 00:49 - 2010-11-20 12:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2015-02-12 00:49 - 2010-11-20 11:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbrpm.sys 2015-02-12 00:49 - 2010-11-20 11:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys 2015-02-12 00:49 - 2010-11-20 11:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll 2015-02-12 00:49 - 2010-11-20 11:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RDPCDD.sys 2015-02-12 00:49 - 2010-11-20 11:21 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\RDPREFDD.dll 2015-02-12 00:49 - 2010-11-20 11:21 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdpipe.sys 2015-02-12 00:49 - 2010-11-20 11:07 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys 2015-02-12 00:49 - 2010-11-20 11:07 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys 2015-02-12 00:49 - 2010-11-20 11:07 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys 2015-02-12 00:49 - 2010-11-20 11:06 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-02-12 00:49 - 2010-11-20 11:06 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys 2015-02-12 00:49 - 2010-11-20 11:06 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndisuio.sys 2015-02-12 00:49 - 2010-11-20 11:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\umbus.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys 2015-02-12 00:49 - 2010-11-20 11:00 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys 2015-02-12 00:49 - 2010-11-20 10:59 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2015-02-12 00:49 - 2010-11-20 10:59 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\CompositeBus.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys 2015-02-12 00:49 - 2010-11-20 10:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sffp_sd.sys 2015-02-12 00:49 - 2010-11-20 10:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-02-12 00:49 - 2010-11-20 10:24 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys 2015-02-12 00:49 - 2010-11-20 10:19 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2015-02-12 00:49 - 2010-11-20 10:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe 2015-02-12 00:49 - 2010-11-20 10:14 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\VmbusCoinstaller.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\VmdCoinstall.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\IcCoinstall.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\vmictimeprovider.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\VMBusHID.sys 2015-02-12 00:49 - 2010-11-20 10:14 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\vmbuspipe.dll 2015-02-12 00:49 - 2010-11-20 10:14 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vms3cap.sys 2015-02-12 00:49 - 2010-11-20 09:47 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpipmi.sys 2015-02-12 00:49 - 2010-11-20 09:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys 2015-02-12 00:49 - 2010-11-20 09:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys 2015-02-12 00:49 - 2010-11-20 09:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2015-02-12 00:49 - 2010-11-20 09:42 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2015-02-12 00:49 - 2010-11-20 09:40 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys 2015-02-12 00:49 - 2010-11-20 09:39 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2015-02-12 00:49 - 2010-11-20 09:39 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdi.sys 2015-02-12 00:49 - 2010-11-20 09:38 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys 2015-02-12 00:49 - 2010-11-20 06:23 - 00053600 _____ () C:\Windows\system32\dosx.exe 2015-02-12 00:49 - 2010-11-10 02:45 - 00010429 _____ () C:\Windows\system32\ScavengeSpace.xml 2015-02-12 00:49 - 2010-11-05 03:20 - 00146852 _____ () C:\Windows\system32\systemsf.ebd 2015-02-12 00:49 - 2010-11-05 03:20 - 00105559 _____ () C:\Windows\system32\RacRules.xml 2015-02-12 00:49 - 2010-11-05 03:11 - 00312168 _____ (Microsoft Corporation) C:\Windows\system32\MCEWMDRMNDBootstrap.dll 2015-02-12 00:49 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll 2015-02-12 00:34 - 2015-02-12 00:34 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\NVIDIA 2015-02-12 00:29 - 2015-02-12 00:31 - 00000000 ____D () C:\Windows\system32\MRT 2015-02-12 00:29 - 2015-02-12 00:29 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_LUsbFilt_01005.Wdf 2015-02-12 00:28 - 2015-02-16 10:57 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-02-12 00:28 - 2014-08-19 22:16 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-02-12 00:28 - 2014-07-02 20:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-02-12 00:28 - 2014-07-02 20:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-02-12 00:28 - 2014-07-02 06:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin 2015-02-12 00:27 - 2015-02-15 14:35 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-02-12 00:27 - 2015-02-14 20:03 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-02-12 00:10 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-02-12 00:05 - 2015-02-12 00:05 - 00001409 _____ () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-02-12 00:04 - 2015-02-16 11:08 - 01907318 _____ () C:\Windows\WindowsUpdate.log 2015-02-12 00:03 - 2015-02-15 14:47 - 00000000 ____D () C:\Users\Rubinio 2015-02-12 00:03 - 2015-02-14 21:43 - 00000000 ____D () C:\Users\Rubinio\AppData\Local\VirtualStore 2015-02-12 00:03 - 2015-02-12 00:03 - 00000020 ___SH () C:\Users\Rubinio\ntuser.ini 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\Startmenü 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\Netzwerkumgebung 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\Druckumgebung 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:03 - 2015-02-12 00:03 - 00000000 _SHDL () C:\Users\Rubinio\AppData\Local\Verlauf 2015-02-12 00:03 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-12 00:03 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\Rubinio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Startmenü 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\ProgramData\Startmenü 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 _SHDL () C:\ProgramData\Dokumente 2015-02-12 00:02 - 2015-02-12 00:02 - 00000000 ____D () C:\Recovery ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-11-02 23:59 - 2010-03-24 05:38 - 00003540 _____ () C:\Windows\TSSysprep.log 2015-11-02 23:56 - 2009-07-14 05:34 - 00002790 _____ () C:\Windows\DtcInstall.log 2015-11-02 23:55 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2015-11-02 23:55 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2015-02-16 11:05 - 2009-07-14 05:34 - 00012192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-02-16 11:05 - 2009-07-14 05:34 - 00012192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-02-16 10:57 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-02-16 10:57 - 2009-07-14 05:39 - 00029826 _____ () C:\Windows\setupact.log 2015-02-15 16:21 - 2009-07-14 10:03 - 00000000 ____D () C:\Windows\DigitalLocker 2015-02-15 15:33 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default 2015-02-15 15:33 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public 2015-02-15 00:14 - 2010-03-24 05:48 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-02-14 22:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache 2015-02-14 10:28 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE 2015-02-13 13:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET 2015-02-13 10:41 - 2009-07-14 05:33 - 00434312 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-02-12 19:01 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2015-02-12 18:10 - 2009-07-14 10:15 - 00000000 ____D () C:\Windows\ShellNew 2015-02-12 18:07 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\System 2015-02-12 18:07 - 2009-07-14 03:04 - 00000478 _____ () C:\Windows\win.ini 2015-02-12 10:14 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-02-12 10:13 - 2009-07-14 10:03 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE 2015-02-12 10:13 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing 2015-02-12 10:00 - 2009-07-14 10:14 - 00000000 ____D () C:\Program Files\Windows Journal 2015-02-12 08:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Defender 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-TW 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-HK 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\zh-CN 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\tr-TR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\sv-SE 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ru-RU 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-PT 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pt-BR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\pl-PL 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nl-NL 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\nb-NO 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ko-KR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\ja-JP 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\it-IT 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\hu-HU 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fr-FR 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\fi-FI 2015-02-12 08:58 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\el-GR 2015-02-12 01:22 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles 2015-02-12 00:58 - 2009-07-14 10:03 - 00000000 ____D () C:\Windows\de-DE 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Sidebar 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2015-02-12 00:58 - 2009-07-14 05:52 - 00000000 ____D () C:\Program Files\DVD Maker 2015-02-12 00:57 - 2009-07-14 10:15 - 00000000 __SHD () C:\Windows\BitLockerDiscoveryVolumeContents 2015-02-12 00:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2015-02-12 00:53 - 2009-07-14 03:05 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2015-02-12 00:28 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help 2015-02-12 00:07 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore 2015-02-12 00:03 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries 2015-02-12 00:02 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Windows NT 2015-01-29 17:49 - 2010-03-24 05:46 - 113756392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe Some content of TEMP: ==================== C:\Users\Rubinio\AppData\Local\Temp\avgnt.exe C:\Users\Rubinio\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpsic_6q.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-02-13 13:45 ==================== End Of Log ============================ Dies kam auch als Hinweis bei dem Farbar Tool . |
16.02.2015, 18:26 | #12 |
/// the machine /// TB-Ausbilder | Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Kannste mir von der Meldung mal nen Screenshot machen?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
18.02.2015, 17:05 | #13 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Sorry für die etwas verspätete Rückmeldung. Hier ein Bild der Fehlermeldung. |
19.02.2015, 06:51 | #14 |
/// the machine /// TB-Ausbilder | Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Bitte das Bild anhängen, ich seh das sonst nicht, wird geblockt.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
19.02.2015, 10:45 | #15 |
| Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere Alles klar, jetzt sollte es klappen. |
Themen zu Malware und Trojaner gefunden TR/AtRAPS.GEN, TR/Dropper.Gen2 und weitere |
angezeigt, bereits, dankbar, folge, folgende, gefunde, heute, hilfe, malware, malwarebytes, meldungen, nichts, problem, programm, rojaner gefunden, suchlauf, tr/atraps.gen, tr/dropper.gen, tr/dropper.gen2, troja, trojaner, trojaner gefunden, trojaner gefunden tr/atraps.gen |